https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 23:42:25 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03234 bdu:2021-03234 https://cve.radiocsirt.org/vuln/bdu:2021-03234 https://cve.radiocsirt.org/vuln/euvd-2026-26228 EUVD-2026-26228 https://cve.radiocsirt.org/vuln/euvd-2026-26228 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29157 <p>Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver.</p> <p>Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-29157 https://cve.radiocsirt.org/vuln/ghsa-89g9-v7q6-px25 <p>Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver.</p> <p>Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver.</p> https://cve.radiocsirt.org/vuln/ghsa-89g9-v7q6-px25 https://cve.radiocsirt.org/vuln/gsd-2021-29157 gsd-2021-29157 https://cve.radiocsirt.org/vuln/gsd-2021-29157 https://cve.radiocsirt.org/vuln/msrc_cve-2021-29157 msrc_CVE-2021-29157 https://cve.radiocsirt.org/vuln/msrc_cve-2021-29157 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0920-1 <p>Security update for dovecot23</p> <p>Security update for dovecot23</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:0920-1 https://cve.radiocsirt.org/vuln/suse-su-2021:2122-1 <p>Security update for dovecot23</p> <p>Security update for dovecot23</p> https://cve.radiocsirt.org/vuln/suse-su-2021:2122-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1536 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Dovecot ausnutzen, um einen Denial of Service Angriff durchzuführen, Benutzerrechte erlangen oder Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Dovecot ausnutzen, um einen Denial of Service Angriff durchzuführen, Benutzerrechte erlangen oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1536