911 matches found
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
ALSA-2022:7023 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.3.0. Security Fixes: expat: a use-after-free in the doContent function in xmlparse.c CVE-2022-40674 For more details about the security issues, including the impact, a CVSS score,...
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.3.0. Security Fixes: expat: a use-after-free in the doContent function in xmlparse.c CVE-2022-40674 For more details about the security issues, including the impact, a CVSS score,...
[SECURITY] Fedora 37 Update: thunderbird-102.3.0-1.fc37
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 36 Update: thunderbird-102.3.0-1.fc36
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 35 Update: thunderbird-102.2.1-1.fc35
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 36 Update: thunderbird-102.2.1-1.fc36
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 35 Update: thunderbird-102.2.0-1.fc35
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 36 Update: thunderbird-102.2.0-1.fc36
Mozilla Thunderbird is a standalone mail and newsgroup client...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.13.0. Security Fixes: Mozilla: Address bar spoofing via XSLT error handling CVE-2022-38472 Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions CVE-2022-3847...
Fedora: Security Advisory for thunderbird (FEDORA-2022-a7fccdd7a0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: thunderbird-91.12.0-1.fc36
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 35 Update: thunderbird-91.11.0-1.fc35
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 36 Update: thunderbird-91.11.0-1.fc36
Mozilla Thunderbird is a standalone mail and newsgroup client...
CVE-2020-27509
Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs...
Cross site scripting
Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs...
CVE-2020-27509
Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs...
CVE-2020-27509
CVE-2020-27509 describes a persistent cross-site scripting (XSS) flaw in the Galaxkey Secure Mail Client up to version 5.6.11.5. The vulnerability arises from intercepting the HTTP POST used to send emails and injecting an XSS payload into the subject field, which executes when the recipient logs...