355 matches found
CVE-2021-38373
In KDE KMail 19.12.3 aka 5.13.3, the SMTP STARTTLS option is not honored and cleartext messages are sent unless "Server requires authentication" is checked...
CVE-2021-38373
In KDE KMail 19.12.3 aka 5.13.3, the SMTP STARTTLS option is not honored and cleartext messages are sent unless "Server requires authentication" is checked...
CVE-2021-38373
In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored and cleartext messages are sent unless the server requires authentication is checked. This CVE-2021-38373 description is supported by multiple connected sources (SUSe/RHEL/Nessus mappings) indicating the same behavior; no ...
CVE-2021-38373
In KDE KMail 19.12.3 aka 5.13.3, the SMTP STARTTLS option is not honored and cleartext messages are sent unless "Server requires authentication" is checked...
KDE KMail security vulnerability
KDE KMail is an email component in Kontact a personal information management suite for the KDE community. A security vulnerability exists in KDE KMail 19.12.3 a.k.a. 5.13.3. There is no information about this vulnerability at this time, so please stay tuned to CNNVD or the vendor's announcement...
CVE-2021-38373: Improper Neutralization of Special Elements used in a Command
In KDE KMail 19.12.3 aka 5.13.3, the SMTP STARTTLS option is not honored and cleartext messages are sent unless "Server requires authentication" is checked...
CVE-2021-31855: Cleartext Storage of Sensitive Information
KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...
CVE-2021-31855
KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...
MGASA-2021-0208 Updated messagelib packages fix security vulnerability
Deleting an attachment of a decrypted encrypted message stored on a remote server e.g. an IMAP server causes KMail to upload the decrypted content of the message to the remote server. This is not easily noticeable by the user because KMail does not display the decrypted content. With a specially...
Updated messagelib packages fix security vulnerability
Deleting an attachment of a decrypted encrypted message stored on a remote server e.g. an IMAP server causes KMail to upload the decrypted content of the message to the remote server. This is not easily noticeable by the user because KMail does not display the decrypted content. With a specially...
MGASA-2021-0067 Updated messagelib packages fix a security vulnerability
In KDE KMail, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended...
Information Disclosure
KDE KMail is vulnerable to information disclosure. An insecure unencrypted POP3 communication is used despite the UI indicating that encryption is in use...
MGASA-2020-0346 Updated kdepim-runtime and kmail-account-wizard packages fix security vulnerability
It was discovered that there was an issue where kmail would default to using unencrypted POP3 communication despite the UI indicating that encryption was in use CVE-2020-15954...
Updated kdepim-runtime and kmail-account-wizard packages fix security vulnerability
It was discovered that there was an issue where kmail would default to using unencrypted POP3 communication despite the UI indicating that encryption was in use CVE-2020-15954...
PT-2021-22087
Name of the Vulnerable Software and Affected Versions KDE KMail version 19.12.3 aka 5.13.3 Description The SMTP STARTTLS option is not honored in KDE KMail, resulting in cleartext messages being sent unless the "Server requires authentication" option is checked. Recommendations For KDE KMail...
KDE KMail Information Disclosure Vulnerability
KDE KMail is an e-mail component of Kontact personal information management suite from the KDE community. An information disclosure vulnerability exists in KDE KMail version 19.12.3, which originates from unencrypted POP3 communication by the program and can be exploited by an attacker to obtain...
CVE-2020-15954
KDE KMail 19.12.3 aka 5.13.3 engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use...
CVE-2020-15954
KDE KMail 19.12.3 aka 5.13.3 engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use...
