https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:54:19 +0000 https://cve.radiocsirt.org/vuln/certfr-2021-avi-796 certfr-2021-avi-796 https://cve.radiocsirt.org/vuln/certfr-2021-avi-796 https://cve.radiocsirt.org/vuln/cnvd-2022-36982 cnvd-2022-36982 https://cve.radiocsirt.org/vuln/cnvd-2022-36982 https://cve.radiocsirt.org/vuln/euvd-2026-30280 EUVD-2026-30280 https://cve.radiocsirt.org/vuln/euvd-2026-30280 https://cve.radiocsirt.org/vuln/fkie_cve-2021-38502 <p>Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgrade attack to intercept transmitted messages, or could take control of the authenticated session to execute SMTP commands chosen by the MITM. If an unprotected authentication method was configured, the MITM could obtain the authentication credentials, too. This vulnerability affects Thunderbird &lt; 91.2.</p> <p>Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgrade attack to intercept transmitted messages, or could take control of the authenticated session to execute SMTP commands chosen by the MITM. If an unprotected authentication method was configured, the MITM could obtain the authentication credentials, too. This vulnerability affects Thunderbird &lt; 91.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-38502 https://cve.radiocsirt.org/vuln/ghsa-wf24-4m95-7wjm <p>Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgrade attack to intercept transmitted messages, or could take control of the authenticated session to execute SMTP commands chosen by the MITM. If an unprotected authentication method was configured, the MITM could obtain the authentication credentials, too. This vulnerability affects Thunderbird &lt; 91.2.</p> <p>Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgrade attack to intercept transmitted messages, or could take control of the authenticated session to execute SMTP commands chosen by the MITM. If an unprotected authentication method was configured, the MITM could obtain the authentication credentials, too. This vulnerability affects Thunderbird &lt; 91.2.</p> https://cve.radiocsirt.org/vuln/ghsa-wf24-4m95-7wjm https://cve.radiocsirt.org/vuln/gsd-2021-38502 gsd-2021-38502 https://cve.radiocsirt.org/vuln/gsd-2021-38502 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1635-1 <p>Security update for MozillaThunderbird</p> <p>Security update for MozillaThunderbird</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1635-1 https://cve.radiocsirt.org/vuln/rhsa-2021:3839 <p>rust-crossbeam-deque: race condition may lead to double free Mozilla: Use-after-free in MessageTask Mozilla: Validation message could have been overlaid on another origin Mozilla: Use-after-free of nsLanguageAtomService object Mozilla: Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15, and Firefox ESR 91.2 Mozilla: Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2 Mozilla: Downgrade attack on SMTP STARTTLS connections</p> <p>rust-crossbeam-deque: race condition may lead to double free Mozilla: Use-after-free in MessageTask Mozilla: Validation message could have been overlaid on another origin Mozilla: Use-after-free of nsLanguageAtomService object Mozilla: Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15, and Firefox ESR 91.2 Mozilla: Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2 Mozilla: Downgrade attack on SMTP STARTTLS connections</p> https://cve.radiocsirt.org/vuln/rhsa-2021:3839 https://cve.radiocsirt.org/vuln/suse-su-2021:4150-1 <p>Security update for MozillaThunderbird</p> <p>Security update for MozillaThunderbird</p> https://cve.radiocsirt.org/vuln/suse-su-2021:4150-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-38502 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: thunderbird</p> <p>Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgrade attack to intercept transmitted messages, or could take control of the authenticated session to execute SMTP commands chosen by the MITM. If an unprotected authentication method was configured, the MITM could obtain the authentication credentials, too. This vulnerability affects Thunderbird &lt; 91.2.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: thunderbird</p> <p>Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgrade attack to intercept transmitted messages, or could take control of the authenticated session to execute SMTP commands chosen by the MITM. If an unprotected authentication method was configured, the MITM could obtain the authentication credentials, too. This vulnerability affects Thunderbird &lt; 91.2.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-38502