cyrusimap kayıtları
cyrusimap üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %80
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-131 Incorrect Calculation of Buffer Size1
- CWE-193 Off-by-one Error1
- CWE-20 Improper Input Validation1
- CWE-770 Allocation of Resources Without Limits or Throttling1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2002-1347İstismar yok | Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute acyrusimap · cyrus sasl · CWE-131 | Kritik9,8 | — | %7,0 | 18 Ara 2002 |
36İzleyin | CVE-2022-24407İstismar yok | In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.cyrusimap · cyrus-sasl · CWE-89 | Yüksek8,8 | — | %4,1 | 24 Şub 2022 |
32İzleyin | CVE-2019-19906İstismar yok | cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformecyrusimap · cyrus-sasl · CWE-193 | Yüksek7,5 | — | %8,0 | 19 Ara 2019 |
26İzleyin | CVE-2017-12843İstismar yok | Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted (1) SYNCAPPLY, (2) SYNCGET or (3) SYNCREcyrusimap · cyrus imap · CWE-20 | Orta6,5 | — | %1,2 | 22 Ağu 2017 |
26İzleyin | CVE-2024-34055İstismar yok | Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITcyrusimap · cyrus imap · CWE-770 | Orta6,5 | — | %0,8 | 5 Haz 2024 |
- CVE-2002-134741Planlayın
Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute a
KritikCVSS 9,8İstismar yokEPSS %7cyrusimap · cyrus sasl18 Ara 2002
- CVE-2022-2440736İzleyin
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
YüksekCVSS 8,8İstismar yokEPSS %4cyrusimap · cyrus-sasl24 Şub 2022
- CVE-2019-1990632İzleyin
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malforme
YüksekCVSS 7,5İstismar yokEPSS %8cyrusimap · cyrus-sasl19 Ara 2019
- CVE-2017-1284326İzleyin
Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted (1) SYNCAPPLY, (2) SYNCGET or (3) SYNCRE
OrtaCVSS 6,5İstismar yokEPSS %1cyrusimap · cyrus imap22 Ağu 2017
- CVE-2024-3405526İzleyin
Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LIT
OrtaCVSS 6,5İstismar yokEPSS %0cyrusimap · cyrus imap5 Haz 2024