Approved changes feed: RSS · Atom

cpe:2.3:a:urs_wolfer:kwebkitpart:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUrs Wolfer (d1e916bd-039a-5901-8d2d-bf343d9c2f6e)
ProductKwebkitpart (68f7ca74-8969-5dfd-8e27-13d5d81d0f8e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/groszdaniel/kwebkitpart purl2cpe 2026-06-01 10:14:59.550646
pkg:github/kde/kwebkitpart purl2cpe 2026-06-01 10:14:59.550649
pkg:rpm/fedora/kwebkitpart purl2cpe 2026-06-01 10:14:59.550652
pkg:rpm/opensuse/kwebkitpart purl2cpe 2026-06-01 10:14:59.550654

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-8600 vulnerable 2026-06-08 05:06:09.690461 Details available
Multiple cross-site scripting (XSS) vulnerabilities in KDE-Runtime 4.14.3 and earlier, kwebkitpart 1.3.4 and earlier, and kio-extras 5.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via a crafted URI using the (1) zip, (2) trash, (3) tar, (4) thumbnail, (5) smtps, (6) smtp, (7) smb, (8) remote, (9) recentdocuments, (10) nntps, (11) nntp, (12) network, (13) mbox, (14) ldaps, (15) ldap, (16) fonts, (17) file, (18) desktop, (19) cgi, (20) bookmarks, or (21) ar scheme, which is not properly handled in an error message.
Published: 2014-12-08T11:00:00.000Z
Updated: 2024-08-06T13:26:00.973Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4976 vulnerable 2026-06-08 04:51:50.564111 Details available
Cross-site scripting (XSS) vulnerability in webkitpart.cpp in kwebkitpart allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536.
Published: 2010-08-02T20:00:00.000Z
Updated: 2024-08-07T07:24:53.689Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.