4845 matches found
MGASA-2018-0463 Updated roundcubemail packages fix security vulnerability & bugs
This is a service release to update the stable version 1.3 of Roundcube Webmail. It contains fixes to several bugs backported from the master branch including a security fix for a reported XSS vulnerability in handling invalid style tag content plus updates to ensure compatibility with PHP 7.3 an...
Updated roundcubemail packages fix security vulnerability & bugs
This is a service release to update the stable version 1.3 of Roundcube Webmail. It contains fixes to several bugs backported from the master branch including a security fix for a reported XSS vulnerability in handling invalid style tag content plus updates to ensure compatibility with PHP 7.3 an...
PT-2018-19292
Name of the Vulnerable Software and Affected Versions Roundcube Webmail version 1.3 Description A security issue has been reported in Roundcube Webmail, related to the handling of invalid style tag content, which can lead to an XSS issue. This release also includes fixes for several bugs and...
webmail.rgipt.ac.in XSS vulnerability
Open Bug Bounty ID: OBB-698077 Description| Value ---|--- Affected Website:| webmail.rgipt.ac.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
[SECURITY] Fedora 29 Update: roundcubemail-1.3.8-1.fc29
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
Fedora 27 : roundcubemail (2018-d527206a77)
Version 1.3.8 This is a service release to update the stable version 1.3 of Roundcube Webmail. It contains fixes to several bugs backported from the master branch including a security fix for a reported XSS vulnerability plus updates to ensure compatibility with PHP 7.3 and recent versions of...
[SECURITY] Fedora 28 Update: roundcubemail-1.3.8-1.fc28
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
[SECURITY] Fedora 27 Update: roundcubemail-1.3.8-1.fc27
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
JVN#00344155: Multiple vulnerabilities in Denbun
Denbun provided by NEOJAPAN Inc. is a WebMail System. Denbun contains multiple vulnerabilities listed below. Hard-coded credentials for user account CWE-798 - CVE-2018-0680 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score: 9.8 CVSS v2|...
Open-Xchange webmail Cross-Site Scripting Vulnerability
Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-Xchange webmail. A remote...
Microsoft Windows Defender AV: Block executable content from email client and webmail
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavblockexeccontentmail.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Configure Attack Surface Reduction rules: Block executable content from email client and webmail Authors: Emanuel Moss Copyright: Copyright c...
CVE-2017-6913
Cross-site scripting XSS vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag...
Cross site scripting
Cross-site scripting XSS vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag...
CVE-2017-6913
Cross-site scripting XSS vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag...
CVE-2017-6913
Open-Xchange AppSuite Open-Xchange Webmail before 7.6.3-rev28 is vulnerable to a Cross-site Scripting (XSS) flaw. The issue allows remote attackers to inject arbitrary web script or HTML through the event attribute in a time tag. The vulnerability is associated with the Open-Xchange webmail compo...
CVE-2017-6913
Cross-site scripting XSS vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag...
CVE-2017-6913: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag...
CVE-2018-16324
In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field...