EV
Product
Evolution
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 3Low 1
Watch
Add Evolution to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-10727 | 9.8 | Jul 20 | camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client… Affected: before 3.21.2 |
| CVE-2018-12422 | 9.8 | Jun 15 | addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow via a long query that… Affected: through 3.29.2 |
| CVE-2005-0102 | 9.8 | Jan 24 | Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which… Affected: through 2.0.2 |
| CVE-2009-3721 | 7.8 | May 26 | Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is derived from yTNEF Affected: All versions, or not specified |
| CVE-2013-4166 | 7.5 | Feb 6 | The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG… Affected: through 3.8.4 |
| CVE-2020-11879 | 6.5 | Apr 17 | An issue was discovered in GNOME Evolution before 3.35.91 Affected: before 3.35.91 |
| CVE-2018-15587 | 6.5 | Feb 11 | GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity… Affected: through 3.28.2 |
| CVE-2017-17689 | 5.9 | May 16 | The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL Affected: All versions, or not specified |
| CVE-2021-3349 | 3.3 | Feb 1 | GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown identifier on a previously trusted key because Evolution does not retrieve enough information… Affected: through 3.38.3 |
| CVE-2011-3201 | – | Mar 8 | GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email Affected: through 3.0.3; 1.0.8; 1.2; 1.2.1; 1.2.2; 1.2.3; +34 more |
| CVE-2009-1631 | – | May 14 | The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to… Affected: through 2.26.1; 1.0.8; 1.2; 1.2.1; 1.2.2; 1.2.3; +13 more |
| CVE-2008-1109 | – | Jun 4 | Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is… Affected: 2.22.1 |
| CVE-2008-1108 | – | Jun 4 | Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar… Affected: 2.2.1 |
| CVE-2008-0072 | – | Mar 6 | Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a… Affected: through 2.12.3 |
| CVE-2007-3257 | – | Jun 19 | Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData,… Affected: 1.11 |
| CVE-2007-1266 | – | Mar 6 | Evolution 2.8.1 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Evolution from visually distinguishing between signed and unsigned… Affected: through 2.8.1 |
| CVE-2006-2789 | – | Jun 2 | Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote attackers to cause a denial of service (persistent crash) via… Affected: 2.3.1; 2.3.2; 2.3.3; 2.3.4; 2.3.5; 2.3.6; +2 more |
| CVE-2006-0040 | – | Mar 10 | GNOME Evolution 2.4.2.1 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a text e-mail with a large number of URLs, possibly due… Affected: 2.4.2.1 |
| CVE-2006-0528 | – | Feb 2 | The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an… Affected: 2.3.1; 2.3.2; 2.3.3; 2.3.4; 2.3.5; 2.3.6; +2 more |
| CVE-2005-2550 | – | Aug 12 | Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar… Affected: 1.4; 1.5; 2.0; 2.1; 2.2; 2.3.1; +5 more |
| CVE-2005-2549 | – | Aug 12 | Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1)… Affected: 1.5; 2.0; 2.1; 2.2; 2.3.1; 2.3.2; +4 more |
Showing 21