Lucene search
+L

138 matches found

OSV
OSV
added 2024/03/25 12:00 a.m.40 views

ALSA-2024:1494 Moderate: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.9.0. Security Fixes: nss: timing attack against RSA decryption CVE-2023-5388 Mozilla: Crash in NSS TLS method CVE-2024-0743 Mozilla: Leaking of encrypted email subjects to other...

8.8CVSS8.8AI score0.01285EPSS
SaveExploits5References20
AlmaLinux
AlmaLinux
added 2024/03/25 12:00 a.m.82 views

Moderate: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.9.0. Security Fixes: nss: timing attack against RSA decryption CVE-2023-5388 Mozilla: Crash in NSS TLS method CVE-2024-0743 Mozilla: Leaking of encrypted email subjects to other...

8.8CVSS8.3AI score0.01285EPSS
SaveExploits5References20
OpenVAS
OpenVAS
added 2024/03/25 12:00 a.m.28 views

Debian: Security Advisory (DLA-3769-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.01285EPSS
SaveExploits5References2
OSV
OSV
added 2024/03/25 12:00 a.m.38 views

ALSA-2024:1493 Moderate: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.9.0. Security Fixes: nss: timing attack against RSA decryption CVE-2023-5388 Mozilla: Crash in NSS TLS method CVE-2024-0743 Mozilla: Leaking of encrypted email subjects to other...

8.8CVSS8.8AI score0.01285EPSS
SaveExploits5References20
AlmaLinux
AlmaLinux
added 2024/03/25 12:00 a.m.83 views

Moderate: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.9.0. Security Fixes: nss: timing attack against RSA decryption CVE-2023-5388 Mozilla: Crash in NSS TLS method CVE-2024-0743 Mozilla: Leaking of encrypted email subjects to other...

8.8CVSS8.3AI score0.01285EPSS
SaveExploits5References20
Debian
Debian
added 2024/03/23 11:22 a.m.299 views

[SECURITY] [DLA 3769-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3769-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 23, 2024 https://wiki.debian.org/LTS -...

8.8CVSS8.9AI score0.01285EPSS
SaveExploits5
OpenVAS
OpenVAS
added 2024/03/22 12:00 a.m.36 views

Debian: Security Advisory (DSA-5644-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.01285EPSS
SaveExploits5References2
Debian
Debian
added 2024/03/21 7:21 p.m.47 views

[SECURITY] [DSA 5644-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5644-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 21, 2024 https://www.debian.org/security/faq -...

8.8CVSS9.1AI score0.01285EPSS
SaveExploits5
Amazon
Amazon
added 2024/03/18 12:00 a.m.62 views

Low: thunderbird

Issue Overview: The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email message in Thunderbird's local cache. Consequently, when replying to the contaminated email message, the user might accidentally leak the confidential subject to a...

7.5CVSS7.9AI score0.00682EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2024/03/18 12:00 a.m.34 views

Amazon Linux 2 : thunderbird (ALAS-2024-2497)

The version of thunderbird installed on the remote host is prior to 115.8.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2497 advisory. The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email message i...

7.5CVSS8AI score0.00682EPSS
SaveExploits1References4
OSV
OSV
added 2024/03/14 1:25 p.m.4 views

SUSE-SU-2024:0893-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Security Vulnerabilities fixed in Thunderbird 115.8.1 bsc1221054: - CVE-2024-1936: Fixed leaking of encrypted email subjects to other conversations MFSA 2024-11 bsc1221054...

7.5CVSS8.1AI score0.00682EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2024/03/13 12:00 a.m.34 views

Fedora 38 : thunderbird (2024-325c1d1fce)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-325c1d1fce advisory. Update to 115.8.1 https://www.mozilla.org/en-US/security/advisories/mfsa2024-11/ read that if you have mails with encrypted email subjects...

7.5CVSS8.1AI score0.00682EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2024/03/12 12:00 a.m.21 views

Mageia: Security Advisory (MGASA-2024-0054)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.3AI score0.00682EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2024/03/06 12:00 a.m.18 views

Slackware: Security Advisory (SSA:2024-065-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.4AI score0.00682EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2024/03/05 12:00 a.m.20 views

Mozilla Thunderbird < 115.8.1

The version of Thunderbird installed on the remote Windows host is prior to 115.8.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2024-11 advisory. - The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email messa...

7.5CVSS8AI score0.00682EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/03/05 12:00 a.m.24 views

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2024-065-01)

The version of mozilla-thunderbird installed on the remote host is prior to 115.8.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-065-01 advisory. - The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email...

7.5CVSS8AI score0.00682EPSS
SaveExploits1References2
Circl
Circl
added 2024/03/04 11:26 p.m.6 views

CVE-2024-1936

creationtimestamp| type| source ---|---|--- 2024-03-04 23:26:18+00:00| seen| https://t.me/ctinow/199682 2024-03-04 23:26:23+00:00| seen| https://t.me/ctinow/199685 2024-03-06 14:46:26+00:00| seen| https://t.me/ctinow/201405...

7.5CVSS7.2AI score0.00682EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/04 10:15 p.m.9 views

CVE-2024-1936

The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email message in Thunderbird's local cache. Consequently, when replying to the contaminated email message, the user might accidentally leak the confidential subject to a third-party. Whil...

7.5CVSS7.5AI score
SaveExploits0References3
CVE
CVE
added 2024/03/04 9:31 p.m.190 views

CVE-2024-1936

Thunderbird vulnerability CVE-2024-1936: In Thunderbird, the encrypted subject of an email could be incorrectly and permanently assigned to a different message in local cache, risking leakage of confidential subjects when replying. Affected product: Mozilla Thunderbird (versions prior to 115.8.1)...

7.5CVSS7.7AI score0.00682EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.24 views

Ubuntu: Security Advisory (USN-6669-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.4AI score0.02155EPSS
SaveExploits2References2
Rows per page
Query Builder