Skip to content
Noroxi

cyrus records

22 published records for vendor cyrus.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 4.5%
Pre-auth RCE
6
With a fix record
81.8%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 21
  4. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

22 records
  • CVE-2002-2253
    42Plan

    Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via (1) a long header

    CriticalCVSS 10.0No exploitEPSS 6%

    cyrus · libsieveDec 31, 2002

  • CVE-2019-11356
    41Plan

    The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via

    CriticalCVSS 9.8No exploitEPSS 7%

    cyrus · imapJun 3, 2019

  • CVE-2006-2502
    40Plan

    Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allows remote attackers t

    MediumCVSS 5.1WeaponizedEPSS 53%

    cyrus · imapdMay 22, 2006

  • CVE-2019-18928
    40Plan

    Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP request may be interpreted in the authentic

    CriticalCVSS 9.8No exploitEPSS 2%

    cyrus · imapNov 15, 2019

  • CVE-2017-14230
    37Monitor

    In the mboxlist_do_find function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one error in prefix calculation for the LIST comma

    CriticalCVSS 9.1No exploitEPSS 2%

    cyrus · imapSep 10, 2017

  • CVE-2005-0546
    31Monitor

    Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imap

    HighCVSS 7.5No exploitEPSS 4%

    cyrus · imapdMay 2, 2005

  • CVE-2005-0373
    31Monitor

    Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL bu

    HighCVSS 7.5No exploitEPSS 3%

    cyrus · saslOct 7, 2004

  • CVE-2011-3372
    31Monitor

    imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an A

    HighCVSS 7.5No exploitEPSS 3%

    cyrus · imapdDec 24, 2011

  • CVE-2015-8076
    31Monitor

    The index_urlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2.5.x before 2.5.4 allows remote attackers to

    HighCVSS 7.5No exploitEPSS 3%

    cyrus · imapDec 3, 2015

  • CVE-2015-8077
    31Monitor

    Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unsp

    HighCVSS 7.5No exploitEPSS 3%

    cyrus · imapDec 3, 2015

  • CVE-2021-33582
    31Monitor

    Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled duri

    HighCVSS 7.5No exploitEPSS 3%

    cyrus · imapSep 1, 2021

  • CVE-2015-8078
    31Monitor

    Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unsp

    HighCVSS 7.5No exploitEPSS 2%

    cyrus · imapDec 3, 2015

  • CVE-2002-2043
    30Monitor

    SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute a

    HighCVSS 7.5No exploitEPSS 1%

    cyrus · saslDec 31, 2002

  • CVE-2004-0884
    28Monitor

    The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available S

    HighCVSS 7.2No exploitEPSS 0%

    cyrus · saslJan 27, 2005

  • CVE-2026-61915
    28Monitor

    An issue was discovered in Cyrus IMAP before 3.12.4.

    HighCVSS 7.1No exploitEPSS 0%

    cyrus · imapSep 9, 2026

  • CVE-2019-19783
    26Monitor

    An issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8.

    MediumCVSS 6.5No exploitEPSS 1%

    cyrus · imapDec 16, 2019

  • CVE-2026-61908
    26Monitor

    An issue was discovered in Cyrus IMAP before 3.12.4.

    MediumCVSS 6.5No exploitEPSS 0%

    cyrus · imapSep 9, 2026

  • CVE-2026-61910
    20Monitor

    An issue was discovered in Cyrus IMAP before 3.12.4.

    MediumCVSS 5.0No exploitEPSS 0%

    cyrus · imapSep 9, 2026

  • CVE-2021-32056
    18Monitor

    Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on serve

    MediumCVSS 4.3No exploitEPSS 1%

    cyrus · imapMay 10, 2021

  • CVE-2026-61911
    17Monitor

    An issue was discovered in Cyrus IMAP before 3.12.4.

    MediumCVSS 4.3No exploitEPSS 0%

    cyrus · imapSep 9, 2026

  • CVE-2026-61909
    17Monitor

    An issue was discovered in Cyrus IMAP before 3.12.4.

    MediumCVSS 4.3No exploitEPSS 0%

    cyrus · imapSep 9, 2026

  • CVE-2006-1721
    11Monitor

    digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allo

    LowCVSS 2.6No exploitEPSS 2%

    cyrus · saslApr 11, 2006