NE
Product
Neomutt
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 14High 1Medium 6Low 0
Watch
Add Neomutt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-49393 | 6.5 | Nov 12 | In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include… Affected: All versions, or not specified |
| CVE-2020-14954 | 5.9 | Jun 21 | Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3 Affected: before 20200619 |
| CVE-2024-49395 | 5.3 | Nov 12 | In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from the recipients info Affected: All versions, or not specified |
| CVE-2024-49394 | 5.3 | Nov 12 | In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to… Affected: All versions, or not specified |
| CVE-2020-28896 | 5.3 | Nov 23 | Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid Affected: before 2020-11-20 |
| CVE-2018-14355 | 5.3 | Jul 17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16 Affected: before 20180716 |
Showing 6