mailman vulnerabilities (Debian)

28 vulnerabilities.

• mailman Debian Cross Site Request Forgery in mailman CVE-2021-44227 Fix available 8.8 HighDecember 2, 2021
• mailman Debian In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an... CVE-2021-43332 Fix available 6.5 MediumNovember 12, 2021
• mailman Debian In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute... CVE-2021-43331 Fix available 6.1 MediumNovember 12, 2021
• mailman Debian GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not... CVE-2021-42097 Fix available 8.0 HighOctober 21, 2021
• mailman Debian GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is... CVE-2021-42096 Fix available 4.3 MediumOctober 21, 2021
• mailman Debian GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private... CVE-2020-15011 Fix available 4.3 MediumJune 24, 2020
• mailman Debian /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. CVE-2020-12108 Fix available 6.5 MediumMay 6, 2020
• mailman Debian GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME... CVE-2020-12137 Fix available 6.1 MediumApril 24, 2020
• mailman Debian mailman - regression update DLA-1442-2 Fix available No scoreJuly 27, 2018
• mailman Debian Moderate severity vulnerability that affects mailman CVE-2018-13796 Fix available 6.5 MediumJuly 12, 2018
• mailman Debian Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated... CVE-2018-0618 Fix available 5.4 MediumJuly 11, 2018
• mailman Debian Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote... CVE-2018-5950 Fix available 6.1 MediumJanuary 23, 2018
• mailman Debian Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x... CVE-2016-6893 Fix available 8.8 HighSeptember 2, 2016
• mailman Debian Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias,... CVE-2015-2775 Fix available 7.6 HighApril 1, 2015
• mailman Debian Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and... CVE-2011-0707 4.3 MediumFebruary 18, 2011
• mailman Debian Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote... CVE-2010-3089 3.5 LowSeptember 15, 2010
• mailman Debian CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to... CVE-2006-4624 Fix available 2.6 LowSeptember 7, 2006
• mailman Debian Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote... CVE-2006-3636 Public exploit 6.8 MediumSeptember 6, 2006
• mailman Debian The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library... CVE-2006-0052 Fix available 5.0 MediumMarch 31, 2006
• mailman Debian Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message... CVE-2005-4153 7.8 HighDecember 11, 2005
• mailman Debian Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of... CVE-2005-3573 5.0 MediumNovember 16, 2005
• mailman Debian Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and... CVE-2005-0202 Fix available 5.0 MediumFebruary 9, 2005
• mailman Debian mailman Cross-site scripting (XSS) vulnerability CVE-2004-1177 Fix available 4.3 MediumJanuary 10, 2005
• mailman Debian Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote... CVE-2003-0991 5.0 MediumFebruary 8, 2004
• mailman Debian Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows... CVE-2003-0965 6.8 MediumJanuary 15, 2004
• mailman Debian Mailman Cross-site scripting (XSS) vulnerability CVE-2003-0038 Public exploitFix available 4.3 MediumJanuary 29, 2003
• mailman Debian Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute... CVE-2002-0855 Public exploit 7.5 HighAugust 8, 2002
• mailman Debian Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute... CVE-2002-0388 Public exploit 7.5 HighMay 31, 2002