CVE-2020-26368

...

CVE-2013-5237

...

CVE-2020-26349

...

CVE-2021-23108

...

CVE-2022-32723

...

CVE-2019-8862

...

CVE-2020-12591

...

CVE-2020-26369

...

CVE-2024-6464

...

CVE-2025-2504

...

CVE-2025-32759

...

CVE-2022-39919

...

CVE-2013-5292

...

CVE-2023-33624

...

CVE-2025-55025

...

CVE-2023-39816

...

CVE-2018-4608

...

CVE-2025-48745

Roundcube Webmail is affected by CVE-2025-49113: an authenticated attacker can exploit PHP object deserialization via the unvalidated _from URL parameter in program/actions/settings/upload.php to achieve remote code execution. Vulnerable versions include Roundcube before 1.5.10 and 1.6.x before 1...

CVE-2020-26862

...

CVE-2024-23338

CVE-2024-53427 vulnerability in jq (through 1.7.1) stems from decNumberCopy handling where NaN is treated as numeric, causing a stack-based buffer overflow and out-of-bounds write (demonstrated with patterns like .-. on inputs such as "1 NaN123" followed by many digits). A patched version exists:...