offlineimap records
2 published records for vendor offlineimap.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2010-4533No exploit | offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flaofflineimap · offlineimap · CWE-295 | Critical9.8 | — | 1.0% | Nov 13, 2019 |
23Monitor | CVE-2010-4532No exploit | offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-thofflineimap · offlineimap · CWE-295 | Medium5.9 | — | 0.6% | Nov 13, 2019 |
- CVE-2010-453339Monitor
offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a fla
CriticalCVSS 9.8No exploitEPSS 1%offlineimap · offlineimapNov 13, 2019
- CVE-2010-453223Monitor
offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-th
MediumCVSS 5.9No exploitEPSS 1%offlineimap · offlineimapNov 13, 2019