Lucene search
+L

8 matches found

OSV
OSV
•added 2026/04/15 11:15 p.m.•17 views

CVE-2026-40193 Maddy Mail Server: LDAP Filter Injection via Unsanitized Username

maddy is a composable, all-in-one mail server. Versions prior to 0.9.3 contain an LDAP injection vulnerability in the auth.ldap module where user-supplied usernames are interpolated into LDAP search filters and DN strings via strings.ReplaceAll without any LDAP filter escaping, despite the...

8.2CVSS6.1AI score
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2019-3172

Malware in sbrugna...

7.5CVSS8.5AI score0.02525EPSS
SaveExploits0References9
OSV
OSV
•added 2019/05/08 5:29 p.m.•8 views

DEBIAN-CVE-2019-11499

In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH PLAIN is attempted over a TLS secured channel with an unacceptable authentication message...

7.5CVSS8.6AI score0.02525EPSS
SaveExploits0References1
NVD
NVD
•added 2019/05/08 5:29 p.m.•30 views

CVE-2019-11499

In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH PLAIN is attempted over a TLS secured channel with an unacceptable authentication message...

7.5CVSS7.5AI score0.02525EPSS
SaveExploits0References6
CVE
CVE
•added 2019/05/08 5:00 p.m.•231 views

CVE-2019-11499

The CVE-2019-11499 issue affects Dovecot’s IMAP server (submission-login) where AUTH PLAIN over TLS with an unacceptable authentication message causes a crash in Dovecot 2.3.3–2.3.5.2. Connected advisories (openSUSE/SUSE/NASL entries) confirm a fix was released (e.g., dovecot23 updates for SUSE/o...

7.5CVSS7.5AI score0.02525EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/08 12:00 a.m.•3 views

CVE-2019-11499: Undefined Security Weakness

In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH PLAIN is attempted over a TLS secured channel with an unacceptable authentication message...

7.5CVSS7.2AI score0.02525EPSS
SaveExploits0References1
canvas
canvas
•added 2018/02/08 11:29 p.m.•201 views

Immunity Canvas: EXIM_HEAP_OVERFLOW

Name| eximheapoverflow ---|--- CVE| CVE-2018-6789 Exploit Pack| CANVAS Description| eximheapoverflow Notes| CVE Name: CVE-2018-6789 VENDOR: Exim NOTES: There is a buffer overflow in the b64decode function, this bug exists since the first commit of exim, hence ALL versions are affected. This explo...

7.5CVSS7.4AI score0.82137EPSS
SaveExploits19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/01/27 12:00 a.m.•4 views

CVE-2006-0447: Undefined Security Weakness

Multiple buffer overflows in E-Post Mail Server 4.10 and SPA-PRO Mail @Solomon 4.00 allow remote attackers to execute arbitrary code via a long username to the 1 AUTH PLAIN or 2 AUTH LOGIN SMTP commands, which is not properly handled by a EPSTRS.EXE or b SPA-RS.EXE; 3 a long username in the APOP...

7.5CVSS6.7AI score0.04607EPSS
SaveExploits0References1
Rows per page
Query Builder