roundcube vulnerabilities (Ubuntu)
98 vulnerabilities.
-
roundcubeUbuntu Authentication bypass by spoofing in twofactor_gauthenticator 6.3 Medium -
roundcubeUbuntu Insufficient session expiration in twofactor_gauthenticator 6.3 Medium -
roundcubeUbuntu Lack of rate-limiting in 2fa code check mechanism in twofactor_gauthenticator 6.3 Medium -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication... 6.8 Medium -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource... 5.3 Medium -
roundcubeUbuntu Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side... 7.2 High -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking... 5.3 Medium -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking... 5.3 Medium -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into... 8.3 High -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection... 5.8 Medium -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection... 5.0 Medium -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in... 7.4 High -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to... 3.7 Low -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in... 6.5 Medium -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration... 3.1 Low -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection... 7.1 High -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in... 3.7 Low -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting... 4.7 Medium -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection... 4.0 Medium -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection... 8.5 High -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization... 6.8 Medium -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal... 5.3 Medium -
roundcubeUbuntu Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A... 7.1 High -
roundcubeUbuntu In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the modoboa driver of the password... 6.4 Medium -
roundcubeUbuntu In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to... 5.4 Medium -
roundcubeUbuntu In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets ... 5.8 Medium -
roundcubeUbuntu In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead... 4.3 Medium -
roundcubeUbuntu In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url() in a FuncIRI... 5.8 Medium -
roundcubeUbuntu In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count... 7.1 High -
roundcubeUbuntu In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper HTML/CSS sanitization of the... 5.8 Medium -
roundcubeUbuntu In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was... 5.4 Medium -
roundcubeUbuntu In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, responses from the CSS (Cascading... 7.2 High -
roundcubeUbuntu In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk... 8.8 High -
roundcubeUbuntu Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 allows Stored Cross-Site Scripting (XSS).... 4.7 Medium -
roundcubeUbuntu In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting ... 7.2 High -
roundcubeUbuntu In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube... 6.4 Medium -
roundcubeUbuntu In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets ... 7.2 High -
roundcubeUbuntu In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the... 4.3 Medium -
roundcubeUbuntu In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial... 4.3 Medium -
roundcubeUbuntu In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in... 4.4 Medium -
roundcubeUbuntu Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization... 7.2 High -
roundcubeUbuntu Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary... 3.7 Low -
roundcubeUbuntu In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking... 6.5 Medium -
roundcubeUbuntu In Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16 and 1.7.x before 1.7.1, remote image... 6.5 Medium -
roundcubeUbuntu Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic... 7.5 High -
roundcubeUbuntu Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16,and 1.7.x before 1.7.1 has Insufficient... 7.2 High -
roundcubeUbuntu Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection... 8.1 High -
roundcubeUbuntu Roundcube Webmail: Remote image blocking feature can be bypassed via SVG content in an e-mail message 5.3 Medium -
roundcubeUbuntu Roundcube Webmail: Insufficient CSS sanitization in HTML e-mail messages 5.3 Medium -
roundcubeUbuntu Roundcube Webmail: Bypass of remote image blocking via SVG content (with animate attributes) in an e-mail message 5.3 Medium - Show olderLoading…