CVE-2022-32734

...

CVE-2022-27877

CVE-2022-27877 is rejected/not used and does not represent an active vulnerability entry.

CVE-2021-43865

...

CVE-2022-20424

...

CVE-2024-9625

...

CVE-2022-48137

...

CVE-2020-24540

...

CVE-2024-12095

...

CVE-2025-48745

Roundcube Webmail is affected by CVE-2025-49113: an authenticated attacker can exploit PHP object deserialization via the unvalidated _from URL parameter in program/actions/settings/upload.php to achieve remote code execution. Vulnerable versions include Roundcube before 1.5.10 and 1.6.x before 1...

CVE-2025-48425

...

CVE-2021-32880

...

CVE-2023-1673

...

CVE-2024-23404

...

CVE-2018-12157

...

CVE-2022-36294

CVE-2022-36294 entry is rejected/not used and does not represent an active vulnerability.

CVE-2020-12576

...