Kde Kmail vulnerabilities

• kde kmail ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of... CVE-2024-50624 Fix available 5.9 MediumOctober 27, 2024
• kde kmail In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext... CVE-2021-38373 Fix available 5.3 MediumAugust 10, 2021
• kde kmail, debian linux +1 more KDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 communication during times when the UI... CVE-2020-15954 Fix available 6.5 MediumJuly 27, 2020
• kde kmail An issue was discovered in KDE KMail before 19.12.3. By using the proprietary (non-RFC6068) ... CVE-2020-11880 Fix available 6.5 MediumApril 17, 2020
• kde kmail, debian linux +1 more In KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as... CVE-2019-10732 Fix available 4.3 MediumApril 7, 2019
• 9folders nine, apple mail, bloop airmail +14 more +16 more The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can... CVE-2017-17689 Fix available 5.9 MediumMay 16, 2018
• kde kmail, messagelib +1 more KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17... CVE-2017-9604 Fix available 7.5 HighJune 13, 2017
• kde kmail KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. HTML Mail... CVE-2016-7968 6.5 MediumDecember 23, 2016
• kde kmail KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the... CVE-2016-7967 8.1 HighDecember 23, 2016
• kde kmail, debian linux, fedoraproject fedora +1 more +3 more Through a malicious URL that contained a quote character it was possible to inject HTML code in... CVE-2016-7966 Fix available 7.3 HighOctober 5, 2016
• kde kmail KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which... CVE-2014-8878 Fix available 5.9 MediumAugust 17, 2015