https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 18:43:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-108153 EUVD-2026-108153 https://cve.radiocsirt.org/vuln/euvd-2026-108153 https://cve.radiocsirt.org/vuln/fkie_cve-2013-5645 <p>Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in (1) new or (2) draft mode, related to compose.inc; and (3) might allow remote authenticated users to inject arbitrary web script or HTML via an HTML signature, related to save_identity.inc.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in (1) new or (2) draft mode, related to compose.inc; and (3) might allow remote authenticated users to inject arbitrary web script or HTML via an HTML signature, related to save_identity.inc.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-5645 https://cve.radiocsirt.org/vuln/ghsa-mm4c-mcq8-g995 <p>Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in (1) new or (2) draft mode, related to compose.inc; and (3) might allow remote authenticated users to inject arbitrary web script or HTML via an HTML signature, related to save_identity.inc.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in (1) new or (2) draft mode, related to compose.inc; and (3) might allow remote authenticated users to inject arbitrary web script or HTML via an HTML signature, related to save_identity.inc.</p> https://cve.radiocsirt.org/vuln/ghsa-mm4c-mcq8-g995 https://cve.radiocsirt.org/vuln/gsd-2013-5645 gsd-2013-5645 https://cve.radiocsirt.org/vuln/gsd-2013-5645 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10491-1 <p>roundcubemail-1.2.3-1.1 on GA media</p> <p>roundcubemail-1.2.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10491-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-5645 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: roundcube</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in (1) new or (2) draft mode, related to compose.inc; and (3) might allow remote authenticated users to inject arbitrary web script or HTML via an HTML signature, related to save_identity.inc.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: roundcube</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in (1) new or (2) draft mode, related to compose.inc; and (3) might allow remote authenticated users to inject arbitrary web script or HTML via an HTML signature, related to save_identity.inc.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-5645