Login Request a demo
KM
Product
Kmail
by Kde · last CVE Aug 10, 2021
10
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 3Medium 7Low 0
Severity
All severities10Critical0High3Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Kmail to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-15954
6.5
1%
Jul 27
KDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use
Affected: 19.12.3
CVE-2020-11880
6.5
1%
Apr 17
An issue was discovered in KDE KMail before 19.12.3
Affected: before 19.12.3
CVE-2016-7968
6.5
1%
Dec 23
KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled
Affected: through 5.3.0
CVE-2017-17689
5.9
4%
May 16
The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL
Affected: All versions, or not specified
CVE-2014-8878
5.9
1%
Sep 28
KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network
Affected: 4.11.5
CVE-2021-38373
5.3
1%
Aug 10
In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authentication" is checked
Affected: 19.12.3
CVE-2019-10732
4.3
1%
Apr 7
In KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email
Affected: 5.2.3
Showing 7