Lucene search
+L

170 matches found

Fedora
Fedora
added 2019/12/05 1:12 a.m.30 views

[SECURITY] Fedora 30 Update: cyrus-imapd-3.0.12-1.fc30

The Cyrus IMAP Internet Message Access Protocol server provides access to personal mail, system-wide bulletin boards, news-feeds, calendar and contac ts through the IMAP, JMAP, NNTP, CalDAV and CardDAV protocols. The Cyrus IMAP server is a scalable enterprise groupware system designed for use fro...

9.8CVSS0.5AI score0.02392EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/08/16 12:0 a.m.10 views

The vulnerability of the CalDAV function in the httpd daemon of the Cyrus IMAP server allows attackers to compromise data integrity, gain access to confidential information, cause service failures, and execute arbitrary code.

The vulnerability of the CalDAV function in the httpd daemon of the Cyrus IMAP server is related to the issue of writing operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise data integrity, gain access to confidential information, cause...

9.8CVSS6.2AI score0.07622EPSS
SaveExploits0References5Affected Software2
OSV
OSV
added 2019/08/10 12:12 a.m.5 views

MGASA-2019-0219 Updated cyrus-imapd packages fix security vulnerability

Updated cyrus-imapd package fixes security vulnerability: It was discovered that cyrus-imapd had a buffer overflow in CalDAV request handling triggered by a long iCalendar property name CVE-2019-11356...

9.8CVSS9.8AI score0.07622EPSS
SaveExploits0References3
Mageia
Mageia
added 2019/08/10 12:12 a.m.37 views

Updated cyrus-imapd packages fix security vulnerability

Updated cyrus-imapd package fixes security vulnerability: It was discovered that cyrus-imapd had a buffer overflow in CalDAV request handling triggered by a long iCalendar property name CVE-2019-11356...

9.8CVSS1.9AI score0.07622EPSS
SaveExploits0References2
NVD
NVD
added 2019/08/01 4:15 p.m.20 views

CVE-2016-10836

cPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav SEC-108...

6.5CVSS6.7AI score0.01121EPSS
SaveExploits0References1
Prion
Prion
added 2019/08/01 4:15 p.m.22 views

Authentication flaw

cPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav SEC-108...

4CVSS7.4AI score0.01121EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/08/01 3:51 p.m.23 views

CVE-2016-10836

cPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav SEC-108...

6.7AI score0.01121EPSS
SaveExploits0References1
CVE
CVE
added 2019/08/01 3:51 p.m.49 views

CVE-2016-10836

CVE-2016-10836 affects cPanel prior to version 55.9999.141. The vulnerability allows arbitrary file-read operations during authentication with CalDAV. The issue is confirmed in multiple sources (NVD entry and Red Hat/CVE pages). Affected software: cPanel before 55.9999.141. Root cause: improper f...

6.5CVSS6.7AI score0.01121EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2019/06/26 12:0 a.m.52 views

Cyrus IMAP 2.5.x < 2.5.13, 3.0.x < 3.0.10 RCE Vulnerability

Cyrus IMAP is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cyrus:imap"; if...

9.8CVSS8.1AI score0.07622EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/06/10 12:0 a.m.32 views

Debian DSA-4458-1 : cyrus-imapd - security update

A flaw was discovered in the CalDAV feature in httpd of the Cyrus IMAP server, leading to denial of service or potentially the execution of arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name. C Tenable Network Security, Inc. The descriptive text and...

9.8CVSS7.4AI score0.07622EPSS
SaveExploits0References4
Debian
Debian
added 2019/06/08 7:8 a.m.33 views

[SECURITY] [DSA 4458-1] cyrus-imapd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4458-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 08, 2019 https://www.debian.org/security/faq -...

7.5CVSS2.8AI score0.07622EPSS
SaveExploits0
Debian
Debian
added 2019/06/08 7:8 a.m.265 views

[SECURITY] [DSA 4458-1] cyrus-imapd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4458-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 08, 2019 https://www.debian.org/security/faq -...

9.8CVSS9.4AI score0.07622EPSS
SaveExploits0
Fedora
Fedora
added 2019/06/07 4:34 p.m.30 views

[SECURITY] Fedora 29 Update: cyrus-imapd-3.0.10-1.fc29

The Cyrus IMAP Internet Message Access Protocol server provides access to personal mail, system-wide bulletin boards, news-feeds, calendar and contac ts through the IMAP, JMAP, NNTP, CalDAV and CardDAV protocols. The Cyrus IMAP server is a scalable enterprise groupware system designed for use fro...

9.8CVSS0.5AI score0.07622EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2019/06/07 12:0 a.m.29 views

Fedora Update for cyrus-imapd FEDORA-2019-309f559057

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.07622EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2019/06/06 10:20 a.m.28 views

CVE-2019-11356

A flaw was found in the CalDAV feature in httpd in Cyrus IMAP. This flaw allows a remote attacker to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name...

9.8CVSS4AI score0.07622EPSS
SaveExploits0References2
NVD
NVD
added 2019/06/03 8:29 p.m.19 views

CVE-2019-11356

The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name...

9.8CVSS9.7AI score0.07622EPSS
SaveExploits0References10
OSV
OSV
added 2019/06/03 8:29 p.m.33 views

CVE-2019-11356

The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name...

9.8CVSS7.7AI score
SaveExploits0References10
OSV
OSV
added 2019/06/03 8:29 p.m.2 views

DEBIAN-CVE-2019-11356

The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name...

9.8CVSS7.8AI score0.07622EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2019/06/03 8:29 p.m.29 views

CVE-2019-11356

The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name...

9.8CVSS7.3AI score0.07622EPSS
SaveExploits0References9
OSV
OSV
added 2019/06/03 8:29 p.m.5 views

UBUNTU-CVE-2019-11356

The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name...

9.8CVSS7.3AI score0.07622EPSS
SaveExploits0References10
Rows per page
Query Builder