https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T06:29:51.775203+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-00400 cnvd-2016-00400 2026-10-09T06:29:51.779450+00:00 cnvd-2016-00400 https://cve.radiocsirt.org/vuln/euvd-2026-95961 EUVD-2026-95961 2026-10-09T06:29:51.779482+00:00 EUVD-2026-95961 https://cve.radiocsirt.org/vuln/fkie_cve-2015-8770 fkie_cve-2015-8770 2026-10-09T06:29:51.779497+00:00

Directory traversal vulnerability in the set_skin function in program/include/rcmail_output_html.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a .. (dot dot) in the _skin parameter to index.php.

 https://cve.radiocsirt.org/vuln/ghsa-xc26-wfvp-2xpj GHSA-xc26-wfvp-2xpj 2026-10-09T06:29:51.779525+00:00

Directory traversal vulnerability in the set_skin function in program/include/rcmail_output_html.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a .. (dot dot) in the _skin parameter to index.php.

 https://cve.radiocsirt.org/vuln/gsd-2015-8770 gsd-2015-8770 2026-10-09T06:29:51.779541+00:00 gsd-2015-8770 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10491-1 openSUSE-SU-2024:10491-1 — roundcubemail-1.2.3-1.1 on GA media 2026-10-09T06:29:51.779560+00:00

roundcubemail-1.2.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-8770 Withdrawn: UBUNTU-CVE-2015-8770 2026-10-09T06:29:51.779579+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: roundcube, Ubuntu:18.04:LTS: roundcube

Directory traversal vulnerability in the set_skin function in program/include/rcmail_output_html.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a .. (dot dot) in the _skin parameter to index.php.