Поиск уязвимостей
Количество 23
Количество 23
ALT-PU-2020-1898
ALT-PU-2020-1898: package `roundcube` update to version 1.4.4-alt1
openSUSE-SU-2020:1516-1
Security update for roundcubemail
CVE-2020-12625
An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message.
CVE-2020-12625
An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message.
CVE-2020-12625
An issue was discovered in Roundcube Webmail before 1.4.4. There is a ...
GHSA-mv3h-r8j8-38cc
An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message.
BDU:2020-03992
Уязвимость решения для IMAP-серверов на основе AJAX Roundcube, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю оказать воздействие на целостность данных
CVE-2020-12626
An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not considered.
CVE-2020-12626
An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not considered.
CVE-2020-12626
An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF atta ...
GHSA-3q5x-3fpw-pfv9
An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not considered.
BDU:2020-03991
Уязвимость решения для IMAP-серверов на основе AJAX Roundcube, связанная с недостатками механизмов противодействия межсайтовой фальсификации, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2019-3109
ALT-PU-2019-3109: package `roundcube` update to version 1.4-alt1
CVE-2020-12640
Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php.
CVE-2020-12640
Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php.
CVE-2020-12640
Roundcube Webmail before 1.4.4 allows attackers to include local files ...
CVE-2020-12641
rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
CVE-2020-12641
rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
CVE-2020-12641
rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to ...
GHSA-j63m-cchh-gcjv
Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2020-1898 ALT-PU-2020-1898: package `roundcube` update to version 1.4.4-alt1 | CVSS3: 9.8 | больше 6 лет назад | |
 | openSUSE-SU-2020:1516-1 Security update for roundcubemail | около 6 лет назад | ||
 | CVE-2020-12625 An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message. | CVSS3: 6.1 | 3% Низкий | больше 6 лет назад |
 | CVE-2020-12625 An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message. | CVSS3: 6.1 | 3% Низкий | больше 6 лет назад |
| CVE-2020-12625 An issue was discovered in Roundcube Webmail before 1.4.4. There is a ... | CVSS3: 6.1 | 3% Низкий | больше 6 лет назад |
| GHSA-mv3h-r8j8-38cc An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message. | CVSS3: 6.1 | 3% Низкий | больше 4 лет назад |
 | BDU:2020-03992 Уязвимость решения для IMAP-серверов на основе AJAX Roundcube, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю оказать воздействие на целостность данных | CVSS3: 4.7 | 3% Низкий | больше 6 лет назад |
| CVE-2020-12626 An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not considered. | CVSS3: 6.5 | 2% Низкий | больше 6 лет назад |
| CVE-2020-12626 An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not considered. | CVSS3: 6.5 | 2% Низкий | больше 6 лет назад |
| CVE-2020-12626 An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF atta ... | CVSS3: 6.5 | 2% Низкий | больше 6 лет назад |
| GHSA-3q5x-3fpw-pfv9 An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not considered. | CVSS3: 6.5 | 2% Низкий | больше 4 лет назад |
| BDU:2020-03991 Уязвимость решения для IMAP-серверов на основе AJAX Roundcube, связанная с недостатками механизмов противодействия межсайтовой фальсификации, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 2% Низкий | больше 6 лет назад |
| ALT-PU-2019-3109 ALT-PU-2019-3109: package `roundcube` update to version 1.4-alt1 | CVSS3: 9.8 | около 7 лет назад | |
| CVE-2020-12640 Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php. | CVSS3: 9.8 | 7% Низкий | больше 6 лет назад |
| CVE-2020-12640 Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php. | CVSS3: 9.8 | 7% Низкий | больше 6 лет назад |
| CVE-2020-12640 Roundcube Webmail before 1.4.4 allows attackers to include local files ... | CVSS3: 9.8 | 7% Низкий | больше 6 лет назад |
| CVE-2020-12641 rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path. | CVSS3: 9.8 | 84% Высокий | больше 6 лет назад |
| CVE-2020-12641 rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path. | CVSS3: 9.8 | 84% Высокий | больше 6 лет назад |
| CVE-2020-12641 rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to ... | CVSS3: 9.8 | 84% Высокий | больше 6 лет назад |
| GHSA-j63m-cchh-gcjv Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php. | CVSS3: 9.8 | 7% Низкий | больше 4 лет назад |
Уязвимостей на страницу