https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:51:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-02196 bdu:2021-02196 https://cve.radiocsirt.org/vuln/bdu:2021-02196 https://cve.radiocsirt.org/vuln/cnvd-2021-36262 cnvd-2021-36262 https://cve.radiocsirt.org/vuln/cnvd-2021-36262 https://cve.radiocsirt.org/vuln/euvd-2026-23457 EUVD-2026-23457 https://cve.radiocsirt.org/vuln/euvd-2026-23457 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23992 <p>Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may create a crafted version of an OpenPGP key, by either replacing the original user ID, or by adding another user ID. If Thunderbird imports and accepts the crafted key, the Thunderbird user may falsely conclude that the false user ID belongs to the correspondent. This vulnerability affects Thunderbird &lt; 78.9.1.</p> <p>Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may create a crafted version of an OpenPGP key, by either replacing the original user ID, or by adding another user ID. If Thunderbird imports and accepts the crafted key, the Thunderbird user may falsely conclude that the false user ID belongs to the correspondent. This vulnerability affects Thunderbird &lt; 78.9.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-23992 https://cve.radiocsirt.org/vuln/ghsa-x89c-f42w-ch2g <p>Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may create a crafted version of an OpenPGP key, by either replacing the original user ID, or by adding another user ID. If Thunderbird imports and accepts the crafted key, the Thunderbird user may falsely conclude that the false user ID belongs to the correspondent. This vulnerability affects Thunderbird &lt; 78.9.1.</p> <p>Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may create a crafted version of an OpenPGP key, by either replacing the original user ID, or by adding another user ID. If Thunderbird imports and accepts the crafted key, the Thunderbird user may falsely conclude that the false user ID belongs to the correspondent. This vulnerability affects Thunderbird &lt; 78.9.1.</p> https://cve.radiocsirt.org/vuln/ghsa-x89c-f42w-ch2g https://cve.radiocsirt.org/vuln/gsd-2021-23992 gsd-2021-23992 https://cve.radiocsirt.org/vuln/gsd-2021-23992 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0580-1 <p>Security update for MozillaThunderbird</p> <p>Security update for MozillaThunderbird</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:0580-1 https://cve.radiocsirt.org/vuln/rhsa-2021:1190 <p>Mozilla: An attacker may use Thunderbird&#39;s OpenPGP key refresh mechanism to poison an existing key Mozilla: A crafted OpenPGP key with an invalid user ID could be used to confuse the user Mozilla: Inability to send encrypted OpenPGP email after importing a crafted OpenPGP key Mozilla: Thunderbird might execute an alternative OTR library Mozilla: Logic issue potentially leaves key material unlocked</p> <p>Mozilla: An attacker may use Thunderbird&#39;s OpenPGP key refresh mechanism to poison an existing key Mozilla: A crafted OpenPGP key with an invalid user ID could be used to confuse the user Mozilla: Inability to send encrypted OpenPGP email after importing a crafted OpenPGP key Mozilla: Thunderbird might execute an alternative OTR library Mozilla: Logic issue potentially leaves key material unlocked</p> https://cve.radiocsirt.org/vuln/rhsa-2021:1190 https://cve.radiocsirt.org/vuln/suse-su-2021:1167-1 <p>Security update for MozillaThunderbird</p> <p>Security update for MozillaThunderbird</p> https://cve.radiocsirt.org/vuln/suse-su-2021:1167-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-23992 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird</p> <p>Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may create a crafted version of an OpenPGP key, by either replacing the original user ID, or by adding another user ID. If Thunderbird imports and accepts the crafted key, the Thunderbird user may falsely conclude that the false user ID belongs to the correspondent. This vulnerability affects Thunderbird &lt; 78.9.1.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird</p> <p>Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may create a crafted version of an OpenPGP key, by either replacing the original user ID, or by adding another user ID. If Thunderbird imports and accepts the crafted key, the Thunderbird user may falsely conclude that the false user ID belongs to the correspondent. This vulnerability affects Thunderbird &lt; 78.9.1.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-23992