roundcubemail vulnerabilities (openSUSE)
57 vulnerabilities.
-
roundcubemailopenSUSE Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A... 7.1 High -
roundcubemailopenSUSE In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the modoboa driver of the password... 6.4 Medium -
roundcubemailopenSUSE In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to... 5.4 Medium -
roundcubemailopenSUSE In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets ... 5.8 Medium -
roundcubemailopenSUSE In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead... 4.3 Medium -
roundcubemailopenSUSE In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url() in a FuncIRI... 5.8 Medium -
roundcubemailopenSUSE In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count... 7.1 High -
roundcubemailopenSUSE In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper HTML/CSS sanitization of the... 5.8 Medium -
roundcubemailopenSUSE In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was... 5.4 Medium -
roundcubemailopenSUSE In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, responses from the CSS (Cascading... 7.2 High -
roundcubemailopenSUSE In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk... 8.8 High -
roundcubemailopenSUSE Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 allows Stored Cross-Site Scripting (XSS).... 4.7 Medium -
roundcubemailopenSUSE In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting ... 7.2 High -
roundcubemailopenSUSE In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube... 6.4 Medium -
roundcubemailopenSUSE In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets ... 7.2 High -
roundcubemailopenSUSE In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the... 4.3 Medium -
roundcubemailopenSUSE In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial... 4.3 Medium -
roundcubemailopenSUSE In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in... 4.4 Medium -
roundcubemailopenSUSE Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization... 7.2 High -
roundcubemailopenSUSE Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary... 3.7 Low -
roundcubemailopenSUSE In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking... 6.5 Medium -
roundcubemailopenSUSE In Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16 and 1.7.x before 1.7.1, remote image... 6.5 Medium -
roundcubemailopenSUSE Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic... 7.5 High -
roundcubemailopenSUSE Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16,and 1.7.x before 1.7.1 has Insufficient... 7.2 High -
roundcubemailopenSUSE Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection... 8.1 High -
roundcubemailopenSUSE Roundcube Webmail: Unsafe deserialization in the redis/memcache session handler 3.7 Low -
roundcubemailopenSUSE Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS)... 4.7 Medium -
roundcubemailopenSUSE Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does... 4.3 Medium -
roundcubemailopenSUSE Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS)... 7.2 High -
roundcubemailopenSUSE Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure... 7.2 High -
roundcubemailopenSUSE Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization 9.9 Critical -
roundcubemailopenSUSE mod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a insufficiently filters... 7.5 High -
roundcubemailopenSUSE A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a... 9.3 Critical -
roundcubemailopenSUSE A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7... 9.3 Critical -
roundcubemailopenSUSE Roundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content... 6.1 Medium -
roundcubemailopenSUSE Stored XSS vulnerability in Roundcube 6.1 Medium -
roundcubemailopenSUSE Security update for roundcubemail No score -
roundcubemailopenSUSE Cross Site Scripting (XSS) vulnerability in Roundcube Mail <=1.4.4 via smtp config in /installer... 5.4 Medium -
roundcubemailopenSUSE Cross Site Scripting (XSS) vulneraibility in Roundcube mail .4.4 via database host and user in ... 5.4 Medium -
roundcubemailopenSUSE linkref_addindex in rcube_string_replacer.php in Roundcube Webmail before 1.4.10 allows XSS via a... 6.1 Medium -
roundcubemailopenSUSE Roundcube Webmail before 1.4.8 allows stored XSS in HTML messages during message display via a... 6.1 Medium -
roundcubemailopenSUSE An issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before... 6.1 Medium -
roundcubemailopenSUSE Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via... 9.8 Critical -
roundcubemailopenSUSE rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via... 9.8 Critical -
roundcubemailopenSUSE An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS)... 6.1 Medium -
roundcubemailopenSUSE In Roundcube Webmail before 1.3.10, an attacker in possession of S/MIME or PGP encrypted emails... 4.3 Medium -
roundcubemailopenSUSE In Roundcube from versions 1.2.0 to 1.3.5, with the archive plugin enabled and configured, it's... 8.8 High -
roundcubemailopenSUSE Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized... 7.8 High -
roundcubemailopenSUSE Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions... 8.8 High -
roundcubemailopenSUSE rcube_utils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site... 6.1 Medium - Show olderLoading…