enigmail kayıtları
enigmail üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-347 Improper Verification of Cryptographic Signature5
- CWE-319 Cleartext Transmission of Sensitive Information2
- CWE-20 Improper Input Validation1
- CWE-310 Cryptographic Issues1
- CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
32İzleyin | CVE-2006-5877İstismar yok | The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows remote attackers to cauenigmail · enigmail | Yüksek7,8 | — | %1,7 | 23 Şub 2007 |
31İzleyin | CVE-2017-17846İstismar yok | An issue was discovered in Enigmail before 1.9.9.enigmail · enigmail · CWE-20 | Yüksek7,5 | — | %2,1 | 27 Ara 2017 |
31İzleyin | CVE-2018-12019İstismar yok | The signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control messages and does not correctly keep trackenigmail · enigmail · CWE-347 | Yüksek7,5 | — | %2,1 | 13 Haz 2018 |
31İzleyin | CVE-2017-17848İstismar yok | An issue was discovered in Enigmail before 1.9.9.enigmail · enigmail · CWE-347 | Yüksek7,5 | — | %1,8 | 27 Ara 2017 |
30İzleyin | CVE-2017-17847İstismar yok | An issue was discovered in Enigmail before 1.9.9.enigmail · enigmail · CWE-347 | Yüksek7,5 | — | %1,1 | 27 Ara 2017 |
30İzleyin | CVE-2019-12269İstismar yok | Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly senigmail · enigmail · CWE-347 | Yüksek7,5 | — | %1,1 | 21 May 2019 |
29İzleyin | CVE-2017-17845İstismar yok | An issue was discovered in Enigmail before 1.9.9.enigmail · enigmail · CWE-338 | Yüksek7,3 | — | %1,6 | 27 Ara 2017 |
26İzleyin | CVE-2018-15586İstismar yok | Enigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed for arbitrary messages using a PGP/INLINE signature wrapped within a senigmail · enigmail · CWE-347 | Orta6,5 | — | %1,4 | 11 Şub 2019 |
26İzleyin | CVE-2017-17844İstismar yok | An issue was discovered in Enigmail before 1.9.9.enigmail · enigmail · CWE-319 | Orta6,5 | — | %1,3 | 27 Ara 2017 |
26İzleyin | CVE-2019-14664İstismar yok | In Enigmail below 2.1, an attacker in possession of PGP encrypted emails can wrap them as sub-parts within a crafted multipart email.enigmail · enigmail · CWE-319 | Orta6,5 | — | %1,0 | 5 Ağu 2019 |
23İzleyin | CVE-2017-17843İstismar yok | An issue was discovered in Enigmail before 1.9.9 that allows remote attackers to trigger use of an intended public key for encryption, becauenigmail · enigmail | Orta5,9 | — | %1,1 | 27 Ara 2017 |
21İzleyin | CVE-2007-1264Kavram kanıtı | Enigmail 0.94.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Enigmail from visually distinenigmail · enigmail | Orta5,0 | — | %4,7 | 6 Mar 2007 |
21İzleyin | CVE-2005-3256İstismar yok | The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, enigmail · enigmail | Orta5,0 | — | %1,7 | 18 Eki 2005 |
18İzleyin | CVE-2014-5369İstismar yok | Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which allows remote enigmail · enigmail · CWE-310 | Orta4,3 | — | %1,9 | 8 Eyl 2014 |
- CVE-2006-587732İzleyin
The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows remote attackers to cau
YüksekCVSS 7,8İstismar yokEPSS %1enigmail · enigmail23 Şub 2007
- CVE-2017-1784631İzleyin
An issue was discovered in Enigmail before 1.9.9.
YüksekCVSS 7,5İstismar yokEPSS %2enigmail · enigmail27 Ara 2017
- CVE-2018-1201931İzleyin
The signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control messages and does not correctly keep track
YüksekCVSS 7,5İstismar yokEPSS %2enigmail · enigmail13 Haz 2018
- CVE-2017-1784831İzleyin
An issue was discovered in Enigmail before 1.9.9.
YüksekCVSS 7,5İstismar yokEPSS %1enigmail · enigmail27 Ara 2017
- CVE-2017-1784730İzleyin
An issue was discovered in Enigmail before 1.9.9.
YüksekCVSS 7,5İstismar yokEPSS %1enigmail · enigmail27 Ara 2017
- CVE-2019-1226930İzleyin
Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly s
YüksekCVSS 7,5İstismar yokEPSS %1enigmail · enigmail21 May 2019
- CVE-2017-1784529İzleyin
An issue was discovered in Enigmail before 1.9.9.
YüksekCVSS 7,3İstismar yokEPSS %1enigmail · enigmail27 Ara 2017
- CVE-2018-1558626İzleyin
Enigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed for arbitrary messages using a PGP/INLINE signature wrapped within a s
OrtaCVSS 6,5İstismar yokEPSS %1enigmail · enigmail11 Şub 2019
- CVE-2017-1784426İzleyin
An issue was discovered in Enigmail before 1.9.9.
OrtaCVSS 6,5İstismar yokEPSS %1enigmail · enigmail27 Ara 2017
- CVE-2019-1466426İzleyin
In Enigmail below 2.1, an attacker in possession of PGP encrypted emails can wrap them as sub-parts within a crafted multipart email.
OrtaCVSS 6,5İstismar yokEPSS %1enigmail · enigmail5 Ağu 2019
- CVE-2017-1784323İzleyin
An issue was discovered in Enigmail before 1.9.9 that allows remote attackers to trigger use of an intended public key for encryption, becau
OrtaCVSS 5,9İstismar yokEPSS %1enigmail · enigmail27 Ara 2017
- CVE-2007-126421İzleyin
Enigmail 0.94.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Enigmail from visually distin
OrtaCVSS 5,0Kavram kanıtıEPSS %4enigmail · enigmail6 Mar 2007
- CVE-2005-325621İzleyin
The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information,
OrtaCVSS 5,0İstismar yokEPSS %1enigmail · enigmail18 Eki 2005
- CVE-2014-536918İzleyin
Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which allows remote
OrtaCVSS 4,3İstismar yokEPSS %1enigmail · enigmail8 Eyl 2014