NVD

Id
35606  
Name
CVE-2014-8600  
Description
Multiple cross-site scripting (XSS) vulnerabilities in KDE-Runtime 4.14.3 and earlier, kwebkitpart 1.3.4 and earlier, and kio-extras 5.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via a crafted URI using the (1) zip, (2) trash, (3) tar, (4) thumbnail, (5) smtps, (6) smtp, (7) smb, (8) remote, (9) recentdocuments, (10) nntps, (11) nntp, (12) network, (13) mbox, (14) ldaps, (15) ldap, (16) fonts, (17) file, (18) desktop, (19) cgi, (20) bookmarks, or (21) ar scheme, which is not properly handled in an error message.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-12-08  
Modified Date
2015-09-28  
Seq
2014-8600  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
182283 35606 CVE-2014-8600 openSUSE-SU-2015:0573  View
182284 35606 CVE-2014-8600 20141119 CVE-2014-8600 - Insufficient Input Validation By IO Slaves In KDE e.V. KDE  View
182285 35606 CVE-2014-8600 USN-2414-1  View
182286 35606 CVE-2014-8600 71190  View
182287 35606 CVE-2014-8600 https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-8600/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16927 JVNDB-2014-005802 KDE-Runtime などの製品におけるクロスサイトスクリプティングの脆弱性 KDE-Runtime、kwebkitpart、および kio-extras には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-8600 75893 CVE-2014-8600 35606 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005802.html 2014-11-13 2014-12-09 View