Kde Applications vulnerabilities

3 CVEs affecting Kde Applications, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-19516, published 2020-03-12.

More from Kde.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-7252, published 2015-01-18. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a…
• CVE-2018-19120, published 2018-11-29. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address.
• CVE-2018-19516, published 2020-03-12. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restrict the handling of an http-equiv="REFRESH" value.