Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Webmail
MEDIUM 6.1
CVE-2025-68461 KEVEPSS 21%
Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.
Fix: 1.5.12 / 1.6.12+
Fix from $1,600
2025-12-18
Webmail
CRITICAL 9.3
CVE-2024-42009 KEVEPSS 80%
A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim…
Fix: 1.5.8 / 1.6.8+
Fix from $2,300
2024-08-05
Webmail
CRITICAL 9.8
CVE-2020-12641 KEVEPSS 84%
rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for …
Fix: 1.2.10 / 1.3.11+
Fix from $2,300
2020-05-04