Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 7

Количество 7

github логотип

GHSA-cq8p-2j3r-5hxq

около 2 месяцев назад

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH functionality. Update to non-vulnerable version. No publicly available exploits are known.

CVSS3: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2026-42392

около 2 месяцев назад

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH functionality. Update to non-vulnerable version. No publicly available exploits are known.

CVSS3: 4.3
EPSS: Низкий
redhat логотип

CVE-2026-42392

около 2 месяцев назад

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH functionality. Update to non-vulnerable version. No publicly available exploits are known.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2026-42392

около 2 месяцев назад

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH functionality. Update to non-vulnerable version. No publicly available exploits are known.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2026-42392

около 2 месяцев назад

An attacker that has valid credentials can send an invalid IMAP URLFET ...

CVSS3: 4.3
EPSS: Низкий
altlinux логотип

ALT-PU-2026-14280

около 2 месяцев назад

ALT-PU-2026-14280: package `dovecot` update to version 2.4.5-alt1

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:21720-1

около 2 месяцев назад

Security update for dovecot24

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-cq8p-2j3r-5hxq

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH functionality. Update to non-vulnerable version. No publicly available exploits are known.

CVSS3: 4.3
0%
Низкий
около 2 месяцев назад
ubuntu логотип
CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH functionality. Update to non-vulnerable version. No publicly available exploits are known.

CVSS3: 4.3
0%
Низкий
около 2 месяцев назад
redhat логотип
CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH functionality. Update to non-vulnerable version. No publicly available exploits are known.

CVSS3: 4.3
0%
Низкий
около 2 месяцев назад
nvd логотип
CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH functionality. Update to non-vulnerable version. No publicly available exploits are known.

CVSS3: 4.3
0%
Низкий
около 2 месяцев назад
debian логотип
CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFET ...

CVSS3: 4.3
0%
Низкий
около 2 месяцев назад
altlinux логотип
ALT-PU-2026-14280

ALT-PU-2026-14280: package `dovecot` update to version 2.4.5-alt1

CVSS3: 7.5
около 2 месяцев назад
suse-cvrf логотип
openSUSE-SU-2026:21720-1

Security update for dovecot24

около 2 месяцев назад

Уязвимостей на страницу