Поиск уязвимостей
Количество 35
Количество 35
CVE-2021-33515
The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address.
CVE-2021-33515
The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address.
CVE-2021-33515
The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address.
CVE-2021-33515
The submission service in Dovecot before 2.3.15 allows STARTTLS comman ...
CVE-2021-29157
Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver.
CVE-2021-29157
Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver.
CVE-2021-29157
Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver.
CVE-2021-29157
Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver.
CVE-2021-29157
Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with acce ...
RLSA-2022:1950
Moderate: dovecot security update
GHSA-pwmq-cvcm-r5p2
The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address.
ELSA-2022-1950
ELSA-2022-1950: dovecot security update (MODERATE)
BDU:2021-03236
Уязвимость почтового сервера Dovecot, связанная с неверной нейтрализация особых элементов в выходных данных, используемых входящим компонентом, позволяющая нарушителю раскрыть учетные данные пользователей
GHSA-89g9-v7q6-px25
Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver.
BDU:2021-03234
Уязвимость почтового сервера Dovecot, связанная с ошибками экранирования полей kid и azp в токенах JWT, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-33515 The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address. | CVSS3: 4.2 | 3% Низкий | больше 5 лет назад |
 | CVE-2021-33515 The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address. | CVSS3: 4.8 | 3% Низкий | больше 5 лет назад |
 | CVE-2021-33515 The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address. | CVSS3: 4.8 | 3% Низкий | почти 5 лет назад |
| CVE-2021-33515 The submission service in Dovecot before 2.3.15 allows STARTTLS comman ... | CVSS3: 4.8 | 3% Низкий | больше 5 лет назад |
 | CVE-2021-29157 Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver. | CVSS3: 5.5 | 0% Низкий | больше 5 лет назад |
| CVE-2021-29157 Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver. | CVSS3: 6.3 | 0% Низкий | больше 5 лет назад |
| CVE-2021-29157 Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver. | CVSS3: 5.5 | 0% Низкий | больше 5 лет назад |
| CVE-2021-29157 Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver. | CVSS3: 5.5 | 0% Низкий | почти 5 лет назад |
| CVE-2021-29157 Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with acce ... | CVSS3: 5.5 | 0% Низкий | больше 5 лет назад |
 | RLSA-2022:1950 Moderate: dovecot security update | 3% Низкий | больше 4 лет назад | |
| GHSA-pwmq-cvcm-r5p2 The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address. | CVSS3: 4.8 | 3% Низкий | больше 4 лет назад |
| ELSA-2022-1950 ELSA-2022-1950: dovecot security update (MODERATE) | 3% Низкий | больше 4 лет назад | |
 | BDU:2021-03236 Уязвимость почтового сервера Dovecot, связанная с неверной нейтрализация особых элементов в выходных данных, используемых входящим компонентом, позволяющая нарушителю раскрыть учетные данные пользователей | CVSS3: 4.2 | 3% Низкий | больше 5 лет назад |
| GHSA-89g9-v7q6-px25 Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver. | 0% Низкий | больше 4 лет назад | |
| BDU:2021-03234 Уязвимость почтового сервера Dovecot, связанная с ошибками экранирования полей kid и azp в токенах JWT, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 5.1 | 0% Низкий | больше 5 лет назад |
Уязвимостей на страницу