Vulnerabilities

TI-2020-11829 CVE-2020-15047 · GHSA-vq22-w99f-wr8j

MSA/SMTP.cpp in Trojita before 0.8 ignores certificate-verification errors, which allows…

LOW 28

MSA/SMTP.cpp in Trojita before 0.8 ignores certificate-verification errors, which allows man-in-the-middle attackers to spoof SMTP servers.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00805 Published 2020-06-25 No fix listed CWE-295

TI-2019-08003 CVE-2019-10734 · GHSA-mr9x-prgm-96hw

In KDE Trojita 0.7, an attacker in possession of S/MIME or PGP encrypted emails can wrap…

LOW 21

In KDE Trojita 0.7, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.00693 Published 2019-04-07 No fix listed CWE-319

TI-2014-02056 CVE-2014-2567 · GHSA-fxf2-wm9g-3jj2

The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp…

LOW 22

The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a (1) sent or (2) d…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00981 Published 2014-03-21 No fix listed CWE-200

Vulnerabilities

Filters

MSA/SMTP.cpp in Trojita before 0.8 ignores certificate-verification errors, which allows…

In KDE Trojita 0.7, an attacker in possession of S/MIME or PGP encrypted emails can wrap…

The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp…