373 matches found
CVE-2026-47084
CVE-2026-47084 affects Cyrus IMAPD up to version 3.12.2. The LOCALDELETE command bypassed ACL checks, allowing an authenticated but non-admin user to invoke an admin-only LOCALDELETE IMAP command and delete mailboxes for which they had no permissions. The CVSS metrics indicate a base score of 6.5...
CVE-2026-47087
The CVE affects cyrus-imapd (Cyrus IMAP) up to version 3.12.2, where URLAUTH does not honor revoked authorizer access; a URLAUTH URL minted while access was valid remains usable after revocation. This could enable continued access to previously authorized resources. A fix is available in the 3.12...
CVE-2026-47086
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. GENURLAUTH-issued tokens can bypass ACLs. Any authenticated user could mint a URLAUTH token via the GENURLAUTH command for any mailbox they could name, even without read access on it. This would allow reading mail from mailboxes...
CVE-2026-47089
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. LISTRIGHTS os not limited to users with admin access. An authenticated user could call IMAP LISTRIGHTS against any mailbox they could name and learn what principals had what access to it. This action should have been restricted ...
EUVD-2017-5740
Malware in sbrugna...
EUVD-2004-1087
Malware in sbrugna...
EUVD-2021-20268
Malware in sbrugna...
EUVD-2017-4380
Malware in sbrugna...
EUVD-2004-1013
Malware in sbrugna...
EUVD-2015-7971
Malware in sbrugna...
EUVD-2013-6960
Malware in sbrugna...
EUVD-2011-1924
Malware in sbrugna...
EUVD-2011-3444
Malware in sbrugna...
EUVD-2021-18919
Malware in sbrugna...
EUVD-2004-1065
Malware in sbrugna...
EUVD-2019-8601
Malware in sbrugna...
EUVD-2015-7970
Malware in sbrugna...
EUVD-2019-9382
Malware in sbrugna...