Lucene search
+L

2264 matches found

OpenVAS
OpenVAS
added 2016/04/05 12:00 a.m.23 views

Debian Security Advisory DSA 3541-1 (roundcube - security update)

High-Tech Bridge Security Research Lab discovered that Roundcube, a webmail client, contained a path traversal vulnerability. This flaw could be exploited by an attacker to access sensitive files on the server, or even execute arbitrary code. OpenVAS Vulnerability Test $Id: deb3541.nasl 6608...

6CVSS7.8AI score0.22425EPSS
SaveExploits5References1
OSV
OSV
added 2016/04/05 12:00 a.m.18 views

DSA-3541-1 roundcube - security update

Bulletin has no description...

7.5CVSS7.5AI score0.22425EPSS
SaveExploits5
OpenVAS
OpenVAS
added 2016/04/04 12:00 a.m.21 views

Debian: Security Advisory (DSA-3541-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.22425EPSS
SaveExploits5References3
Tenable Nessus
Tenable Nessus
added 2016/03/10 12:00 a.m.26 views

GLSA-201603-03 : Roundcube: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201603-03 Roundcube: Multiple Vulnerabilities Remote authenticated users with certain permissions can read arbitrary files or possibly execute arbitrary code via .. in the skin parameter to index.php. Additionally, a cross-site...

7.5CVSS7.7AI score0.22425EPSS
SaveExploits5References3
Gentoo Linux
Gentoo Linux
added 2016/03/09 12:00 a.m.47 views

Roundcube: Multiple Vulnerabilities

Background Free and open source webmail software for the masses, written in PHP. Description Remote authenticated users with certain permissions can read arbitrary files or possibly execute arbitrary code via .. in the skin parameter to index.php. Additionally, a cross-site scripting XSS...

7.5CVSS7.3AI score0.22425EPSS
SaveExploits5
n0where
n0where
added 2016/02/22 6:09 p.m.19 views

Protecting Personal Information: Freedom Box

FreedomBox is a personal server that protects your privacy. It hosts on demand applications such as file sharing, shared calendaring, instant messaging, secure voice conference calling, blog and wiki. FreedomBox is a free software stack, a subset of the Debian universal operating system, that can...

0.7AI score
SaveExploits0
CNVD
CNVD
added 2016/02/02 12:00 a.m.9 views

Roundcube Absolute Path Traversal Vulnerability

RoundCube Webmail is a browser-based IMAP client that supports address book management, message searching, spell checking and more. An absolute path traversal vulnerability exists in the program/steps/addressbook/photo.inc file in RoundCube Webmail, which allows remote attackers to read arbitrary...

6.5CVSS7AI score0.02119EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/02/02 12:00 a.m.10 views

Roundcube Cross-Site Scripting Vulnerability

RoundCube Webmail is a browser-based IMAP client that supports address book management, message searching, spell checking and more. A cross-site scripting vulnerability exists in the program/include/rcmail.php script of RoundCube Webmail, which allows remote attackers to exploit the vulnerability...

6.1CVSS6.2AI score0.01388EPSS
SaveExploits1References1
NVD
NVD
added 2016/01/29 7:59 p.m.20 views

CVE-2015-8794

Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the alt parameter, related to contact photo handling...

6.5CVSS6.1AI score0.02119EPSS
SaveExploits0References4
OSV
OSV
added 2016/01/29 7:59 p.m.16 views

CVE-2015-8794

Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the alt parameter, related to contact photo handling...

6.5CVSS6.1AI score
SaveExploits0References5
OSV
OSV
added 2016/01/29 7:59 p.m.11 views

DEBIAN-CVE-2015-8794

Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the alt parameter, related to contact photo handling...

6.5CVSS6.8AI score0.02119EPSS
SaveExploits0References1
OSV
OSV
added 2016/01/29 7:59 p.m.11 views

CVE-2015-8793

Cross-site scripting XSS vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the mbox parameter in a mail task to the default URL, a different vulnerability than CVE-2011-2937...

6.1CVSS6AI score
SaveExploits0References6
OSV
OSV
added 2016/01/29 7:59 p.m.6 views

DEBIAN-CVE-2015-8793

Cross-site scripting XSS vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the mbox parameter in a mail task to the default URL, a different vulnerability than CVE-2011-2937...

6.1CVSS6AI score0.01388EPSS
SaveExploits1References1
NVD
NVD
added 2016/01/29 7:59 p.m.17 views

CVE-2015-8793

Cross-site scripting XSS vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the mbox parameter in a mail task to the default URL, a different vulnerability than CVE-2011-2937...

6.1CVSS6AI score0.01388EPSS
SaveExploits1References3
Prion
Prion
added 2016/01/29 7:59 p.m.14 views

Path traversal

Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the alt parameter, related to contact photo handling...

4CVSS6.7AI score0.02119EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2016/01/29 7:59 p.m.18 views

CVE-2015-8770

Directory traversal vulnerability in the setskin function in program/include/rcmailoutputhtml.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a .. dot dot in the skin...

7.5CVSS7.6AI score0.22425EPSS
SaveExploits5References12
Prion
Prion
added 2016/01/29 7:59 p.m.12 views

Directory traversal

Directory traversal vulnerability in the setskin function in program/include/rcmailoutputhtml.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a .. dot dot in the skin...

6CVSS7.8AI score0.22425EPSS
SaveExploits5References12Affected Software1
UbuntuCve
UbuntuCve
added 2016/01/29 7:59 p.m.20 views

CVE-2015-8770

Directory traversal vulnerability in the setskin function in program/include/rcmailoutputhtml.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a .. dot dot in the skin...

7.5CVSS7.4AI score0.22425EPSS
SaveExploits5References2
UbuntuCve
UbuntuCve
added 2016/01/29 7:59 p.m.28 views

CVE-2015-8794

Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the alt parameter, related to contact photo handling...

6.5CVSS6.7AI score0.02119EPSS
SaveExploits0References5
OSV
OSV
added 2016/01/29 7:59 p.m.10 views

CVE-2015-8770

Directory traversal vulnerability in the setskin function in program/include/rcmailoutputhtml.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a .. dot dot in the skin...

7.5CVSS7.6AI score
SaveExploits0References13
Rows per page
Query Builder