roundcube vulnerabilities (Ubuntu)
99 vulnerabilities.
roundcubeUbuntuRoundcube: Bypass of remote image blocking via crafted BODY background attribute5.3 MediumroundcubeUbuntuRoundcube Webmail: Incorrect password comparison in the password plugin4.2 MediumroundcubeUbuntuRoundcube Webmail: Insufficient CSS sanitization in HTML e-mail messages5.4 MediumroundcubeUbuntuRoundcube Webmail: Insufficient HTML attachment sanitization in preview mode6.1 MediumroundcubeUbuntuRoundcube Webmail: Unsanitized IMAP SEARCH command arguments3.1 LowroundcubeUbuntuRoundcube Webmail: Unsafe deserialization in the redis/memcache session handler3.7 LowroundcubeUbunturoundcube regressionNo scoreroundcubeUbuntuRoundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS)...4.7 MediumroundcubeUbuntuRoundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does...4.3 MediumroundcubeUbuntuRoundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS)...7.2 HighroundcubeUbuntuRoundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure...7.2 HighroundcubeUbuntuRoundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization9.9 CriticalroundcubeUbuntuCross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated...6.1 MediumroundcubeUbuntumod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a insufficiently filters...7.5 HighroundcubeUbuntuA Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a...9.3 CriticalroundcubeUbuntuA Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7...9.3 CriticalroundcubeUbuntuRoundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via list columns from user...6.1 MediumroundcubeUbuntuRoundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.6.1 MediumroundcubeUbuntuRoundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content...6.1 MediumroundcubeUbuntuStored XSS vulnerability in Roundcube6.1 MediumroundcubeUbuntuRoundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e...6.1 MediumroundcubeUbuntuRoundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted...6.1 MediumroundcubeUbuntuRoundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's...6.1 MediumroundcubeUbuntuRoundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search...9.8 CriticalroundcubeUbuntuTinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements6.1 MediumroundcubeUbuntuTinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option6.1 MediumroundcubeUbuntuRoundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences...5.4 MediumroundcubeUbuntulinkref_addindex in rcube_string_replacer.php in Roundcube Webmail before 1.4.10 allows XSS via a...6.1 MediumroundcubeUbuntuRoundcube Webmail before 1.4.8 allows stored XSS in HTML messages during message display via a...6.1 MediumroundcubeUbuntuAn issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before...6.1 MediumroundcubeUbuntuAn issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include...6.1 MediumroundcubeUbuntuAn issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS...6.1 MediumroundcubeUbuntuRoundcube Webmail before 1.4.4 allows attackers to include local files and execute code via...9.8 CriticalroundcubeUbunturcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via...9.8 CriticalroundcubeUbuntuAn issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS)...6.1 MediumroundcubeUbuntuAn issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an...6.5 MediumroundcubeUbuntuRoundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.7.4 HighroundcubeUbuntuIn Roundcube Webmail before 1.3.10, an attacker in possession of S/MIME or PGP encrypted emails...4.3 MediumroundcubeUbuntusteps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of <svg><style>, as...6.1 MediumroundcubeUbuntuRoundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier...7.5 HighroundcubeUbuntuIn Roundcube from versions 1.2.0 to 1.3.5, with the archive plugin enabled and configured, it's...8.8 HighroundcubeUbunturoundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma...7.5 HighroundcubeUbuntuRoundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized...7.8 HighroundcubeUbuntuRoundcube Webmail allows arbitrary password resets by authenticated users. This affects versions...8.8 HighroundcubeUbunturcube_utils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site...6.1 MediumroundcubeUbuntusteps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is...7.5 HighroundcubeUbuntuCross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5...6.1 MediumroundcubeUbuntuCross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote...8.8 High