roundcube vulnerabilities (Debian)
126 vulnerabilities.
roundcubeDebianRoundcube Webmail: Insufficient HTML attachment sanitization in preview mode6.1 MediumroundcubeDebianRoundcube Webmail: Unsanitized IMAP SEARCH command arguments3.1 LowroundcubeDebianRoundcube Webmail: Unsafe deserialization in the redis/memcache session handler3.7 LowroundcubeDebianroundcube - security updateNo scoreroundcubeDebianRoundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS)...4.7 MediumroundcubeDebianRoundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does...4.3 MediumroundcubeDebianRoundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS)...7.2 HighroundcubeDebianRoundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure...7.2 HighroundcubeDebianRoundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization9.9 CriticalroundcubeDebianCross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated...6.1 MediumroundcubeDebianmod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a insufficiently filters...7.5 HighroundcubeDebianA Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a...9.3 CriticalroundcubeDebianA Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7...9.3 CriticalroundcubeDebianRoundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via list columns from user...6.1 MediumroundcubeDebianRoundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.6.1 MediumroundcubeDebianRoundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content...6.1 MediumroundcubeDebianStored XSS vulnerability in Roundcube6.1 MediumroundcubeDebianRoundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e...6.1 MediumroundcubeDebianRoundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted...6.1 MediumroundcubeDebianRoundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's...6.1 MediumroundcubeDebianRoundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search...9.8 CriticalroundcubeDebianCross Site Scripting (XSS) vulnerability in Roundcube Mail <=1.4.4 via smtp config in /installer...5.4 MediumroundcubeDebianCross Site Scripting (XSS) vulneraibility in Roundcube mail .4.4 via database host and user in ...5.4 MediumroundcubeDebianRoundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences...5.4 MediumroundcubeDebianlinkref_addindex in rcube_string_replacer.php in Roundcube Webmail before 1.4.10 allows XSS via a...6.1 MediumroundcubeDebianRoundcube Webmail before 1.4.8 allows stored XSS in HTML messages during message display via a...6.1 MediumroundcubeDebianAn issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before...6.1 MediumroundcubeDebianAn issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include...6.1 MediumroundcubeDebianAn issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS...6.1 MediumroundcubeDebianRoundcube Webmail before 1.4.4 allows attackers to include local files and execute code via...9.8 CriticalroundcubeDebianrcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via...9.8 CriticalroundcubeDebianAn issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS)...6.1 MediumroundcubeDebianAn issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an...6.5 MediumroundcubeDebianRoundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.7.4 HighroundcubeDebianIn Roundcube Webmail before 1.3.10, an attacker in possession of S/MIME or PGP encrypted emails...4.3 MediumroundcubeDebiansteps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of <svg><style>, as...6.1 MediumroundcubeDebianRoundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier...7.5 HighroundcubeDebianIn Roundcube from versions 1.2.0 to 1.3.5, with the archive plugin enabled and configured, it's...8.8 HighroundcubeDebianroundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma...7.5 HighroundcubeDebianRoundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized...7.8 HighroundcubeDebianroundcube - regression updateNo scoreroundcubeDebianCross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube Webmail 1.1.x...6.1 MediumroundcubeDebianRoundcube Webmail allows arbitrary password resets by authenticated users. This affects versions...8.8 HighroundcubeDebianrcube_utils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site...6.1 MediumroundcubeDebianCross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.2.0 allows remote...6.1 MediumroundcubeDebiansteps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is...7.5 HighroundcubeDebianCross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5...6.1 MediumroundcubeDebianCross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote...8.8 HighroundcubeDebianCross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5...6.1 MediumroundcubeDebianAbsolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before...6.5 Medium- Show moreLoading…