← Back

Trojita

trojita

Vendor: Kde • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Kde
1Trojita
Nov 21, 2024
Aug 10, 2021
N/A· v4
3.7 LOW· v3
4.3 MEDIUM· v2
In KDE Trojita 0.7, man-in-the-middle attackers can create new folders because untagged responses from an IMAP server are accepted before STARTTLS.
169folders
AppleBloop+13 more
17Airmail
EmclientEvolution+14 more
Nov 21, 2024
May 16, 2018
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.