2831 matches found
CVE-2021-44026
Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or searchparams...
CVE-2021-44026
Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or searchparams...
Roundcube Webmail Cross-Site Script Vulnerability
Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message searching, spell checking, and more. Roundcube Webmail suffers from a cross-site scripting vulnerability that originates from XSS when the program handles file extensions of attachments.Th...
CVE-2021-44025: Improper Neutralization of Input During Web Page Generation
Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning message...
CVE-2021-44026: Improper Neutralization of Special Elements used in an SQL Command
Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or searchparams...
CVE-2021-44026
Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or searchparams. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Roundcube Webmail SQL Injection Vulnerability
Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message searching, spell checking, and more. A SQL injection vulnerability exists in Roundcube Webmail, which can be exploited to perform SQL injection via "search" or "searchparams". The followin...
Roundcube -- Multiple vulnerabilities
The Roundcube project reports: XSS issue in handling attachment filename extension in mimetype mismatch warning possible SQL injection via some session variables...
Roundcube Webmail File Disclosure Vulnerability
Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default...
Homograph Attacks
roundcube is vulnerable to homograph attacks. The vulnerability exists due to the way the system mishandles Punycode xn-- domain names which allows an attacker to cause a homograph attack...
Roundcube SMTP Configuration Data Compromise
The vulnerability of the Roundcube email client installer’s SMTP configuration is related to the lack of security measures for the website structure. Exploiting this vulnerability allows an attacker to compromise the integrity of the data...
Roundcube Database Data Compromise
The vulnerability of the Roundcube email client’s host and user database installation is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...
OPENSUSE-SU-2021:0943-1 Security update for roundcubemail
This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting XSS vulnerability via HTML or plain text messages with malicious content. References: - CVE-2020-18670:...
OPENSUSE-SU-2021:0942-1 Security update for roundcubemail
This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting XSS vulnerability via HTML or plain text messages with malicious content. References: - CVE-2020-18670:...
OPENSUSE-SU-2021:0931-1 Security update for roundcubemail
This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting XSS vulnerability via HTML or plain text messages with malicious content. References: - CVE-2020-18670:...
Roundcube Webmail Cross-Site Scripting Vulnerability
Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message searching, spell checking and more. A cross-site scripting vulnerability exists in Roundcube Mail, which originates from the smtp configuration in /installer/test.php. No details of the...
Roundcube Webmail Cross-Site Scripting Vulnerability (CNVD-2021-46553)
Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message searching, spell checking and more. Roundcube Webmail suffers from a cross-site scripting vulnerability that stems from a cross-site scripting XSS vulnerability in Roundcube mail. No detai...
DEBIAN-CVE-2020-18670
Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...
