CVE-2018-4608

...

CVE-2025-48745

Roundcube Webmail is affected by CVE-2025-49113: an authenticated attacker can exploit PHP object deserialization via the unvalidated _from URL parameter in program/actions/settings/upload.php to achieve remote code execution. Vulnerable versions include Roundcube before 1.5.10 and 1.6.x before 1...

CVE-2020-26862

...

CVE-2025-54974

CVE-2025-54974 entry is rejected/not used and not an active vulnerability.

CVE-2023-22604

...

CVE-2022-42700

CVE-2022-42700 entry is rejected/not used per the initial description.

CVE-2025-48427

This CVE entry CVE-2025-48427 is rejected/not used per Initial Description.

CVE-2018-4591

...

CVE-2018-4775

...

CVE-2025-31523

...

CVE-2023-43956

...

CVE-2019-16811

...

CVE-2018-4773

...

CVE-2025-47863

CVE-2025-47863 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2022-30606

CVE-2022-30606 entry is rejected/unused and does not represent an active vulnerability.

CVE-2018-4605

...

CVE-2022-20128

...

CVE-2020-29401

...

CVE-2023-1842

...

CVE-2022-41855

...