CVE-2026-47085

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH token forgery can occur via a missing mboxkey. If an attacker knew a folder name on the victim's account for which the victim had never issued an auth URL, they could forge a working URLAUTH token by computing an HMAC-SH...

PT-2014-6099

Name of the Vulnerable Software and Affected Versions IBM Content Collector versions 4.0.0.x before 4.0.0.0-ICC-OE-IF004 Description The issue allows local users to bypass the intended Reviewer privilege requirement and read e-mail messages from an arbitrary mailbox by invoking the Search functio...