Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 22

Export CSV
CVE-2019-18928

cyrus-imapd: privilege escalation in HTTP request

Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP request may be interpreted in the authentication context of an unrelated previous request that arrived over the same connection.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Cyrus Debian Fedoraproject and 1 more
Products
Imap Debian Linux Fedora and 1 more
CVE-2019-11356

cyrus-imapd: buffer overflow in CalDAV request handling triggered by a long iCalendar property name

The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name.

CVSS 3.1 · 9.8 Critical EPSS 7.6% KEV · Not listed
Vendors
Canonical Cyrus Debian and 2 more
Products
Ubuntu Linux Imap Debian Linux and 5 more