Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2024-37385
HistoryJun 07, 2024 - 12:00 a.m.

CVE-2024-37385

2024-06-0700:00:00
ubuntu.com
ubuntu.com
4
roundcube webmail
windows
command injection
incomplete fix

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

Low

0.123 Low

EPSS

Percentile

95.4%

JSON

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 on Windows allows
command injection via im_convert_path and im_identify_path. NOTE: this
issue exists because of an incomplete fix for CVE-2020-12641.

Related

debiancve 2
nvd 2
cvelist 2
osv 4
cve 2
cisa_kev 1
attackerkb 1
prion 1
checkpoint_advisories 1
ubuntucve 1
openvas 8
nessus 6
fedora 2
mageia 1
securelist 1
suse 2
thn 1
gentoo 1
ubuntu 1
debiancve
debiancve
CVE-2024-37385
2024-06-07 04:15:30
CVE-2020-12641
2020-05-04 15:15:14
nvd
nvd
CVE-2024-37385
2024-06-07 04:15:30
CVE-2020-12641
2020-05-04 15:15:14
cvelist
cvelist
CVE-2024-37385
1976-01-01 00:00:00
CVE-2020-12641
2020-05-04 14:58:15
osv
osv
CVE-2024-37385
2024-06-07 04:15:30
BIT-roundcube-2020-12641
2024-03-06 11:06:02
CVE-2020-12641
2020-05-04 15:15:14
cve
cve
CVE-2024-37385
2024-06-07 04:15:30
CVE-2020-12641
2020-05-04 15:15:14
cisa_kev
cisa_kev
Roundcube Webmail Remote Code Execution Vulnerability
2023-06-22 00:00:00
attackerkb
attackerkb
CVE-2020-12641
2020-05-04 00:00:00
prion
prion
Design/Logic Flaw
2020-05-04 15:15:00
checkpoint_advisories
checkpoint_advisories
Roundcube Webmail Command Injection (CVE-2020-12641)
2020-08-17 00:00:00
ubuntucve
ubuntucve
CVE-2020-12641
2020-05-04 00:00:00
openvas
openvas
Roundcube Webmail < 1.5.7, 1.6.x < 1.6.7 Multiple Vulnerabilities - Windows
2024-05-23 00:00:00
Mageia: Security Advisory (MGASA-2020-0261)
2022-01-28 00:00:00
Fedora: Security Advisory for roundcubemail (FEDORA-2020-2a1a6a8432)
2020-06-23 00:00:00
nessus
nessus
Fedora 31 : roundcubemail (2020-2a1a6a8432)
2020-06-22 00:00:00
Fedora 32 : roundcubemail (2020-aeffd92b77)
2020-06-22 00:00:00
GLSA-202007-41 : Roundcube: Multiple vulnerabilities
2020-07-27 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: roundcubemail-1.4.6-1.fc31
2020-06-19 01:07:28
[SECURITY] Fedora 32 Update: roundcubemail-1.4.6-1.fc32
2020-06-19 01:05:19
mageia
mageia
Updated roundcubemail packages fix security vulnerability
2020-06-15 10:54:40
securelist
securelist
Advanced threat predictions for 2024
2023-11-14 10:00:24
suse
suse
Security update for roundcubemail (important)
2022-10-17 00:00:00
Security update for roundcubemail (moderate)
2020-09-24 00:00:00
thn
thn
Microsoft Warns of Widescale Credential Stealing Attacks by Russian Hackers
2023-06-26 10:54:00
gentoo
gentoo
Roundcube: Multiple vulnerabilities
2020-07-27 00:00:00
ubuntu
ubuntu
Roundcube Webmail vulnerabilities
2022-08-08 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

Low

0.123 Low

EPSS

Percentile

95.4%

JSON
Related for UB:CVE-2024-37385
debiancve2nvd2cvelist2osv4cve2cisa_kev1attackerkb1prion1checkpoint_advisories1ubuntucve1openvas8nessus6fedora2mageia1securelist1suse2thn1gentoo1ubuntu1