Denial of Service

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. RoundCube Webmail (roundcubemail) before 0.2-beta allows remote attackers to cause a denial of service (memory consumption) via crafted size parameters that are used to create a l…CVE-2008-5620Roundcube · 2.6% likely

   CWE-399

2. include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a deni…CVE-2011-4078Roundcube · 2.3% likely

   CWE-399

3. Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcube_image falls back to GD, the av…CVE-2026-114723Roundcube · CVSS 3.7 · 0.5% likely

   CWE-770

4. Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vulnerability in the CSS proxy (the utils/modcss action). The fetched st…CVE-2026-114731Roundcube · CVSS 5.3 · 0.4% likely

   CWE-770

5. In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TN…CVE-2026-62642Roundcube · CVSS 4.3 · 0.3% likely

   CWE-835

6. In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size.CVE-2026-62641Roundcube · CVSS 4.3 · 0.3% likely

   CWE-770

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.