CVE-2024-1433: A vulnerability, which was classified as problematic, was found in KDE Plasma Workspace up to 5.93.0. This affects the function…

PriorityP414low3.7CVSS 3.1

AVNACHPRNUINSUCNILAN

EPSS

0.78%

52.4th percentile

A vulnerability, which was classified as problematic, was found in KDE Plasma Workspace up to 5.93.0. This affects the function EventPluginsManager::enabledPlugins of the file components/calendar/eventpluginsmanager.cpp of the component Theme File Handler. The manipulation of the argument pluginId leads to path traversal. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The patch is named 6cdf42916369ebf4ad5bd876c4dfa0170d7b2f01. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-253407. NOTE: This requires write access to user's home or the installation of third party global themes.

Affected

96 ranges· showing 25

Vendor	Product	Version range	Fixed in
debian	plasma-workspace	—	—
kde	plasma-workspace	<= 5.93.0	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—
kde	plasma_workspace	—	—

CVSS provenance

nvdv3.13.7LOWCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

nvdv2.02.6LOWAV:N/AC:H/Au:N/C:N/I:P/A:N

osv3.7LOW

vendor_debian3.1LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

Suricata

GPL SQL sa brute force failed login unicode attempt

suricata·2010-09-23

CVE-2000-1209 GPL SQL sa brute force failed login unicode attempt GPL SQL sa brute force failed login unicode attempt Rule: alert tcp $SQL_SERVERS 1433 -> $EXTERNAL_NET any (msg:"GPL SQL sa brute force failed login unicode attempt"; flow:established,to_client; content:"L|00|o|00|g|00|i|00|n|00| |00|f|00|a|00|i|00|l|00|e|00|d|00| |00|f|00|o|00|r|00| |00|u|00|s|00|e|00|r|00| |00|'|00|s|00|a|00|'|00|"; threshold:type threshold, track by_src, count 5, seconds 2; reference:bugtraq,4797; reference:cve,2000-1209; reference:nessus,10673; classtype:unsuccessful-user; sid:2103273; rev:5; metadata:created_at 2010_09_23, cve CVE_2000_1209, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_08;)

Suricata

GPL SQL sa brute force failed login attempt

suricata·2010-09-23

CVE-2000-1209 GPL SQL sa brute force failed login attempt GPL SQL sa brute force failed login attempt Rule: alert tcp $SQL_SERVERS 1433 -> $EXTERNAL_NET any (msg:"GPL SQL sa brute force failed login attempt"; flow:established,to_client; content:"Login failed for user 'sa'"; threshold:type threshold, track by_src, count 5, seconds 2; reference:bugtraq,4797; reference:cve,2000-1209; reference:nessus,10673; classtype:unsuccessful-user; sid:2103152; rev:5; metadata:created_at 2010_09_23, cve CVE_2000_1209, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_08;)

Suricata

GPL NETBIOS xp_reg* - registry access

suricata·2010-09-23

CVE-2002-0642 GPL NETBIOS xp_reg* - registry access GPL NETBIOS xp_reg* - registry access Rule: alert tcp $EXTERNAL_NET any -> $SQL_SERVERS 1433 (msg:"GPL NETBIOS xp_reg* - registry access"; flow:established,to_server; content:"x|00|p|00|_|00|r|00|e|00|g|00|"; nocase; reference:bugtraq,5205; reference:cve,2002-0642; reference:nessus,10642; reference:url,www.microsoft.com/technet/security/bulletin/MS02-034; classtype:attempted-user; sid:2100686; rev:12; metadata:created_at 2010_09_23, cve CVE_2002_0642, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_08;)

Suricata

GPL SQL sa login failed

suricata·2010-09-23

CVE-2000-1209 GPL SQL sa login failed GPL SQL sa login failed Rule: alert tcp $SQL_SERVERS 1433 -> $EXTERNAL_NET any (msg:"GPL SQL sa login failed"; flow:established,to_client; content:"Login failed for user 'sa'"; reference:bugtraq,4797; reference:cve,2000-1209; reference:nessus,10673; classtype:unsuccessful-user; sid:2100688; rev:12; metadata:created_at 2010_09_23, cve CVE_2000_1209, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_08;)