2399 matches found
ROS-20260507-73-0005
Vulnerability in roundcubemail related to lack of validation of received requests. Exploitation of the vulnerability could allow a remote attacker to disclose protected information...
ROS-20260507-73-0004
Vulnerability in roundcubemail related to data type confusion errors. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
ROS-20260507-73-0001
Vulnerability in roundcubemail related to lack of validation of received requests. Exploitation of the vulnerability could allow a remote attacker to disclose protected information...
The vulnerability of the RoundCube Webmail email client lies in the lack of validation for incoming requests, allowing attackers to circumvent security restrictions.
The vulnerability of the RoundCube Webmail email client is related to the lack of validation for incoming requests. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
The vulnerability of the “removable blocking” function in the RoundCube Webmail email client allows attackers to disclose protected information and circumvent existing security restrictions.
The vulnerability of the “deleted image blocking” function in the RoundCube Webmail client lies in the lack of validation during incoming requests. Exploiting this vulnerability allows an attacker to disclose protected information and circumvent existing security restrictions...
ROS-20260506-73-0004
Vulnerability in roundcubemail related to lack of validation of received requests. Exploitation of the vulnerability could allow a remote attacker to disclose protected information...
The vulnerability of the remote image blocking function in the RoundCube Webmail client allows attackers to disclose protected information.
The vulnerability of the delete block function in the RoundCube Webmail email client is related to the lack of validation for incoming requests. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability in the password.php script of the RoundCube Webmail email client’s password plugin allows an attacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the password.php script of the RoundCube Webmail email client relates to access to resources through incompatible types. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...
The vulnerability of the remote image blocking function in the RoundCube Webmail client allows attackers to disclose protected information.
The vulnerability of the delete block function in the RoundCube Webmail email client is related to the lack of validation for incoming requests. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the RoundCube Webmail email client, which can be exploited by introducing or modifying arguments, allows attackers to perform CSRF attacks.
The vulnerability of the RoundCube Webmail email client is related to the implementation or modification of arguments. Exploiting this vulnerability can allow a malicious actor to perform a CSRF attack remotely...
The vulnerability of the RoundCube Webmail email client, which stems from the lack of validation for incoming requests, allows attackers to disclose protected information.
The vulnerability of the RoundCube Webmail client lies in the lack of validation for incoming requests. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
The vulnerability of the RoundCube Webmail email client, related to deficiencies in the deserialization mechanism, allows attackers to upload arbitrary files.
The vulnerability of the RoundCube Webmail email client is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker who operates remotely to write arbitrary files...
The vulnerability of the preview mode in the RoundCube Webmail client allows attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the preview mode in RoundCube Webmail involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks XSS remotely...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Roundcube Webmail vulnerabilities (USN-8223-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8223-1 advisory. It was discovered that Roundcube Webmail mishandled Punycode xn-- domain names. An attacker could possibl...
Fedora 44 : roundcubemail (2026-6d293b6889)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6d293b6889 advisory. Version 1.7-rc6 This is hopefully the last release candidate for the next major version 1.7 of Roundcube Webmail. It provides a fix to recently...
[SECURITY] Fedora 44 Update: roundcubemail-1.7~rc6-1.fc44
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
openSUSE 16 Security Update : roundcubemail (openSUSE-SU-2026:20586-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20586-1 advisory. Changes in roundcubemail: - update to 1.6.15 This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to some...
Security update for roundcubemail (important)
openSUSE security update: security update for roundcubemail ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20586-1 Rating: important References: bsc1261157 bsc1261488 Cross-References: CVE-2026-35537 Affected Products: openSUSE Leap 16.0...
Security update for roundcubemail (important)
openSUSE Security Update: Security update for roundcubemail Announcement ID: openSUSE-SU-2026:0141-1 Rating: important References: 1261157 1261488 Cross-References: CVE-2026-35537 Affected Products: openSUSE Backports SLE-15-SP7 An update that solves one vulnerability and has one errata is now...
Security update for roundcubemail (important)
openSUSE Security Update: Security update for roundcubemail Announcement ID: openSUSE-SU-2026:0144-1 Rating: important References: 1261157 1261488 Cross-References: CVE-2026-35537 Affected Products: openSUSE Backports SLE-15-SP6 An update that solves one vulnerability and has one errata is now...