Dovecot IMAP Server 2.2 / 2.3 Missing Rate Limiting

Affected product: Dovecot IMAP Server Internal reference: DOV-6464 Vulnerability type: CWE-770 Allocation of Resources Without Limits or Throttling Vulnerable version: 2.2, 2.3 Vulnerable component: lib-mail Report confidence: Confirmed Solution status: Fixed in 2.3.21.1 Researcher credits: Vendo...

Mageia: Security Advisory (MGASA-2024-0280)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated packages fix security vulnerabilities

CVE-2024-23184: A large number of address headers in email resulted in excessive CPU usage. CVE-2024-23185: Abnormally large email headers are now truncated or discarded, with a limit of 10MB on a single header and 50MB for all the headers of all the parts of an email...

Dovecot 2.2.x < 2.3.21.1 Multiple Vulnerabilities

Dovecot is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dovecot:dovecot"; ifdescription...

Slackware Linux 15.0 / current dovecot Multiple Vulnerabilities (SSA:2024-227-01)

The version of dovecot installed on the remote host is prior to 2.3.21.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-227-01 advisory. New dovecot packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

PHPFusion < 9.03.70 Multiple Vulnerabilities

PHPFusion is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-23184

CVE-2022-23184 concerns Octopus Server where HTTP/HTTPS bindings set to localhost allow open redirects. The connected sources confirm the vulnerable condition but do not specify affected versions, root cause details beyond localhost binding, exploit status, or a published fix. No mitigation or pa...

CVE-2020-23184

CVE-2020-23184 is a stored XSS vulnerability in PHP-Fusion 9.03.60. The issue affects the /administration/settings_registration.php script where user input in the Registration field can be stored and later executed as script/html by authenticated users. Impact is web-script execution and HTML ren...