Where
-Infinity
0

Trending

Last week
Last month
Last year

Dovecot dovecotDovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always be C…

Risk 27
Severity
5.3
First published (updated )
CVE-2024-25584

Dovecot dovecotVulnerability Details: Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes ex…

Risk 18
Severity
4
First published (updated )
REDHAT-BUG-2305909

Dovecot dovecotAn issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb …

Risk 79
Severity
8.8
First published (updated )
CVE-2022-30550

Fedoraproject FedoraThe Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated …

Risk 22
Severity
4.3
First published (updated )
CVE-2020-28200

Fedoraproject FedoraCommand Injection

Risk 35
Severity
5.8
First published (updated )
CVE-2021-33515
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Fedoraproject FedoraPath Traversal

Risk 53
Severity
7.5
First published (updated )
CVE-2021-29157

debian/dovecotAn issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can …

Risk 52
Severity
6.8
First published (updated )
CVE-2020-24386

debian/dovecotInput Validation

Risk 43
Severity
7.5
First published (updated )
CVE-2020-25275

Fedoraproject FedoraNull Pointer Dereference

Risk 27
Severity
5.3
First published (updated )
CVE-2019-19722

redhat/dovecotIMAP and ManageSieve protocol parsers do not properly handle NUL byte when scanning data in quoted s…

Risk 86
Severity
9.8
First published (updated )
CVE-2019-11500
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Fedoraproject FedoraNull Pointer Dereference

Risk 43
Severity
7.5
First published (updated )
CVE-2019-11494

Fedoraproject FedoraIn the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH …

Risk 43
Severity
7.5
First published (updated )
CVE-2019-11499

Dovecot dovecotThe JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication s…

Risk 43
Severity
7.5
First published (updated )
CVE-2019-10691

debian/dovecotInput Validation

Risk 43
Severity
7.5
First published (updated )
CVE-2017-2669

redhat Enterprise LinuxA postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL…

Risk 18
Severity
3.3
First published (updated )
CVE-2016-4983
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Fedoraproject FedoraThe ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote atta…

Risk 36
Severity
5.9
First published (updated )
CVE-2015-3420

Dovecot dovecotInput Validation

Risk 36
Severity
5.8
First published (updated )
CVE-2011-4318

Dovecot dovecotscript-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration setting…

Risk 46
Severity
6.5
First published (updated )
CVE-2011-2166

Dovecot dovecotPath Traversal

Risk 46
Severity
6.5
First published (updated )
CVE-2011-2167

Dovecot dovecotInput Validation

Risk 27
Severity
5
First published (updated )
CVE-2011-1929
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Dovecot dovecotDovecot has released version 1.2.17 [1] and 2.0.13 [2] to address a potential crash, and possibly ma…

Risk 18
Severity
4
First published (updated )
REDHAT-BUG-706286

Dovecot dovecotThe ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INBOX ACLs to newly created mailboxes in ce…

Risk 40
Severity
6.4
First published (updated )
CVE-2010-3304

Dovecot dovecotDovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installat…

Risk 32
Severity
5.5
First published (updated )
CVE-2009-3897

Dovecot dovecotBuffer Overflow

Risk 52
Severity
7.5
First published (updated )
CVE-2009-3235

Dovecot dovecotPath Traversal

Risk 40
Severity
6.4
First published (updated )
CVE-2008-5301
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Dovecot dovecotInput Validation

Risk 22
Severity
4.3
First published (updated )
CVE-2008-4907

Dovecot dovecotdovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permiss…

Risk 13
Severity
2.1
First published (updated )
CVE-2008-4870

Dovecot dovecotThe ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access …

Risk 43
Severity
7.5
First published (updated )
CVE-2008-4577

Dovecot dovecotThe ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by us…

Risk 26
Severity
5
First published (updated )
CVE-2008-4578

Dovecot dovecotArgument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when usin…

Risk 47
Severity
6.8
First published (updated )
CVE-2008-1218
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203