https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:16:03.161401+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-33657 cnvd-2020-33657 2026-10-05T20:16:03.267171+00:00 cnvd-2020-33657 https://cve.radiocsirt.org/vuln/euvd-2026-38254 EUVD-2026-38254 2026-10-05T20:16:03.267208+00:00 EUVD-2026-38254 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8035 fkie_cve-2020-8035 2026-10-05T20:16:03.267238+00:00

The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (XSS) vulnerability via an SVG image upload containing a JavaScript payload. An attacker can obtain access to a victim's webmail account by making them visit a malicious URL.

 https://cve.radiocsirt.org/vuln/ghsa-7gcr-rp9v-fqcf GHSA-7gcr-rp9v-fqcf 2026-10-05T20:16:03.267268+00:00

The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (XSS) vulnerability via an SVG image upload containing a JavaScript payload. An attacker can obtain access to a victim's webmail account by making them visit a malicious URL.

 https://cve.radiocsirt.org/vuln/gsd-2020-8035 gsd-2020-8035 2026-10-05T20:16:03.267286+00:00 gsd-2020-8035 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-8035 UBUNTU-CVE-2020-8035 2026-10-05T20:16:03.267297+00:00

Affected: Ubuntu:16.04:LTS: php-horde, Ubuntu:18.04:LTS: php-horde

The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (XSS) vulnerability via an SVG image upload containing a JavaScript payload. An attacker can obtain access to a victim's webmail account by making them visit a malicious URL.