https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:47:59 +0000 https://cve.radiocsirt.org/vuln/certa-2011-avi-410 certa-2011-avi-410 https://cve.radiocsirt.org/vuln/certa-2011-avi-410 https://cve.radiocsirt.org/vuln/euvd-2026-115743 EUVD-2026-115743 https://cve.radiocsirt.org/vuln/euvd-2026-115743 https://cve.radiocsirt.org/vuln/fkie_cve-2011-2753 <p>Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the empty trash implementation and (2) the Index Order (aka options_order) page, a different issue than CVE-2010-4555.</p> <p>Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the empty trash implementation and (2) the Index Order (aka options_order) page, a different issue than CVE-2010-4555.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-2753 https://cve.radiocsirt.org/vuln/ghsa-r7jq-728g-6qg5 <p>Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the empty trash implementation and (2) the Index Order (aka options_order) page, a different issue than CVE-2010-4555.</p> <p>Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the empty trash implementation and (2) the Index Order (aka options_order) page, a different issue than CVE-2010-4555.</p> https://cve.radiocsirt.org/vuln/ghsa-r7jq-728g-6qg5 https://cve.radiocsirt.org/vuln/gsd-2011-2753 gsd-2011-2753 https://cve.radiocsirt.org/vuln/gsd-2011-2753 https://cve.radiocsirt.org/vuln/rhsa-2012:0103 <p>SquirrelMail: Mail Fetch plugin -- port-scans via non-standard POP3 server ports SquirrelMail: DoS (disk space consumption) by random IMAP login attempts with 8-bit characters in the password SquirrelMail: Prone to clickjacking attacks SquirrelMail: Multiple XSS flaws SquirrelMail: XSS in &lt;style&gt; tag handling SquirrelMail: CRLF injection vulnerability SquirrelMail: CSRF in the empty trash feature and in Index Order page</p> <p>SquirrelMail: Mail Fetch plugin -- port-scans via non-standard POP3 server ports SquirrelMail: DoS (disk space consumption) by random IMAP login attempts with 8-bit characters in the password SquirrelMail: Prone to clickjacking attacks SquirrelMail: Multiple XSS flaws SquirrelMail: XSS in &lt;style&gt; tag handling SquirrelMail: CRLF injection vulnerability SquirrelMail: CSRF in the empty trash feature and in Index Order page</p> https://cve.radiocsirt.org/vuln/rhsa-2012:0103 https://cve.radiocsirt.org/vuln/ubuntu-cve-2011-2753 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: squirrelmail, Ubuntu:16.04:LTS: squirrelmail</p> <p>Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the empty trash implementation and (2) the Index Order (aka options_order) page, a different issue than CVE-2010-4555.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: squirrelmail, Ubuntu:16.04:LTS: squirrelmail</p> <p>Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the empty trash implementation and (2) the Index Order (aka options_order) page, a different issue than CVE-2010-4555.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2011-2753