https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:34:14 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-36359 cnvd-2017-36359 https://cve.radiocsirt.org/vuln/cnvd-2017-36359 https://cve.radiocsirt.org/vuln/euvd-2026-256301 EUVD-2026-256301 https://cve.radiocsirt.org/vuln/euvd-2026-256301 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16651 <p>Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host&#39;s filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target system with a valid username/password as the attack requires an active session. The issue is related to file-based attachment plugins and _task=settings&amp;_action=upload-display&amp;_from=timezone requests.</p> <p>Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host&#39;s filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target system with a valid username/password as the attack requires an active session. The issue is related to file-based attachment plugins and _task=settings&amp;_action=upload-display&amp;_from=timezone requests.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-16651 https://cve.radiocsirt.org/vuln/ghsa-6r67-r3jm-88p4 <p>Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host&#39;s filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target system with a valid username/password as the attack requires an active session. The issue is related to file-based attachment plugins and _task=settings&amp;_action=upload-display&amp;_from=timezone requests.</p> <p>Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host&#39;s filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target system with a valid username/password as the attack requires an active session. The issue is related to file-based attachment plugins and _task=settings&amp;_action=upload-display&amp;_from=timezone requests.</p> https://cve.radiocsirt.org/vuln/ghsa-6r67-r3jm-88p4 https://cve.radiocsirt.org/vuln/gsd-2017-16651 gsd-2017-16651 https://cve.radiocsirt.org/vuln/gsd-2017-16651 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11303-1 <p>roundcubemail-1.4.11-1.3 on GA media</p> <p>roundcubemail-1.4.11-1.3 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11303-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-16651 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: roundcube</p> <p>Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host&#39;s filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target system with a valid username/password as the attack requires an active session. The issue is related to file-based attachment plugins and _task=settings&amp;_action=upload-display&amp;_from=timezone requests.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: roundcube</p> <p>Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host&#39;s filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target system with a valid username/password as the attack requires an active session. The issue is related to file-based attachment plugins and _task=settings&amp;_action=upload-display&amp;_from=timezone requests.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-16651