1139 matches found
PT-2020-3406 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A cross-site scripting issue exist...
GitHub Security Lab: Golang : Add Email Content Injection query
This bug was reported directly to GitHub Security Lab...
OPENSUSE-SU-2020:0764-1 Security update for mailman
This update for mailman fixes the following issues: Security issue fixed: - CVE-2020-12108: Fixed a content injection bug boo1171363. Non-security issue fixed: - Don't default to invalid hosts for DEFAULTEMAILHOST boo682920 This update was imported from the openSUSE:Leap:15.1:Update update projec...
Security update for mailman (moderate)
openSUSE Security Update: Security update for mailman Announcement ID: openSUSE-SU-2020:0764-1 Rating: moderate References: 1171363 682920 Cross-References: CVE-2020-12108 Affected Products: openSUSE Backports SLE-15-SP1 An update that solves one vulnerability and has one errata is now available...
SUSE SLES12 Security Update : mailman (SUSE-SU-2020:1301-1)
This update for mailman fixes the following issues : Security issue fixed : CVE-2020-12108: Fixed a content injection bug bsc1171363. CVE-2020-12137: Fixed a XSS vulnerability caused by MIME type confusion bsc1170558. Non-security issue fixed : Fixed rights and ownership on...
SUSE-SU-2020:1301-1 Security update for mailman
This update for mailman fixes the following issues: Security issue fixed: - CVE-2020-12108: Fixed a content injection bug bsc1171363. - CVE-2020-12137: Fixed a XSS vulnerability caused by MIME type confusion bsc1170558. Non-security issue fixed: - Fixed rights and ownership on...
openSUSE Security Update : mailman (openSUSE-2020-661)
This update for mailman fixes the following issues : Security issue fixed : - CVE-2020-12108: Fixed a content injection bug boo1171363. Non-security issue fixed : - Don't default to invalid hosts for DEFAULTEMAILHOST boo682920 C Tenable Network Security, Inc. The descriptive text and package chec...
openSUSE: Security Advisory for mailman (openSUSE-SU-2020:0661-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2020:0661-1 Security update for mailman
This update for mailman fixes the following issues: Security issue fixed: - CVE-2020-12108: Fixed a content injection bug boo1171363. Non-security issue fixed: - Don't default to invalid hosts for DEFAULTEMAILHOST boo682920...
Security update for mailman (moderate)
openSUSE Security Update: Security update for mailman Announcement ID: openSUSE-SU-2020:0661-1 Rating: moderate References: 1171363 682920 Cross-References: CVE-2020-12108 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available. Descriptio...
Ubuntu: Security Advisory (USN-4354-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4354-1 mailman vulnerability
It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this issue to inject arbitrary content in the login page...
Mailman < 2.1.31 Content Injection Vulnerability
Mailman is prone to a content injection vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gnu:mailman"; ifdescriptio...
Debian: Security Advisory (DLA-2204-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2204-1 : mailman security update
It was discovered that there was an arbitrary content injection vulnerability in the Mailman mailing list manager. For Debian 8 'Jessie', this issue has been fixed in mailman version 1:2.1.18-2+deb8u6. We recommend that you upgrade your mailman packages. NOTE: Tenable Network Security has extract...
[SECURITY] [DLA 2204-1] mailman security update
Package : mailman Version : 1:2.1.18-2+deb8u6 CVE ID : CVE-2020-12108 It was discovered that there was an arbitrary content injection vulnerability in the Mailman mailing list manager. For Debian 8 "Jessie", this issue has been fixed in mailman version 1:2.1.18-2+deb8u6. We recommend that you...
GNU Mailman Injection Vulnerability
GNU Mailman is a free suite of software from the GNU Project for managing e-mail discussions and e-mail lists. The software can be integrated with Web projects to make it easy for users to manage e-mail subscription accounts and provides built-in archiving, automatic forwarding processing, conten...
FreeBSD : mailman -- arbitrary content injection vulnerability via options or private archive login pages (88760f4d-8ef7-11ea-a66d-4b2ef158be83)
Mark Sapiro reports : A content injection vulnerability via the options login page has been discovered and reported by Vishal Singh. An issue similar to CVE-2018-13796 exists at different endpoint & param. It can lead to a phishing attack. added 2020-05-07 This is essentially the same as...
