Поиск уязвимостей
Количество 8
Количество 8
GHSA-44qp-5pm8-6j8p
An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a preview.
CVE-2020-13965
An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a preview.
CVE-2020-13965
An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a preview.
CVE-2020-13965
An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a preview.
CVE-2020-13965
An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x b ...
BDU:2020-03988
Уязвимость почтового клиента RoundCube Webmail, связанная с недостатками используемых мер по защите структур веб-страницы, позволяющая нарушителю оказать воздействие на целостность данных
ALT-PU-2020-2097
ALT-PU-2020-2097: package `roundcube` update to version 1.4.5-alt1
ALT-PU-2019-3109
ALT-PU-2019-3109: package `roundcube` update to version 1.4-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-44qp-5pm8-6j8p An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a preview. | CVSS3: 6.1 | 77% Высокий | больше 4 лет назад |
 | CVE-2020-13965 An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a preview. | CVSS3: 6.1 | 77% Высокий | больше 6 лет назад |
 | CVE-2020-13965 An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a preview. | CVSS3: 6.1 | 77% Высокий | больше 6 лет назад |
 | CVE-2020-13965 An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a preview. | CVSS3: 6.1 | 77% Высокий | больше 6 лет назад |
| CVE-2020-13965 An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x b ... | CVSS3: 6.1 | 77% Высокий | больше 6 лет назад |
 | BDU:2020-03988 Уязвимость почтового клиента RoundCube Webmail, связанная с недостатками используемых мер по защите структур веб-страницы, позволяющая нарушителю оказать воздействие на целостность данных | CVSS3: 4.7 | 77% Высокий | больше 6 лет назад |
| ALT-PU-2020-2097 ALT-PU-2020-2097: package `roundcube` update to version 1.4.5-alt1 | CVSS3: 6.1 | больше 6 лет назад | |
| ALT-PU-2019-3109 ALT-PU-2019-3109: package `roundcube` update to version 1.4-alt1 | CVSS3: 9.8 | около 7 лет назад |
Уязвимостей на страницу