https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:53:14 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-07143 bdu:2023-07143 https://cve.radiocsirt.org/vuln/bdu:2023-07143 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0893 certfr-2023-avi-0893 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0893 https://cve.radiocsirt.org/vuln/euvd-2026-255693 EUVD-2026-255693 https://cve.radiocsirt.org/vuln/euvd-2026-255693 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5631 <p>Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker</p> <p>to load arbitrary JavaScript code.</p> <p>Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker</p> <p>to load arbitrary JavaScript code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-5631 https://cve.radiocsirt.org/vuln/ghsa-qf8f-27cp-gw76 <p>Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker</p> <p>to load arbitrary JavaScript code.</p> <p>Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker</p> <p>to load arbitrary JavaScript code.</p> https://cve.radiocsirt.org/vuln/ghsa-qf8f-27cp-gw76 https://cve.radiocsirt.org/vuln/gsd-2023-5631 gsd-2023-5631 https://cve.radiocsirt.org/vuln/gsd-2023-5631 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0345-1 <p>Security update for roundcubemail</p> <p>Security update for roundcubemail</p> https://cve.radiocsirt.org/vuln/opensuse-su-2023:0345-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-5631 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube</p> <p>Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker to load arbitrary JavaScript code.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube</p> <p>Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker to load arbitrary JavaScript code.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-5631 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2657 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Roundcube ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Roundcube ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2657