roundcube

97 results · Feed

• Medium 6.3
  CVE-2020-13965 Exploited Public exploit EPSS 77%

  An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML att…

  roundcube roundcube Debian Ubuntu
  Jun 9, 2020

  KEV Jun 26, 2024
• Unscored —
  CVE-2020-12640 Public exploit

  Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a pl…

  roundcube roundcube Debian Ubuntu
  May 4, 2020
• Critical 9.8
  CVE-2020-12641 Exploited Public exploit Scanner template EPSS 84%

  rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters i…

  roundcube roundcube Debian Ubuntu
  May 4, 2020

  KEV Jun 22, 2023
• Unscored —
  CVE-2020-12625 Public exploit

  An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube…

  roundcube roundcube Debian Ubuntu
  May 4, 2020
• Unscored —
  CVE-2020-12626

  An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged o…

  roundcube roundcube Debian Ubuntu
  May 4, 2020
• Unscored —
  CVE-2019-15237

  Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.

  roundcube roundcube Debian Ubuntu
  Aug 20, 2019
• Unscored —
  CVE-2019-10740

  In Roundcube Webmail before 1.3.10, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-pa…

  roundcube roundcube Debian Ubuntu
  Apr 7, 2019
• Unscored —
  CVE-2018-19205

  Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier for attackers to obtai…

  roundcube roundcube Debian Ubuntu
  Nov 12, 2018
• Unscored —
  CVE-2018-19206 EPSS 56%

  steps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of <svg><style>, as demonstrated by an onload att…

  roundcube roundcube roundcubemail Debian Ubuntu Alpine
  Nov 12, 2018
• Unscored —
  CVE-2018-9846

  In Roundcube from versions 1.2.0 to 1.3.5, with the archive plugin enabled and configured, it's possible to exploit the…

  roundcube roundcube roundcubemail Debian Ubuntu Alpine
  Apr 7, 2018
• Unscored —
  CVE-2018-1000071

  roundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma plugin that can result in …

  roundcube roundcube Debian Ubuntu
  Mar 13, 2018
• High 7.8
  CVE-2017-16651 Exploited Public exploit EPSS 46%

  Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary fil…

  roundcube roundcube roundcubemail Debian Ubuntu Alpine
  Nov 9, 2017

  KEV Nov 3, 2021
• Unscored —
  CVE-2017-8114

  Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x b…

  roundcube roundcube roundcubemail Debian Ubuntu Alpine
  Apr 29, 2017
• Unscored —
  CVE-2016-4068

  Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attacke…

  roundcube roundcube Debian Ubuntu
  Apr 13, 2017
• Unscored —
  CVE-2017-6820

  rcube_utils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site scripting vulnerability…

  roundcube roundcube Debian Ubuntu
  Mar 12, 2017
• Unscored —
  CVE-2016-9920 Public exploit

  steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sen…

  roundcube roundcube Debian Ubuntu
  Dec 8, 2016
• Unscored —
  CVE-2016-4069

  Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the…

  roundcube roundcube Debian Ubuntu
  Aug 25, 2016