[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fI7gdZLuojLUhaJOhMvZQ-z6v5JqzAVZ9CjlVQfKH_ac":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":71,"topProductsByCves":72,"seoMetadata":74,"meta":83},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":19},7930,"digia",1,9,0,68,"2015-05-12","d",[16],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},36777,"qt","Digia is a technology vendor with 1 tracked product and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[21,30,35,39,43,48,53,60,66],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":29},"CVE-2010-2621","The QSslSocketBackendPrivate::transmit function in src_network_ssl_qsslsocket_openssl.cpp in Qt 4.6.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed request.","2010-07-02",5,"v2","Medium",false,0.1054,{"cveId":31,"description":32,"publishedDate":13,"cvssScore":33,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":34},"CVE-2015-1860","Multiple buffer overflows in gui\u002Fimage\u002Fqgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.",6.8,0.08675,{"cveId":36,"description":37,"publishedDate":13,"cvssScore":33,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":38},"CVE-2015-1858","Multiple buffer overflows in gui\u002Fimage\u002Fqbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.",0.07167,{"cveId":40,"description":41,"publishedDate":13,"cvssScore":33,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":42},"CVE-2015-1859","Multiple buffer overflows in plugins\u002Fimageformats\u002Fico\u002Fqicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.",0.07135,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":47},"CVE-2015-0295","The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.","2015-03-25",0.06311,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":52},"CVE-2013-4549","QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory consumption) via an XML Entity Expansion (XEE) attack.","2013-12-23",0.03105,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":26,"severity":58,"isKev":28,"epssScore":59},"CVE-2010-1766","Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets\u002FWebSocketHandshake.cpp in WebCore in WebKit before r56380, as used in Qt and other products, allows remote websockets servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an upgrade header that is long and invalid.","2010-07-22",7.5,"High",0.02252,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":65},"CVE-2012-5624","The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application.","2013-02-24",4.3,0.01939,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":64,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":70},"CVE-2010-5076","QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.","2012-06-29",0.01402,[],[73],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":75,"metaDescription":76,"keywords":77,"structuredData":78},"Digia - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Digia covering 1 product with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Digia vulnerabilities, Digia security, Digia CVE, Digia threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":79,"@type":80,"name":81,"description":76,"url":82},"https:\u002F\u002Fschema.org","Organization","Digia","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdigia",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":84,"apiVersion":85},"2026-10-17T19:32:55.030Z","3.0"]