Lucene search
+L

5074 matches found

Openbugbounty
Openbugbounty
•added 2021/11/29 8:09 p.m.•19 views

webmail.gyakg.u-szeged.hu Cross Site Scripting vulnerability OBB-2287950

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2021/11/28 12:00 a.m.•46 views

Debian: Security Advisory (DSA-5013-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.69882EPSS
SaveExploits1References6
Debian
Debian
•added 2021/11/27 9:47 a.m.•69 views

[SECURITY] [DSA 5013-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5013-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 27, 2021 https://www.debian.org/security/faq -...

7.5CVSS9.2AI score0.69882EPSS
SaveExploits1
Fedora
Fedora
•added 2021/11/24 1:10 a.m.•41 views

[SECURITY] Fedora 34 Update: roundcubemail-1.4.12-1.fc34

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

9.8CVSS8AI score0.69882EPSS
SaveExploits1
NCSC
NCSC
•added 2021/11/24 12:00 a.m.•10 views

Vulnerabilities fixed in Roundcube Webmail

Roundcube has fixed vulnerabilities in Webmail and Webmail LTS. The vulnerabilities allow a malicious party to launch a cross-site scripting attack, or to perform an SQL injection execute and thus gain access to the data in the underlying database. Roundcube has released updates to address the...

9.8CVSS7.5AI score0.69882EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2021/11/22 12:00 a.m.•38 views

Roundcube Webmail < 1.3.17, 1.4.x < 1.4.12 Multiple Vulnerabilities

Roundcube Webmail is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:roundcube:webmail"; if...

9.8CVSS8.1AI score0.69882EPSS
SaveExploits1References3
Prion
Prion
•added 2021/11/19 4:15 a.m.•34 views

Sql injection

Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or searchparams...

7.5CVSS9.7AI score0.69882EPSS
SaveExploits1References7Affected Software3
CNNVD
CNNVD
•added 2021/11/19 12:00 a.m.•21 views

Roundcube Webmail Cross-Site Script Vulnerability

Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message searching, spell checking, and more. Roundcube Webmail suffers from a cross-site scripting vulnerability that originates from XSS when the program handles file extensions of attachments.Th...

6.1CVSS6.8AI score0.01208EPSS
SaveExploits0References13
CNNVD
CNNVD
•added 2021/11/19 12:00 a.m.•30 views

Roundcube Webmail SQL Injection Vulnerability

Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message searching, spell checking, and more. A SQL injection vulnerability exists in Roundcube Webmail, which can be exploited to perform SQL injection via "search" or "searchparams". The followin...

9.8CVSS8.7AI score0.69882EPSS
SaveExploits1References11
CNVD
CNVD
•added 2021/11/17 12:00 a.m.•38 views

AtMail Cross-Site Scripting Vulnerability (CNVD-2021-93369)

AtMail is an open source WebMail client from Atmail Australia, which provides Webmail interface, address book management, calendar and other features, and supports IMAP, video mail, etc. A cross-site scripting vulnerability exists in the WebAdmin control panel of AtMail version 6.5.0. An attacker...

6.1CVSS3.3AI score0.02461EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
•added 2021/11/16 5:00 p.m.•24 views

webmail.myplace.net Cross Site Scripting vulnerability OBB-2274742

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•101 views

Roundcube Webmail File Disclosure Vulnerability

Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default...

7.8CVSS7.1AI score0.45742EPSS
SaveIn wildExploits5
Openbugbounty
Openbugbounty
•added 2021/10/11 4:48 a.m.•19 views

All Vulnerabilities for webmail.usfq.edu.ec Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| webmail.usfq.edu.ec ---|--- Open Bug...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2021/09/15 6:34 a.m.•17 views

loginwebmail.com Cross Site Scripting vulnerability OBB-2141668

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2021/09/14 9:38 a.m.•28 views

webmail.iranpotk.com Cross Site Scripting vulnerability OBB-2140052

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2021/09/14 9:25 a.m.•34 views

webmail.8800.dk Cross Site Scripting vulnerability OBB-2140031

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2021/09/14 9:21 a.m.•24 views

webmail.emmicorp.com Cross Site Scripting vulnerability OBB-2140026

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2021/09/14 8:56 a.m.•16 views

webmail.ersag.com.tr Cross Site Scripting vulnerability OBB-2139994

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2021/09/10 12:00 a.m.•19 views

FortiMail Webmail DoS

The vulnerability of the Webmail component of the FortiMail email protection system is related to a memory release error. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially crafted login requests to the system...

5.3CVSS7.2AI score0.01328EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/08/06 12:00 a.m.•17 views

FortiMail Webmail Administrative Interface Command Execution

The vulnerability of the Webmail components and the Administrative Interface of the FortiMail email protection system arises due to an overflow in the buffer on the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or code by sending specially crafted HTT...

9CVSS8.3AI score0.01095EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder