Lucene search
+L

2743 matches found

BDU FSTEC
BDU FSTEC
•added 2026/05/06 12:00 a.m.•31 views

RoundCube Webmail Remote Image Disclosure

The vulnerability of the delete block function in the RoundCube Webmail email client is related to the lack of validation for incoming requests. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.3CVSS6.3AI score0.0053EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/06 12:00 a.m.•22 views

RoundCube Webmail Input Validation

The vulnerability of the RoundCube Webmail email client is related to the lack of validation for incoming requests. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

5.3CVSS6.6AI score0.00507EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/06 12:00 a.m.•18 views

RoundCube Webmail Removable Blocking Disclosure

The vulnerability of the “deleted image blocking” function in the RoundCube Webmail client lies in the lack of validation during incoming requests. Exploiting this vulnerability allows an attacker to disclose protected information and circumvent existing security restrictions...

8.5CVSS6.2AI score0.00548EPSS
SaveExploits0References9Affected Software2
Redos
Redos
•added 2026/05/06 12:00 a.m.•21 views

ROS-20260506-73-0004

Vulnerability in roundcubemail related to lack of validation of received requests. Exploitation of the vulnerability could allow a remote attacker to disclose protected information...

8.2CVSS7.5AI score0.00548EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/05/05 12:00 a.m.•17 views

RoundCube Webmail Remote Image Disclosure

The vulnerability of the delete block function in the RoundCube Webmail email client is related to the lack of validation for incoming requests. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.3CVSS6.3AI score0.0053EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/05 12:00 a.m.•25 views

RoundCube Webmail Password Plugin Data Compromise

The vulnerability of the password.php script of the RoundCube Webmail email client relates to access to resources through incompatible types. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

4.2CVSS6.4AI score0.00312EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/04 12:00 a.m.•20 views

RoundCube Webmail Disclosure

The vulnerability of the RoundCube Webmail client lies in the lack of validation for incoming requests. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

6.5CVSS6.3AI score0.00386EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/04 12:00 a.m.•18 views

RoundCube Webmail Deserialization File Upload

The vulnerability of the RoundCube Webmail email client is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker who operates remotely to write arbitrary files...

7.8CVSS6.7AI score0.006EPSS
SaveExploits0References10Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/04 12:00 a.m.•16 views

RoundCube Preview Mode XSS

The vulnerability of the preview mode in RoundCube Webmail involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks XSS remotely...

6.4CVSS6.2AI score0.00354EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/04 12:00 a.m.•20 views

RoundCube Webmail CSRF

The vulnerability of the RoundCube Webmail email client is related to the implementation or modification of arguments. Exploiting this vulnerability can allow a malicious actor to perform a CSRF attack remotely...

3.1CVSS6.5AI score0.00364EPSS
SaveExploits0References8Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/04/30 12:00 a.m.•20 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Roundcube Webmail vulnerabilities (USN-8223-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8223-1 advisory. It was discovered that Roundcube Webmail mishandled Punycode xn-- domain names. An attacker could possibl...

9.3CVSS6.7AI score0.66661EPSS
SaveExploits6References8
Tenable Nessus
Tenable Nessus
•added 2026/04/28 12:00 a.m.•19 views

Fedora 44 : roundcubemail (2026-6d293b6889)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6d293b6889 advisory. Version 1.7-rc6 This is hopefully the last release candidate for the next major version 1.7 of Roundcube Webmail. It provides a fix to recently...

8.2CVSS6.5AI score0.00548EPSS
SaveExploits0References9
Fedora
Fedora
•added 2026/04/25 1:53 a.m.•22 views

[SECURITY] Fedora 44 Update: roundcubemail-1.7~rc6-1.fc44

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

8.2CVSS6.2AI score0.00548EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/04/22 12:00 a.m.•19 views

openSUSE 16 Security Update : roundcubemail (openSUSE-SU-2026:20586-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20586-1 advisory. Changes in roundcubemail: - update to 1.6.15 This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to some...

7.5CVSS7.3AI score0.006EPSS
SaveExploits0References4
OPENSUSE Linux
OPENSUSE Linux
•added 2026/04/21 12:00 a.m.•16 views

Security update for roundcubemail (important)

openSUSE security update: security update for roundcubemail ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20586-1 Rating: important References: bsc1261157 bsc1261488 Cross-References: CVE-2026-35537 Affected Products: openSUSE Leap 16.0...

7.5CVSS7.3AI score0.006EPSS
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux
•added 2026/04/20 12:00 a.m.•35 views

Security update for roundcubemail (important)

openSUSE Security Update: Security update for roundcubemail Announcement ID: openSUSE-SU-2026:0144-1 Rating: important References: 1261157 1261488 Cross-References: CVE-2026-35537 Affected Products: openSUSE Backports SLE-15-SP6 An update that solves one vulnerability and has one errata is now...

7.5CVSS7.3AI score0.006EPSS
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux
•added 2026/04/20 12:00 a.m.•20 views

Security update for roundcubemail (important)

openSUSE Security Update: Security update for roundcubemail Announcement ID: openSUSE-SU-2026:0141-1 Rating: important References: 1261157 1261488 Cross-References: CVE-2026-35537 Affected Products: openSUSE Backports SLE-15-SP7 An update that solves one vulnerability and has one errata is now...

7.5CVSS7.3AI score0.006EPSS
SaveExploits0References2
osv_opensuse
osv_opensuse
•added 2026/04/17 9:15 a.m.•13 views

OPENSUSE-SU-2026:20586-1 Security update for roundcubemail

This update for roundcubemail fixes the following issues: Changes in roundcubemail: - update to 1.6.15 This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to some regressions introduced in the previous release as well a recently reported security...

7.5CVSS7.3AI score0.006EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/04/16 2:03 p.m.•240 views

Exploit for Cross-site Scripting in Roundcube Webmail

CVE-2024-42009 – Roundcube Stored XSS Docker PoC 📌 Overv...

9.3CVSS8.9AI score0.82882EPSS
SaveExploits7
GithubExploit
GithubExploit
•added 2026/04/16 1:18 a.m.•291 views

Exploit for Deserialization of Untrusted Data in Roundcube Webmail

CVE-2025-49113 — Roundcube Post-Auth RCE via PHP Object Deseri...

9.9CVSS9.2AI score0.98972EPSS
SaveExploits32
Rows per page
Query Builder