2480 matches found
Roundcube Webmail Cross-Site Scripting Vulnerability (CNVD-2020-46295)
Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message searching, spell checking and more. A cross-site scripting vulnerability exists in Roundcube Webmail versions prior to 1.4.8. The vulnerability stems from a lack of proper validation of...
Debian: Security Advisory (DSA-4744-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEBIAN-CVE-2020-16145
Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15...
CVE-2020-16145
Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15...
CVE-2020-16145
Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15...
CVE-2020-16145
Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15...
Cross site scripting
Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15...
UBUNTU-CVE-2020-16145
Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15...
CVE-2020-16145
CVE-2020-16145 affects Roundcube Webmail prior to 1.3.15 and 1.4.8, where a crafted SVG in HTML messages can trigger stored XSS during display. Advisories confirm fixes in 1.3.15 and 1.4.8; remediation is to upgrade to these versions or newer. Occurrence details are supported by OpenSUSE/Tenable/...
CVE-2020-16145
Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15...
CVE-2020-16145
Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15...
[SECURITY] [DSA 4744-1] roundcube security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4744-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 12, 2020 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4744-1] roundcube security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4744-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 12, 2020 https://www.debian.org/security/faq -...
CVE-2020-16145: Improper Neutralization of Input During Web Page Generation
Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15...
DSA-4744-1 roundcube - security update
Bulletin has no description...
Debian DSA-4744-1 : roundcube - security update
It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, is prone to cross-site scripting vulnerabilities in handling invalid svg and math tag content. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
Debian DLA-2322-1 : roundcube security update
A vulnerability was discovered in roundcube, a skinnable AJAX based webmail solution for IMAP servers. HTML messages with malicious svg or math content can exploit a Cross-site scripting XSS vulnerability. For Debian 9 stretch, this problem has been fixed in version 1.2.3+dfsg.1-4+deb9u7. We...
[SECURITY] [DLA 2322-1] roundcube security update
Debian LTS Advisory DLA-2322-1 [email protected] https://www.debian.org/lts/security/ August 11, 2020 https://wiki.debian.org/LTS Package : roundcube Version : 1.2.3+dfsg.1-4+deb9u7 CVE ID : CVE-2020-16145 Debian Bug : 968216 A vulnerability was discovered in roundcube, a skinnable AJAX...