Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Critical9.8Roundcube Webmail SQL Injection VulnerabilityVuln · CVE-2021-44026 · Roundcube · Roundcube Webmail · CISA KEV · CVE.org · FIRST EPSS · RoundcubePatch nowKEVEPSS 69.88%Nov 18, 2021
Medium6.1Roundcube Webmail Cross-Site Scripting (XSS) VulnerabilityVuln · CVE-2020-35730 · Roundcube · Roundcube Webmail · CISA KEV · CVE.org · FIRST EPSS · RoundcubePatch nowKEVEPSS 32.92%Dec 28, 2020
Medium6.1Roundcube Webmail Cross-Site Scripting (XSS) VulnerabilityVuln · CVE-2020-13965 · Roundcube · Roundcube Webmail · CISA KEV · CVE.org · FIRST EPSS · RoundcubePatch nowKEVEPSS 76.60%Jun 8, 2020
Critical9.8Roundcube Webmail Remote Code Execution VulnerabilityVuln · CVE-2020-12641 · Roundcube · Roundcube Webmail · CISA KEV · CVE.org · FIRST EPSS · RoundcubePatch nowKEVEPSS 84.46%May 4, 2020
High7.8Roundcube Webmail File Disclosure VulnerabilityVuln · CVE-2017-16651 · Roundcube · Roundcube Webmail · CISA KEV · CVE.org · FIRST EPSS · RoundcubePatch nowKEVEPSS 45.74%Nov 8, 2017
UnknownRoundcube Webmail Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Vuln · CVE-2013-1904 · Roundcube · Webmail · CVE.org · FIRST EPSS · VulnCheck KEV · RoundcubePatch nowKEVEPSS 2.29%Feb 7, 2014