claws-mail kayıtları
claws-mail üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %77,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-310 Cryptographic Issues1
- CWE-319 Cleartext Transmission of Sensitive Information1
- CWE-522 Insufficiently Protected Credentials1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-674 Uncontrolled Recursion1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-15917İstismar yok | common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled.claws-mail · claws-mail | Kritik9,8 | — | %2,6 | 23 Tem 2020 |
31İzleyin | CVE-2020-16094İstismar yok | In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursiclaws-mail · claws-mail · CWE-674 | Yüksek7,5 | — | %1,8 | 28 Tem 2020 |
30İzleyin | CVE-2015-8614İstismar yok | Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws Mclaws-mail · claws-mail · CWE-119 | Yüksek7,3 | — | %2,6 | 11 Nis 2016 |
29İzleyin | CVE-2015-8708İstismar yok | Stack-based buffer overflow in the conv_euctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impclaws-mail · claws-mail · CWE-119 | Yüksek7,3 | — | %1,5 | 11 Nis 2016 |
28İzleyin | CVE-2014-2576İstismar yok | plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it eaclaws-mail · claws-mail · CWE-310 | Orta6,8 | — | %2,0 | 15 Eki 2014 |
24İzleyin | CVE-2021-37746İstismar yok | textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks befoclaws-mail · claws-mail · CWE-601 | Orta6,1 | — | %1,2 | 30 Tem 2021 |
22İzleyin | CVE-2012-5527İstismar yok | Claws Mail vCalendar plugin: credentials exposed on interfaceclaws-mail · vcalendar · CWE-522 | Orta5,5 | — | %0,5 | 25 Kas 2019 |
21İzleyin | CVE-2012-4507İstismar yok | The strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 allows remote attackers to cause a denial of service (NULL pointer declaws-mail · claws-mail | Orta5,0 | — | %2,8 | 22 Eki 2012 |
17İzleyin | CVE-2019-10735İstismar yok | In Claws Mail 3.14.1, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart emaiclaws-mail · mail · CWE-319 | Orta4,3 | — | %0,6 | 7 Nis 2019 |
- CVE-2020-1591740Planlayın
common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled.
KritikCVSS 9,8İstismar yokEPSS %3claws-mail · claws-mail23 Tem 2020
- CVE-2020-1609431İzleyin
In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursi
YüksekCVSS 7,5İstismar yokEPSS %2claws-mail · claws-mail28 Tem 2020
- CVE-2015-861430İzleyin
Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws M
YüksekCVSS 7,3İstismar yokEPSS %3claws-mail · claws-mail11 Nis 2016
- CVE-2015-870829İzleyin
Stack-based buffer overflow in the conv_euctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified imp
YüksekCVSS 7,3İstismar yokEPSS %2claws-mail · claws-mail11 Nis 2016
- CVE-2014-257628İzleyin
plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it ea
OrtaCVSS 6,8İstismar yokEPSS %2claws-mail · claws-mail15 Eki 2014
- CVE-2021-3774624İzleyin
textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks befo
OrtaCVSS 6,1İstismar yokEPSS %1claws-mail · claws-mail30 Tem 2021
- CVE-2012-552722İzleyin
Claws Mail vCalendar plugin: credentials exposed on interface
OrtaCVSS 5,5İstismar yokEPSS %1claws-mail · vcalendar25 Kas 2019
- CVE-2012-450721İzleyin
The strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 allows remote attackers to cause a denial of service (NULL pointer de
OrtaCVSS 5,0İstismar yokEPSS %3claws-mail · claws-mail22 Eki 2012
- CVE-2019-1073517İzleyin
In Claws Mail 3.14.1, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart emai
OrtaCVSS 4,3İstismar yokEPSS %1claws-mail · mail7 Nis 2019