Lucene search
+L

1698 matches found

Ubuntu
Ubuntu
•added 2022/01/21 5:00 p.m.•217 views

USN-5248-1: Thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, trick a user into accepting unwanted permissions,...

10CVSS8AI score0.04116EPSS
SaveExploits8
osv_usn
osv_usn
•added 2022/01/21 5:00 p.m.•16 views

USN-5248-1 thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, trick a user into accepting unwanted permissions,...

10CVSS7.2AI score0.04116EPSS
SaveExploits8References45
Ubuntu
Ubuntu
•added 2022/01/21 1:56 p.m.•193 views

USN-5246-1: Thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, conduct spoofing attacks, bypass security...

10CVSS8AI score0.02172EPSS
SaveExploits7
Tenable Nessus
Tenable Nessus
•added 2022/01/13 12:00 a.m.•31 views

openSUSE 15 Security Update : MozillaThunderbird (openSUSE-SU-2022:0058-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0058-1 advisory. - When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer...

9.8CVSS8.1AI score0.01984EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2022/01/13 12:00 a.m.•32 views

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2022:0058-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0058-1 advisory. - Mozilla Thunderbird 91.4.1 - CVE-2021-4126: OpenPGP signature status doesn't consider additional message...

9.8CVSS7AI score0.01984EPSS
SaveExploits0References7
osv_opensuse
osv_opensuse
•added 2022/01/12 8:20 a.m.•9 views

OPENSUSE-SU-2022:0058-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 91.4.1 - CVE-2021-4126: OpenPGP signature status doesn't consider additional message content. bsc1194215 - CVE-2021-44538: Matrix chat library libolm bundled with Thunderbird vulnerable to a buffer overflow...

9.8CVSS8AI score0.01984EPSS
SaveExploits0References5
osv_suse
osv_suse
•added 2022/01/12 8:20 a.m.•11 views

SUSE-SU-2022:0058-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 91.4.1 - CVE-2021-4126: OpenPGP signature status doesn't consider additional message content. bsc1194215 - CVE-2021-44538: Matrix chat library libolm bundled with Thunderbird vulnerable to a buffer overflow...

9.8CVSS7.9AI score0.01984EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2022/01/06 12:00 a.m.•39 views

EulerOS Virtualization 3.0.2.6 : libgcrypt (EulerOS-SA-2021-2888)

According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a...

7.5CVSS6.8AI score0.0237EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/01/05 12:00 a.m.•133 views

Debian: Security Advisory (DLA-2874-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8AI score0.04116EPSS
SaveExploits0References4
Debian
Debian
•added 2022/01/04 10:10 a.m.•124 views

[SECURITY] [DLA 2874-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2874-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 04, 2022 https://wiki.debian.org/LTS -...

10CVSS9.2AI score0.04116EPSS
SaveExploits0
Debian
Debian
•added 2022/01/02 5:01 p.m.•118 views

[SECURITY] [DSA 5034-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5034-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 02, 2022 https://www.debian.org/security/faq -...

10CVSS9.2AI score0.04116EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2022/01/02 12:00 a.m.•39 views

Huawei EulerOS: Security Advisory for libgcrypt (EulerOS-SA-2021-2935)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.0237EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/12/31 12:00 a.m.•23 views

Huawei EulerOS: Security Advisory for libgcrypt (EulerOS-SA-2021-2888)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.0237EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/12/31 12:00 a.m.•19 views

Huawei EulerOS: Security Advisory for libgcrypt (EulerOS-SA-2021-2914)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.7AI score0.01423EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/12/31 12:00 a.m.•29 views

Huawei EulerOS: Security Advisory for libgcrypt (EulerOS-SA-2021-2922)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.7AI score0.01423EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2021/12/30 12:00 a.m.•33 views

EulerOS 2.0 SP9 : libgcrypt (EulerOS-SA-2021-2914)

According to the versions of the libgcrypt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries...

5.9CVSS6.5AI score0.01423EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2021/12/30 12:00 a.m.•28 views

EulerOS 2.0 SP9 : libgcrypt (EulerOS-SA-2021-2922)

According to the versions of the libgcrypt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries...

5.9CVSS6.5AI score0.01423EPSS
SaveExploits1References2
Veracode
Veracode
•added 2021/12/29 9:01 p.m.•29 views

Insecure Signature Validation

thunderbird:sid has insecure signature validation. When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list gateway, Thunderbird only considered the inner signed message for the signature validit...

6.5CVSS2.4AI score0.00444EPSS
SaveExploits0References3Affected Software4
Tenable Nessus
Tenable Nessus
•added 2021/12/29 12:00 a.m.•33 views

EulerOS Virtualization 3.0.2.0 : libgcrypt (EulerOS-SA-2021-2836)

According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a...

7.5CVSS6.8AI score0.0237EPSS
SaveExploits0References2
ALT Linux
ALT Linux
•added 2021/12/27 12:00 a.m.•91 views

Security fix for the ALT Linux 10 package thunderbird version 91.4.1-alt1

91.4.1-alt1 built Dec. 27, 2021 Andrey Cherepanov in task 292439 Dec. 21, 2021 Andrey Cherepanov - New version. - Security fixes: + CVE-2021-4126 OpenPGP signature status doesn't consider additional message content + CVE-2021-44538 Matrix chat library libolm bundled with Thunderbird vulnerable to...

7.5CVSS8.1AI score0.01984EPSS
SaveExploits0
Rows per page
Query Builder