Most recent entries from all

bdu:2021-02078

certfr-2021-avi-060 — De multiples vulnérabilités ont été découvertes dans Mozilla Thunderbird. Certaines d'entre elles permettent à un attaq…

certfr-2021-avi-060

EUVD-2026-230668

fkie_cve-2020-15685

During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulnerability affects Thunderbird < 78.7.

GHSA-c839-4fpv-9xp7

During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulnerability affects Thunderbird < 78.7.

gsd-2020-15685

openSUSE-SU-2021:0208-1 — Security update for MozillaThunderbird

Security update for MozillaThunderbird

RHSA-2021:0299 — Red Hat Security Advisory: thunderbird security update

Mozilla: IMAP Response Injection when using STARTTLS Mozilla: HTTPS pages could have been intercepted by a registered service worker when they should not have been Mozilla: Cross-origin information leakage via redirected PDF requests Mozilla: Type confusion when using logical assignment operators in JavaScript switch statements Mozilla: Use-after-poison for incorrectly redeclared JavaScript variables during GC Mozilla: Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7

SUSE-SU-2021:0245-1 — Security update for MozillaThunderbird

Security update for MozillaThunderbird

UBUNTU-CVE-2020-15685

Affected: Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird

During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulnerability affects Thunderbird < 78.7.