Known vulnerabilities in roundcubemail (Alpine package)

Vendor: Alpine Linux Development Team
Software: roundcubemail (Alpine package)
Software CPE: cpe:2.3:o:alpine:roundcubemail_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting roundcubemail (Alpine package) roundcubemail (Alpine package) is affected by 7 known vulnerabilities: 1 high, 2 medium, 4 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU33722 - Improper input validation
CVE-2019-10740		 CWE-20 Low
No
No
 1.3.10-r0 07.04.2019 SB2019040702
SB2019110308
SB2020092414
#VU16056 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19206		 CWE-79 Low
No
No
 1.3.8-r0 25.11.2018 SB2018112608
SB2018112609
SB2018112917
#VU12078 - Command injection
CVE-2018-9846		 CWE-77 Medium
No
No
 1.3.6-r0 19.04.2018 SB2018041916
SB2018041917
SB2018042801
and 6 more
#VU9172 - Exposure of sensitive information to an unauthorized actor
CVE-2017-16651		 CWE-200 Medium
Available
Exploited
 1.1.10-r0 10.11.2017 SB2017111007
SB2017111010
SB2017112125
and 6 more
#VU7478 - Permissions, Privileges, and Access Controls
CVE-2017-8114		 CWE-264 Low
No
No
 1.1.9-r0 12.07.2017 SB2017042801
SB2017042841
SB2017042845
and 3 more
#VU33075 - Memory corruption
CVE-2015-2181		 CWE-119 High
No
No
 1.0.9-r0 31.01.2017 SB2017013104
SB2016042111
#VU32442 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-1433		 CWE-79 Low
No
No
 1.0.5-r0 03.02.2015 SB2015020302
SB2015031105
SB2015020503
and 2 more