Show filters
202 Total Results
Displaying 11-20 of 202
Sort by:
Attacker Value
Unknown
CVE-2023-38192
Disclosure Date: October 21, 2023 (last updated October 28, 2023)
An issue was discovered in SuperWebMailer 9.00.0.01710. It allows superadmincreate.php XSS via crafted incorrect passwords.
0
Attacker Value
Unknown
CVE-2023-38190
Disclosure Date: October 21, 2023 (last updated October 28, 2023)
An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Export SQL Injection via the size parameter.
0
Attacker Value
Unknown
CVE-2023-38191
Disclosure Date: October 20, 2023 (last updated October 28, 2023)
An issue was discovered in SuperWebMailer 9.00.0.01710. It allows spamtest_external.php XSS via a crafted filename.
0
Attacker Value
Unknown
CVE-2023-5631
Disclosure Date: October 18, 2023 (last updated February 14, 2025)
Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker
to load arbitrary JavaScript code.
0
Attacker Value
Unknown
CVE-2022-29360
Disclosure Date: July 28, 2022 (last updated October 08, 2023)
The Email Viewer in RainLoop through 1.6.0 allows XSS via a crafted email message.
0
Attacker Value
Unknown
CVE-2022-31470
Disclosure Date: June 07, 2022 (last updated October 07, 2023)
An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session (for a logged-in user), can access and retrieve mailbox content.
0
Attacker Value
Unknown
CVE-2022-28218
Disclosure Date: April 26, 2022 (last updated October 07, 2023)
An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys (found in a Roundcube configuration file) that are used to protect Webmail user passwords and two-factor authentication (2FA).
0
Attacker Value
Unknown
CVE-2021-44026
Disclosure Date: November 19, 2021 (last updated October 07, 2023)
Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.
0
Attacker Value
Unknown
CVE-2021-44025
Disclosure Date: November 19, 2021 (last updated October 07, 2023)
Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning message.
0
Attacker Value
Unknown
CVE-2020-18671
Disclosure Date: June 24, 2021 (last updated February 22, 2025)
Cross Site Scripting (XSS) vulnerability in Roundcube Mail <=1.4.4 via smtp config in /installer/test.php.
0
