https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:52:31 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04430 bdu:2022-04430 https://cve.radiocsirt.org/vuln/bdu:2022-04430 https://cve.radiocsirt.org/vuln/certfr-2022-avi-512 certfr-2022-avi-512 https://cve.radiocsirt.org/vuln/certfr-2022-avi-512 https://cve.radiocsirt.org/vuln/euvd-2026-230727 EUVD-2026-230727 https://cve.radiocsirt.org/vuln/euvd-2026-230727 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1834 <p>When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird would have displayed all the spaces. This could have been used by an attacker to send an email message with the attacker&#39;s digital signature, that was shown with an arbitrary sender email address chosen by the attacker. If the sender name started with a false email address, followed by many Braille space characters, the attacker&#39;s email address was not visible. Because Thunderbird compared the invisible sender address with the signature&#39;s email address, if the signing key or certificate was accepted by Thunderbird, the email was shown as having a valid digital signature. This vulnerability affects Thunderbird &lt; 91.10.</p> <p>When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird would have displayed all the spaces. This could have been used by an attacker to send an email message with the attacker&#39;s digital signature, that was shown with an arbitrary sender email address chosen by the attacker. If the sender name started with a false email address, followed by many Braille space characters, the attacker&#39;s email address was not visible. Because Thunderbird compared the invisible sender address with the signature&#39;s email address, if the signing key or certificate was accepted by Thunderbird, the email was shown as having a valid digital signature. This vulnerability affects Thunderbird &lt; 91.10.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-1834 https://cve.radiocsirt.org/vuln/ghsa-qq6h-hx9q-4fxv <p>When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird would have displayed all the spaces. This could have been used by an attacker to send an email message with the attacker&#39;s digital signature, that was shown with an arbitrary sender email address chosen by the attacker. If the sender name started with a false email address, followed by many Braille space characters, the attacker&#39;s email address was not visible. Because Thunderbird compared the invisible sender address with the signature&#39;s email address, if the signing key or certificate was accepted by Thunderbird, the email was shown as having a valid digital signature. This vulnerability affects Thunderbird &lt; 91.10.</p> <p>When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird would have displayed all the spaces. This could have been used by an attacker to send an email message with the attacker&#39;s digital signature, that was shown with an arbitrary sender email address chosen by the attacker. If the sender name started with a false email address, followed by many Braille space characters, the attacker&#39;s email address was not visible. Because Thunderbird compared the invisible sender address with the signature&#39;s email address, if the signing key or certificate was accepted by Thunderbird, the email was shown as having a valid digital signature. This vulnerability affects Thunderbird &lt; 91.10.</p> https://cve.radiocsirt.org/vuln/ghsa-qq6h-hx9q-4fxv https://cve.radiocsirt.org/vuln/gsd-2022-1834 gsd-2022-1834 https://cve.radiocsirt.org/vuln/gsd-2022-1834 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12117-1 <p>MozillaThunderbird-91.10.0-1.1 on GA media</p> <p>MozillaThunderbird-91.10.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12117-1 https://cve.radiocsirt.org/vuln/rhsa-2022:4888 <p>Mozilla: Braille space character caused incorrect sender email to be shown for a digitally signed email Mozilla: Cross-Origin resource&#39;s length leaked Mozilla: Heap buffer overflow in WebGL Mozilla: Browser window spoof using fullscreen mode Mozilla: Register allocation problem in WASM on arm64 Mozilla: Uninitialized variable leads to invalid memory read Mozilla: Querying a WebAuthn token with a large number of allowCredential entries may have leaked cross-origin information Mozilla: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</p> <p>Mozilla: Braille space character caused incorrect sender email to be shown for a digitally signed email Mozilla: Cross-Origin resource&#39;s length leaked Mozilla: Heap buffer overflow in WebGL Mozilla: Browser window spoof using fullscreen mode Mozilla: Register allocation problem in WASM on arm64 Mozilla: Uninitialized variable leads to invalid memory read Mozilla: Querying a WebAuthn token with a large number of allowCredential entries may have leaked cross-origin information Mozilla: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</p> https://cve.radiocsirt.org/vuln/rhsa-2022:4888 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-1834 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: thunderbird</p> <p>When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird would have displayed all the spaces. This could have been used by an attacker to send an email message with the attacker&#39;s digital signature, that was shown with an arbitrary sender email address chosen by the attacker. If the sender name started with a false email address, followed by many Braille space characters, the attacker&#39;s email address was not visible. Because Thunderbird compared the invisible sender address with the signature&#39;s email address, if the signing key or certificate was accepted by Thunderbird, the email was shown as having a valid digital signature. This vulnerability affects Thunderbird &lt; 91.10.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: thunderbird</p> <p>When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird would have displayed all the spaces. This could have been used by an attacker to send an email message with the attacker&#39;s digital signature, that was shown with an arbitrary sender email address chosen by the attacker. If the sender name started with a false email address, followed by many Braille space characters, the attacker&#39;s email address was not visible. Because Thunderbird compared the invisible sender address with the signature&#39;s email address, if the signing key or certificate was accepted by Thunderbird, the email was shown as having a valid digital signature. This vulnerability affects Thunderbird &lt; 91.10.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-1834 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0019 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, falsche Informationen darzustellen und einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, falsche Informationen darzustellen und einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0019