Fluid Attacks Database

Ecosystem DebianComponent roundcube

FLAT-P06A4 (CVE-2026-75010)

Business information leak In roundcube

0.6

Low

Ecosystem: Debian

Component: roundcube

FLAT-0CLOP (CVE-2026-75004)

Security controls bypass or absence In roundcube

1.7

Low

Ecosystem: Debian

Component: roundcube

FLAT-CPOIU (CVE-2026-75007)

OS Command Injection In roundcube

5.9

Medium

Ecosystem: Debian

Component: roundcube

FLAT-RH8GB (CVE-2026-75006)

Reflected cross-site scripting (XSS) In roundcube

0.6

Low

Ecosystem: Debian

Component: roundcube

FLAT-KXM6H (CVE-2026-75003)

Sensitive information sent insecurely In roundcube

2.7

Low

Ecosystem: Debian

Component: roundcube

FLAT-98BN8 (CVE-2026-74999)

Server side cross-site scripting In roundcube

2.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-28F8L (CVE-2026-75000)

Reflected cross-site scripting (XSS) In roundcube

1.2

Low

Ecosystem: Debian

Component: roundcube

FLAT-TAIII (CVE-2026-75002)

Lack of data validation In roundcube

6.2

Medium

Ecosystem: Debian

Component: roundcube

FLAT-22DN7 (CVE-2026-74998)

Reflected cross-site scripting (XSS) In roundcube

0.5

Low

Ecosystem: Debian

Component: roundcube

FLAT-FYJ7U (CVE-2026-74997)

Lack of data validation In roundcube

5.2

Medium

Ecosystem: Debian

Component: roundcube

FLAT-UONFJ (CVE-2026-54432)

Server side cross-site scripting In roundcube

2.4

Low

Ecosystem: Debian

Component: roundcube

FLAT-8EAZI (CVE-2026-54433)

Server side cross-site scripting In roundcube

7.4

High

Ecosystem: Debian

Component: roundcube

FLAT-LE8DI (CVE-2026-62642)

Improper resource allocation In roundcube

4.3

Medium

Ecosystem: Debian

Component: roundcube

FLAT-W79GD (CVE-2026-62643)

Reflected cross-site scripting (XSS) In roundcube

0.5

Low

Ecosystem: Debian

Component: roundcube

FLAT-CYMYM (CVE-2026-62641)

Asymmetric denial of service - ReDoS In roundcube

6.6

Medium

Ecosystem: Debian

Component: roundcube

FLAT-ADJ1D (CVE-2026-62644)

Session Fixation In roundcube

6.9

Medium

Ecosystem: Debian

Component: roundcube

FLAT-ST3WZ (CVE-2026-48849)

Server side cross-site scripting In roundcube

0.5

Low

Ecosystem: Debian

Component: roundcube

FLAT-HEU72 (CVE-2026-48847)

Anonymous connection In roundcube

4.8

Medium

Ecosystem: Debian

Component: roundcube

FLAT-4HJGH (CVE-2026-48848)

OS Command Injection In roundcube

2.7

Low

Ecosystem: Debian

Component: roundcube

FLAT-DQ7XV (CVE-2026-48846)

Cross-site request forgery In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-K8N0R (CVE-2026-48845)

Improper authorization control for web services In roundcube

2.7

Low

Ecosystem: Debian

Component: roundcube

FLAT-2ZAPH (CVE-2026-48843)

Reflected cross-site scripting (XSS) In roundcube

1.7

Low

Ecosystem: Debian

Component: roundcube

FLAT-HDKOK (CVE-2026-48844)

Lack of data validation In roundcube

5.2

Medium

Ecosystem: Debian

Component: roundcube

FLAT-YBTT7 (CVE-2026-48842)

SQL injection In roundcube

7.2

High

Ecosystem: Debian

Component: roundcube

FLAT-ELF7Q (DLA-4517-1)

Use of software with malware In roundcube

6.0

Medium

Ecosystem: Debian

Component: roundcube

FLAT-LTM37 (DSA-6137-1)

Use of software with malware In roundcube

6.1

Medium

Ecosystem: Debian

Component: roundcube

FLAT-T2CBI (DLA-4480-1)

Use of software with malware In roundcube

6.1

Medium

Ecosystem: Debian

Component: roundcube

FLAT-0VYY2 (CVE-2026-26079)

Server side template injection In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-XQY7S (CVE-2026-25916)

Clickjacking In roundcube

0.6

Low

Ecosystem: Debian

Component: roundcube

FLAT-MMS8Z (DSA-6087-1)

Use of software with malware In roundcube

6.1

Medium

Ecosystem: Debian

Component: roundcube

FLAT-F7PB9 (CVE-2025-68461)

Reflected cross-site scripting (XSS) In roundcube

2.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-ELAB0 (CVE-2025-68460)

Reflected cross-site scripting (XSS) In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-351Z3 (DLA-4415-1)

Use of software with malware In roundcube

6.1

Medium

Ecosystem: Debian

Component: roundcube

FLAT-B3G7Q (DLA-4211-1)

