Kio Extras

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-12755 May 09, 16:15 LOW PATCH Monitor

fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the keepPassword option. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Information Disclosure Kde Kio Extras

NVD

CVSS 3.1

3.3

EPSS

0.4%

CVE-2014-8600 Dec 08, 11:59 MEDIUM POC PATCH This Month

Multiple cross-site scripting (XSS) vulnerabilities in KDE-Runtime 4.14.3 and earlier, kwebkitpart 1.3.4 and earlier, and kio-extras 5.1.1 and earlier allow remote attackers to inject arbitrary web. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

XSS Kde Opensuse Kwebkitpart Kde Runtime +1

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2020-12755

EPSS 0% CVSS 3.3

LOW PATCH Monitor

Information Disclosure Kde Kio Extras

NVD

CVE-2014-8600

EPSS 0% CVSS 4.3

MEDIUM POC PATCH This Month

XSS Kde Opensuse +3

NVD