Lucene search
+L

326 matches found

OSV
OSV
added 2021/08/15 8:38 a.m.10 views

MGASA-2021-0408 Updated sylpheed and claws-mail packages fix security vulnerability

Updated sylpheed and claws-mail packages fix security vulnerability: The textviewurisecuritycheck function in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click CVE-2021-37746...

6.1CVSS6.3AI score0.01155EPSS
SaveExploits0References3
Mageia
Mageia
added 2021/08/15 8:38 a.m.69 views

Updated sylpheed and claws-mail packages fix security vulnerability

Updated sylpheed and claws-mail packages fix security vulnerability: The textviewurisecuritycheck function in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click CVE-2021-37746...

6.1CVSS1.8AI score0.01155EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/08/03 12:0 a.m.38 views

Claws Mail Input Validation Error Vulnerability

Claws Mail is an open source email client and news aggregator written in the GTK language. claws mail suffers from an injection vulnerability that stems from the textviewurisecuritycheck function in textview.c in Claws Mail prior to version 3.18.0, and from the 3.7.0 Sylpheed before version 3.7.0...

6.1CVSS3.2AI score0.01155EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/30 3:15 p.m.18 views

CVE-2021-37746

textviewurisecuritycheck in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click...

6.1CVSS0.01155EPSS
SaveExploits0References5
OSV
OSV
added 2021/07/30 3:15 p.m.3 views

DEBIAN-CVE-2021-37746

textviewurisecuritycheck in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click...

6.1CVSS6.2AI score0.01155EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/30 3:15 p.m.6 views

CVE-2021-37746

textviewurisecuritycheck in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click...

6.1CVSS6.2AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2021/07/30 3:15 p.m.4 views

CVE-2021-37746

textviewurisecuritycheck in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click...

6.1CVSS6AI score0.01155EPSS
SaveExploits0References9
Prion
Prion
added 2021/07/30 3:15 p.m.22 views

Code injection

textviewurisecuritycheck in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click...

5.8CVSS6.1AI score0.01155EPSS
SaveExploits0References5Affected Software3
OSV
OSV
added 2021/07/30 3:15 p.m.9 views

UBUNTU-CVE-2021-37746

textviewurisecuritycheck in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click...

6.1CVSS5.8AI score0.01155EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2021/07/30 3:15 p.m.79 views

CVE-2021-37746

textviewurisecuritycheck in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click...

6.1CVSS6.3AI score0.01155EPSS
SaveExploits0
CVE
CVE
added 2021/07/30 1:17 p.m.108 views

CVE-2021-37746

CVE-2021-37746 affects Claws Mail and Sylpheed: the function textview_uri_security_check in textview.c does not perform sufficient link checks before accepting a click. Affected versions are Claws Mail before 3.18.0 and Sylpheed through 3.7.0. The vulnerability stems from inadequate link validati...

6.1CVSS6AI score0.01155EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2021/07/30 1:17 p.m.51 views

CVE-2021-37746

textviewurisecuritycheck in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click...

6.4AI score0.01155EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/07/30 12:0 a.m.7 views

Claws Mail 输入验证错误漏洞

Claws Mail is an open source email client and news aggregator written in the GTK language. claws mail suffers from an injection vulnerability that stems from the textviewurisecuritycheck function in textview.c in Claws Mail prior to version 3.18.0, and from the 3.7.0 Sylpheed before version 3.7.0...

6.1CVSS5.7AI score0.01155EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2021/07/16 12:0 a.m.29 views

openSUSE: Security Advisory for claws-mail (openSUSE-SU-2021:1045-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.02592EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/07/16 12:0 a.m.33 views

openSUSE 15 Security Update : claws-mail (openSUSE-SU-2021:1045-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1045-1 advisory. - common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled. CVE-2020-15917 Note that...

9.8CVSS8.2AI score0.02592EPSS
SaveExploits0References4
OPENSUSE Linux
OPENSUSE Linux
added 2021/07/16 12:0 a.m.49 views

Security update for claws-mail (moderate)

openSUSE Security Update: Security update for claws-mail Announcement ID: openSUSE-SU-2021:1045-1 Rating: moderate References: 1174457 Cross-References: CVE-2020-15917 CVSS scores: CVE-2020-15917 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 openSUSE...

9.8CVSS7AI score0.02592EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/15 10:6 p.m.6 views

OPENSUSE-SU-2021:1045-1 Security update for claws-mail

This update for claws-mail fixes the following issues: Update to 3.18.0 Support for the OAuth2 authorisation protocol has been added for IMAP, POP and SMTP using custom, user-generated client IDs. OAuth2 preferences are found in the Account Preferences on the Receive page for POP: Authenticate...

9.8CVSS9.7AI score0.02592EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/07/12 12:0 a.m.6 views

PT-2021-21858 · Sylpheed +3 · Sylpheed +3

Name of the Vulnerable Software and Affected Versions: Claws Mail versions prior to 3.18.0 Sylpheed versions prior to 3.7.1 Description: The issue is related to insufficient link checks in the textview uri security check function in textview.c before accepting a click. This could potentially lead...

7.5CVSS6.1AI score0.01781EPSS
SaveExploits1References28
Tenable Nessus
Tenable Nessus
added 2020/11/06 12:0 a.m.45 views

openSUSE Security Update : claws-mail (openSUSE-2020-1822)

This update for claws-mail fixes the following issues : - Additional cleanup of the template handling claws-mail was updated to 3.17.8 boo1177967 - Shielded template's |program and |attachprogram so that the command-line that is executed does not allow sequencing such as with && || ;, preventing...

9.8CVSS8.4AI score0.02592EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2020/11/04 12:0 a.m.18 views

openSUSE: Security Advisory for claws-mail (openSUSE-SU-2020:1822-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.02592EPSS
SaveExploits0References2
Rows per page
Query Builder