CL
Vendor
Claws-mail
10
CVEs
0
On KEV
0
New 30D
Products
CL9.8
Claws-mail
Claws-mail
7 CVEs0 on KEV0 new
CM–
Claws Mail Tools
Claws Mail
1 CVEs0 on KEV0 new
MA4.3
Mail
Claws-mail
1 CVEs0 on KEV0 new
VC5.5
Vcalendar
Claws-mail
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-37746 | CL Claws-mail Claws-mail | 6.1 | Jul 30 | textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click |
| CVE-2020-16094 | CL Claws-mail Claws-mail | 7.5 | Jul 28 | In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild… |
| CVE-2020-15917 | CL Claws-mail Claws-mail | 9.8 | Jul 23 | common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled |
| CVE-2012-5527 | VC Vcalendar Claws-mail | 5.5 | Nov 25 | Claws Mail vCalendar plugin: credentials exposed on interface |
| CVE-2019-10735 | MA Mail Claws-mail | 4.3 | Apr 7 | In Claws Mail 3.14.1, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email |
| CVE-2015-8708 | CL Claws-mail Claws-mail | 7.3 | Apr 11 | Stack-based buffer overflow in the conv_euctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving… |
| CVE-2015-8614 | CL Claws-mail Claws-mail | 7.3 | Apr 11 | Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote… |
| CVE-2014-2576 | CL Claws-mail Claws-mail | – | Oct 15 | plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof… |
| CVE-2012-4507 | CL Claws-mail Claws-mail | – | Oct 22 | The strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted… |
| CVE-2007-6208 | CM Claws Mail Tools Claws Mail | – | Dec 4 | sylprint.pl in claws mail tools (claws-mail-tools) allows local users to overwrite arbitrary files via a symlink attack on the sylprint.[USER].[PID] temporary file |