1267 matches found
About Cross Site Scripting – Roundcube Webmail (CVE-2024-37383) vulnerability
About Cross Site Scripting - Roundcube Webmail CVE-2024-37383 vulnerability. Roundcube is a web-based email client with functionality comparable to desktop email clients such as Outlook Express or Mozilla Thunderbird. The vulnerability is caused by an error in the processing of SVG elements in th...
OPENSUSE-SU-2024:0328-1 Security update for roundcubemail
This update for roundcubemail fixes the following issues: Update to 1.6.8 This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities: Fix XSS vulnerability in post-processing of sanitized HTML content CVE-2024-42009 Fi...
VulnCheck KEV: CVE-2024-37383
RoundCube Webmail contains a cross-site scripting XSS vulnerability in the handling of SVG animate attributes that allows a remote attacker to run malicious JavaScript code...
Roundcube TimeZone Authenticated File Disclosure
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Roundcube TimeZone Authenticated File Disclosure', 'Description' = %q Roundcube Webmail allows unauthorized access to arbitrary files on the host...
openSUSE 15 Security Update : roundcubemail (openSUSE-SU-2024:0257-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2024:0257-1 advisory. Update to 1.6.7 This is a security update to the stable version 1.6 of Roundcube Webmail. It provides a fix to a recently reported XSS vulnerabilities: F...
OPENSUSE-SU-2024:0257-1 Security update for roundcubemail
This update for roundcubemail fixes the following issues: Update to 1.6.7 This is a security update to the stable version 1.6 of Roundcube Webmail. It provides a fix to a recently reported XSS vulnerabilities: Fix cross-site scripting XSS vulnerability in handling SVG animate attributes. Reported...
[SECURITY] Fedora 40 Update: roundcubemail-1.6.8-1.fc40
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
Roundcube Webmail 1.5.x < 1.5.8 / 1.6.x < 1.6.8 Multiple Vulnerabilities
The remote web server is running Roundcube Webmail version 1.5.x prior to 1.5.8 or 1.6.x prior to 1.6.8. It is, therefore, affected by multiple vulnerabilities. - A Cross-Site Scripting vulnerability in rcmailactionmailget-run in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote...
Vulnerabilities fixed in RoundCube Webmail
Vulnerabilities have been fixed in RoundCube Webmail. A malicious party could exploit the vulnerabilities to launch a Cross-Site Scripting attack. Such an attack could lead to execution of arbitrary code in the victim's browser, or access to sensitive data in the context of the victim's browser...
Roundcube Webmail Flaws Allow Hackers to Steal Emails and Passwords
Cybersecurity researchers have disclosed details of security flaws in the Roundcube webmail software that could be exploited to execute malicious JavaScript in a victim's web browser and steal sensitive information from their account under specific circumstances. "When a victim views a malicious...
Roundcube Webmail 安全漏洞
Roundcube Webmail is an open source browser-based open source IMAP client from Roundcube that supports address book management, message searching, spell checking, and more. A security vulnerability exists in Roundcube Webmail version 1.5.7 and earlier and version 1.6.x prior to 1.6.8, which stems...
Roundcube Webmail 安全漏洞
Roundcube Webmail is an open source browser-based open source IMAP client from Roundcube that supports address book management, message searching, spell checking, and more. A security vulnerability exists in Roundcube Webmail version 1.5.7 and earlier and version 1.6.x prior to 1.6.8, which stems...
Roundcube Webmail 安全漏洞
Roundcube Webmail is a browser-based open source IMAP client from Roundcube Open Source that supports address book management, message searching, spell checking, and more. A security vulnerability exists in Roundcube Webmail versions 1.5.7 and earlier and 1.6.x before 1.6.8, which stems from an...
The vulnerability of the RoundCube Webmail email client stems from insufficient protection of the website’s structure, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of the RoundCube Webmail email client is related to insufficient protection of the website’s structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using SVG element animation attributes...
The vulnerability of the RoundCube Webmail email client stems from insufficient protection of the website’s structure, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of the RoundCube Webmail email client is related to insufficient protection of the website’s structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using columns from user preferences lists...
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
Roundcube Webmail contains a cross-site scripting XSS vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment...
VulnCheck KEV: CVE-2020-13965
Roundcube Webmail contains a cross-site scripting XSS vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment...
PT-2024-5497
Name of the Vulnerable Software and Affected Versions Roundcube versions prior to 1.5.8 Roundcube versions 1.6.x through 1.6.7 Description A Cross-Site Scripting XSS issue exists in Roundcube Webmail due to improper sanitization in the message body function within the program/actions/mail/show.ph...
[SECURITY] [DLA 3835-1] roundcube security update
Debian LTS Advisory DLA-3835-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin June 17, 2024 https://wiki.debian.org/LTS Package : roundcube Version : 1.3.17+dfsg.1-1deb10u6 CVE ID : CVE-2024-37383 CVE-2024-37384 Debian Bug : 1071474 Cross-site scripting XSS...
