Lucene search
+L

1267 matches found

OSV
OSV
added 2025/12/18 5:00 a.m.11 views

CVE-2025-68461

Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting XSS vulnerability via the animate tag in an SVG document...

7.2CVSS6.5AI score
SaveExploits0References5
Cvelist
Cvelist
added 2025/12/18 4:54 a.m.33 views

CVE-2025-68460

Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure vulnerability in the HTML style sanitizer...

7.2CVSS0.00278EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/18 4:54 a.m.51 views

CVE-2025-68460

Roundcube Webmail is vulnerable to information disclosure in the HTML style sanitizer for releases before 1.5.12 and 1.6.x before 1.6.12. Multiple advisories (Debian DSA-6087, DLA-4415-1; Fedora packages roundcubemail 1.6.12; EUVD-2025-204036; NVD entry CVE-2025-68460) confirm the issue and point...

7.5CVSS5.8AI score0.00278EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/12/18 4:54 a.m.24 views

CVE-2025-68460

Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure vulnerability in the HTML style sanitizer...

7.2CVSS6.2AI score
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.20 views

Roundcube Webmail 跨站脚本漏洞

Roundcube Webmail is an open source browser-based open source IMAP client from Roundcube that supports address book management, message searching, spell checking, and more. A cross-site scripting vulnerability exists in Roundcube Webmail versions prior to 1.5.12 and 1.6.12 prior to 1.6.12, which...

7.2CVSS5.7AI score0.26842EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/12/18 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2025-68460

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure vulnerability in the HTML style sanitizer. CVE-2025-68460 Note that...

7.5CVSS7AI score0.00278EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.10 views

Roundcube Webmail 安全漏洞

Roundcube Webmail is a browser-based open source IMAP client from Roundcube Open Source that supports address book management, message searching, spell checking, and more. A security vulnerability exists in Roundcube Webmail versions prior to 1.5.12 and 1.6.12 and prior to 1.6.12, which stems fro...

7.5CVSS6AI score0.00278EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/18 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-68461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting XSS vulnerability via the animate tag in an SVG document. CVE-2025-6846...

7.2CVSS7.3AI score0.26842EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2025/12/17 12:00 a.m.8 views

Roundcube Webmail Multiple Vulnerabilities (Dec 2025) - Linux

Roundcube Webmail is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:roundcube:webmail";...

7.5CVSS7.5AI score0.26842EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/12/13 12:00 a.m.10 views

PT-2025-51990

Name of the Vulnerable Software and Affected Versions Roundcube versions prior to 1.5.12 Roundcube versions prior to 1.6.12 Description An information disclosure issue exists in the HTML style sanitizer component of Roundcube Webmail. The issue could allow for the disclosure of information...

7.5CVSS5.9AI score0.00278EPSS
SaveExploits0References27
Positive Technologies
Positive Technologies
added 2025/12/13 12:00 a.m.15 views

PT-2025-51991

Name of the Vulnerable Software and Affected Versions Roundcube versions prior to 1.5.12 Roundcube versions prior to 1.6.12 Description Roundcube Webmail contains a Cross-Site Scripting XSS issue stemming from the use of the animate tag within SVG documents. This allows attackers to execute...

7.2CVSS5.7AI score0.26842EPSS
SaveExploits1References90
Hacker One
Hacker One
added 2025/11/27 8:51 p.m.22 views

Nextcloud: Roundcube Webmail Style Sanitizer can be bypassed using CSS Character Escapes

A vulnerability was discovered in the style sanitizer of Roundcube Webmail that allowed bypassing the sanitizer using CSS character escapes. This enabled the use of arbitrary inline CSS, such as the url function, which could be used to retrieve the IP address and user agent of the person reading...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2011-1494

Malware in sbrugna...

3.5CVSS6.1AI score0.01519EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-6138

Malware in sbrugna...

6.1CVSS6.4AI score0.01038EPSS
SaveExploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2011-1495

Malware in sbrugna...

5.5CVSS6.1AI score0.01763EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2015-5337

Malware in sbrugna...

6.1CVSS6.6AI score0.02679EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2012-5988

Malware in sbrugna...

4.3CVSS6AI score0.02048EPSS
SaveExploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2012-3463

Malware in sbrugna...

4.3CVSS8.3AI score0.04198EPSS
SaveExploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2013-1900

Malware in sbrugna...

5CVSS6.1AI score0.02287EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2009-0417

Malware in sbrugna...

4.3CVSS6.1AI score0.0198EPSS
SaveExploits1References8
Rows per page
Query Builder