Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
pgp pgp vulnerabilities and exploits
(subscribe to this query)
4.9
CVSSv3
CVE-2021-36096
Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; 8.0.x version 8.0.15 and prior v...
Otrs Otrs
NA
CVE-2010-4764
Open Ticket Request System (OTRS) prior to 2.4.10, and 3.x prior to 3.0.3, does not present warnings about incoming encrypted e-mail messages that were based on revoked PGP or GPG keys, which makes it easier for remote malicious users to spoof e-mail communication by leveraging a...
Otrs Otrs 3.0.0
Otrs Otrs 3.0.2
Otrs Otrs 3.0.1
Otrs Otrs 2.2.4
Otrs Otrs 2.2.7
Otrs Otrs 2.3.2
Otrs Otrs 2.3.0
Otrs Otrs 1.3.2
Otrs Otrs 2.0.0
Otrs Otrs 2.0.1
Otrs Otrs 2.2.0
Otrs Otrs 0.5
Otrs Otrs 1.0
Otrs Otrs 1.1.1
Otrs Otrs 1.3.3
Otrs Otrs 1.3.1
Otrs Otrs 1.1.0
Otrs Otrs 1.1.2
Otrs Otrs 1.3.0
Otrs Otrs 2.4.0
Otrs Otrs 2.3.5
Otrs Otrs 2.4.7
4.9
CVSSv3
CVE-2020-1774
When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore it's possible to mix them and to send private key to the third-party instead of public key. This issue affects ((OTRS)) Community Edition: 5.0.42 and prior...
Otrs Otrs
Debian Debian Linux 8.0
4.3
CVSSv3
CVE-2019-9148
Mailvelope before 3.3.0 accepts or operates with invalid PGP public keys: Mailvelope allows importing keys that contain users without a valid self-certification. Keys that are obviously invalid are not rejected during import. An attacker that is able to get a victim to import a m...
Mailvelope Mailvelope
NA
CVE-2006-3746
Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote malicious users to cause a denial of service (segmentation fault) via a crafted message.
Gnupg Gnupg 1.4.4
1 EDB exploit
6.1
CVSSv3
CVE-2016-6854
An issue exists in Open-Xchange OX Guard prior to 2.4.2-rev5. Script code which got injected to a mail with inline PGP signature gets executed when verifying the signature. Malicious script code can be executed within a user's context. This can lead to session hijacking or t...
Open-xchange Ox Guard
1 EDB exploit
NA
CVE-2007-3634
Unspecified vulnerability in the G/PGP (GPG) Plugin 2.0 for Squirrelmail 1.4.10a allows remote authenticated users to execute arbitrary commands via unspecified vectors, possibly related to the passphrase variable in the gpg_sign_attachment function, aka ZD-00000004. this informa...
Squirrelmail Gpg Plugin 2.0
NA
CVE-2001-0273
pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard (GnuPG), which causes the message to be sent in cleartext.