https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 16:57:17 +0000 https://vulnerability.circl.lu/vuln/cve-2025-2830 <p><strong>Affected:</strong> Mozilla Thunderbird</p> <p>By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwarded or edited as a new message. This vulnerability could allow attackers to disclose sensitive information from the victim&#39;s system. This vulnerability is not limited to Linux; similar behavior has been observed on Windows as well. This vulnerability was fixed in Thunderbird 137.0.2 and Thunderbird 128.9.2.</p> <p><strong>Affected:</strong> Mozilla Thunderbird</p> <p>By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwarded or edited as a new message. This vulnerability could allow attackers to disclose sensitive information from the victim&#39;s system. This vulnerability is not limited to Linux; similar behavior has been observed on Windows as well. This vulnerability was fixed in Thunderbird 137.0.2 and Thunderbird 128.9.2.</p> https://vulnerability.circl.lu/vuln/cve-2025-2830 https://vulnerability.circl.lu/vuln/usn-7663-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: thunderbird</p> <p>Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute arbitrary code.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: thunderbird</p> <p>Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute arbitrary code.</p> https://vulnerability.circl.lu/vuln/usn-7663-1