https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:59:32 +0000 https://cve.radiocsirt.org/vuln/alsa-2022:5482 <p><strong>Affected:</strong> AlmaLinux:9: thunderbird</p> <p>Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.11. Security Fix(es): * Mozilla: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI (CVE-2022-34468) * Mozilla: Use-after-free in nsSHistory (CVE-2022-34470) * Mozilla: A popup window could be resized in a way to overlay the address bar with web content (CVE-2022-34479) * Mozilla: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11 (CVE-2022-34484) * Mozilla: Undesired attributes could be set as part of prototype pollution (CVE-2022-2200) * Mozilla: An email with a mismatching OpenPGP signature date was accepted as valid (CVE-2022-2226) * Mozilla: CSP bypass enabling stylesheet injection (CVE-2022-31744) * Mozilla: Unavailable PAC file resulted in OCSP requests being blocked (CVE-2022-34472) * Mozilla: Potential integer overflow in ReplaceElementsAt (CVE-2022-34481) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: thunderbird</p> <p>Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.11. Security Fix(es): * Mozilla: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI (CVE-2022-34468) * Mozilla: Use-after-free in nsSHistory (CVE-2022-34470) * Mozilla: A popup window could be resized in a way to overlay the address bar with web content (CVE-2022-34479) * Mozilla: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11 (CVE-2022-34484) * Mozilla: Undesired attributes could be set as part of prototype pollution (CVE-2022-2200) * Mozilla: An email with a mismatching OpenPGP signature date was accepted as valid (CVE-2022-2226) * Mozilla: CSP bypass enabling stylesheet injection (CVE-2022-31744) * Mozilla: Unavailable PAC file resulted in OCSP requests being blocked (CVE-2022-34472) * Mozilla: Potential integer overflow in ReplaceElementsAt (CVE-2022-34481) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2022:5482 https://cve.radiocsirt.org/vuln/bdu:2022-04077 bdu:2022-04077 https://cve.radiocsirt.org/vuln/bdu:2022-04077 https://cve.radiocsirt.org/vuln/certfr-2022-avi-590 certfr-2022-avi-590 https://cve.radiocsirt.org/vuln/certfr-2022-avi-590 https://cve.radiocsirt.org/vuln/euvd-2026-230074 EUVD-2026-230074 https://cve.radiocsirt.org/vuln/euvd-2026-230074 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2226 <p>An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email&#39;s date will be shown. If the dates were different, then Thunderbird didn&#39;t report the email as having an invalid signature. If an attacker performed a replay attack, in which an old email with old contents are resent at a later time, it could lead the victim to believe that the statements in the email are current. Fixed versions of Thunderbird will require that the signature&#39;s date roughly matches the displayed date of the email. This vulnerability affects Thunderbird &lt; 102 and Thunderbird &lt; 91.11.</p> <p>An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email&#39;s date will be shown. If the dates were different, then Thunderbird didn&#39;t report the email as having an invalid signature. If an attacker performed a replay attack, in which an old email with old contents are resent at a later time, it could lead the victim to believe that the statements in the email are current. Fixed versions of Thunderbird will require that the signature&#39;s date roughly matches the displayed date of the email. This vulnerability affects Thunderbird &lt; 102 and Thunderbird &lt; 91.11.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2226 https://cve.radiocsirt.org/vuln/ghsa-g426-wcxv-272f <p>An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email&#39;s date will be shown. If the dates were different, then Thunderbird didn&#39;t report the email as having an invalid signature. If an attacker performed a replay attack, in which an old email with old contents are resent at a later time, it could lead the victim to believe that the statements in the email are current. Fixed versions of Thunderbird will require that the signature&#39;s date roughly matches the displayed date of the email. This vulnerability affects Thunderbird &lt; 102 and Thunderbird &lt; 91.11.</p> <p>An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email&#39;s date will be shown. If the dates were different, then Thunderbird didn&#39;t report the email as having an invalid signature. If an attacker performed a replay attack, in which an old email with old contents are resent at a later time, it could lead the victim to believe that the statements in the email are current. Fixed versions of Thunderbird will require that the signature&#39;s date roughly matches the displayed date of the email. This vulnerability affects Thunderbird &lt; 102 and Thunderbird &lt; 91.11.</p> https://cve.radiocsirt.org/vuln/ghsa-g426-wcxv-272f https://cve.radiocsirt.org/vuln/gsd-2022-2226 gsd-2022-2226 https://cve.radiocsirt.org/vuln/gsd-2022-2226 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12161-1 <p>MozillaThunderbird-91.11.0-1.1 on GA media</p> <p>MozillaThunderbird-91.11.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12161-1 https://cve.radiocsirt.org/vuln/rhsa-2022:5473 <p>Mozilla: Undesired attributes could be set as part of prototype pollution Mozilla: An email with a mismatching OpenPGP signature date was accepted as valid Mozilla: CSP bypass enabling stylesheet injection Mozilla: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI Mozilla: Use-after-free in nsSHistory Mozilla: Unavailable PAC file resulted in OCSP requests being blocked Mozilla: A popup window could be resized in a way to overlay the address bar with web content Mozilla: Potential integer overflow in ReplaceElementsAt Mozilla: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</p> <p>Mozilla: Undesired attributes could be set as part of prototype pollution Mozilla: An email with a mismatching OpenPGP signature date was accepted as valid Mozilla: CSP bypass enabling stylesheet injection Mozilla: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI Mozilla: Use-after-free in nsSHistory Mozilla: Unavailable PAC file resulted in OCSP requests being blocked Mozilla: A popup window could be resized in a way to overlay the address bar with web content Mozilla: Potential integer overflow in ReplaceElementsAt Mozilla: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</p> https://cve.radiocsirt.org/vuln/rhsa-2022:5473 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2226 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: thunderbird</p> <p>An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email&#39;s date will be shown. If the dates were different, then Thunderbird didn&#39;t report the email as having an invalid signature. If an attacker performed a replay attack, in which an old email with old contents are resent at a later time, it could lead the victim to believe that the statements in the email are current. Fixed versions of Thunderbird will require that the signature&#39;s date roughly matches the displayed date of the email. This vulnerability affects Thunderbird &lt; 102 and Thunderbird &lt; 91.11.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: thunderbird</p> <p>An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email&#39;s date will be shown. If the dates were different, then Thunderbird didn&#39;t report the email as having an invalid signature. If an attacker performed a replay attack, in which an old email with old contents are resent at a later time, it could lead the victim to believe that the statements in the email are current. Fixed versions of Thunderbird will require that the signature&#39;s date roughly matches the displayed date of the email. This vulnerability affects Thunderbird &lt; 102 and Thunderbird &lt; 91.11.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2226 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0505 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand durchzuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand durchzuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0505