https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 04:49:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-325654 EUVD-2026-325654 https://cve.radiocsirt.org/vuln/euvd-2026-325654 https://cve.radiocsirt.org/vuln/fkie_cve-2020-37248 <p>OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and extracting account credentials in cleartext.</p> <p>OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and extracting account credentials in cleartext.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-37248 https://cve.radiocsirt.org/vuln/ghsa-899r-9fxv-q4xm <p>OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and extracting account credentials in cleartext.</p> <p>OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and extracting account credentials in cleartext.</p> https://cve.radiocsirt.org/vuln/ghsa-899r-9fxv-q4xm https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-37248 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: offlineimap3, Ubuntu:24.04:LTS: offlineimap3, Ubuntu:25.10: offlineimap3, Ubuntu:26.04:LTS: offlineimap3</p> <p>OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and extracting account credentials in cleartext.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: offlineimap3, Ubuntu:24.04:LTS: offlineimap3, Ubuntu:25.10: offlineimap3, Ubuntu:26.04:LTS: offlineimap3</p> <p>OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and extracting account credentials in cleartext.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-37248