https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:04:50.087144+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07143 bdu:2023-07143 2026-10-02T14:04:50.205627+00:00 bdu:2023-07143 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0893 certfr-2023-avi-0893 — Une vulnérabilité a été découverte dans Roundcube Webmail. Elle permet à un attaquant de provoquer une injection de cod… 2026-10-02T14:04:50.205664+00:00 certfr-2023-avi-0893 https://cve.radiocsirt.org/vuln/euvd-2026-255693 EUVD-2026-255693 2026-10-02T14:04:50.205684+00:00 EUVD-2026-255693 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5631 fkie_cve-2023-5631 2026-10-02T14:04:50.205696+00:00

Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker

to load arbitrary JavaScript code.

 https://cve.radiocsirt.org/vuln/ghsa-qf8f-27cp-gw76 GHSA-qf8f-27cp-gw76 2026-10-02T14:04:50.205727+00:00

Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker

to load arbitrary JavaScript code.

 https://cve.radiocsirt.org/vuln/gsd-2023-5631 gsd-2023-5631 2026-10-02T14:04:50.205744+00:00 gsd-2023-5631 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0345-1 openSUSE-SU-2023:0345-1 — Security update for roundcubemail 2026-10-02T14:04:50.205755+00:00

Security update for roundcubemail

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-5631 UBUNTU-CVE-2023-5631 2026-10-02T14:04:50.205772+00:00

Affected: Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube

Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker to load arbitrary JavaScript code.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2657 WID-SEC-W-2023-2657 — Roundcube: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-02T14:04:50.205796+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Roundcube ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.