Lucene search
+L

5756 matches found

SUSE CVE
SUSE CVE
•added 2026/07/17 12:56 p.m.•15 views

SUSE CVE-2026-47086

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. GENURLAUTH-issued tokens can bypass ACLs. Any authenticated user could mint a URLAUTH token via the GENURLAUTH command for any mailbox they could name, even without read access on it. This would allow reading mail from mailboxes...

3.5CVSS5.3AI score0.00267EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/07/17 12:56 p.m.•10 views

SUSE CVE-2026-47087

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH does not honor revoked authorizer access. A URLAUTH URL minted while the authorizer had access continued to work after that access was revoked...

3.5CVSS5.3AI score0.00286EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/07/17 12:56 p.m.•14 views

SUSE CVE-2026-47089

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. LISTRIGHTS os not limited to users with admin access. An authenticated user could call IMAP LISTRIGHTS against any mailbox they could name and learn what principals had what access to it. This action should have been restricted ...

4.3CVSS5.4AI score0.00281EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
•added 2026/07/17 6:13 a.m.•15 views

Security update for ruby3.4

This update for ruby3.4 fixes the following issues CVE-2026-42258: Net:IMAP: Command Injection via Symbol Arguments bsc1268011. CVE-2026-47240: Net:IMAP: Command Injection via non-synchronizing literal in "raw" argument bsc1268337. CVE-2026-47241: Net:IMAP: Denial of Service via incomplete raw...

6.8CVSS5.4AI score0.01253EPSS
SaveExploits0References20
OSV
OSV
•added 2026/07/17 6:13 a.m.•9 views

SUSE-SU-2026:3090-1 Security update for ruby3.4

This update for ruby3.4 fixes the following issues - CVE-2026-42258: Net:IMAP: Command Injection via Symbol Arguments bsc1268011. - CVE-2026-47240: Net:IMAP: Command Injection via non-synchronizing literal in 'raw' argument bsc1268337. - CVE-2026-47241: Net:IMAP: Denial of Service via incomplete...

7.5CVSS7.2AI score0.01253EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
•added 2026/07/17 4:04 a.m.•23 views

CVE-2026-47084

A flaw was found in Cyrus IMAP cyrus-imapd. An authenticated user, without administrative privileges, could bypass Access Control List ACL checks by using the LOCALDELETE command. This allowed them to delete mailboxes for which they did not have the necessary permissions, leading to unauthorized...

6.5CVSS6.1AI score0.00348EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/07/17 4:04 a.m.•28 views

CVE-2026-47082

A flaw was found in Cyrus IMAP's cyrus-imapd component. A user with low privileges can exploit a vulnerability in the vacation "fcc" feature. By crafting a specific Sieve script, the user can bypass access control lists and deliver vacation auto-reply messages into any mailbox, leading to...

5.4CVSS6AI score0.00298EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/07/17 3:54 a.m.•19 views

CVE-2026-47085

A flaw was found in Cyrus IMAP cyrus-imapd. A remote attacker could exploit a vulnerability related to URLAUTH token forgery, caused by a missing mailbox key. This could allow the attacker to gain unauthorized read access to a victim's mailbox. The likelihood of exploitation is low due to the...

4CVSS6.1AI score0.00297EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/07/17 3:49 a.m.•20 views

CVE-2026-47088

A flaw was found in Cyrus IMAP Internet Message Access Protocol daemon, cyrus-imapd. An authenticated IMAP user could exploit a heap exposure vulnerability during nested Multipurpose Internet Mail Extensions MIME comment parsing. By crafting an email message with a specially formed RFC 822 commen...

3.1CVSS6AI score0.00265EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/07/17 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-47081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an XAPPLEPUSHSERVICE folder existence oracle and push hijack. An authenticated IMA...

3.1CVSS5.6AI score0.00243EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/17 12:00 a.m.•13 views

Oracle Linux 10 : ruby4.0 (ELSA-2026-33540)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33540 advisory. - Fix Net::IMAP ResponseReader quadratic complexity vulnerability CVE-2026-42245 Includes core fix plus additional performance optimizations Resolves...

8.1CVSS6.1AI score0.01306EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/07/17 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-47088

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsing. An authenticated IMAP user could cra...

3.1CVSS5.8AI score0.00265EPSS
SaveExploits0References3
Oracle linux
Oracle linux
•added 2026/07/17 12:00 a.m.•22 views

ruby4.0 security update

4.0.3-35 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability CVE-2026-42245 Includes core fix plus additional performance optimizations Resolves: RHEL-181675 - Fix Net::IMAP STARTTLS stripping vulnerability CVE-2026-42246 Resolves: RHEL-181767 - Fix Net::IMAP command injection...

9.1CVSS6AI score0.01306EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/07/17 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-47089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. LISTRIGHTS os not limited to users with admin access. An authenticated user could call IMAP...

4.3CVSS5.7AI score0.00281EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/17 12:00 a.m.•13 views

Oracle Linux 10 : ruby (ELSA-2026-33565)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33565 advisory. - Fix DoS via crafted IMAP responses in net-imap. CVE-2026-42245 Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in...

7.6CVSS5.4AI score0.01253EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/07/16 9:30 p.m.•21 views

EUVD-2026-45011

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsing. An authenticated IMAP user could craft an email message containing an RFC 822 comment ending with a backslash. When parsing the message, the server would read past the...

3.1CVSS6.1AI score0.00265EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/16 9:30 p.m.•51 views

EUVD-2026-45010

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH does not honor revoked authorizer access. A URLAUTH URL minted while the authorizer had access continued to work after that access was revoked...

3.5CVSS6.1AI score0.00286EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/16 9:30 p.m.•20 views

EUVD-2026-45007

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The LOCALDELETE command bypassed ACL checks. An authenticated but non-admin user could invoke the admin-only LOCALDELETE IMAP command and delete mailboxes for which they had no permissions...

6.5CVSS6.1AI score0.00348EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/16 9:30 p.m.•48 views

EUVD-2026-45004

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an XAPPLEPUSHSERVICE folder existence oracle and push hijack. An authenticated IMAP user could probe for the existence of arbitrary mailboxes on other users' accounts via the XAPPLEPUSHSERVICE command and then create...

3.1CVSS6.2AI score0.00243EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/16 7:16 p.m.•15 views

CVE-2026-47086

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. GENURLAUTH-issued tokens can bypass ACLs. Any authenticated user could mint a URLAUTH token via the GENURLAUTH command for any mailbox they could name, even without read access on it. This would allow reading mail from mailboxes...

3.5CVSS0.00267EPSS
SaveExploits0References2
Rows per page
Query Builder