https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:18:12 +0000 https://vulnerability.circl.lu/vuln/cve-2017-6410 <p>kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL (potentially including Basic Authentication credentials, a query string, or PATH_INFO), which allows remote attackers to obtain sensitive information via a crafted PAC file.</p> <p>kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL (potentially including Basic Authentication credentials, a query string, or PATH_INFO), which allows remote attackers to obtain sensitive information via a crafted PAC file.</p> https://vulnerability.circl.lu/vuln/cve-2017-6410 https://vulnerability.circl.lu/vuln/usn-3223-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: kde4libs</p> <p>Itzik Kotler, Yonatan Fridburg, and Amit Klein discovered that KDE-Libs incorrectly handled certain PAC files. A remote attacker could possibly use this issue to obtain sensitive information.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: kde4libs</p> <p>Itzik Kotler, Yonatan Fridburg, and Amit Klein discovered that KDE-Libs incorrectly handled certain PAC files. A remote attacker could possibly use this issue to obtain sensitive information.</p> https://vulnerability.circl.lu/vuln/usn-3223-1