https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 14:59:41 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-242281 EUVD-2026-242281 https://cve.radiocsirt.org/vuln/euvd-2026-242281 https://cve.radiocsirt.org/vuln/fkie_cve-2024-50624 <p>ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is related to kmail-account-wizard.</p> <p>ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is related to kmail-account-wizard.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-50624 https://cve.radiocsirt.org/vuln/ghsa-wvrr-8f7c-7346 <p>ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is related to kmail-account-wizard.</p> <p>ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is related to kmail-account-wizard.</p> https://cve.radiocsirt.org/vuln/ghsa-wvrr-8f7c-7346 https://cve.radiocsirt.org/vuln/opensuse-su-2024:0353-1 <p>Security update for kmail-account-wizard</p> <p>Security update for kmail-account-wizard</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:0353-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-50624 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: kdepim, Ubuntu:Pro:18.04:LTS: kmail-account-wizard, Ubuntu:Pro:20.04:LTS: kmail-account-wizard, Ubuntu:Pro:22.04:LTS: kmail-account-wizard, Ubuntu:Pro:24.04:LTS: kmail-account-wizard</p> <p>ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is related to kmail-account-wizard.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: kdepim, Ubuntu:Pro:18.04:LTS: kmail-account-wizard, Ubuntu:Pro:20.04:LTS: kmail-account-wizard, Ubuntu:Pro:22.04:LTS: kmail-account-wizard, Ubuntu:Pro:24.04:LTS: kmail-account-wizard</p> <p>ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is related to kmail-account-wizard.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-50624 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3279 <p>Ein Angreifer kann eine Schwachstelle in KDE Kmail ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann eine Schwachstelle in KDE Kmail ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3279