https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 19:35:38 +0000 https://cve.radiocsirt.org/vuln/cve-2018-12372 <p><strong>Affected:</strong> Mozilla Thunderbird</p> <p>Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird &lt; 52.9.</p> <p><strong>Affected:</strong> Mozilla Thunderbird</p> <p>Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird &lt; 52.9.</p> https://cve.radiocsirt.org/vuln/cve-2018-12372 https://cve.radiocsirt.org/vuln/usn-3714-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: thunderbird, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: thunderbird</p> <p>Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, bypass CORS restrictions, obtain sensitive information, or execute arbitrary code. (CVE-2018-12359, CVE-2018-12360, CVE-2018-12362, CVE-2018-12363, CVE-2018-12364, CVE-2018-12365, CVE-2018-12366)</p> <p>It was discovered that S/MIME and PGP decryption oracles can be built with HTML emails. An attacker could potentially exploit this to obtain sensitive information. (CVE-2018-12372)</p> <p>It was discovered that S/MIME plaintext can be leaked through HTML reply/forward. An attacker could potentially exploit this to obtain sensitive information. (CVE-2018-12373)</p> <p>It was discovered that forms can be used to exfiltrate encrypted mail parts by pressing enter in a form field. An attacker could potentially exploit this to obtain sensitive information. (CVE-2018-12374)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: thunderbird, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: thunderbird</p> <p>Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, bypass CORS restrictions, obtain sensitive information, or execute arbitrary code. (CVE-2018-12359, CVE-2018-12360, CVE-2018-12362, CVE-2018-12363, CVE-2018-12364, CVE-2018-12365, CVE-2018-12366)</p> <p>It was discovered that S/MIME and PGP decryption oracles can be built with HTML emails. An attacker could potentially exploit this to obtain sensitive information. (CVE-2018-12372)</p> <p>It was discovered that S/MIME plaintext can be leaked through HTML reply/forward. An attacker could potentially exploit this to obtain sensitive information. (CVE-2018-12373)</p> <p>It was discovered that forms can be used to exfiltrate encrypted mail parts by pressing enter in a form field. An attacker could potentially exploit this to obtain sensitive information. (CVE-2018-12374)</p> https://cve.radiocsirt.org/vuln/usn-3714-1