enigmail vulnerabilities (openSUSE)
34 vulnerabilities.
-
enigmailopenSUSE Security update for enigmail No score -
enigmailopenSUSE A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer... 7.5 High -
enigmailopenSUSE Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when... 6.5 Medium -
enigmailopenSUSE It is possible to delete an IndexedDB key value and subsequently try to extract it during... 8.8 High -
enigmailopenSUSE A use-after-free vulnerability can occur while manipulating video elements if the body is freed... 8.8 High -
enigmailopenSUSE Some HTML elements, such as <title> and <textarea>, can contain literal angle... 6.1 Medium -
enigmailopenSUSE Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft... 3.7 Low -
enigmailopenSUSE A same-origin policy violation occurs allowing the theft of cross-origin images through a... 6.5 Medium -
enigmailopenSUSE Mozilla developers and community members reported memory safety bugs present in Firefox 68,... 8.8 High -
enigmailopenSUSE A vulnerability exists where if a user opens a locally saved HTML file, this file can use file:... 6.5 Medium -
enigmailopenSUSE Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being... 7.5 High -
enigmailopenSUSE The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP... 4.7 Medium -
enigmailopenSUSE A vulnerability exists where it possible to force Network Security Services (NSS) to sign... 5.3 Medium -
enigmailopenSUSE When a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are... 6.5 Medium -
enigmailopenSUSE Application permissions give additional remote troubleshooting permission to the site input... 6.1 Medium -
enigmailopenSUSE A vulnerability exists during the installation of add-ons where the initial fetch ignored the... 7.5 High -
enigmailopenSUSE The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar... 6.5 Medium -
enigmailopenSUSE Some unicode characters are incorrectly treated as whitespace during the parsing of web content... 6.1 Medium -
enigmailopenSUSE When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible... 7.5 High -
enigmailopenSUSE A vulnerability exists where the caret ("^") character is improperly escaped constructing some... 5.3 Medium -
enigmailopenSUSE Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not... 8.3 High -
enigmailopenSUSE Due to an error while parsing page content, it is possible for properly sanitized user input to... 6.1 Medium -
enigmailopenSUSE Necko can access a child on the wrong thread during UDP connections, resulting in a potentially... 9.8 Critical -
enigmailopenSUSE A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while... 9.8 Critical -
enigmailopenSUSE POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response... 8.8 High -
enigmailopenSUSE When an inner window is reused, it does not consider the use of document.domain for cross-origin... 8.8 High -
enigmailopenSUSE Mozilla developers and community members reported memory safety bugs present in Firefox 67. Some... 9.8 Critical -
enigmailopenSUSE Mozilla developers and community members reported memory safety bugs present in Firefox 67 and... 9.8 Critical -
enigmailopenSUSE Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can... 7.5 High -
enigmailopenSUSE The signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control... 7.5 High -
enigmailopenSUSE mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and... 7.5 High -
enigmailopenSUSE The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can... 5.9 Medium -
enigmailopenSUSE ** DISPUTED ** The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget... 5.9 Medium -
enigmailopenSUSE Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC... 4.3 Medium