Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2020-12641 — Roundcube Webmail Remote Code Execution Vulnerability
Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
|
Roundcube | Roundcube Webmail | Jun 22, 2023 | Jul 13, 2023 | |
|
CVE-2020-35730 — Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows an attacker to send a plain text e-mail message with Javascript in a link reference element that is mishandled by linkref_addinindex in rcube_string_replacer.php.
|
Roundcube | Roundcube Webmail | Jun 22, 2023 | Jul 13, 2023 | |
|
CVE-2021-44026 — Roundcube Webmail SQL Injection Vulnerability
Roundcube Webmail is vulnerable to SQL injection via search or search_params.
|
Roundcube | Roundcube Webmail | Jun 22, 2023 | Jul 13, 2023 | |
|
CVE-2017-16651 — Roundcube Webmail File Disclosure Vulnerability
Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default.
|
Roundcube | Roundcube Webmail | Nov 3, 2021 | May 3, 2022 |
Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
Roundcube Webmail · Jun 22, 2023
Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows an attacker to send a plain text e-mail message with Javascript in a link reference element that is mishandled by linkref_addinindex in rcube_string_replacer.php.
Roundcube Webmail · Jun 22, 2023
Roundcube Webmail is vulnerable to SQL injection via search or search_params.
Roundcube Webmail · Jun 22, 2023
Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default.
Roundcube Webmail · Nov 3, 2021