Lucene search
K

17 matches found

OpenVAS
OpenVAS
added 2025/09/04 12:0 a.m.3 views

Ubuntu: Security Advisory (USN-7732-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS5.8AI score0.00041EPSS
Exploits0References2
OSV
OSV
added 2025/09/02 8:8 p.m.1 views

USN-7732-1 kmail-account-wizard vulnerability

It was discovered that KMail Account Wizard used HTTP rather than HTTPS when retrieving certain email server configurations. An attacker could possibly use this issue to cause email clients to use an attacker-controlled email server...

5.9CVSS5.8AI score0.00041EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/06/02 12:0 a.m.3 views

Debian: Security Advisory (DLA-4196-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7.1AI score0.00041EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/05/31 12:0 a.m.5 views

Debian dla-4196 : accountwizard - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4196 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4196-1 [email protected] https://www.debian.org/lts/security/...

5.9CVSS5.9AI score0.00041EPSS
Exploits0References4
Debian
Debian
added 2025/05/30 11:7 p.m.7 views

[SECURITY] [DLA 4196-1] kmail-account-wizard security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4196-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 30, 2025 https://wiki.debian.org/LTS -...

5.9CVSS6.5AI score0.00041EPSS
Exploits0
OSV
OSV
added 2025/05/30 12:0 a.m.3 views

DLA-4196-1 kmail-account-wizard - security update

Bulletin has no description...

5.9CVSS7.2AI score0.00041EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/11/07 12:0 a.m.9 views

openSUSE 15 Security Update : kmail-account-wizard (openSUSE-SU-2024:0353-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0353-1 advisory. - CVE-2024-50624: Fixed that plaintext HTTP was used for URLs when retrieving configuration files boo1232454, kde487882 Tenable has extracted the precedi...

5.9CVSS6AI score0.00041EPSS
Exploits0References4
OSV
OSV
added 2024/11/06 7:1 p.m.10 views

OPENSUSE-SU-2024:0353-1 Security update for kmail-account-wizard

This update for kmail-account-wizard fixes the following issues: - CVE-2024-50624: Fixed that plaintext HTTP was used for URLs when retrieving configuration files boo1232454, kde487882...

5.9CVSS5.7AI score0.00041EPSS
Exploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2024/11/06 12:0 a.m.6 views

Security update for kmail-account-wizard (moderate)

openSUSE Security Update: Security update for kmail-account-wizard Announcement ID: openSUSE-SU-2024:0353-1 Rating: moderate References: 1232454 Cross-References: CVE-2024-50624 Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability i...

5.9CVSS7.2AI score0.00041EPSS
Exploits0References1
OSV
OSV
added 2024/10/28 12:15 a.m.18 views

CVE-2024-50624

ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is...

6.4AI score
Exploits0References5
OSV
OSV
added 2024/10/28 12:15 a.m.0 views

DEBIAN-CVE-2024-50624

ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is...

5.9CVSS5.8AI score0.00041EPSS
Exploits0References1
NVD
NVD
added 2024/10/28 12:15 a.m.12 views

CVE-2024-50624

ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is...

5.9CVSS0.00041EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2024/10/27 12:0 a.m.10 views

CVE-2024-50624

ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is...

5.9CVSS5.8AI score0.00041EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2024/10/27 12:0 a.m.7 views

CVE-2024-50624

ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is...

6.7AI score0.00041EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.12 views

Mageia: Security Advisory (MGASA-2020-0346)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.6AI score0.00088EPSS
Exploits0References4
Mageia
Mageia
added 2020/08/25 8:13 a.m.24 views

Updated kdepim-runtime and kmail-account-wizard packages fix security vulnerability

It was discovered that there was an issue where kmail would default to using unencrypted POP3 communication despite the UI indicating that encryption was in use CVE-2020-15954...

6.5CVSS2AI score0.00088EPSS
Exploits0References2
OSV
OSV
added 2020/08/25 8:13 a.m.4 views

MGASA-2020-0346 Updated kdepim-runtime and kmail-account-wizard packages fix security vulnerability

It was discovered that there was an issue where kmail would default to using unencrypted POP3 communication despite the UI indicating that encryption was in use CVE-2020-15954...

6.5CVSS6.3AI score0.00088EPSS
Exploits0References3
Rows per page
Query Builder