Use of software with malware In roundcube

5.2

Medium

Ecosystem: Debian

Component: roundcube

FLAT-K350T (DSA-5934-1)

Use of software with malware In roundcube

5.2

Medium

Ecosystem: Debian

Component: roundcube

FLAT-IP7RO (CVE-2024-57004)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-GAR0P (DSA-5743-2)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-RIP3L (DSA-5743-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-PPH2V (CVE-2024-42008)

Server side cross-site scripting In roundcube

7.3

High

Ecosystem: Debian

Component: roundcube

FLAT-R7SVG (CVE-2024-42009)

Server side cross-site scripting In roundcube

7.5

High

Ecosystem: Debian

Component: roundcube

FLAT-DM1AL (CVE-2024-42010)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-FS8GB (DSA-5714-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-VCFP3 (DLA-3835-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-QMCUN (CVE-2024-37383)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-KVXSP (CVE-2024-37384)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-ASCB5 (DLA-3683-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-JLUQZ (DSA-5572-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-PAREQ (CVE-2023-47272)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-22M8K (DLA-3630-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-RSCGI (DSA-5531-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-11IN4 (CVE-2023-5631)

Server side cross-site scripting In roundcube

1.2

Low

Ecosystem: Debian

Component: roundcube

FLAT-7LGSL (CVE-2023-43770)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-F318E (DLA-3577-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-5W2G4 (DLA-2878-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-54QDB (DSA-5037-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-IXUWL (CVE-2021-46144)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-L648H (DLA-2840-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-UIDJN (DSA-5013-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-FW0VQ (CVE-2021-44026)

SQL injection In roundcube

6.3

Medium

Ecosystem: Debian

Component: roundcube

FLAT-38SLA (CVE-2021-44025)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-BT2S3 (CVE-2020-18670)

Server side cross-site scripting In roundcube

1.2

Low

Ecosystem: Debian

Component: roundcube

FLAT-4I6YE (CVE-2020-18671)

Server side cross-site scripting In roundcube

1.2

Low

Ecosystem: Debian

Component: roundcube

FLAT-4TPOS (DSA-4821-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-T0V15 (DLA-2508-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-54EQA (CVE-2020-16145)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-XX6VB (DSA-4744-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-9MY03 (DLA-2322-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-TRKJR (DSA-4720-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-IK21R (CVE-2020-15562)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-IJQRD (DSA-4700-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-663RA (CVE-2020-13965)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-HB953 (CVE-2020-13964)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-CMLII (DSA-4674-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-DXQOL (CVE-2020-12641)

OS Command Injection In roundcube

6.3

Medium

Ecosystem: Debian

Component: roundcube

FLAT-ZI10Q (CVE-2020-12640)

Local file inclusion In roundcube

8.1

High

Ecosystem: Debian

Component: roundcube

FLAT-EBWTI (CVE-2020-12626)

Insecure service configuration In roundcube

5.1

Medium

Ecosystem: Debian

Component: roundcube

FLAT-OAPIN (CVE-2020-12625)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-YV28Q (CVE-2019-15237)

Weak credential policy In roundcube

4.6

Medium

Ecosystem: Debian

Component: roundcube

FLAT-0Z7KU (CVE-2019-10740)

Sensitive information sent insecurely In roundcube

2.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-7247H (DSA-4344-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-AI6M0 (CVE-2018-19205)

Unauthorized access to screen In roundcube

6.6

Medium

Ecosystem: Debian

Component: roundcube

FLAT-CJ3KQ (CVE-2018-19206)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-IG9BC (DSA-4181-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-VAX3D (CVE-2018-1000071)

Unauthorized access to screen In roundcube

6.6

Medium

Ecosystem: Debian

Component: roundcube

FLAT-Z1OEV (DLA-1193-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-B2SPH (DSA-4030-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-U6DZQ (DLA-613-2)

Lack of data validation In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-A6SOU (CVE-2015-5381)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-1388M (CVE-2015-5382)

Lack of data validation - Path Traversal In roundcube

4.9

Medium

Ecosystem: Debian

Component: roundcube

FLAT-GR3XT (DLA-933-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-9WW14 (CVE-2016-4068)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-2KFSA (CVE-2015-8864)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-NW0QZ (DLA-855-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-A8AW8 (CVE-2015-2180)

OS Command Injection In roundcube

6.3

Medium

Ecosystem: Debian

Component: roundcube

FLAT-Q9NMZ (CVE-2015-2181)

Improper resource allocation - Buffer overflow In roundcube

6.3

Medium

Ecosystem: Debian

Component: roundcube

FLAT-1R9Z0 (CVE-2016-4552)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-DAFSN (CVE-2016-9920)

Lack of data validation In roundcube

5.2

Medium

Ecosystem: Debian

Component: roundcube

FLAT-OVNIC (DLA-737-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-6HASY (DLA-613-1)

Server side cross-site scripting In roundcube

1.3

Low

Ecosystem: Debian

Component: roundcube

FLAT-2LTSE (CVE-2016-4069)

Cross-site request forgery In roundcube

5.2

Medium

Ecosystem: Debian

Component: roundcube