Поиск уязвимостей
Количество 33
Количество 33
ALT-PU-2021-3277
ALT-PU-2021-3277: package `mailman` update to version 2.1.37-alt1
SUSE-SU-2022:1886-1
Security update for mailman
openSUSE-SU-2021:1436-1
Security update for mailman
RLSA-2021:4826
Important: mailman:2.1 security update
ELSA-2021-4826
ELSA-2021-4826: mailman:2.1 security update (IMPORTANT)
ALT-PU-2021-3235
ALT-PU-2021-3235: package `mailman` update to version 2.1.35-alt1
CVE-2021-42096
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password.
CVE-2021-42096
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password.
CVE-2021-42096
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password.
CVE-2021-42096
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A cer ...
GHSA-c875-cgwj-4fjw
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password.
CVE-2021-42097
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover).
CVE-2021-42097
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover).
CVE-2021-42097
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover).
CVE-2021-42097
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csr ...
ALT-PU-2021-3272
ALT-PU-2021-3272: package `mailman` update to version 2.1.36-alt1
GHSA-vj65-f4hc-r425
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover).
CVE-2021-43331
In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS.
CVE-2021-43331
In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS.
CVE-2021-43331
In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2021-3277 ALT-PU-2021-3277: package `mailman` update to version 2.1.37-alt1 | CVSS3: 8 | почти 5 лет назад | |
 | SUSE-SU-2022:1886-1 Security update for mailman | больше 4 лет назад | ||
| openSUSE-SU-2021:1436-1 Security update for mailman | около 5 лет назад | ||
 | RLSA-2021:4826 Important: mailman:2.1 security update | почти 5 лет назад | ||
| ELSA-2021-4826 ELSA-2021-4826: mailman:2.1 security update (IMPORTANT) | почти 5 лет назад | ||
| ALT-PU-2021-3235 ALT-PU-2021-3235: package `mailman` update to version 2.1.35-alt1 | CVSS3: 8 | около 5 лет назад | |
 | CVE-2021-42096 GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password. | CVSS3: 4.3 | 1% Низкий | около 5 лет назад |
 | CVE-2021-42096 GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password. | CVSS3: 4.3 | 1% Низкий | около 5 лет назад |
 | CVE-2021-42096 GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password. | CVSS3: 4.3 | 1% Низкий | около 5 лет назад |
| CVE-2021-42096 GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A cer ... | CVSS3: 4.3 | 1% Низкий | около 5 лет назад |
| GHSA-c875-cgwj-4fjw GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password. | 1% Низкий | больше 4 лет назад | |
| CVE-2021-42097 GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover). | CVSS3: 8 | 1% Низкий | около 5 лет назад |
| CVE-2021-42097 GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover). | CVSS3: 8 | 1% Низкий | около 5 лет назад |
| CVE-2021-42097 GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover). | CVSS3: 8 | 1% Низкий | около 5 лет назад |
| CVE-2021-42097 GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csr ... | CVSS3: 8 | 1% Низкий | около 5 лет назад |
| ALT-PU-2021-3272 ALT-PU-2021-3272: package `mailman` update to version 2.1.36-alt1 | CVSS3: 6.5 | почти 5 лет назад | |
| GHSA-vj65-f4hc-r425 GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover). | 1% Низкий | больше 4 лет назад | |
| CVE-2021-43331 In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS. | CVSS3: 6.1 | 1% Низкий | почти 5 лет назад |
| CVE-2021-43331 In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS. | CVSS3: 6.1 | 1% Низкий | почти 5 лет назад |
| CVE-2021-43331 In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS. | CVSS3: 6.1 | 1% Низкий | почти 5 лет назад |
Уязвимостей на страницу