[{"CVE":"CVE-2018-6790","severity":"low","public_date":"2018-02-08T00:00:00Z","advisories":["RHSA-2019:2141"],"bugzilla":"1543454","bugzilla_description":"CVE-2018-6790 kde-workspace: Missing sanitization of notifications allows to leak client IP address via IMG element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-200","affected_packages":["kde-workspace-0:4.11.19-13.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-1308","severity":"low","public_date":"2015-01-16T00:00:00Z","advisories":[],"bugzilla":"1183710","bugzilla_description":"CVE-2015-1308 kde-workspace: X11 clients can eavesdrop input events while screen is locked","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-807->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1308.json"},{"CVE":"CVE-2014-8651","severity":"moderate","public_date":"2014-11-04T00:00:00Z","advisories":[],"bugzilla":"1163778","bugzilla_description":"CVE-2014-8651 kde-workspace: arbitrary code execution and local privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8651.json"},{"CVE":"CVE-2013-4133","severity":"low","public_date":"2013-07-16T00:00:00Z","advisories":[],"bugzilla":"985362","bugzilla_description":"CVE-2013-4133 kde-workspace: DoS due memory leak in plasma desktop when handling blinking system tray icons","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4133.json"},{"CVE":"CVE-2013-4132","severity":"low","public_date":"2013-06-29T00:00:00Z","advisories":[],"bugzilla":"985355","bugzilla_description":"CVE-2013-4132 kde-workspace: NULL pointer dereference in KDM and KCheckPass when glibc 2.17 or FIPS-140 enabled system used","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4132.json"}]