Lucene search
+L

1611 matches found

RedHat Linux
RedHat Linux
•added 2011/03/01 10:48 p.m.•41 views

Moderate: Red Hat Security Advisory: mailman security update

An updated mailman package that fixes multiple security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

4.3CVSS6.4AI score0.04248EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2011/03/01 10:48 p.m.•12 views

Mailman: Three XSS flaws due improper escaping of the full name of the member

Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...

4.3CVSS7.3AI score0.04248EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2011/03/01 10:48 p.m.•12 views

mailman: Multiple security flaws leading to cross-site scripting (XSS) attacks

Multiple cross-site scripting XSS vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 the list information field or 2 the list description field...

3.5CVSS6.5AI score0.01973EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2011/03/01 10:42 p.m.•38 views

Moderate: Red Hat Security Advisory: mailman security update

An updated mailman package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

4.3CVSS6.4AI score0.04248EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2011/03/01 10:42 p.m.•14 views

Mailman: Three XSS flaws due improper escaping of the full name of the member

Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...

4.3CVSS7.3AI score0.04248EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2011/03/01 10:42 p.m.•12 views

mailman: XSS triggerable by list administrator

Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 editing templates and 2 the list's "info attribute" in the web administrator interface, a different vulnerability than...

4.3CVSS6.1AI score0.01919EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2011/03/01 10:42 p.m.•11 views

mailman: Multiple security flaws leading to cross-site scripting (XSS) attacks

Multiple cross-site scripting XSS vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 the list information field or 2 the list description field...

3.5CVSS6.5AI score0.01973EPSS
SaveExploits0References4
Oracle linux
Oracle linux
•added 2011/03/01 12:00 a.m.•75 views

mailman security update

3:2.1.12-14.2 - fix 677848 - fixed build problem without brew 3:2.1.12-14.1 - fix 677848 - fixed CVE-2010-3089 and CVE-2011-0707...

4.3CVSS1.3AI score0.04248EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2011/02/28 12:00 a.m.•20 views

Ubuntu Update for mailman vulnerabilities USN-1069-1

Ubuntu Update for Linux kernel vulnerabilities USN-1069-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10691.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for mailman vulnerabilities USN-1069-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

4.3CVSS6.3AI score0.04248EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2011/02/28 12:00 a.m.•26 views

Mandriva Update for mailman MDVSA-2011:036 (mailman)

Check for the Version of mailman OpenVAS Vulnerability Test Mandriva Update for mailman MDVSA-2011:036 mailman Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

4.3CVSS8.8AI score0.04248EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2011/02/28 12:00 a.m.•31 views

Mandriva Update for mailman MDVSA-2011:036 (mailman)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.3CVSS8AI score0.04248EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2011/02/28 12:00 a.m.•22 views

Ubuntu: Security Advisory (USN-1069-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS7.1AI score0.04248EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2011/02/26 12:00 a.m.•67 views

[ MDVSA-2011:036 ] mailman

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:036 http://www.mandriva.com/security/ Package : mailman Date : February 23, 2011 Affected: 2009.0, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability has been found and...

4.3CVSS8.1AI score0.04248EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2011/02/24 12:00 a.m.•35 views

Mandriva Linux Security Advisory : mailman (MDVSA-2011:036)

A vulnerability has been found and corrected in mailman : Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...

4.3CVSS7.3AI score0.04248EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2011/02/23 12:00 a.m.•25 views

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : mailman vulnerabilities (USN-1069-1)

It was discovered that Mailman did not properly sanitize certain fields, resulting in cross-site scripting XSS vulnerabilities. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to...

4.3CVSS5.8AI score0.04248EPSS
SaveExploits0References3
Ubuntu
Ubuntu
•added 2011/02/22 7:45 p.m.•122 views

USN-1069-1: Mailman vulnerabilities

It was discovered that Mailman did not properly sanitize certain fields, resulting in cross-site scripting XSS vulnerabilities. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to...

4.3CVSS6.1AI score0.04248EPSS
SaveExploits0
NVD
NVD
•added 2011/02/22 7:00 p.m.•20 views

CVE-2011-0707

Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...

4.3CVSS5.4AI score0.04248EPSS
SaveExploits0References30
CVE
CVE
•added 2011/02/22 6:00 p.m.•107 views

CVE-2011-0707

CVE-2011-0707 is a cross-site scripting (XSS) vulnerability in GNU Mailman 2.1.14 and earlier, specifically in Cgi/confirm.py, where remote attackers can inject arbitrary script or HTML via the full name or username in a confirmation message. Multiple Nessus/MiracleLinux open-source advisories re...

4.3CVSS7.4AI score0.04248EPSS
SaveExploits0References30Affected Software1
Debian CVE
Debian CVE
•added 2011/02/22 6:00 p.m.•30 views

CVE-2011-0707

Removed by vendor...

4.3CVSS8.7AI score0.04248EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/02/22 12:00 a.m.•9 views

CVE-2011-0707: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...

4.3CVSS5.9AI score0.04248EPSS
SaveExploits0References2
Rows per page
Query Builder