EUVD-2018-13492

Malware in sbrugna...

CVE-2018-20954

The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys...

Mailpile Encryption Problem Vulnerability

Mailpile is a Web-based open source e-mail client . A cryptographic vulnerability exists in the "Security and Privacy" encryption feature in Mailpile versions prior to 1.0.0rc4. The vulnerability stems from the incorrect use of cryptographic algorithms in a networked system or product, and can be...

CVE-2018-20954

The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys...

CVE-2018-20954

The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys...

Code injection

The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys...

CVE-2018-20954

The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys...

CVE-2018-20954

Summary: CVE-2018-20954 affects Mailpile before 1.0.0rc4, where the Security and Privacy Encryption feature does not exclude disabled, revoked, and expired keys. This root cause can lead to weak or incorrect encryption and potential plaintext exposure, as noted by multiple sources. The issue is a...

CVE-2018-20954

The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys...

PT-2019-10390

Name of the Vulnerable Software and Affected Versions Mailpile versions prior to 1.0.0rc4 Description The issue concerns the "Security and Privacy" Encryption feature in Mailpile, which fails to exclude disabled, revoked, and expired keys. Recommendations For versions prior to 1.0.0rc4, update to...

CVE-2018-20954: Improper Authentication

The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys...

Over Dozen Popular Email Clients Found Vulnerable to Signature Spoofing Attacks

A team of security researchers has discovered several vulnerabilities in various implementations of OpenPGP and S/MIME email signature verification that could allow attackers to spoof signatures on over a dozen of popular email clients. The affected email clients include Thunderbird, Microsoft...