Claws Mail
Approved changes feed: RSS · Atom
cpe:2.3:a:claws-mail:claws-mail:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Claws Mail (034ea705-0ae9-502f-b9fb-a1ad712215d9) |
|---|---|
| Product | Claws Mail (1ddef8e1-46dd-57c5-8372-87e187233342) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/claws-mail |
purl2cpe | 2026-06-01 10:11:24.090519 |
pkg:deb/ubuntu/claws-mail |
purl2cpe | 2026-06-01 10:11:24.090523 |
pkg:github/mpollmeier/claws-mail |
purl2cpe | 2026-06-01 10:11:24.090526 |
pkg:github/mrvdb/claws-mail |
purl2cpe | 2026-06-01 10:11:24.090529 |
pkg:github/olafhering/claws |
purl2cpe | 2026-06-01 10:11:24.090533 |
pkg:rpm/fedora/claws-mail |
purl2cpe | 2026-06-01 10:11:24.090535 |
pkg:rpm/opensuse/claws-mail |
purl2cpe | 2026-06-01 10:11:24.090538 |
pkg:sourceforge/claws-mail |
purl2cpe | 2026-06-01 10:11:24.090541 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-37746 |
vulnerable | 2026-06-08 05:32:54.732105 |
Details available
textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click.
Published: 2021-07-30T13:17:32.000Z
Updated: 2024-08-04T01:30:07.555Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16094 |
vulnerable | 2026-06-08 05:19:27.354223 |
Details available
In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree.
Published: 2020-07-28T18:34:36.000Z
Updated: 2024-08-04T13:37:53.353Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15917 |
vulnerable | 2026-06-08 05:19:27.168871 |
Details available
common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled.
Published: 2020-07-23T18:06:26.000Z
Updated: 2024-08-04T13:30:23.272Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8614 |
vulnerable | 2026-06-08 05:07:04.527794 |
Details available
Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion.
Published: 2016-04-11T21:00:00.000Z
Updated: 2024-08-06T08:20:43.561Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2576 |
vulnerable | 2026-06-08 05:05:29.268188 |
Details available
plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof servers and conduct man-in-the-middle (MITM) attacks.
Published: 2014-10-15T14:00:00.000Z
Updated: 2024-08-06T10:21:34.633Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.