https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:29:09.384811+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01759 bdu:2021-01759 2026-10-04T11:29:09.562110+00:00 bdu:2021-01759 https://cve.radiocsirt.org/vuln/cnvd-2021-44696 cnvd-2021-44696 2026-10-04T11:29:09.562162+00:00 cnvd-2021-44696 https://cve.radiocsirt.org/vuln/euvd-2026-256042 EUVD-2026-256042 2026-10-04T11:29:09.562182+00:00 EUVD-2026-256042 https://cve.radiocsirt.org/vuln/fkie_cve-2020-35730 fkie_cve-2020-35730 2026-10-04T11:29:09.562199+00:00

An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message, with JavaScript in a link reference element that is mishandled by linkref_addindex in rcube_string_replacer.php.

 https://cve.radiocsirt.org/vuln/ghsa-mr5j-h8xf-5m2m GHSA-mr5j-h8xf-5m2m 2026-10-04T11:29:09.562239+00:00

linkref_addindex in rcube_string_replacer.php in Roundcube Webmail before 1.4.10 allows XSS via a crafted email message.

 https://cve.radiocsirt.org/vuln/gsd-2020-35730 gsd-2020-35730 2026-10-04T11:29:09.562263+00:00 gsd-2020-35730 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0931-1 openSUSE-SU-2021:0931-1 — Security update for roundcubemail 2026-10-04T11:29:09.562280+00:00

Security update for roundcubemail

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-35730 UBUNTU-CVE-2020-35730 2026-10-04T11:29:09.562307+00:00

Affected: Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube

An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message, with JavaScript in a link reference element that is mishandled by linkref_addindex in rcube_string_replacer.php.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1546 WID-SEC-W-2023-1546 — Roundcube: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-04T11:29:09.562343+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Roundcube ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.