Lucene search
+L

93 matches found

attackerkb
attackerkb
•added 2021/06/02 4:15 p.m.•12 views

CVE-2021-31855

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...

6.5CVSS6.7AI score0.00609EPSS
SaveExploits0References3
Mend
Mend
•added 2021/06/02 12:00 a.m.•6 views

CVE-2021-31855

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...

7.1CVSS0.00609EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/06/02 12:00 a.m.•44 views

CVE-2021-31855

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...

6.5AI score0.00609EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2021/06/02 12:00 a.m.•76 views

CVE-2021-31855

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...

6.5CVSS6.3AI score0.00609EPSS
SaveExploits0
CVE
CVE
•added 2021/06/02 12:00 a.m.•117 views

CVE-2021-31855

CVE-2021-31855 affects KDE Messagelib up to 5.17.0. In some scenarios, deleting an attachment from a decrypted message stored on a remote server (e.g., IMAP) causes KMail to upload the decrypted content, enabling a user with access to server-stored messages to read plaintext. The root cause is de...

6.5CVSS6.2AI score0.00609EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/02 12:00 a.m.•6 views

CVE-2021-31855: Cleartext Storage of Sensitive Information

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...

6.5CVSS5.9AI score0.00609EPSS
SaveExploits0References2
Mageia
Mageia
•added 2021/05/07 5:35 a.m.•77 views

Updated messagelib packages fix security vulnerability

Deleting an attachment of a decrypted encrypted message stored on a remote server e.g. an IMAP server causes KMail to upload the decrypted content of the message to the remote server. This is not easily noticeable by the user because KMail does not display the decrypted content. With a specially...

6.5CVSS2.3AI score0.00609EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/04/29 12:00 a.m.•22 views

messagelib 信息泄露漏洞

messagelib is an application program. A small C library for Linux. An information disclosure vulnerability exists in messagelib that stems from the way messagelib in KDE KMail deletes attachments to encrypted messages on remote servers e.g. IMAP servers. The following products and versions are...

6.5CVSS6.5AI score0.00609EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/04/28 12:00 a.m.•4 views

PT-2021-4102

Name of the Vulnerable Software and Affected Versions KDE Messagelib versions prior to 5.17.0 Description The issue is related to the incorrect handling of attachment deletion in decrypted encrypted messages stored on remote servers, such as IMAP servers. When a user deletes an attachment from a...

6.5CVSS0.00609EPSS
SaveExploits0References18
OpenVAS
OpenVAS
•added 2021/04/16 12:00 a.m.•37 views

openSUSE: Security Advisory for messagelib (openSUSE-SU-2021:0188-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

4.3CVSS4.9AI score0.00654EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/02/04 12:00 a.m.•14 views

Fedora: Security Advisory for kf5-messagelib (FEDORA-2021-bdaf015218)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
osv_opensuse
osv_opensuse
•added 2021/02/02 9:11 a.m.•9 views

OPENSUSE-SU-2021:0227-1 Security update for messagelib

This update for messagelib fixes the following issues: - CVE-2019-10732: Prevented accidental disclosure of encrypted content when replying boo1131885. This update was imported from the openSUSE:Leap:15.1:Update update project...

4.3CVSS4.8AI score0.00654EPSS
SaveExploits1References3
OPENSUSE Linux
OPENSUSE Linux
•added 2021/02/02 12:00 a.m.•40 views

Security update for messagelib (moderate)

openSUSE Security Update: Security update for messagelib Announcement ID: openSUSE-SU-2021:0227-1 Rating: moderate References: 1131885 Cross-References: CVE-2019-10732 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This updat...

4.3CVSS5.9AI score0.00654EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2021/02/02 12:00 a.m.•18 views

Fedora 32 : kf5-messagelib / qt5-qtwebengine (2021-bdaf015218)

The remote Fedora 32 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-bdaf015218 advisory. - This update rebases QtWebEngine to the latest Qt 5 release, 5.15.2, fixing dozens of security issues. The same version is already shipped on Fedora 33 and...

5.5AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2021/02/01 12:00 a.m.•36 views

openSUSE Security Update : messagelib (openSUSE-2021-188)

This update for messagelib fixes the following issues : - CVE-2019-10732: Prevented accidental disclosure of encrypted content when replying boo1131885. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

4.3CVSS5.3AI score0.00654EPSS
SaveExploits1References2
osv_opensuse
osv_opensuse
•added 2021/01/29 7:13 p.m.•7 views

OPENSUSE-SU-2021:0188-1 Security update for messagelib

This update for messagelib fixes the following issues: - CVE-2019-10732: Prevented accidental disclosure of encrypted content when replying boo1131885...

4.3CVSS4.8AI score0.00654EPSS
SaveExploits1References3
OPENSUSE Linux
OPENSUSE Linux
•added 2021/01/29 12:00 a.m.•42 views

Security update for messagelib (moderate)

openSUSE Security Update: Security update for messagelib Announcement ID: openSUSE-SU-2021:0188-1 Rating: moderate References: 1131885 Cross-References: CVE-2019-10732 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

4.3CVSS5.8AI score0.00654EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/03/13 12:00 a.m.•17 views

KDE Applications Input Validation Error Vulnerability

KDE Applications is an open source software suite from the KDE community that provides over 200 applications that run on any Linux desktop as well as other platforms. A security vulnerability exists in the messagepartthemes/default/defaultrenderer.cpp file in messagelib in versions of KDE...

5.3CVSS6.9AI score0.01104EPSS
SaveExploits0
NVD
NVD
•added 2020/03/12 9:15 p.m.•27 views

CVE-2018-19516

messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restrict the handling of an http-equiv="REFRESH" value...

5.3CVSS5.2AI score0.01104EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2020/03/12 8:27 p.m.•63 views

CVE-2018-19516

messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restrict the handling of an http-equiv="REFRESH" value...

5.3CVSS5.2AI score0.01104EPSS
SaveExploits0
Rows per page
Query Builder