Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

2216 matches found

AlpineLinux
AlpineLinux•added 2017/04/29 7:00 p.m.•81 views

CVE-2017-8114

Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.x before 1.2.5. The problem is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin...

8.8CVSS8.7AI score0.03471EPSS
SaveExploits1
CVE
CVE•added 2017/04/29 7:00 p.m.•123 views

CVE-2017-8114

CVE-2017-8114: Roundcube Webmail vulnerability where authenticated users can arbitrarily reset passwords due to an improperly restricted exec call in the password plugin’s virtualmin and sasl drivers. Affected: <1.0.11, 1.1.x <1.1.9, 1.2.x

8.8CVSS8.5AI score0.03471EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE•added 2017/04/29 7:00 p.m.•60 views

CVE-2017-8114

Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.x before 1.2.5. The problem is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin...

8.8CVSS8.7AI score0.03471EPSS
SaveExploits1
Positive Technologies
Positive Technologies•added 2017/04/29 12:00 a.m.•9 views

PT-2017-18124

Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 1.0.11 Roundcube Webmail versions 1.1.x before 1.1.9 Roundcube Webmail versions 1.2.x before 1.2.5 Description The issue allows arbitrary password resets by authenticated users due to an improperly restricte...

9.8CVSS7AI score0.84456EPSS
SaveExploits13References42
FreeBSD
FreeBSD•added 2017/04/28 12:00 a.m.•37 views

roundcube -- arbitrary password resets

Roundcube reports: Roundcube Webmail allows arbitrary password resets by authenticated users. The problem is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin...

8.8CVSS4.8AI score0.03471EPSS
SaveExploits1References1
NVD
NVD•added 2017/04/13 2:59 p.m.•21 views

CVE-2015-8864

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

6.1CVSS6AI score0.02691EPSS
SaveExploits0References8
OSV
OSV•added 2017/04/13 2:59 p.m.•6 views

DEBIAN-CVE-2015-8864

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

6.1CVSS6.1AI score0.02691EPSS
SaveExploits0References1
NVD
NVD•added 2017/04/13 2:59 p.m.•23 views

CVE-2016-4068

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864...

6.1CVSS6AI score0.02522EPSS
SaveExploits0References8
OSV
OSV•added 2017/04/13 2:59 p.m.•10 views

CVE-2015-8864

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

6.1CVSS6AI score
SaveExploits0References9
OSV
OSV•added 2017/04/13 2:59 p.m.•4 views

DEBIAN-CVE-2016-4068

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864...

6.1CVSS6AI score0.02522EPSS
SaveExploits0References1
OSV
OSV•added 2017/04/13 2:59 p.m.•33 views

CVE-2016-4068

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864...

6.1CVSS5.6AI score
SaveExploits0References8
Prion
Prion•added 2017/04/13 2:59 p.m.•25 views

Cross site scripting

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

4.3CVSS5.9AI score0.02691EPSS
SaveExploits0References8Affected Software4
OSV
OSV•added 2017/04/13 2:59 p.m.•8 views

UBUNTU-CVE-2016-4068

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864...

6.1CVSS7AI score0.02522EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve•added 2017/04/13 2:59 p.m.•26 views

CVE-2016-4068

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864...

6.1CVSS7AI score0.02522EPSS
SaveExploits0References3
OSV
OSV•added 2017/04/13 2:59 p.m.•8 views

UBUNTU-CVE-2015-8864

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

6.1CVSS6.9AI score0.02691EPSS
SaveExploits0References7
Prion
Prion•added 2017/04/13 2:59 p.m.•18 views

Cross site scripting

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864...

4.3CVSS5.9AI score0.02691EPSS
SaveExploits0References8Affected Software4
CVE
CVE•added 2017/04/13 2:00 p.m.•90 views

CVE-2016-4068

CVE-2016-4068 is an XSS vulnerability in Roundcube Webmail, affecting versions before 1.0.9 and 1.1.x before 1.1.5. An attacker can inject arbitrary script/HTML via a crafted SVG, enabling remote code execution in the context of the user’s browser. The issue stems from insufficient input validati...

6.1CVSS5.9AI score0.02522EPSS
SaveExploits0References8Affected Software2
Cvelist
Cvelist•added 2017/04/13 2:00 p.m.•37 views

CVE-2015-8864

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

6AI score0.02691EPSS
SaveExploits0References8
Cvelist
Cvelist•added 2017/04/13 2:00 p.m.•39 views

CVE-2016-4068

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864...

6AI score0.02522EPSS
SaveExploits0References8
Debian CVE
Debian CVE•added 2017/04/13 2:00 p.m.•45 views

CVE-2015-8864

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

6.1CVSS6.2AI score0.02691EPSS
SaveExploits0
Rows per page
Query Builder