Поиск уязвимостей
Количество 8
Количество 8
CVE-2024-42008
A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a malicious e-mail attachment served with a dangerous Content-Type header.
CVE-2024-42008
A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a malicious e-mail attachment served with a dangerous Content-Type header.
CVE-2024-42008
A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() ...
GHSA-78jf-j6qx-c7j3
A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a malicious e-mail attachment served with a dangerous Content-Type header.
BDU:2024-06254
Уязвимость функции rcmail_action_mail_get->run() почтового клиента RoundCube Webmail, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
openSUSE-SU-2024:0328-1
Security update for roundcubemail
ROS-20240826-17
Множественные уязвимости roundcubemail
ALT-PU-2025-8283
ALT-PU-2025-8283: package `roundcube` update to version 1.6.11-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-42008 A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a malicious e-mail attachment served with a dangerous Content-Type header. | CVSS3: 9.3 | 34% Средний | больше 2 лет назад |
 | CVE-2024-42008 A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a malicious e-mail attachment served with a dangerous Content-Type header. | CVSS3: 9.3 | 34% Средний | больше 2 лет назад |
| CVE-2024-42008 A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() ... | CVSS3: 9.3 | 34% Средний | больше 2 лет назад |
| GHSA-78jf-j6qx-c7j3 A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a malicious e-mail attachment served with a dangerous Content-Type header. | CVSS3: 9.3 | 34% Средний | больше 2 лет назад |
 | BDU:2024-06254 Уязвимость функции rcmail_action_mail_get->run() почтового клиента RoundCube Webmail, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS) | CVSS3: 6.1 | 34% Средний | больше 2 лет назад |
 | openSUSE-SU-2024:0328-1 Security update for roundcubemail | около 2 лет назад | ||
 | ROS-20240826-17 Множественные уязвимости roundcubemail | CVSS3: 9.3 | около 2 лет назад | |
| ALT-PU-2025-8283 ALT-PU-2025-8283: package `roundcube` update to version 1.6.11-alt1 | CVSS3: 9.9 | больше 1 года назад |
Уязвимостей на страницу