2113 matches found
Arbitrary Password Reset
Roundcube is vulnerable to arbitrary password resets. The vulnerability existed because of an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin...
Cross-Site Scripting (XSS)
roundcube is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via HTML messages during message display...
PT-2020-5797
Name of the Vulnerable Software and Affected Versions: Roundcube Webmail versions 1.2.0 through 1.2.12 Roundcube Webmail versions 1.3.x through 1.3.15 Roundcube Webmail versions 1.4.x through 1.4.9 Description: An issue was discovered in Roundcube Webmail, where the linkref addindex function in...
The vulnerability of the wash_uri function (rcube_washtml.php) in the RoundCube Webmail email client allows an attacker to compromise the integrity of data by exploiting vulnerabilities in the security measures protecting web page structures.
The vulnerability of the washuri function in the RoundCube Webmail client is related to deficiencies in the security measures used to protect website structures. Exploiting this vulnerability allows an attacker to compromise the integrity of data...
[SECURITY] Fedora 32 Update: roundcubemail-1.4.8-1.fc32
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
[SECURITY] Fedora 31 Update: roundcubemail-1.4.8-1.fc31
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
Fedora: Security Advisory for roundcubemail (FEDORA-2020-d0f8f20cfc)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
The vulnerability of AJAX-based IMAP servers like Roundcube lies in the lack of protection for website structure, allowing attackers to compromise data integrity.
The vulnerability of AJAX-based IMAP servers like Roundcube is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows an attacker to compromise the integrity of data...
The vulnerability of AJAX-based Roundcube IMAP servers lies in their lack of mechanisms to prevent cross-site fraud, allowing attackers to cause service failures.
The vulnerability of AJAX-based IMAP servers like Roundcube is related to deficiencies in mechanisms for combating cross-site fraud. Exploiting this vulnerability allows a malicious actor to cause service failures...
The vulnerability of the RoundCube Webmail email client, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.
The vulnerability of the RoundCube Webmail email client is related to deficiencies in the security measures used to protect website structures. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...
The vulnerability in webmail for AJAX Roundcube-based IMAP servers relates to deficiencies in the security measures used to protect website structures. This vulnerability allows attackers to compromise data integrity.
The vulnerability of webmail for IMAP servers based on AJAX Roundcube is related to deficiencies in the security measures used to protect website structures. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...
The vulnerability of the RoundCube Webmail email client, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.
The vulnerability of the RoundCube Webmail email client is related to deficiencies in the security measures used to protect website structures. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...
Roundcube Webmail Command Injection (CVE-2020-12641)
A command injection vulnerability exists in Roundcube Webmail . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Debian: Security Advisory (DLA-2322-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Roundcube Webmail Cross-Site Scripting Vulnerability (CNVD-2020-46295)
Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message searching, spell checking and more. A cross-site scripting vulnerability exists in Roundcube Webmail versions prior to 1.4.8. The vulnerability stems from a lack of proper validation of...
Debian: Security Advisory (DSA-4744-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-16145
Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15...
CVE-2020-16145
Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15...
