946 matches found
[SECURITY] Fedora 43 Update: thunderbird-152.0-2.fc43
Mozilla Thunderbird is a standalone mail and newsgroup client...
thunderbird security update
An update is available for thunderbird. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...
[SECURITY] Fedora 43 Update: thunderbird-149.0.1-3.fc43
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 43 Update: roundcubemail-1.6.16-1.fc43
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
Networking DNS
The vulnerability of the Networking component: DNS browsers like Mozilla Firefox and the email client Thunderbird are vulnerable due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the accessibility of protected information...
[SECURITY] Fedora 44 Update: thunderbird-149.0.1-2.fc44
Mozilla Thunderbird is a standalone mail and newsgroup client...
CVE-2026-41319 MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade
MailKit is a cross-platform mail client library built on top of MimeKit. A STARTTLS Response Injection vulnerability in versions prior to 4.16.0 allows a Man-in-the-Middle attacker to inject arbitrary protocol responses across the plaintext-to-TLS trust boundary, enabling SASL authentication...
EUVD-2026-25388
MailKit is a cross-platform mail client library built on top of MimeKit. A STARTTLS Response Injection vulnerability in versions prior to 4.16.0 allows a Man-in-the-Middle attacker to inject arbitrary protocol responses across the plaintext-to-TLS trust boundary, enabling SASL authentication...
[SECURITY] Fedora 42 Update: thunderbird-149.0.1-2.fc42
Mozilla Thunderbird is a standalone mail and newsgroup client...
Active! mail client CSRF
The vulnerability of the mail client Active! is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...
Active! mail client XSS
The vulnerability of the mail client Active! is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
[SECURITY] Fedora 43 Update: thunderbird-147.0-2.fc43
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 42 Update: thunderbird-147.0-6.fc42
Mozilla Thunderbird is a standalone mail and newsgroup client...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
USN-7838-1 fetchmail vulnerability
It was discovered that the fetchmail SMTP client incorrectly handled certain status code messages. An attacker controlling a malicious server could possibly use this issue to cause fetchmail to crash, resulting in a denial of service...
USN-7838-1: fetchmail vulnerability
It was discovered that the fetchmail SMTP client incorrectly handled certain status code messages. An attacker controlling a malicious server could possibly use this issue to cause fetchmail to crash, resulting in a denial of service...
Active! mail client Stack Buffer Overflow
The vulnerability of the Active! mail client arises due to the overflow of buffer on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sending a specially crafted request...
MGASA-2025-0238 Updated fetchmail package fixes security vulnerability
It was discovered that fetchmail's SMTP client, when configured to authenticate, is susceptible to a protocol violation where, when a trusted but malicious or malfunctioning SMTP server responds to an authentication request with a "334" code but without a following blank on the line, it will...
Linux Distros Unpatched Vulnerability : CVE-2025-61962
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - fetchmail - In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context. Red...