Kde

Messagelib

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2021-31855

  • EPSS 0.14%
  • Published 02.06.2021 16:15:08
  • Last modified 21.11.2024 06:06:21

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server (e.g., an IMAP server) causes KMail to upload the decrypted content of the mes...

7.5

CVE-2017-9604

  • EPSS 0.26%
  • Published 13.06.2017 13:29:00
  • Last modified 20.04.2025 01:37:25

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive in...