Vulnerabilities

Filters

1 selected

20 records

Sort

Vendor: cyrusimap Clear all filters

TI-2026-44296 CVE-2026-61915 · GHSA-jxhj-wr2q-m255

Double free in cyrusimap Cyrus IMAP

LOW 31

An issue was discovered in Cyrus IMAP before 3.12.4.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00259 Published 2026-09-09 Partial fix · 3.8.8, 3.10.4 +1 CWE-415

TI-2026-44295 CVE-2026-61911 · GHSA-v69j-37vj-46wc

An issue was discovered in Cyrus IMAP before 3.12.4.

LOW 19

An issue was discovered in Cyrus IMAP before 3.12.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00218 Published 2026-09-09 Partial fix · 3.8.8, 3.10.4 +1 CWE-497

TI-2026-44294 CVE-2026-61910 · GHSA-4rv6-f2p6-rhx5

Incorrect authorization in cyrusimap Cyrus IMAP

LOW 22

An issue was discovered in Cyrus IMAP before 3.12.4.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.0019 Published 2026-09-09 Partial fix · 3.8.8, 3.10.4 +1 CWE-863

TI-2026-44293 CVE-2026-61909 · GHSA-q4vc-r364-vq8w

An issue was discovered in Cyrus IMAP before 3.12.4.

LOW 19

An issue was discovered in Cyrus IMAP before 3.12.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00204 Published 2026-09-09 Partial fix · 3.8.8, 3.10.4 +1 CWE-420

TI-2026-44292 CVE-2026-61908 · GHSA-2x93-wv63-897r

Out-of-bounds read in cyrusimap Cyrus IMAP

LOW 28

An issue was discovered in Cyrus IMAP before 3.12.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00224 Published 2026-09-09 Partial fix · 3.8.8, 3.10.4 +1 CWE-125

TI-2026-44291 CVE-2026-61907 · GHSA-245j-3rxm-cqmg

Incorrect authorization in cyrusimap Cyrus IMAP

LOW 19

An issue was discovered in Cyrus IMAP before 3.12.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00213 Published 2026-09-09 Partial fix · 3.8.8, 3.10.4 +1 CWE-863

TI-2026-34691 CVE-2026-47089 · GHSA-fx86-vr4x-grgq

Missing authorization in cyrusimap Cyrus IMAP

LOW 20

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00281 Published 2026-07-16 Partial fix · 3.12.3 CWE-862

TI-2026-34690 CVE-2026-47088 · GHSA-f77j-qm5m-p6cw

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.

LOW 15

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00265 Published 2026-07-16 Partial fix · 3.12.3 CWE-126

TI-2026-34689 CVE-2026-47087 · GHSA-4pcj-qpx3-mjmx

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.

LOW 17

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.

CVSS 3.1LOW 3.5 Network Low privileges No interaction EPSS 0.00286 Published 2026-07-16 Partial fix · 3.12.3 CWE-672

TI-2026-34688 CVE-2026-47086 · GHSA-j6pg-f6px-vgh9

Incorrect authorization in cyrusimap Cyrus IMAP

LOW 16

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.

CVSS 3.1LOW 3.5 Network Low privileges No interaction EPSS 0.00267 Published 2026-07-16 Partial fix · 3.12.3 CWE-863

TI-2026-34687 CVE-2026-47085 · GHSA-8jrh-wq6h-53c4

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.

LOW 19

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.

CVSS 3.1MEDIUM 4.0 Network No auth No interaction EPSS 0.00297 Published 2026-07-16 Partial fix · 3.12.3 CWE-340

TI-2026-34686 CVE-2026-47084 · GHSA-324f-35v9-jxhh

Incorrect authorization in cyrusimap Cyrus IMAP

LOW 29

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00348 Published 2026-07-16 Partial fix · 3.12.3 CWE-863

TI-2026-34685 CVE-2026-47083 · GHSA-7m4j-qx5p-343w

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.

LOW 20

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00306 Published 2026-07-16 Partial fix · 3.12.3 CWE-204

TI-2026-34684 CVE-2026-47082 · GHSA-pwfr-vrq6-chw9

Incorrect authorization in cyrusimap Cyrus IMAP

LOW 24

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00298 Published 2026-07-16 Partial fix · 3.12.3 CWE-863

TI-2026-34683 CVE-2026-47081 · GHSA-w8cp-9j4g-wc9p

Incorrect authorization in cyrusimap Cyrus IMAP

LOW 15

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00243 Published 2026-07-16 Partial fix · 3.12.3 CWE-863

TI-2024-22515 CVE-2024-34055 · GHSA-crp5-539g-qwq6

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to…

LOW 30

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00836 Published 2024-06-05 Partial fix CWE-770

TI-2022-08283 CVE-2022-24407 · GHSA-fvc5-cffp-h22w

In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the…

MEDIUM 45

In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04123 Published 2022-02-23 Partial fix CWE-89

TI-2019-14353 CVE-2019-19906 · GHSA-vc8v-7256-2pfq

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated…

MEDIUM 44

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08036 Published 2019-12-19 Partial fix CWE-193

TI-2017-09510 CVE-2017-12843 · GHSA-7gjp-mccf-jrm5

Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via…

LOW 31

Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted (1) SYNCAPPLY, (2) SYNCGET or (3) SYNCRESTORE command.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01227 Published 2017-08-22 No fix listed CWE-20

TI-2002-01271 CVE-2002-1347 · GHSA-hmpx-mhc7-wxwr

Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers…

MEDIUM 52

Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) charact…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07078 Published 2002-12-11 Fixed CWE-131