CVE-2020-15011

Removed by vendor...

CVE-2020-15011: Improper Neutralization of Special Elements in Output Used by a Downstream Component

GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page...

CVE-2020-12108

/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection...

WordPress KingComposer plugin <= 2.9.2 - Content Injection vulnerability

Content Injection vulnerability discovered by NinTechNet in WordPress KingComposer plugin versions = 2.9.2. Solution Update the WordPress KingComposer plugin to the latest available version at least 2.9.4...

PT-2020-3406 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A cross-site scripting issue exist...

PT-2020-3002

Name of the Vulnerable Software and Affected Versions GNU Mailman versions prior to 2.1.33 Description The issue exists due to insufficient input validation in the Cgi/private.py private archive login page of the GNU Mailman mailing list management system. This allows a remote attacker to inject...

GitHub Security Lab: Golang : Add Email Content Injection query

This bug was reported directly to GitHub Security Lab...

OPENSUSE-SU-2020:0764-1 Security update for mailman

This update for mailman fixes the following issues: Security issue fixed: - CVE-2020-12108: Fixed a content injection bug boo1171363. Non-security issue fixed: - Don't default to invalid hosts for DEFAULTEMAILHOST boo682920 This update was imported from the openSUSE:Leap:15.1:Update update projec...

Security update for mailman (moderate)

openSUSE Security Update: Security update for mailman Announcement ID: openSUSE-SU-2020:0764-1 Rating: moderate References: 1171363 682920 Cross-References: CVE-2020-12108 Affected Products: openSUSE Backports SLE-15-SP1 An update that solves one vulnerability and has one errata is now available...

SUSE SLES12 Security Update : mailman (SUSE-SU-2020:1301-1)

This update for mailman fixes the following issues : Security issue fixed : CVE-2020-12108: Fixed a content injection bug bsc1171363. CVE-2020-12137: Fixed a XSS vulnerability caused by MIME type confusion bsc1170558. Non-security issue fixed : Fixed rights and ownership on...

SUSE-SU-2020:1301-1 Security update for mailman

This update for mailman fixes the following issues: Security issue fixed: - CVE-2020-12108: Fixed a content injection bug bsc1171363. - CVE-2020-12137: Fixed a XSS vulnerability caused by MIME type confusion bsc1170558. Non-security issue fixed: - Fixed rights and ownership on...

openSUSE Security Update : mailman (openSUSE-2020-661)

This update for mailman fixes the following issues : Security issue fixed : - CVE-2020-12108: Fixed a content injection bug boo1171363. Non-security issue fixed : - Don't default to invalid hosts for DEFAULTEMAILHOST boo682920 C Tenable Network Security, Inc. The descriptive text and package chec...

openSUSE: Security Advisory for mailman (openSUSE-SU-2020:0661-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0661-1 Security update for mailman

This update for mailman fixes the following issues: Security issue fixed: - CVE-2020-12108: Fixed a content injection bug boo1171363. Non-security issue fixed: - Don't default to invalid hosts for DEFAULTEMAILHOST boo682920...

Security update for mailman (moderate)

openSUSE Security Update: Security update for mailman Announcement ID: openSUSE-SU-2020:0661-1 Rating: moderate References: 1171363 682920 Cross-References: CVE-2020-12108 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available.Description...

Ubuntu: Security Advisory (USN-4354-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4354-1 mailman vulnerability

It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this issue to inject arbitrary content in the login page...

Debian: Security Advisory (DLA-2204-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mailman < 2.1.31 Content Injection Vulnerability

Mailman is prone to a content injection vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gnu:mailman"; ifdescriptio...

Debian DLA-2204-1 : mailman security update

It was discovered that there was an arbitrary content injection vulnerability in the Mailman mailing list manager. For Debian 8 'Jessie', this issue has been fixed in mailman version 1:2.1.18-2+deb8u6. We recommend that you upgrade your mailman packages. NOTE: Tenable Network Security has extract...