Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection...
CVE-2026-114725
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_send
#cwe-99
共收录 39 条相关情报。
← 返回所有主题Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection...
CVE-2026-114726
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounc
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection...
CVE-2026-114716
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_send
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection...
CVE-2026-114717
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a messa
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce (resend) action. rcube_mime::decode_address_list() did ...
CVE-2026-114726
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounc
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail stripped newline characters only from the Subject an...
CVE-2026-114725
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_send
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a message is forwarded as an attachment. The subject of the forw...
CVE-2026-114717
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a messa
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail::extract_inline_images() used the media type taken f...
CVE-2026-114716
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_send
CVE-2026-114726
CVE-2026-114726
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounc
CVE-2026-114725
CVE-2026-114725
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_send
CVE-2026-114717
CVE-2026-114717
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a messa
CVE-2026-114716
CVE-2026-114716
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_send
Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later...
CVE-2026-107448
Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading...
CVE-2026-106583
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
CVE-2026-106583
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Or...
CVE-2026-105444
A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the fi
A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the...
CVE-2026-100884
A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download
A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of ...
CVE-2026-100884
A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download
Krayin laravel-crm attachment-download Endpoint acl.php resource injection
CVE-2026-100884
A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, H2PersistentQueue derives a session's message-map name as queue_ plus the client ID and its metadata-map name as que...
CVE-2026-95847
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, H2PersistentQueue derives a session's message-map name as q