Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Libmailcore records in CISA KEVNo Libmailcore vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 37
LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.02404 · Published 2020-07-27 · No fix listed CWE-74
Priority LOW 35
core/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for IMAP in STARTTLS mode.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.0109 · Published 2021-02-17 · No fix listed CWE-295
Open these records in search →