Lucene search
+L

2 matches found

Hacker One
Hacker One
added 2026/05/30 7:56 a.m.24 views

curl: SMTP connection reuse ignores --ssl-reqd / CURLOPT_USE_SSL and reuses a clear-text STARTTLS session on current master

Summary: Current master reintroduces a STARTTLS connection-reuse bug in SMTP. After commit 91dcf4e610 url: urlmatchdestination fix, curl/libcurl can reuse an already-established clear-text smtp:// session for a later logical request that explicitly requires TLS via --ssl-reqd or CURLOPTUSESSL =...

5.8AI score
SaveExploits0
OSV
OSV
added 2020/08/27 4:21 a.m.6 views

OPENSUSE-SU-2020:1269-1 Security update for claws-mail

This update for claws-mail fixes the following issues: - CVE-2020-15917: Fixed an improper handling of suffix data after STARTTLS is mishandled boo1174457. This update was imported from the openSUSE:Leap:15.1:Update update project...

9.8CVSS9.5AI score0.02592EPSS
SaveExploits0References3
Rows per page
Query Builder