Lucene search
+L

2480 matches found

OpenVAS
OpenVAS
•added 2022/01/12 12:00 a.m.•11 views

Fedora: Security Advisory for roundcubemail (FEDORA-2022-d7347d9432)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OSV
OSV
•added 2022/01/12 12:00 a.m.•32 views

DLA-2878-1 roundcube - security update

Bulletin has no description...

6.1CVSS6.3AI score0.01045EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2022/01/12 12:00 a.m.•31 views

Debian DLA-2878-1 : roundcube - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2878 advisory. - Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets CSS token sequences. CVE-2021-46144 Note that...

6.1CVSS7.1AI score0.01045EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2022/01/11 12:00 a.m.•25 views

Roundcube Webmail < 1.4.13, 1.5.x < 1.5.2 XSS Vulnerability

Roundcube Webmail is prone to a cross-site scripting XSS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

6.1CVSS6.2AI score0.01045EPSS
SaveExploits0References2
CNVD
CNVD
•added 2022/01/10 12:00 a.m.•106 views

Roundcube Webmail Cross-Site Scripting Vulnerability (CNVD-2022-09795)

Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message search, spell checking, etc. A cross-site scripting vulnerability exists in Roundcube Webmail, and no detailed vulnerability details are currently available...

6.1CVSS0.7AI score0.01045EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2022/01/09 12:00 a.m.•21 views

Debian: Security Advisory (DSA-5037-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.6AI score0.01045EPSS
SaveExploits0References4
Debian
Debian
•added 2022/01/08 9:58 a.m.•73 views

[SECURITY] [DSA 5037-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5037-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 08, 2022 https://www.debian.org/security/faq -...

6.1CVSS6.4AI score0.01045EPSS
SaveExploits0
OSV
OSV
•added 2022/01/08 12:00 a.m.•36 views

DSA-5037-1 roundcube - security update

Bulletin has no description...

6.1CVSS6.3AI score0.01045EPSS
SaveExploits0
OSV
OSV
•added 2022/01/06 5:15 a.m.•31 views

CVE-2021-46144

Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets CSS token sequences...

6.1CVSS5.5AI score
SaveExploits0References7
OSV
OSV
•added 2022/01/06 5:15 a.m.•4 views

DEBIAN-CVE-2021-46144

Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets CSS token sequences...

6.1CVSS6.9AI score0.01045EPSS
SaveExploits0References1
NVD
NVD
•added 2022/01/06 5:15 a.m.•19 views

CVE-2021-46144

Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets CSS token sequences...

6.1CVSS0.01045EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2022/01/06 5:15 a.m.•13 views

CVE-2021-46144

Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets CSS token sequences...

6.1CVSS6.8AI score0.01045EPSS
SaveExploits0References8
Prion
Prion
•added 2022/01/06 5:15 a.m.•26 views

Design/Logic Flaw

Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets CSS token sequences...

4.3CVSS6AI score0.01045EPSS
SaveExploits0References7Affected Software2
UbuntuCve
UbuntuCve
•added 2022/01/06 5:15 a.m.•31 views

CVE-2021-46144

Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets CSS token sequences...

6.1CVSS6.9AI score0.01045EPSS
SaveExploits0References9
OSV
OSV
•added 2022/01/06 5:15 a.m.•10 views

UBUNTU-CVE-2021-46144

Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets CSS token sequences...

6.1CVSS6.9AI score0.01045EPSS
SaveExploits0References10
Debian CVE
Debian CVE
•added 2022/01/06 4:08 a.m.•86 views

CVE-2021-46144

Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets CSS token sequences...

6.1CVSS6.3AI score0.01045EPSS
SaveExploits0
Cvelist
Cvelist
•added 2022/01/06 4:08 a.m.•44 views

CVE-2021-46144

Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets CSS token sequences...

6.3AI score0.01045EPSS
SaveExploits0References7
CVE
CVE
•added 2022/01/06 4:08 a.m.•139 views

CVE-2021-46144

CVE-2021-46144 affects Roundcube Webmail: XSS via an HTML email containing crafted CSS token sequences. Affected versions are Roundcube before 1.4.13 and 1.5.x before 1.5.2. Mitigation: upgrade to 1.4.13+ or 1.5.2+ where patched.

6.1CVSS5.7AI score0.01045EPSS
SaveExploits0References7Affected Software1
CNNVD
CNNVD
•added 2022/01/06 12:00 a.m.•16 views

Roundcube Webmail 跨站脚本漏洞

Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message search, spell checking, etc. A cross-site scripting vulnerability exists in Roundcube Webmail, and no detailed vulnerability details are currently available...

6.1CVSS5.1AI score0.01045EPSS
SaveExploits0References12
NCSC
NCSC
•added 2022/01/06 12:00 a.m.•9 views

Vulnerability fixed in Roundcube Webmail

A vulnerability has been fixed in Roundcube Webmail. A malicious party could exploit the vulnerability to perform a Cross-Site Scripting XSS attack. Such an attack can lead to the execution of arbitrary script code in the browser with which the user opens a rogue e-mail. Roundcube has released...

6.1CVSS6.2AI score0.01045EPSS
SaveExploits0
Rows per page
Query Builder