Gnu Mailman vulnerabilities

• gnu mailman GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create... CVE-2025-43921 Public exploitDisputed 5.3 MediumApril 20, 2025
• gnu mailman GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to execute... CVE-2025-43920 Public exploitDisputed 5.4 MediumApril 20, 2025
• gnu mailman GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read... CVE-2025-43919 Public exploitDisputed 5.8 MediumApril 20, 2025
• gnu mailman Mailman Core vulnerable to timing attacks CVE-2021-34337 Fix available 6.3 MediumOctober 21, 2022
• gnu mailman, debian linux +1 more Cross Site Request Forgery in mailman CVE-2021-44227 Fix available 8.8 HighDecember 2, 2021
• gnu mailman, debian linux +1 more In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an... CVE-2021-43332 Fix available 6.5 MediumNovember 12, 2021
• gnu mailman, debian linux +1 more In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute... CVE-2021-43331 Fix available 6.1 MediumNovember 12, 2021
• gnu mailman, debian linux +1 more GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not... CVE-2021-42097 Fix available 8.0 HighOctober 21, 2021
• gnu mailman, debian linux +1 more GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is... CVE-2021-42096 Fix available 4.3 MediumOctober 21, 2021
• gnu mailman, canonical ubuntu linux, debian linux +2 more GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private... CVE-2020-15011 Fix available 4.3 MediumJune 24, 2020
• gnu mailman, canonical ubuntu linux, debian linux +3 more +5 more /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. CVE-2020-12108 Fix available 6.5 MediumMay 6, 2020
• gnu mailman, canonical ubuntu linux, debian linux +3 more +5 more GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME... CVE-2020-12137 Fix available 6.1 MediumApril 24, 2020
• gnu mailman Moderate severity vulnerability that affects mailman CVE-2018-13796 Fix available 6.5 MediumJuly 12, 2018
• gnu mailman, debian linux +1 more Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated... CVE-2018-0618 Fix available 5.4 MediumJuly 11, 2018
• gnu mailman, canonical ubuntu linux, debian linux +6 more +8 more Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote... CVE-2018-5950 Fix available 6.1 MediumJanuary 23, 2018
• gnu mailman Cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before... CVE-2016-7123 Fix available 8.8 HighSeptember 2, 2016
• gnu mailman Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x... CVE-2016-6893 Fix available 8.8 HighSeptember 2, 2016
• gnu mailman, canonical ubuntu linux, debian linux +1 more +3 more Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias,... CVE-2015-2775 Fix available 7.6 HighApril 1, 2015
• gnu mailman Cross-site scripting (XSS) vulnerability in mmsearch/design in the Mailman/htdig integration... CVE-2011-5024 4.3 MediumDecember 29, 2011
• gnu mailman Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and... CVE-2011-0707 Fix available 4.3 MediumFebruary 18, 2011
• gnu mailman Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote... CVE-2010-3089 Fix available 3.5 LowSeptember 15, 2010
• gnu mailman ** DISPUTED ** Format string vulnerability in Mailman before 2.1.9 allows attackers to execute... CVE-2006-2191 Disputed 7.5 HighSeptember 19, 2006
• gnu mailman CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to... CVE-2006-4624 Fix available 2.6 LowSeptember 7, 2006
• gnu mailman Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote... CVE-2006-3636 Public exploitFix available 6.8 MediumSeptember 6, 2006
• gnu mailman Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified... CVE-2006-2941 Fix available 5.0 MediumSeptember 6, 2006
• gnu mailman Cross-site scripting (XSS) vulnerability in the private archive script (private.py) in GNU... CVE-2006-1712 2.6 LowApril 11, 2006
• gnu mailman The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library... CVE-2006-0052 Fix available 5.0 MediumMarch 31, 2006
• gnu mailman Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message... CVE-2005-4153 Fix available 7.8 HighDecember 11, 2005
• gnu mailman Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of... CVE-2005-3573 Fix available 5.0 MediumNovember 16, 2005
• gnu mailman Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and... CVE-2005-0202 Fix available 5.0 MediumFebruary 9, 2005
• gnu mailman, ubuntu linux +1 more The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error... CVE-2005-0080 5.0 MediumJanuary 19, 2005
• gnu mailman mailman Cross-site scripting (XSS) vulnerability CVE-2004-1177 Fix available 4.3 MediumJanuary 10, 2005
• gnu mailman The password generation in mailman before 2.1.5 generates only 5 million unique passwords, which... CVE-2004-1143 7.5 HighDecember 31, 2004
• gnu mailman Mailman Sensitive Information Disclosure CVE-2004-0412 Fix available 5.0 MediumJune 3, 2004
• gnu mailman Mailman before 2.0.13 allows remote attackers to cause a denial of service (crash) via an email... CVE-2004-0182 5.0 MediumApril 17, 2004
• gnu mailman, sgi propack +1 more Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote... CVE-2003-0991 Fix available 5.0 MediumFebruary 8, 2004
• gnu mailman Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows... CVE-2003-0992 4.3 MediumJanuary 15, 2004
• gnu mailman Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows... CVE-2003-0965 Fix available 6.8 MediumJanuary 15, 2004
• gnu mailman Mailman Cross-site scripting (XSS) vulnerability CVE-2003-0038 Public exploitFix available 4.3 MediumJanuary 29, 2003
• gnu mailman Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute... CVE-2002-0855 Public exploitFix available 7.5 HighAugust 8, 2002
• gnu mailman Pipermail in Mailman stores private mail messages with predictable filenames in a world... CVE-2002-0389 Fix available 2.1 LowJune 18, 2002
• gnu mailman Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute... CVE-2002-0388 Public exploitFix available 7.5 HighMay 31, 2002
• gnu mailman Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to... CVE-2001-0884 5.1 MediumDecember 21, 2001
• gnu mailman Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages... CVE-2001-1132 7.5 HighSeptember 5, 2001
• gnu mailman Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords. CVE-2001-0290 4.6 MediumMay 3, 2001
• gnu mailman Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in... CVE-2000-0861 7.2 HighNovember 14, 2000
• gnu mailman, conectiva linux +1 more The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format... CVE-2000-0701 4.6 MediumSeptember 21, 2000