Updated roundcubemail packages fix security vulnerability & bugs

This is a service release to update the stable version 1.3 of Roundcube Webmail. It contains fixes to several bugs backported from the master branch including a security fix for a reported XSS vulnerability in handling invalid style tag content plus updates to ensure compatibility with PHP 7.3 an...

webmail.rgipt.ac.in XSS vulnerability

Open Bug Bounty ID: OBB-698077 Description| Value ---|--- Affected Website:| webmail.rgipt.ac.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

[SECURITY] Fedora 29 Update: roundcubemail-1.3.8-1.fc29

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

Fedora 27 : roundcubemail (2018-d527206a77)

Version 1.3.8 This is a service release to update the stable version 1.3 of Roundcube Webmail. It contains fixes to several bugs backported from the master branch including a security fix for a reported XSS vulnerability plus updates to ensure compatibility with PHP 7.3 and recent versions of...

[SECURITY] Fedora 28 Update: roundcubemail-1.3.8-1.fc28

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

[SECURITY] Fedora 27 Update: roundcubemail-1.3.8-1.fc27

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

JVN#00344155: Multiple vulnerabilities in Denbun

Denbun provided by NEOJAPAN Inc. is a WebMail System. Denbun contains multiple vulnerabilities listed below. Hard-coded credentials for user account CWE-798 - CVE-2018-0680 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score: 9.8 CVSS v2|...

Open-Xchange webmail Cross-Site Scripting Vulnerability

Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-Xchange webmail. A remote...

Microsoft Windows Defender AV: Block executable content from email client and webmail

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavblockexeccontentmail.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Configure Attack Surface Reduction rules: Block executable content from email client and webmail Authors: Emanuel Moss Copyright: Copyright c...

CVE-2017-6913

Cross-site scripting XSS vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag...

Cross site scripting

Cross-site scripting XSS vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag...

CVE-2017-6913

Cross-site scripting XSS vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag...

CVE-2017-6913

Cross-site scripting XSS vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag...

CVE-2017-6913

Open-Xchange AppSuite Open-Xchange Webmail before 7.6.3-rev28 is vulnerable to a Cross-site Scripting (XSS) flaw. The issue allows remote attackers to inject arbitrary web script or HTML through the event attribute in a time tag. The vulnerability is associated with the Open-Xchange webmail compo...

CVE-2018-16324

In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field...

Design/Logic Flaw

In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field...

CVE-2018-16324

In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field...

CVE-2018-16324

IceWarp Server 12.0.3.1 and earlier is affected by a cross-site scripting (XSS) vulnerability in the /webmail/ username field. The issue is confirmed in the CVE-2018-16324 entry and corroborated by NVD references, with CVSS Base Scores 4.3 (4.3) and 6.1 (3.0) indicating a network-exposed vulnerab...

cali.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-671911 Description| Value ---|--- Affected Website:| cali.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Debian DLA-1484-1 : squirrelmail security update

It was discovered that there were a number of Cross Site Scripting XSS vulnerabilities in the squirrelmail webmail client. For Debian 8 'Jessie', these issues has been fixed in squirrelmail version 2:1.4.23svn20120406-2+deb8u3. We recommend that you upgrade your squirrelmail packages. NOTE: Tenab...