1492 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-34337
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured...
Linux Distros Unpatched Vulnerability : CVE-2020-15011
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page. CVE-2020-15011 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2016-6893
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site request forgery CSRF vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication o...
Linux Distros Unpatched Vulnerability : CVE-2015-2775
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. dot d...
Linux Distros Unpatched Vulnerability : CVE-2020-12137
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against...
Linux Distros Unpatched Vulnerability : CVE-2018-13796
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site. CVE-2018-13796...
Linux Distros Unpatched Vulnerability : CVE-2016-7123
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site request forgery CSRF vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication of...
RHSA-2005:136 Red Hat Security Advisory: mailman security update
Bulletin has no description...
RHSA-2021:5081 Red Hat Security Advisory: mailman:2.1 security update
Bulletin has no description...
RHSA-2021:5080 Red Hat Security Advisory: mailman:2.1 security update
Bulletin has no description...
RHSA-2021:4916 Red Hat Security Advisory: mailman:2.1 security update
Bulletin has no description...
RHSA-2021:4915 Red Hat Security Advisory: mailman:2.1 security update
Bulletin has no description...
RHSA-2021:4913 Red Hat Security Advisory: mailman security update
Bulletin has no description...
RHSA-2021:4838 Red Hat Security Advisory: mailman:2.1 security update
Bulletin has no description...
RHSA-2021:4837 Red Hat Security Advisory: mailman:2.1 security update
Bulletin has no description...
RHSA-2021:4839 Red Hat Security Advisory: mailman:2.1 security update
Bulletin has no description...
RHSA-2021:4826 Red Hat Security Advisory: mailman:2.1 security update
Bulletin has no description...
RHSA-2021:1751 Red Hat Security Advisory: mailman:2.1 security update
Bulletin has no description...