https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T22:15:07.506845+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-108153 EUVD-2026-108153 2026-10-09T22:15:07.518391+00:00 EUVD-2026-108153 https://cve.radiocsirt.org/vuln/fkie_cve-2013-5645 fkie_cve-2013-5645 2026-10-09T22:15:07.518427+00:00

Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in (1) new or (2) draft mode, related to compose.inc; and (3) might allow remote authenticated users to inject arbitrary web script or HTML via an HTML signature, related to save_identity.inc.

 https://cve.radiocsirt.org/vuln/ghsa-mm4c-mcq8-g995 GHSA-mm4c-mcq8-g995 2026-10-09T22:15:07.518460+00:00

Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in (1) new or (2) draft mode, related to compose.inc; and (3) might allow remote authenticated users to inject arbitrary web script or HTML via an HTML signature, related to save_identity.inc.

 https://cve.radiocsirt.org/vuln/gsd-2013-5645 gsd-2013-5645 2026-10-09T22:15:07.518478+00:00 gsd-2013-5645 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10491-1 openSUSE-SU-2024:10491-1 — roundcubemail-1.2.3-1.1 on GA media 2026-10-09T22:15:07.518490+00:00

roundcubemail-1.2.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-5645 Withdrawn: UBUNTU-CVE-2013-5645 2026-10-09T22:15:07.518510+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: roundcube

Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in (1) new or (2) draft mode, related to compose.inc; and (3) might allow remote authenticated users to inject arbitrary web script or HTML via an HTML signature, related to save_identity.inc.