EUVD-2009-4990

Malware in sbrugna...

PT-2020-17091

Name of the Vulnerable Software and Affected Versions LiquidFiles versions prior to 3.3.19 Description A Cross-Site Script Inclusion issue was found, which is a client-side attack that requires user interaction, such as opening a link. Successful exploitation could lead to encrypted e-mail conten...

CVE-2019-8645

An issue existed in the handling of encrypted Mail. This issue was addressed with improved isolation of MIME in Mail. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. An attacker in a privileged network position may be able to...

E-Mail Vulnerabilities and Disclosure

Last week, researchers disclosed vulnerabilities in a large number of encrypted e-mail clients: specifically, those that use OpenPGP and S/MIME, including Thunderbird and AppleMail. These are serious vulnerabilities: An attacker who can alter mail sent to a vulnerable client can trick that client...

CVE-2014-8921

The IBM Notes Traveler Companion application 1.0 and 1.1 before 201411010515 for Window Phone, as distributed in IBM Notes Traveler 9.0.1, does not properly restrict the number of executions of the automatic configuration option, which makes it easier for remote attackers to capture credentials b...

PT-2014-5321

Name of the Vulnerable Software and Affected Versions Symantec Encryption Desktop versions 10.3.x through 10.3.2 MP2 Symantec PGP Desktop versions 10.0.x through 10.2.x Description The issue allows remote attackers to cause a denial of service, consuming CPU and memory resources, by sending a...

CVE-2014-3436: Undefined Security Weakness

Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service CPU and memory consumption via a crafted encrypted e-mail message that decompresses to a larger size...

CVE-2013-4674

Cross-site scripting XSS vulnerability in the Web Email Protection component in Symantec Encryption Management Server formerly Symantec PGP Universal Server before 3.3.0 MP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted encrypted e-mail attachment...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Email Protection component in Symantec Encryption Management Server formerly Symantec PGP Universal Server before 3.3.0 MP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted encrypted e-mail attachment...

CVE-2013-4674: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web Email Protection component in Symantec Encryption Management Server formerly Symantec PGP Universal Server before 3.3.0 MP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted encrypted e-mail attachment...

PT-2013-5125

Name of the Vulnerable Software and Affected Versions Symantec Encryption Management Server versions prior to 3.3.0 MP2 Description A cross-site scripting XSS issue exists in the Web Email Protection component, allowing remote authenticated users to inject arbitrary web script or HTML via a craft...

CVE-2010-4764

Removed by vendor...

CVE-2010-4764: Undefined Security Weakness

Open Ticket Request System OTRS before 2.4.10, and 3.x before 3.0.3, does not present warnings about incoming encrypted e-mail messages that were based on revoked PGP or GPG keys, which makes it easier for remote attackers to spoof e-mail communication by leveraging a key that has a revocation...

CVE-2009-5032

CVE-2009-5032 affects IBM Lotus Notes Traveler

CVE-2009-5032: Undefined Security Weakness

The encrypted e-mail feature in IBM Lotus Notes Traveler before 8.5.0.2 sends unencrypted messages when the feature is used without uploading a Notes ID file, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

PT-2010-1823

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.0.2 Description The encrypted e-mail feature in IBM Lotus Notes Traveler has an issue where it sends unencrypted messages when used without uploading a Notes ID file. This makes it easier for remo...

Evolution: Format string vulnerability

Background Evolution is a GNOME groupware application. Description Ulf Harnhammar from Secunia Research discovered a format string error in the emfmultipartencrypted function in the file mail/em-format.c when reading certain data e.g. the "Version:" field from an encrypted e-mail. Impact A remote...