CY
Vendor
Cyrus
22
CVEs
0
On KEV
0
New 30D
Products
IM9.8
Imap
Cyrus
14 CVEs0 on KEV0 new
SA–
Sasl
Cyrus
4 CVEs0 on KEV0 new
IM–
Imapd
Cyrus
3 CVEs0 on KEV0 new
LI–
Libsieve
Cyrus
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-61915 | IM Imap Cyrus | 7.1 | Sep 9 | An issue was discovered in Cyrus IMAP before 3.12.4 |
| CVE-2026-61911 | IM Imap Cyrus | 4.3 | Sep 9 | An issue was discovered in Cyrus IMAP before 3.12.4 |
| CVE-2026-61910 | IM Imap Cyrus | 5.0 | Sep 9 | An issue was discovered in Cyrus IMAP before 3.12.4 |
| CVE-2026-61909 | IM Imap Cyrus | 4.3 | Sep 9 | An issue was discovered in Cyrus IMAP before 3.12.4 |
| CVE-2026-61908 | IM Imap Cyrus | 6.5 | Sep 9 | An issue was discovered in Cyrus IMAP before 3.12.4 |
| CVE-2021-33582 | IM Imap Cyrus | 7.5 | Sep 1 | Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction |
| CVE-2021-32056 | IM Imap Cyrus | 4.3 | May 10 | Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause… |
| CVE-2019-19783 | IM Imap Cyrus | 6.5 | Dec 16 | An issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8 |
| CVE-2019-18928 | IM Imap Cyrus | 9.8 | Nov 15 | Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP request may be interpreted in the authentication context of an unrelated previous… |
| CVE-2019-11356 | IM Imap Cyrus | 9.8 | Jun 3 | The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an… |
| CVE-2017-14230 | IM Imap Cyrus | 9.1 | Sep 10 | In the mboxlist_do_find function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one error in prefix calculation for the LIST command caused use of uninitialized memory,… |
| CVE-2015-8078 | IM Imap Cyrus | – | Dec 3 | Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to… |
| CVE-2015-8077 | IM Imap Cyrus | – | Dec 3 | Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to… |
| CVE-2015-8076 | IM Imap Cyrus | – | Dec 3 | The index_urlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2.5.x before 2.5.4 allows remote attackers to obtain sensitive information or… |
| CVE-2011-3372 | IM Imapd Cyrus | – | Dec 24 | imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an… |
| CVE-2006-2502 | IM Imapd Cyrus | – | May 22 | Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long… |
| CVE-2006-1721 | SA Sasl Cyrus | – | Apr 11 | digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to… |
| CVE-2005-0546 | IM Imapd Cyrus | – | May 2 | Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one… |
| CVE-2004-0884 | SA Sasl Cyrus | – | Jan 27 | The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users… |
| CVE-2005-0373 | SA Sasl Cyrus | – | Oct 7 | Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows… |
| CVE-2002-2253 | LI Libsieve Cyrus | – | Dec 31 | Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via (1) a long header name, (2) a long IMAP flag, or (3) a… |
| CVE-2002-2043 | SA Sasl Cyrus | – | Dec 31 | SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as… |