Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

4287 matches found

CNVD
CNVD•added 2017/04/26 12:0 a.m.•45 views

Horde Groupware Webmail Edition Operating System Command Injection Vulnerability

Horde Groupware Webmail Edition is a free enterprise browser based on the Communication Suite from Horde, Inc.HordeCrypt is an encryption/decryption library for working with PGP data. An OS command injection vulnerability exists in HordeCrypt versions prior to 2.7.6 used in Horde Groupware Webmai...

9CVSS9AI score0.40447EPSS
SaveExploits0References1
ThreatPost
ThreatPost•added 2017/04/24 1:52 p.m.•40 views

SquirrelMail Remote Code Execution Vulnerability Patched

Developers behind the PHP-based webmail package SquirrelMail patched a remote code execution vulnerability that could let attackers execute arbitrary commands on the target and compromise the system on Thursday. Dawid Golunski, a researcher with Legal Hackers discovered the vulnerability and...

9CVSS0.6AI score0.32156EPSS
SaveExploits7References14
CNVD
CNVD•added 2017/04/22 12:0 a.m.•4 views

Arbitrary File Traversal Vulnerability in Mail Server CMailServer Webmail

Mail Server CMailServer Webmail is a mail sending and receiving system. Mail Server CMailServer Webmail arbitrary file traversal vulnerability, an attacker can obtain sensitive system file information...

7AI score
SaveExploits0
OSV
OSV•added 2017/04/13 2:59 p.m.•4 views

DEBIAN-CVE-2015-8864

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

6.1CVSS6.1AI score0.02648EPSS
SaveExploits0References1
OSV
OSV•added 2017/04/13 2:59 p.m.•30 views

CVE-2016-4068

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864...

6.1CVSS5.6AI score
SaveExploits0References8
NVD
NVD•added 2017/04/13 2:59 p.m.•18 views

CVE-2015-8864

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

6.1CVSS6AI score0.02648EPSS
SaveExploits0References8
OSV
OSV•added 2017/04/13 2:59 p.m.•8 views

CVE-2015-8864

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

6.1CVSS6AI score
SaveExploits0References9
NVD
NVD•added 2017/04/13 2:59 p.m.•20 views

CVE-2016-4068

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864...

6.1CVSS6AI score0.02481EPSS
SaveExploits0References8
OSV
OSV•added 2017/04/13 2:59 p.m.•2 views

DEBIAN-CVE-2016-4068

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864...

6.1CVSS6AI score0.02481EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve•added 2017/04/13 2:59 p.m.•24 views

CVE-2016-4068

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864...

6.1CVSS7AI score0.02481EPSS
SaveExploits0References3
OSV
OSV•added 2017/04/13 2:59 p.m.•5 views

UBUNTU-CVE-2016-4068

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864...

6.1CVSS7AI score0.02481EPSS
SaveExploits0References4
Prion
Prion•added 2017/04/13 2:59 p.m.•16 views

Cross site scripting

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864...

4.3CVSS5.9AI score0.02648EPSS
SaveExploits0References8Affected Software4
Prion
Prion•added 2017/04/13 2:59 p.m.•23 views

Cross site scripting

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

4.3CVSS5.9AI score0.02648EPSS
SaveExploits0References8Affected Software4
UbuntuCve
UbuntuCve•added 2017/04/13 2:59 p.m.•25 views

CVE-2015-8864

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

6.1CVSS6.8AI score0.02648EPSS
SaveExploits0References6
OSV
OSV•added 2017/04/13 2:59 p.m.•5 views

UBUNTU-CVE-2015-8864

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

6.1CVSS6.9AI score0.02648EPSS
SaveExploits0References7
CVE
CVE•added 2017/04/13 2:0 p.m.•71 views

CVE-2015-8864

CVE-2015-8864 is an XSS vulnerability in Roundcube Webmail, exploitable through a crafted SVG. Affected products are Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5. The issue allows remote attackers to inject arbitrary web script or HTML. The description explicitly notes this is a separate...

6.1CVSS5.9AI score0.02648EPSS
SaveExploits0References8Affected Software2
Cvelist
Cvelist•added 2017/04/13 2:0 p.m.•31 views

CVE-2015-8864

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

6AI score0.02648EPSS
SaveExploits0References8
Cvelist
Cvelist•added 2017/04/13 2:0 p.m.•34 views

CVE-2016-4068

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864...

6AI score0.02481EPSS
SaveExploits0References8
Debian CVE
Debian CVE•added 2017/04/13 2:0 p.m.•42 views

CVE-2015-8864

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

6.1CVSS6.2AI score0.02648EPSS
SaveExploits0
Debian CVE
Debian CVE•added 2017/04/13 2:0 p.m.•39 views

CVE-2016-4068

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864...

6.1CVSS6.2AI score0.02481EPSS
SaveExploits0
Rows per page
Query Builder