https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 12:30:36 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-0987 certfr-2026-avi-0987 https://db.gcve.eu/vuln/certfr-2026-avi-0987 https://db.gcve.eu/vuln/fkie_cve-2026-75007 <p>In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation.</p> <p>In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation.</p> https://db.gcve.eu/vuln/fkie_cve-2026-75007 https://db.gcve.eu/vuln/ghsa-2c9p-fq48-6545 <p>In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation.</p> <p>In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation.</p> https://db.gcve.eu/vuln/ghsa-2c9p-fq48-6545 https://db.gcve.eu/vuln/ubuntu-cve-2026-75007 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube, Ubuntu:Pro:24.04:LTS: roundcube, Ubuntu:Pro:26.04:LTS: roundcube</p> <p>In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube, Ubuntu:Pro:24.04:LTS: roundcube, Ubuntu:Pro:26.04:LTS: roundcube</p> <p>In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-75007 https://db.gcve.eu/vuln/wid-sec-w-2026-2880 <p>Ein Angreifer kann mehrere Schwachstellen in Roundcube Webmail ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Roundcube Webmail ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-2880