CVE-2020-26342

...

CVE-2024-45380

...

CVE-2022-37408

CVE-2022-37408 entry is rejected/not used and does not represent an active vulnerability.

CVE-2018-4643

...

CVE-2013-5262

...

CVE-2021-33065

...

CVE-2025-48745

Roundcube Webmail is affected by CVE-2025-49113: an authenticated attacker can exploit PHP object deserialization via the unvalidated _from URL parameter in program/actions/settings/upload.php to achieve remote code execution. Vulnerable versions include Roundcube before 1.5.10 and 1.6.x before 1...

CVE-2022-32472

...

CVE-2022-32952

...

CVE-2022-42857

...

CVE-2022-42741

...

CVE-2013-0965

...

CVE-2013-5272

...

CVE-2013-5237

...

CVE-2013-5251

...

CVE-2013-5268

...

CVE-2013-5246

...

CVE-2013-5258

...

CVE-2013-5236

...

CVE-2013-5292

...