https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:08:04.899569+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-06297 bdu:2023-06297 2026-10-03T09:08:05.651504+00:00 bdu:2023-06297 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0786 certfr-2023-avi-0786 — Une vulnérabilité a été découverte dans Roundcube Webmail. Elle permet à un attaquant de provoquer une injection de cod… 2026-10-03T09:08:05.651537+00:00 certfr-2023-avi-0786 https://cve.radiocsirt.org/vuln/euvd-2026-255703 EUVD-2026-255703 2026-10-03T09:08:05.651556+00:00 EUVD-2026-255703 https://cve.radiocsirt.org/vuln/fkie_cve-2023-43770 fkie_cve-2023-43770 2026-10-03T09:08:05.651568+00:00

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.

 https://cve.radiocsirt.org/vuln/ghsa-g3fv-4f2h-xwv4 GHSA-g3fv-4f2h-xwv4 2026-10-03T09:08:05.651594+00:00

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.

 https://cve.radiocsirt.org/vuln/gsd-2023-43770 gsd-2023-43770 2026-10-03T09:08:05.651609+00:00 gsd-2023-43770 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-43770 UBUNTU-CVE-2023-43770 2026-10-03T09:08:05.651620+00:00

Affected: Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2425 WID-SEC-W-2023-2425 — Roundcube: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-03T09:08:05.651645+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Roundcube ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.