Search CVE reports

Mailbox/set let sharee change special-use role on shared mailboxes: An authenticated user with maySetKeywords on another user's mailbox could change that mailbox's specialuse annotation. This could allow the sharee to change the...

CalDAV/CardDAV multiget bypasses per-href ACL: An authenticated DAV user with some shared access to another user's calendar or address book could read even unshared events or contacts by including the target hrefs in...

JMAP email-header blob ID out-of-bounds index: An authenticated user could attempt to download a specially crafted JMAP blob ID of the form H<emailid>-<index>, which could read past the end of the internal blob_headers array...

JMAP snooze bypasses destination-mailbox ACL: An authenticated user with insert permissions on another user's snoozed mailbox could cause insertion of mail to that user's inbox, or any other of their mailboxes whose id was known...

(A flaw was found in GLib2. When g_file_replace() is used with G_FILE_C ...)

(commonmark versions from 1.5.0 before 2.8.4 contain a denial of servic ...)

(league/commonmark versions &gt;= 2.0.0 and &lt; 2.8.4 (patched in 2.9.0) con ...)

(commonmark versions from 1.5.0 before 2.8.4 contain a denial of servic ...)

(commonmark versions from 2.0.0 before 2.8.4 contain a denial of servic ...)

(league/commonmark (thephpleague/commonmark) versions &gt;= 2.7.0 and &lt; 2. ...)