Neomutt

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Neomutt records in CISA KEV

No Neomutt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Neomutt 21 records MEDIUM

Records

21 records

TI-2018-10297 CVE-2018-14354 · GHSA-5hcq-hmph-mw8w

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 51

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06151 Published 2018-07-17 Partial fix CWE-78

TI-2018-10300 CVE-2018-14357 · GHSA-9f9v-862j-6944

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 50

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04954 Published 2018-07-17 Partial fix CWE-78

TI-2018-10293 CVE-2018-14350 · GHSA-7w2q-7h6m-p79f

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 50

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04956 Published 2018-07-17 Fix deferred CWE-787

TI-2018-10302 CVE-2018-14359 · GHSA-vxp5-h7wr-q8p3

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 49

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04019 Published 2018-07-17 Fix deferred CWE-120

TI-2018-10301 CVE-2018-14358 · GHSA-4ch4-m86j-485w

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 49

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03915 Published 2018-07-17 Fix deferred CWE-787

TI-2018-10295 CVE-2018-14352 · GHSA-28w7-5v3f-jc8j

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 49

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04019 Published 2018-07-17 Fix deferred CWE-787

TI-2018-10305 CVE-2018-14362 · GHSA-8wxh-p6hf-c3ph

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 48

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03667 Published 2018-07-17 Fixed CWE-119

TI-2018-10299 CVE-2018-14356 · GHSA-gg9p-xjx9-q4r7

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 48

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03166 Published 2018-07-17 Fix deferred CWE-824

TI-2018-10296 CVE-2018-14353 · GHSA-g6hr-h94m-w92x

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 48

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03698 Published 2018-07-17 Fix deferred CWE-191

TI-2018-10294 CVE-2018-14351 · GHSA-4wf8-hmff-q9qr

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 48

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03166 Published 2018-07-17 Fix deferred CWE-20

TI-2018-10292 CVE-2018-14349 · GHSA-8pq8-fvxj-2gx6

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 48

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03166 Published 2018-07-17 Fix deferred CWE-20

TI-2018-10304 CVE-2018-14361 · GHSA-g3r2-vqpx-9xhp

An issue was discovered in NeoMutt before 2018-07-16.

MEDIUM 47

An issue was discovered in NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02504 Published 2018-07-17 No fix listed CWE-20

TI-2018-10303 CVE-2018-14360 · GHSA-96qw-wpf6-h6f5

An issue was discovered in NeoMutt before 2018-07-16.

MEDIUM 47

An issue was discovered in NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02651 Published 2018-07-17 No fix listed CWE-787

TI-2021-12020 CVE-2021-32055 · GHSA-vchg-jq4g-j9q7

Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a…

MEDIUM 44

Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which imap/util.c has an out-of-bounds read in situations where an IMAP sequence set ends with a comma.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02551 Published 2021-05-05 No fix listed CWE-125

TI-2018-10306 CVE-2018-14363 · GHSA-jm86-h3mr-62qj

An issue was discovered in NeoMutt before 2018-07-16.

LOW 37

An issue was discovered in NeoMutt before 2018-07-16.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0218 Published 2018-07-17 No fix listed CWE-22

TI-2024-32978 CVE-2024-49393 · GHSA-hchw-xwhf-3qvm

Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing

LOW 31

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compr…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00327 Published 2024-11-12 No fix listed CWE-347

TI-2020-11759 CVE-2020-14954 · GHSA-fv44-9w74-ffg5

Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that…

LOW 31

Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02307 Published 2020-06-21 Will not fix CWE-74

TI-2024-32980 CVE-2024-49395 · GHSA-88hm-mv53-m5h7

Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block

LOW 30

In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from the recipients info.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2024-11-12 No fix listed CWE-1230

TI-2024-32979 CVE-2024-49394 · GHSA-q998-8jff-x3rg

Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing

LOW 30

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00325 Published 2024-11-12 No fix listed CWE-347

TI-2018-10298 CVE-2018-14355 · GHSA-m3pf-cr3h-p92g

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

LOW 30

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03227 Published 2018-07-17 Partial fix CWE-22

TI-2020-17431 CVE-2020-28896 · GHSA-346p-qx4x-g348

Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was…

LOW 29

Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.02351 Published 2020-11-23 Partial fix CWE-287

Open these records in search →

Critical	14
High	1
Medium	6
Low	0
No CVSS	0