| Max CVSS | 5.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-14664 | 4.3 |
In Enigmail below 2.1, an attacker in possession of PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart emai
|
01-01-2022 - 20:18 | 05-08-2019 - 20:15 | |
| CVE-2019-12269 | 5.0 |
Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly signed" message indication, but display different unauthenticated text.
|
24-06-2019 - 18:15 | 21-05-2019 - 20:29 | |
| CVE-2018-12019 | 5.0 |
The signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control messages and does not correctly keep track of the status of multiple signatures, which allows remote attackers to spoof arbitrary email signatures via p
|
16-05-2019 - 18:29 | 13-06-2018 - 23:29 |