Section
Vulnerabilities
CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.
3 matching records.
-
The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers.
The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains…
-
The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verification.
The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verification. Due to the lack of server-side session destruction, an attacker can ignore the logout redirect and keep the…
-
The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor code.
The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor code. Due to the lack of rate limiting, an attacker who obtains user's password can submit arbitrary 6-digit codes, resulting…
Reuse this view
Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Alexandregz&limit=100. RSS for this section: feed.xml.