Lucene search
+L

1412 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2020-14154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate...

5.8CVSS6.4AI score0.01061EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2014-9116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The writeoneheader function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a...

5CVSS7.5AI score0.09694EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2018-14356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero- length UID. CVE-2018-14356 Note that Nessus relies on the...

9.8CVSS6.8AI score0.03166EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:0 a.m.16 views

The vulnerability of the --hidden-recipient mode in Mutt and NeoMutt email clients, which allows a hacker to disclose protected information.

The vulnerability of the “--hidden-recipient” mode in Mutt and NeoMutt clients is related to incorrect processing of header fields during PGP encryption. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

5.3CVSS5.9AI score0.00295EPSS
SaveExploits0References9Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:0 a.m.16 views

The vulnerability of Mutt and NeoMutt email clients, related to errors in verifying the cryptographic signature, allows a hacker to alter the list of trusted recipients and expose the encrypted information.

The vulnerability of Mutt and NeoMutt email clients stems from errors in verifying the cryptographic signature when processing header fields. Exploiting this vulnerability could allow a malicious actor to alter the list of trusted recipients and expose the sensitive information being protected...

7.4CVSS7.1AI score0.00331EPSS
SaveExploits0References11Affected Software1
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.262 views

CVE-2011-1429 affecting package mutt 2.2.12-1

CVE-2011-1429 affecting package mutt 2.2.12-1. No patch is available currently...

5.8CVSS6.4AI score0.01475EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2024/11/14 12:23 a.m.5 views

SUSE CVE-2024-49393

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality...

3.7CVSS6.9AI score0.00331EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2024/11/14 12:23 a.m.5 views

SUSE CVE-2024-49394

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender...

3.7CVSS7AI score0.00329EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2024/11/14 12:23 a.m.4 views

SUSE CVE-2024-49395

In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from the recipients info...

5.3CVSS7AI score0.00295EPSS
SaveExploits0References3
OSV
OSV
added 2024/11/12 3:15 a.m.17 views

CVE-2024-49395

In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from the recipients info...

5.3CVSS5.3AI score
SaveExploits0References2
OSV
OSV
added 2024/11/12 3:15 a.m.22 views

CVE-2024-49394

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender...

5.3CVSS5.3AI score
SaveExploits0References2
NVD
NVD
added 2024/11/12 3:15 a.m.38 views

CVE-2024-49395

In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from the recipients info...

5.3CVSS0.00295EPSS
SaveExploits0References5
OSV
OSV
added 2024/11/12 3:15 a.m.2 views

DEBIAN-CVE-2024-49394

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender...

5.3CVSS5.6AI score0.00329EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/12 3:15 a.m.2 views

DEBIAN-CVE-2024-49395

In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from the recipients info...

5.3CVSS5.6AI score0.00295EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/12 3:15 a.m.6 views

UBUNTU-CVE-2024-49394

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender...

5.3CVSS5.8AI score0.00329EPSS
SaveExploits0References8
OSV
OSV
added 2024/11/12 3:15 a.m.33 views

UBUNTU-CVE-2024-49395

In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from the recipients info...

5.3CVSS5.8AI score0.00295EPSS
SaveExploits0References7
OSV
OSV
added 2024/11/12 2:15 a.m.15 views

CVE-2024-49393

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality...

6.5CVSS7.4AI score
SaveExploits0References2
OSV
OSV
added 2024/11/12 2:15 a.m.3 views

DEBIAN-CVE-2024-49393

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality...

6.5CVSS7.2AI score0.00331EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/12 2:15 a.m.27 views

CVE-2024-49393

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality...

6.5CVSS0.00331EPSS
SaveExploits0References5
OSV
OSV
added 2024/11/12 2:15 a.m.7 views

UBUNTU-CVE-2024-49393

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality...

6.5CVSS5.8AI score0.00331EPSS
SaveExploits0References8
Rows per page
Query Builder