CVE Tools
Track your stack

Project-cyrus

3 CVEs tracked since 2015. Since Dec 2015, none of them reached CISA KEV.

Project-cyrus CVEs per month

Dec 2015 to Dec 2015. Point at a month, or focus the strip and use the arrow keys.
Project-cyrus CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2015-1230

Products

The products that kept showing up in Project-cyrus's monthly top three, with their CVEs summed over those months.

  1. Cyrus Imap31 month

Latest CVEs

The 11 most recently published vulnerabilities affecting Project-cyrus.

  1. CVE-2024-34055Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.6.5
  2. CVE-2022-24807net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access6.5
  3. CVE-2022-24407In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.8.8
  4. CVE-2021-33582Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction. Because there are many inserti...7.5
  5. CVE-2021-32056Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall.4.3
  6. CVE-2019-19906cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by...7.5
  7. CVE-2019-19783An issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8. If sieve script uploading is allowed (3.x) or certain non-default sieve options are enabled (2.x),...6.5
  8. CVE-2019-11356The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iC...9.8
  9. CVE-2015-8078Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range chec...7.5
  10. CVE-2015-8077Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range chec...7.5
  11. CVE-2015-8076The index_urlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2.5.x before 2.5.4 allows remote attackers to obtain sensitive information or possibly have unspecifie...7.5

The record

Peak rank
#52 in Dec 2015
Busiest month shown
Dec 2015, 3 CVEs
Months with a KEV entry
0 since Dec 2015
Monthly snapshots
1 since 2015
Project-cyrus's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store