908 matches found
CVE-2020-27509
Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs...
CVE-2015-7609
Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbra...
CVE-2013-10001
A vulnerability was found in HTC One/Sense 4.x. It has been rated as problematic. Affected by this issue is the certification validation of the mail client. An exploit has been disclosed to the public and may be used...
[SECURITY] Fedora 42 Update: thunderbird-128.10.1-1.fc42
Mozilla Thunderbird is a standalone mail and newsgroup client...
SUSE CVE-2025-3932
It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
Alibaba Cloud Linux 3 : 0095: evolution (ALINUX3-SA-2022:0095)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0095 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-3890: It was discovered...
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Privilege escalation in Firefox Updater CVE-2025-2817 firefox: thunderbird: Unsafe attribute access during XPath parsing CVE-2025-4087 firefox: thunderbird: Process isolation bypass using...
[SECURITY] Fedora 42 Update: thunderbird-128.10.0-1.fc42
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 41 Update: thunderbird-128.10.0-1.fc41
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 42 Update: thunderbird-128.9.2-1.fc42
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 40 Update: thunderbird-128.9.2-1.fc40
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 40 Update: thunderbird-128.9.0-1.fc40
Mozilla Thunderbird is a standalone mail and newsgroup client...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
[SECURITY] Fedora 42 Update: thunderbird-128.8.0-1.fc42
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 40 Update: thunderbird-128.8.0-1.fc40
Mozilla Thunderbird is a standalone mail and newsgroup client...
Linux Distros Unpatched Vulnerability : CVE-2020-16117
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid e.g., minimal...
[SECURITY] Fedora 40 Update: thunderbird-128.6.0-1.fc40
Mozilla Thunderbird is a standalone mail and newsgroup client...