https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:30:23 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-07448 bdu:2026-07448 https://cve.radiocsirt.org/vuln/bdu:2026-07448 https://cve.radiocsirt.org/vuln/euvd-2026-321289 EUVD-2026-321289 https://cve.radiocsirt.org/vuln/euvd-2026-321289 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48848 <p>Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element with the attributeName attribute.</p> <p>Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element with the attributeName attribute.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-48848 https://cve.radiocsirt.org/vuln/ghsa-p64r-9rcj-x33x <p>Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element with the attributeName attribute.</p> <p>Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element with the attributeName attribute.</p> https://cve.radiocsirt.org/vuln/ghsa-p64r-9rcj-x33x https://cve.radiocsirt.org/vuln/opensuse-su-2026:10869-1 <p>roundcubemail-1.6.16-2.1 on GA media</p> <p>roundcubemail-1.6.16-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10869-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-48848 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube, Ubuntu:Pro:24.04:LTS: roundcube, Ubuntu:25.10: roundcube, Ubuntu:Pro:26.04:LTS: roundcube</p> <p>Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element with the attributeName attribute.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube, Ubuntu:Pro:24.04:LTS: roundcube, Ubuntu:25.10: roundcube, Ubuntu:Pro:26.04:LTS: roundcube</p> <p>Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element with the attributeName attribute.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-48848 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1671 <p>Ein Angreifer kann mehrere Schwachstellen in Roundcube Webmail ausnutzen, um SQL-Injection-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Roundcube Webmail ausnutzen, um SQL-Injection-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1671