Поиск уязвимостей
Количество 27
Количество 27
openSUSE-SU-2020:1707-1
Recommended update for mailman
ALT-PU-2020-2129
ALT-PU-2020-2129: package `mailman` update to version 2.1.33.0.4.0f97-alt1
SUSE-SU-2020:1301-1
Security update for mailman
RLSA-2021:1751
Moderate: mailman:2.1 security update
ELSA-2021-1751
ELSA-2021-1751: mailman:2.1 security update (MODERATE)
CVE-2020-12108
/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.
CVE-2020-12108
/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.
CVE-2020-12108
/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.
CVE-2020-12108
/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content ...
openSUSE-SU-2020:0661-1
Security update for mailman
GHSA-67xg-7gqq-pccf
/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.
CVE-2020-12137
GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing, conclude that the MIME type should have been text/html, and execute JavaScript code.
CVE-2020-12137
GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing, conclude that the MIME type should have been text/html, and execute JavaScript code.
CVE-2020-12137
GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing, conclude that the MIME type should have been text/html, and execute JavaScript code.
CVE-2020-12137
GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed app ...
CVE-2020-15011
GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.
CVE-2020-15011
GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.
CVE-2020-15011
GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.
CVE-2020-15011
GNU Mailman before 2.1.33 allows arbitrary content injection via the C ...
SUSE-SU-2020:14356-1
Security update for mailman
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | openSUSE-SU-2020:1707-1 Recommended update for mailman | около 6 лет назад | ||
| ALT-PU-2020-2129 ALT-PU-2020-2129: package `mailman` update to version 2.1.33.0.4.0f97-alt1 | CVSS3: 6.5 | больше 6 лет назад | |
| SUSE-SU-2020:1301-1 Security update for mailman | больше 6 лет назад | ||
 | RLSA-2021:1751 Moderate: mailman:2.1 security update | больше 5 лет назад | ||
| ELSA-2021-1751 ELSA-2021-1751: mailman:2.1 security update (MODERATE) | больше 5 лет назад | ||
 | CVE-2020-12108 /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. | CVSS3: 6.5 | 3% Низкий | больше 6 лет назад |
 | CVE-2020-12108 /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. | CVSS3: 5.5 | 3% Низкий | больше 6 лет назад |
 | CVE-2020-12108 /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. | CVSS3: 6.5 | 3% Низкий | больше 6 лет назад |
| CVE-2020-12108 /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content ... | CVSS3: 6.5 | 3% Низкий | больше 6 лет назад |
| openSUSE-SU-2020:0661-1 Security update for mailman | 3% Низкий | больше 6 лет назад | |
| GHSA-67xg-7gqq-pccf /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. | 3% Низкий | больше 4 лет назад | |
| CVE-2020-12137 GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing, conclude that the MIME type should have been text/html, and execute JavaScript code. | CVSS3: 6.1 | 2% Низкий | больше 6 лет назад |
| CVE-2020-12137 GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing, conclude that the MIME type should have been text/html, and execute JavaScript code. | CVSS3: 6.1 | 2% Низкий | больше 6 лет назад |
| CVE-2020-12137 GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing, conclude that the MIME type should have been text/html, and execute JavaScript code. | CVSS3: 6.1 | 2% Низкий | больше 6 лет назад |
| CVE-2020-12137 GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed app ... | CVSS3: 6.1 | 2% Низкий | больше 6 лет назад |
| CVE-2020-15011 GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page. | CVSS3: 4.3 | 2% Низкий | больше 6 лет назад |
| CVE-2020-15011 GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page. | CVSS3: 4.7 | 2% Низкий | больше 6 лет назад |
| CVE-2020-15011 GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page. | CVSS3: 4.3 | 2% Низкий | больше 6 лет назад |
| CVE-2020-15011 GNU Mailman before 2.1.33 allows arbitrary content injection via the C ... | CVSS3: 4.3 | 2% Низкий | больше 6 лет назад |
| SUSE-SU-2020:14356-1 Security update for mailman | 2% Низкий | больше 6 лет назад |
Уязвимостей на страницу