https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:09:30 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-02076 bdu:2021-02076 https://cve.radiocsirt.org/vuln/bdu:2021-02076 https://cve.radiocsirt.org/vuln/certfr-2021-avi-248 certfr-2021-avi-248 https://cve.radiocsirt.org/vuln/certfr-2021-avi-248 https://cve.radiocsirt.org/vuln/cnvd-2021-28299 cnvd-2021-28299 https://cve.radiocsirt.org/vuln/cnvd-2021-28299 https://cve.radiocsirt.org/vuln/euvd-2026-23453 EUVD-2026-23453 https://cve.radiocsirt.org/vuln/euvd-2026-23453 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23993 <p>An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self signature, and the Thunderbird user imports the crafted key, then Thunderbird may try to use the invalid subkey, but the RNP library rejects it from being used, causing encryption to fail. This vulnerability affects Thunderbird &lt; 78.9.1.</p> <p>An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self signature, and the Thunderbird user imports the crafted key, then Thunderbird may try to use the invalid subkey, but the RNP library rejects it from being used, causing encryption to fail. This vulnerability affects Thunderbird &lt; 78.9.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-23993 https://cve.radiocsirt.org/vuln/ghsa-3pj2-rvj5-6646 <p>An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self signature, and the Thunderbird user imports the crafted key, then Thunderbird may try to use the invalid subkey, but the RNP library rejects it from being used, causing encryption to fail. This vulnerability affects Thunderbird &lt; 78.9.1.</p> <p>An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self signature, and the Thunderbird user imports the crafted key, then Thunderbird may try to use the invalid subkey, but the RNP library rejects it from being used, causing encryption to fail. This vulnerability affects Thunderbird &lt; 78.9.1.</p> https://cve.radiocsirt.org/vuln/ghsa-3pj2-rvj5-6646 https://cve.radiocsirt.org/vuln/gsd-2021-23993 gsd-2021-23993 https://cve.radiocsirt.org/vuln/gsd-2021-23993 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0580-1 <p>Security update for MozillaThunderbird</p> <p>Security update for MozillaThunderbird</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:0580-1 https://cve.radiocsirt.org/vuln/rhsa-2021:1190 <p>Mozilla: An attacker may use Thunderbird&#39;s OpenPGP key refresh mechanism to poison an existing key Mozilla: A crafted OpenPGP key with an invalid user ID could be used to confuse the user Mozilla: Inability to send encrypted OpenPGP email after importing a crafted OpenPGP key Mozilla: Thunderbird might execute an alternative OTR library Mozilla: Logic issue potentially leaves key material unlocked</p> <p>Mozilla: An attacker may use Thunderbird&#39;s OpenPGP key refresh mechanism to poison an existing key Mozilla: A crafted OpenPGP key with an invalid user ID could be used to confuse the user Mozilla: Inability to send encrypted OpenPGP email after importing a crafted OpenPGP key Mozilla: Thunderbird might execute an alternative OTR library Mozilla: Logic issue potentially leaves key material unlocked</p> https://cve.radiocsirt.org/vuln/rhsa-2021:1190 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-23993 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird</p> <p>An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self signature, and the Thunderbird user imports the crafted key, then Thunderbird may try to use the invalid subkey, but the RNP library rejects it from being used, causing encryption to fail. This vulnerability affects Thunderbird &lt; 78.9.1.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird</p> <p>An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self signature, and the Thunderbird user imports the crafted key, then Thunderbird may try to use the invalid subkey, but the RNP library rejects it from being used, causing encryption to fail. This vulnerability affects Thunderbird &lt; 78.9.1.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-23993