https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T03:07:05.610657+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2016-10727 CVE-2016-10727 2026-10-10T03:07:07.208660+00:00

camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client wishes to use STARTTLS but the server will not use STARTTLS, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. The server code was intended to report an error and not proceed, but the code was written incorrectly.

 https://vulnerability.circl.lu/vuln/usn-3724-1 USN-3724-1 — evolution-data-server vulnerability 2026-10-10T03:07:07.208787+00:00

Affected: Ubuntu:14.04:LTS: evolution-data-server, Ubuntu:16.04:LTS: evolution-data-server

Jon Kristensen discovered that Evolution Data Server would automatically downgrade a connection to an IMAP server if the IMAP server did not support SSL. This would result in the user's password being unexpectedly sent in clear text, even though the user had requested to use SSL.