https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 22:19:11 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-00953 bdu:2025-00953 https://cve.radiocsirt.org/vuln/bdu:2025-00953 https://cve.radiocsirt.org/vuln/euvd-2026-260139 EUVD-2026-260139 https://cve.radiocsirt.org/vuln/euvd-2026-260139 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36041 <p>KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.</p> <p>KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-36041 https://cve.radiocsirt.org/vuln/ghsa-7xfq-9m67-9j5j <p>KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.</p> <p>KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.</p> https://cve.radiocsirt.org/vuln/ghsa-7xfq-9m67-9j5j https://cve.radiocsirt.org/vuln/oesa-2024-1937 <p><strong>Affected:</strong> openEuler:24.03-LTS: plasma-workspace</p> <p>Plasma 5 libraries and runtime components Security Fix(es): KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.(CVE-2024-36041)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: plasma-workspace</p> <p>Plasma 5 libraries and runtime components Security Fix(es): KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.(CVE-2024-36041)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1937 https://cve.radiocsirt.org/vuln/opensuse-su-2024:0161-1 <p>Security update for plasma5-workspace</p> <p>Security update for plasma5-workspace</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:0161-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-36041 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: plasma-workspace, Ubuntu:18.04:LTS: plasma-workspace, Ubuntu:20.04:LTS: plasma-workspace, Ubuntu:22.04:LTS: plasma-workspace, Ubuntu:24.04:LTS: plasma-workspace</p> <p>KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: plasma-workspace, Ubuntu:18.04:LTS: plasma-workspace, Ubuntu:20.04:LTS: plasma-workspace, Ubuntu:22.04:LTS: plasma-workspace, Ubuntu:24.04:LTS: plasma-workspace</p> <p>KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-36041 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1266 <p>Ein lokaler Angreifer kann eine Schwachstelle in KDE ausnutzen, um beliebigen Programmcode mit Session Manager Rechten auszuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in KDE ausnutzen, um beliebigen Programmcode mit Session Manager Rechten auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1266