Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownroundcubemail-1.6.19-1.1 on GA mediaOpen the advisoryOct 17, 2026
- Medium4.4In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored value could lead to stored XSS/HTML/CSS injection o…Check if you run itEPSS 0.26%May 25, 2026
- High7.2Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG docu…Check if you run itEPSS 0.45%May 25, 2026
- Low3.7Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass.Check if you run itEPSS 0.54%May 25, 2026
- Medium6.5In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var() value in an e-mail message,…Check if you run itEPSS 0.48%May 25, 2026
- Medium6.5In Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16 and 1.7.x before 1.7.1, remote image blocking was not honored for URLs pointing to local/private destinations, whi…Check if you run itEPSS 0.45%May 25, 2026
- High7.5Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autovalues option that could lead to code injection.Check if you run itEPSS 0.51%May 25, 2026
- High7.2Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16,and 1.7.x before 1.7.1 has Insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to…Check if you run itEPSS 0.27%May 25, 2026
- High8.1Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash escape bypass.Patch nowKEVEPSS 0.89%May 25, 2026
- High8.2An issue was discovered in Roundcube Webmail before 1.5.15 and 1.6.15.Check if you run itEPSS 0.55%Apr 3, 2026
- Medium5.3An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.51%Apr 3, 2026
- Medium5.3An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.53%Apr 3, 2026
- Medium5.3An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.53%Apr 3, 2026
- Medium4.2An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.31%Apr 3, 2026
- Medium6.5An issue was discovered in Roundcube Webmail 1.6.0 before 1.6.14.Check if you run itEPSS 0.39%Apr 3, 2026
- Medium6.1An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.35%Apr 3, 2026
- Low3.1An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.36%Apr 3, 2026
- High7.5An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.60%Apr 3, 2026
- Medium6.1RoundCube Webmail Cross-site Scripting VulnerabilityPatch nowKEVEPSS 26.84%Dec 17, 2025
- High8.8RoundCube Webmail Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 98.97%Jun 1, 2025
- UnknownMultiples vulnérabilités dans Roundcube (09 août 2024)Check this weekEPSS 34.21%Aug 9, 2024
- Critical9.3RoundCube Webmail Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 82.88%Aug 5, 2024
- Medium6.1RoundCube Webmail Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 73.30%Jun 6, 2024
- Medium5.4Roundcube Webmail Persistent Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 75.87%Oct 18, 2023
- Medium6.1Roundcube Webmail Persistent Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 63.66%Sep 21, 2023
31 records · page 1 of 2
PreviousNext