Skip to content
OpenAdvisories

Archive

7 April 2019

Vulnerabilities first published on this day (UTC), newest first.

7 results · Feed

  • Unscored —

    K-9 Mail v5.600 can include the original quoted HTML code of a specially crafted, benign looking, email within (digital…

  • Unscored —

    In Roundcube Webmail before 1.3.10, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-pa…

  • Unscored —

    In Claws Mail 3.14.1, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a c…

  • Unscored —

    In KDE Trojita 0.7, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a cra…

  • Unscored —

    In KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a cra…

  • Unscored —

    In Airsonic 10.2.1, RecoverController.java generates passwords via org.apache.commons.lang.RandomStringUtils, which use…

  • Unscored —

    Airsonic 10.2.1 uses Spring's default remember-me mechanism based on MD5, with a fixed key of airsonic in GlobalSecurit…