1501 matches found
AZL-74192 CVE-2025-14524 affecting package cmake 3.21.4-21
When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host...
ALPINE-CVE-2025-14524
When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host...
CVE-2025-14524 bearer token leak on cross-protocol redirect
When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host...
CVE-1999-0494
Denial of service in WinGate proxy through a buffer overflow in POP3...
CVE-1999-0673
Buffer overflow in ALMail32 POP3 client via From: or To: headers...
CVE-1999-0242
Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords...
bearer token leak on cross-protocol redirect
When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host...
UBUNTU-CVE-2025-14524
When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host...
CVE-2025-34428
MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.SAV with overly permissive filesystem access. A local...
[SECURITY] Fedora 43 Update: dovecot-2.4.1-8.fc43
Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...
Siemens SIMATIC S7-1500 Cleartext Transmission of Sensitive Information (CVE-2021-22946)
A user can tell curl = 7.20.0 and = 7.20.0 and = 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server --ssl- reqd on the command line orCURLOPTUSESSL set to CURLUSESSLCONTROL or CURLUSESSLALL withlibcurl. This requirement...
Siemens SIMATIC S7-1500 Insufficient Verification of Data Authenticity (CVE-2021-22947)
When curl = 7.20.0 and = 7.20.0 and = 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade...
EUVD-1999-1171
Malware in sbrugna...
EUVD-2020-7925
Malware in sbrugna...
EUVD-2005-0101
Malware in sbrugna...
EUVD-2005-1136
Malware in sbrugna...
EUVD-2000-0139
Malware in sbrugna...
EUVD-2005-4439
Malware in sbrugna...