Поиск уязвимостей
Количество 11
Количество 11
BDU:2022-05725
Уязвимость плагина Language Server Protocol текстового редактора Kate, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
ALT-PU-2022-1614
ALT-PU-2022-1614: package `kf5-ktexteditor` update to version 5.91.0-alt1
ALT-PU-2022-1585
ALT-PU-2022-1585: package `kde5-kate` update to version 21.12.3-alt1
ALT-PU-2022-1434
ALT-PU-2022-1434: package `kde5-kate` update to version 21.12.3-alt1
ALT-PU-2022-1325
ALT-PU-2022-1325: package `kf5-ktexteditor` update to version 5.91.0-alt1
CVE-2022-23853
The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file that was just opened (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted directory.
CVE-2022-23853
The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file that was just opened (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted directory.
CVE-2022-23853
The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 a ...
GHSA-qjh4-6jqf-7749
The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file that was just opened (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted directory.
openSUSE-SU-2022:0841-1
Security update for libqt5-qtbase
SUSE-SU-2022:0841-1
Security update for libqt5-qtbase
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2022-05725 Уязвимость плагина Language Server Protocol текстового редактора Kate, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2022-1614 ALT-PU-2022-1614: package `kf5-ktexteditor` update to version 5.91.0-alt1 | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2022-1585 ALT-PU-2022-1585: package `kde5-kate` update to version 21.12.3-alt1 | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2022-1434 ALT-PU-2022-1434: package `kde5-kate` update to version 21.12.3-alt1 | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2022-1325 ALT-PU-2022-1325: package `kf5-ktexteditor` update to version 5.91.0-alt1 | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
 | CVE-2022-23853 The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file that was just opened (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted directory. | CVSS3: 7.8 | 1% Низкий | почти 5 лет назад |
 | CVE-2022-23853 The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file that was just opened (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted directory. | CVSS3: 7.8 | 1% Низкий | почти 5 лет назад |
| CVE-2022-23853 The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 a ... | CVSS3: 7.8 | 1% Низкий | почти 5 лет назад |
| GHSA-qjh4-6jqf-7749 The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file that was just opened (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted directory. | CVSS3: 7.8 | 1% Низкий | почти 5 лет назад |
 | openSUSE-SU-2022:0841-1 Security update for libqt5-qtbase | больше 4 лет назад | ||
| SUSE-SU-2022:0841-1 Security update for libqt5-qtbase | больше 4 лет назад |
Уязвимостей на страницу