Approved changes feed: RSS · Atom

cpe:2.3:a:kde:konqueror:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKde (d8ba08cf-7ec1-5504-a5b9-f8cfa50ca850)
ProductKonqueror (4f2f5ab6-c769-5e47-9418-f0068486a5d8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/konqueror purl2cpe 2026-06-01 10:14:04.900481
pkg:deb/ubuntu/konqueror purl2cpe 2026-06-01 10:14:04.900482
pkg:github/kde/konqueror purl2cpe 2026-06-01 10:14:04.900484
pkg:rpm/fedora/konqueror purl2cpe 2026-06-01 10:14:04.900485
pkg:rpm/opensuse/konqueror purl2cpe 2026-06-01 10:14:04.900486

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-4512 vulnerable 2026-06-08 05:02:17.931435 Details available
The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."
Published: 2020-02-08T18:09:56.000Z
Updated: 2024-08-06T20:35:09.972Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4976 not_vulnerable 2026-06-08 04:51:50.565393 Details available
Cross-site scripting (XSS) vulnerability in webkitpart.cpp in kwebkitpart allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536.
Published: 2010-08-02T20:00:00.000Z
Updated: 2024-08-07T07:24:53.689Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2537 vulnerable 2026-06-08 04:51:29.107449 Details available
KDE Konqueror allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692.
Published: 2009-07-20T18:00:00.000Z
Updated: 2024-08-07T05:52:15.290Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5698 vulnerable 2026-06-08 04:50:52.509695 Details available
HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service (application crash) via an invalid document.load call that triggers use of a deleted object. NOTE: some of these details are obtained from third party information.
Published: 2008-12-22T15:00:00.000Z
Updated: 2024-08-07T11:04:44.062Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6000 vulnerable 2026-06-08 04:50:07.451135 Details available
KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service (crash) via large HTTP cookie parameters.
Published: 2007-11-15T22:00:00.000Z
Updated: 2024-08-07T15:47:00.640Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4229 vulnerable 2026-06-08 04:49:55.944601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3672 vulnerable 2026-06-08 04:49:09.921353 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0411 vulnerable 2026-06-08 04:47:49.731031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.