roundcubemail vulnerabilities (Mageia)
55 vulnerabilities.
-
roundcubemailMageia Updated roundcubemail package fixes security vulnerabilities No score -
roundcubemailMageia Updated roundcubemail package fixes security vulnerabilities No score -
roundcubemailMageia Updated roundcubemail packages fix security vulnerabilities No score -
roundcubemailMageia Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 allows Stored Cross-Site Scripting (XSS).... 4.7 Medium -
roundcubemailMageia In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting ... 7.2 High -
roundcubemailMageia In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube... 6.4 Medium -
roundcubemailMageia In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets ... 7.2 High -
roundcubemailMageia In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the... 4.3 Medium -
roundcubemailMageia In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial... 4.3 Medium -
roundcubemailMageia In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in... 4.4 Medium -
roundcubemailMageia Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization... 7.2 High -
roundcubemailMageia Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary... 3.7 Low -
roundcubemailMageia In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking... 6.5 Medium -
roundcubemailMageia In Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16 and 1.7.x before 1.7.1, remote image... 6.5 Medium -
roundcubemailMageia Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic... 7.5 High -
roundcubemailMageia Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16,and 1.7.x before 1.7.1 has Insufficient... 7.2 High -
roundcubemailMageia Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection... 8.1 High -
roundcubemailMageia Roundcube Webmail: Remote image blocking feature can be bypassed via SVG content in an e-mail message 5.3 Medium -
roundcubemailMageia Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS)... 4.7 Medium -
roundcubemailMageia Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does... 4.3 Medium -
roundcubemailMageia Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS)... 7.2 High -
roundcubemailMageia Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure... 7.2 High -
roundcubemailMageia Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization 9.9 Critical -
roundcubemailMageia mod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a insufficiently filters... 7.5 High -
roundcubemailMageia A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a... 9.3 Critical -
roundcubemailMageia A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7... 9.3 Critical -
roundcubemailMageia Updated roundcubemail packages fix security vulnerabilities No score -
roundcubemailMageia Roundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content... 6.1 Medium -
roundcubemailMageia Stored XSS vulnerability in Roundcube 6.1 Medium -
roundcubemailMageia Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's... 6.1 Medium -
roundcubemailMageia Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search... 9.8 Critical -
roundcubemailMageia Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences... 5.4 Medium -
roundcubemailMageia linkref_addindex in rcube_string_replacer.php in Roundcube Webmail before 1.4.10 allows XSS via a... 6.1 Medium -
roundcubemailMageia Roundcube Webmail before 1.4.8 allows stored XSS in HTML messages during message display via a... 6.1 Medium -
roundcubemailMageia Updated roundcubemail packages fix security vulnerability No score -
roundcubemailMageia An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include... 6.1 Medium -
roundcubemailMageia An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS... 6.1 Medium -
roundcubemailMageia An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS)... 6.1 Medium -
roundcubemailMageia An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an... 6.5 Medium -
roundcubemailMageia Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks. 7.4 High -
roundcubemailMageia Updated roundcubemail packages fix security vulnerability & bugs No score -
roundcubemailMageia In Roundcube from versions 1.2.0 to 1.3.5, with the archive plugin enabled and configured, it's... 8.8 High -
roundcubemailMageia Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized... 7.8 High -
roundcubemailMageia Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions... 8.8 High -
roundcubemailMageia rcube_utils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site... 6.1 Medium -
roundcubemailMageia steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is... 7.5 High -
roundcubemailMageia Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote... 8.8 High -
roundcubemailMageia Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5... 6.1 Medium -
roundcubemailMageia Updated roundcubemail packages fix security vulnerability No score -
roundcubemailMageia Updated roundcubemail packages fix security vulnerability No score - Show olderLoading…