KO
Product
Konqueror
33
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Konqueror to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-2537 | – | Jul 20 | KDE Konqueror allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to… Affected: All versions, or not specified |
| CVE-2008-5712 | – | Dec 24 | The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1) a long COLOR attribute in an HR element; or a long (a)… Affected: 3.5.9 |
| CVE-2008-5698 | – | Dec 22 | HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service (application crash) via an invalid document.load call that… Affected: All versions, or not specified |
| CVE-2008-4382 | – | Oct 2 | Konqueror in KDE 3.5.9 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert function with a URL-encoded string of a large… Affected: 3.5.9 |
| CVE-2007-6591 | – | Dec 28 | KDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all… Affected: 3.5.5; 3.95.00 |
| CVE-2007-6000 | – | Nov 15 | KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service (crash) via large HTTP cookie parameters Affected: through 3.5.6 |
| CVE-2007-4229 | – | Aug 8 | Unspecified vulnerability in KDE Konqueror 3.5.7 and earlier allows remote attackers to cause a denial of service (failed assertion and application crash) via certain malformed… Affected: through 3.5.7 |
| CVE-2007-4224 | – | Aug 8 | KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property Affected: 3.5.7 |
| CVE-2007-4225 | – | Aug 8 | Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http URI with a large amount of whitespace in the user/password… Affected: 3.5.7 |
| CVE-2007-3820 | – | Jul 17 | konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the… Affected: 3.5.7 |
| CVE-2007-3143 | – | Jun 11 | Visual truncation vulnerability in Konqueror 3.5.5 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated… Affected: 3.5.5 |
| CVE-2007-2164 | – | Apr 22 | Konqueror 3.5.5 release 45.4 allows remote attackers to cause a denial of service (browser crash or abort) via JavaScript that matches a regular expression against a long string,… Affected: 3.5.5 |
| CVE-2007-1565 | – | Mar 21 | Konqueror 3.5.5 allows remote attackers to cause a denial of service (crash) by using JavaScript to read a child iframe having an ftp:// URI Affected: 3.5.5 |
| CVE-2007-1564 | – | Mar 21 | The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive… Affected: 3.5.5 |
| CVE-2007-1308 | – | Mar 7 | ecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote attackers to cause a denial of service (crash) by accessing the content of an iframe… Affected: 3.5.5 |
| CVE-2007-0537 | – | Jan 29 | The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and… Affected: 3.5.5 |
| CVE-2006-3672 | – | Jul 18 | KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the replaceChild method on a DOM object, which triggers a null… Affected: through 3.5.1; 2.1.1; 2.1.2; 2.2.1; 2.2.2; 3.0; +18 more |
| CVE-2005-4684 | – | Dec 31 | Konqueror can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting… Affected: 0.1; 2.1.1; 2.1.2; 2.2.1; 2.2.2; 3.0; +17 more |
| CVE-2005-0237 | – | May 2 | The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in… Affected: 3.2.1 |
| CVE-2004-1165 | – | Jan 10 | Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the… Affected: 3.3.1 |
| CVE-2004-1158 | – | Jan 10 | Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab… Affected: 2.1.1; 2.1.2; 2.2.1; 2.2.2; 3.0; 3.0.1; +16 more |
| CVE-2004-0867 | – | Dec 23 | Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform… Affected: 2.1.1; 2.1.2; 2.2.1; 2.2.2; 3.0; 3.0.1; +12 more |
| CVE-2004-0746 | – | Oct 20 | Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote… Affected: 3.0; 3.0.1; 3.0.2; 3.0.3; 3.0.5; 3.0.5b; +7 more |
| CVE-2004-0870 | – | Sep 16 | KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow… Affected: 2.1.1; 2.1.2; 2.2.1; 2.2.2; 3.0; 3.0.1; +12 more |
| CVE-2004-0866 | – | Sep 16 | Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform… Affected: 2.1.1; 2.1.2; 2.2.1; 2.2.2; 3.0; 3.0.1; +12 more |
| CVE-2004-0527 | – | Aug 6 | KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site,… Affected: 2.1.1; 2.2.2; 3.0; 3.0.1; 3.0.2; 3.0.3; +6 more |
| CVE-2004-0721 | – | Jul 27 | Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which… Affected: 3.1.3; 3.2.2 |
| CVE-2004-0411 | – | Jul 7 | The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which… Affected: through 3.2.2 |
| CVE-2003-0592 | – | Apr 15 | Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory… Affected: 2.1.1; 2.2.2; 3.0; 3.0.1; 3.0.2; 3.0.3; +4 more |
| CVE-2003-1478 | – | Dec 31 | Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with a "xFFxFE" byte sequence and a large number of CRLF… Affected: 3.0.3 |
| CVE-2003-0459 | – | Aug 27 | KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote… Affected: 2.1.1; 2.2.2; 3.0; 3.0.1; 3.0.2; 3.0.3; +4 more |
| CVE-2002-1151 | – | Oct 11 | The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote… Affected: 2.2.2; 3.0; 3.0.1; 3.0.2; 3.0.3 |
| CVE-2002-0970 | – | Sep 24 | The SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof… Affected: 2.2.2; 3.0; 3.0.1; 3.0.2 |
Showing 33