Security
فارسی
All products

Red Hat Enterprise Linux 5/squirrelmail

Red Hat · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
squirrelmail: Insufficient escaping of user-supplied dataCVE-2017-7692 Red Hat Enterprise Linux 5/squirrelmail Red Hat High No fix reported
SquirrelMail: Directory traversal flaw in Deliver.class.php can allow a remote attacker to retrieve or delete arbitrary filesCVE-2018-8741 Red Hat Enterprise Linux 5/squirrelmail Red Hat High No fix reported
squirrelmail: persistent XSS in message display via SVG animationsCVE-2018-14955 Red Hat Enterprise Linux 5/squirrelmail Red Hat Medium No fix reported
squirrelmail: persistent XSS in message display the formaction attributeCVE-2018-14954 Red Hat Enterprise Linux 5/squirrelmail Red Hat Medium No fix reported
squirrelmail: persistent XSS in message display via a "<math xlink:href="CVE-2018-14953 Red Hat Enterprise Linux 5/squirrelmail Red Hat Medium No fix reported
squirrelmail: persistent XSS in message display via a "<math><maction xlink:href="CVE-2018-14952 Red Hat Enterprise Linux 5/squirrelmail Red Hat Medium No fix reported
squirrelmail: persistent XSS in message display via a "<form action='data:text"CVE-2018-14951 Red Hat Enterprise Linux 5/squirrelmail Red Hat Medium No fix reported
squirrelmail: persistent XSS in message display via a "<svg><a xlink:href="CVE-2018-14950 Red Hat Enterprise Linux 5/squirrelmail Red Hat Medium No fix reported
squirrelmail: improper handling of RCDATA and RAWTEXT type elements causing XSSCVE-2019-12970 Red Hat Enterprise Linux 5/squirrelmail Red Hat Medium No fix reported
squirrelmail: use of unserialize function for the attachments value in compose.phpCVE-2020-14933 Red Hat Enterprise Linux 5/squirrelmail Red Hat Medium No fix reported
squirrelmail: use of unserialize function for the mailtodata value in compose.phpCVE-2020-14932 Red Hat Enterprise Linux 5/squirrelmail Red Hat Medium No fix reported