Lucene search
+L

3013 matches found

Prion
Prion
added 2021/08/10 3:15 p.m.20 views

Authentication flaw

In KDE KMail 19.12.3 aka 5.13.3, the SMTP STARTTLS option is not honored and cleartext messages are sent unless "Server requires authentication" is checked...

3.5CVSS5.2AI score0.00527EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2021/08/10 3:15 p.m.33 views

CVE-2021-38372

In KDE Trojita 0.7, man-in-the-middle attackers can create new folders because untagged responses from an IMAP server are accepted before STARTTLS...

4.3CVSS5.8AI score0.00788EPSS
SaveExploits1References3
Prion
Prion
added 2021/08/10 3:15 p.m.20 views

Code injection

In KDE Trojita 0.7, man-in-the-middle attackers can create new folders because untagged responses from an IMAP server are accepted before STARTTLS...

4.3CVSS4.2AI score0.00788EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2021/08/10 3:15 p.m.22 views

CVE-2021-38373

In KDE KMail 19.12.3 aka 5.13.3, the SMTP STARTTLS option is not honored and cleartext messages are sent unless "Server requires authentication" is checked...

5.3CVSS6.1AI score0.00527EPSS
SaveExploits0References4
CVE
CVE
added 2021/08/10 2:51 p.m.80 views

CVE-2021-38373

In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored and cleartext messages are sent unless the server requires authentication is checked. This CVE-2021-38373 description is supported by multiple connected sources (SUSe/RHEL/Nessus mappings) indicating the same behavior; no ...

5.3CVSS5.1AI score0.00527EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/08/10 2:51 p.m.31 views

CVE-2021-38373

In KDE KMail 19.12.3 aka 5.13.3, the SMTP STARTTLS option is not honored and cleartext messages are sent unless "Server requires authentication" is checked...

5.5AI score0.00527EPSS
SaveExploits0References2
CVE
CVE
added 2021/08/10 2:51 p.m.61 views

CVE-2021-38372

CVE-2021-38372 affects KDE Trojita 0.7. The issue arises because untagged IMAP responses are accepted before STARTTLS, enabling man-in-the-middle attackers to create new folders. Root cause stated as untagged responses being processed prior to STARTTLS. No exploitation details or patch/version in...

4.3CVSS4.4AI score0.00788EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/08/10 2:51 p.m.31 views

CVE-2021-38372

In KDE Trojita 0.7, man-in-the-middle attackers can create new folders because untagged responses from an IMAP server are accepted before STARTTLS...

4.5AI score0.00788EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/07/02 12:0 a.m.47 views

KDE KImageFormats buffer overflow vulnerability

KDE KImageFormats is a framework from the KDE community. The KDE KImageFormats, which provides an additional format for Qt's image I/O system, has a security vulnerability for which no details of the vulnerability are currently available...

5.5CVSS2.9AI score0.00938EPSS
SaveExploits1References1
NVD
NVD
added 2021/07/01 3:15 a.m.28 views

CVE-2021-36083

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE...

5.5CVSS0.00938EPSS
SaveExploits1References3
OSV
OSV
added 2021/07/01 3:15 a.m.6 views

CVE-2021-36083

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE...

5.5CVSS7.3AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2021/07/01 3:15 a.m.24 views

CVE-2021-36083

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE...

5.5CVSS6.3AI score0.00938EPSS
SaveExploits1References4
Prion
Prion
added 2021/07/01 3:15 a.m.20 views

Stack overflow

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE...

4.3CVSS5.8AI score0.00938EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2021/07/01 3:15 a.m.5 views

UBUNTU-CVE-2021-36083

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE...

5.5CVSS6.2AI score0.00938EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2021/07/01 2:48 a.m.31 views

CVE-2021-36083

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE...

6AI score0.00938EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2021/07/01 2:48 a.m.53 views

CVE-2021-36083

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE...

5.5CVSS5.7AI score0.00938EPSS
SaveExploits1
CVE
CVE
added 2021/07/01 2:48 a.m.92 views

CVE-2021-36083

CVE-2021-36083 affects KDE KImageFormats 5.70.0–5.81.0 with a stack-based overflow in XCFImageFormat::loadTileRLE. The connected sources (OSV, Debian, SUSE, Ubuntu, CNVD, CNVD, NVD, etc.) validate the flaw; exploitation status and official patches are not detailed in the provided documents. No ad...

5.5CVSS5.7AI score0.00938EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2021/07/01 12:0 a.m.8 views

KDE KImageFormats 缓冲区错误漏洞

KDE KImageFormats is a framework from the KDE community. The KDE KImageFormats, which provides an additional format for Qt's image I/O system, has a security vulnerability for which no details of the vulnerability are currently available...

5.5CVSS5.5AI score0.00938EPSS
SaveExploits1References3
ThreatPost
ThreatPost
added 2021/06/23 11:58 a.m.211 views

Unpatched Linux Marketplace Bugs Allow Wormable Attacks, Drive-By RCE

An unpatched stored cross-site-scripting XSS security vulnerability affecting Linux marketplaces could allow unchecked, wormable supply-chain attacks, researchers have found. The bug was found to affect Pling-based markets by researchers at Positive Security, including AppImage Hub, Gnome-Look, K...

6.5AI score
SaveExploits0References11
NVD
NVD
added 2021/06/02 4:15 p.m.24 views

CVE-2021-31855

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...

6.5CVSS0.00604EPSS
SaveExploits0References2
Rows per page
Query Builder