Login Request a demo
OF
Vendor
offlineimap
1 product with CVEs on record
3
CVEs
0
On KEV
0
New 30D
Products
OF
offlineimap
offlineimap
9.8
3 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2020-37248
OF
OfflineIMAP
OfflineIMAP
6.5
0%
Jun 8OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and…
CVE-2010-4533
OF
offlineimap
offlineimap
9.8
1%
Nov 13offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security…
CVE-2010-4532
OF
offlineimap
offlineimap
5.9
1%
Nov 13offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks