CVE-2019-10734

CVE-2019-10734 affects KDE Trojita 0.7. An attacker with access to S/MIME or PGP encrypted emails can wrap them inside crafted multipart emails; the encrypted parts can be hidden with HTML/CSS or ASCII newlines. If the recipient replies to the benign-looking email, they may leak the plaintext of ...

CVE-2019-10732

In KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the...

CVE-2019-10732

CVE-2019-10732 affects KDE PIM’s messagelib/KMail: an attacker who has S/MIME or PGP encrypted emails can wrap the ciphertext in a crafted multipart message; by hiding parts with HTML/CSS or newline tricks, the attacker can cause the recipient to leak plaintext back when replying. Connected advis...

CVE-2019-10732

In KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the...

PT-2019-12014

Name of the Vulnerable Software and Affected Versions KDE KMail version 5.2.3 Description The issue allows an attacker with S/MIME or PGP encrypted emails to craft a multipart email, hiding the encrypted parts using HTML/CSS or ASCII newline characters. When the receiver replies to this email, th...

PT-2019-12018

Name of the Vulnerable Software and Affected Versions K-9 Mail version 5.600 Description The issue allows an attacker to include the original quoted HTML code of a specially crafted email within reply messages. This can contain conditional statements that display different text when opened in a...

PT-2019-12015

Name of the Vulnerable Software and Affected Versions KDE Trojita version 0.7 Description The issue allows an attacker with S/MIME or PGP encrypted emails to craft a multipart email that can hide the encrypted parts using HTML/CSS or ASCII newline characters. When the receiver replies to this...

CVE-2019-10735: Cleartext Transmission of Sensitive Information

In Claws Mail 3.14.1, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the...

CVE-2019-10740: Cleartext Transmission of Sensitive Information

In Roundcube Webmail before 1.3.10, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the...

CVE-2019-10734: Cleartext Transmission of Sensitive Information

In KDE Trojita 0.7, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the...

CVE-2019-10741: Undefined Security Weakness

K-9 Mail v5.600 can include the original quoted HTML code of a specially crafted, benign looking, email within digitally signed reply messages. The quoted part can contain conditional statements that show completely different text if opened in a different email client. This can be abused by an...

CVE-2019-10732: Cleartext Transmission of Sensitive Information

In KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the...

S-CMS SQL Injection Vulnerability (CNVD-2019-14076)

S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in S-CMS PHP v1.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to execute...

Sql injection

S-CMS PHP v1.0 has SQL injection via the 4/js/scms.php?action=unlike id parameter...

CVE-2019-10708

S-CMS PHP v1.0 has SQL injection via the 4/js/scms.php?action=unlike id parameter...

CVE-2019-10708

S-CMS PHP v1.0 has SQL injection via the 4/js/scms.php?action=unlike id parameter...

CVE-2019-10708

CVE-2019-10708 affects S-CMS PHP v1.0. The vulnerability is a SQL injection in the parameter 4/js/scms.php?action=unlike, due to insufficient input validation, allowing an attacker to inject SQL statements. The NVD/NVD-derived metrics indicate high/critical risk (CVSS v2: 7.5; CVSS v3: 9.8). Publ...

PT-2019-12000

Name of the Vulnerable Software and Affected Versions S-CMS PHP version 1.0 Description The issue is related to SQL injection, which can be exploited via the id parameter in the /js/scms.php?action=unlike API endpoint. Recommendations For S-CMS PHP version 1.0, as a temporary workaround, consider...

CVE-2019-10708: Improper Neutralization of Special Elements used in an SQL Command

S-CMS PHP v1.0 has SQL injection via the 4/js/scms.php?action=unlike id parameter...

Security update for ucode-intel (moderate)

openSUSE Security Update: Security update for ucode-intel Announcement ID: openSUSE-SU-2019:1084-1 Rating: moderate References: 1129231 Affected Products: openSUSE Leap 15.0 An update that contains security fixes can now be installed. Description: This update for ucode-intel fixes the following...