CVE-2026-47085

A flaw was found in Cyrus IMAP cyrus-imapd. A remote attacker could exploit a vulnerability related to URLAUTH token forgery, caused by a missing mailbox key. This could allow the attacker to gain unauthorized read access to a victim's mailbox. The likelihood of exploitation is low due to the...

DEBIAN-CVE-2026-47085

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH token forgery can occur via a missing mboxkey. If an attacker knew a folder name on the victim's account for which the victim had never issued an auth URL, they could forge a working URLAUTH token by computing an HMAC-SH...

CVE-2026-47085

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH token forgery can occur via a missing mboxkey. If an attacker knew a folder name on the victim's account for which the victim had never issued an auth URL, they could forge a working URLAUTH token by computing an HMAC-SH...

EUVD-2024-40707

Malicious code in bioql PyPI...

CVE-2024-43063

information disclosure while invoking the mailbox read API...

CVE-2024-43063

information disclosure while invoking the mailbox read API...

CVE-2024-43063

Technical details about CVE-2024-43063 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins.

CVE-2024-43063 Buffer Over-read in Automotive Autonomy

information disclosure while invoking the mailbox read API...

CVE-2024-43063 Buffer Over-read in Automotive Autonomy

information disclosure while invoking the mailbox read API...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a series of chipsets from Qualcomm, an American company. A security vulnerability exists in Qualcomm Chipsets that stems from an information disclosure that occurs when calling the Mailbox Read API...

CVE-2024-43063: Buffer Over-read

information disclosure while invoking the mailbox read API...

DEBIAN-CVE-2010-3707

plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain circumstances involving...

PT-2010-5016

Name of the Vulnerable Software and Affected Versions Dovecot versions 1.2.x through 1.2.14 Dovecot versions 2.0.x through 2.0.4 Description The issue allows remote authenticated users to bypass intended access restrictions via a request to read or modify a mailbox, due to incorrect interpretatio...