Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 10
Reset filtersRoundcube Webmail: Insufficient CSS sanitization in HTML e-mail messages
Roundcube Webmail: Incorrect password comparison in the password plugin
Roundcube: Bypass of remote image blocking via crafted BODY background attribute
Roundcube Webmail: Unsanitized IMAP SEARCH command arguments
Roundcube Webmail: Bypass of remote image blocking via SVG content (with animate attributes) in an e-mail message
Roundcube Webmail: Remote image blocking feature can be bypassed via SVG content in an e-mail message
Roundcube Webmail: Insufficient CSS sanitization in HTML e-mail messages
Roundcube Webmail: Insufficient HTML attachment sanitization in preview mode
Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.