Known Vulnerabilities for products from Claws-mail
Listed below are 9 of the newest known vulnerabilities associated with the vendor "Claws-mail".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-37746 json | textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient l... | 6.1 - MEDIUM | 2021-07-30 | 2023-11-07 |
| CVE-2020-16094 json | In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of un... | 7.5 - HIGH | 2020-07-28 | 2023-11-07 |
| CVE-2020-15917 json | common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled. | 9.8 - CRITICAL | 2020-07-23 | 2023-11-07 |
| CVE-2019-10735 json | In Claws Mail 3.14.1, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted... | 4.3 - MEDIUM | 2019-04-07 | 2021-07-21 |
| CVE-2015-8708 json | Stack-based buffer overflow in the conv_euctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have ... | Not Provided | 2016-04-11 | 2026-05-06 |
| CVE-2015-8614 json | Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeco... | Not Provided | 2016-04-11 | 2026-05-06 |
| CVE-2014-2576 json | plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, wh... | Not Provided | 2014-10-15 | 2026-05-06 |
| CVE-2012-5527 json | Claws Mail vCalendar plugin: credentials exposed on interface | 5.5 - MEDIUM | 2019-11-25 | 2019-12-11 |
| CVE-2012-4507 json | The strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 allows remote attackers to cause a denial of service (... | Not Provided | 2012-10-22 | 2026-04-29 |
Known software with vulnerabilities from Claws-mail
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Claws-mail | Claws-mail | 1.9.100 |
| Application | Claws-mail | 3.12.0 | |
| Application | Claws-mail | Vcalendar | - |