https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:20:54.288226+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-03224 bdu:2020-03224 2026-10-04T20:20:54.467321+00:00 bdu:2020-03224 https://cve.radiocsirt.org/vuln/cnvd-2021-22132 cnvd-2021-22132 2026-10-04T20:20:54.467360+00:00 cnvd-2021-22132 https://cve.radiocsirt.org/vuln/euvd-2026-42530 EUVD-2026-42530 2026-10-04T20:20:54.467375+00:00 EUVD-2026-42530 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15011 fkie_cve-2020-15011 2026-10-04T20:20:54.467387+00:00

GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.

 https://cve.radiocsirt.org/vuln/ghsa-fvg8-xwx7-9x5m GHSA-fvg8-xwx7-9x5m 2026-10-04T20:20:54.467414+00:00

GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.

 https://cve.radiocsirt.org/vuln/gsd-2020-15011 gsd-2020-15011 2026-10-04T20:20:54.467429+00:00 gsd-2020-15011 https://cve.radiocsirt.org/vuln/oesa-2021-1405 OESA-2021-1405 — mailman security update 2026-10-04T20:20:54.467440+00:00

Affected: openEuler:20.03-LTS-SP1: mailman, openEuler:20.03-LTS-SP2: mailman

Mailman is free software for managing electronic mail discussion and e-newsletter lists. Mailman is integrated with the web, making it easy for users to manage their accounts and for list owners to administer their lists. Mailman supports built-in archiving, automatic bounce processing, content filtering, digest delivery, spam filters, and more. Security Fix(es): /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.(CVE-2020-12108) GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing, conclude that the MIME type should have been text/html, and execute JavaScript code.(CVE-2020-12137) GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.(CVE-2020-15011)

GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password.(CVE-2021-42096)

GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for…

 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1707-1 openSUSE-SU-2020:1707-1 — Recommended update for mailman 2026-10-04T20:20:54.467481+00:00

Recommended update for mailman

 https://cve.radiocsirt.org/vuln/suse-su-2020:14423-1 SUSE-SU-2020:14423-1 — Security update for mailman 2026-10-04T20:20:54.467500+00:00

Security update for mailman

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15011 UBUNTU-CVE-2020-15011 2026-10-04T20:20:54.467524+00:00

Affected: Ubuntu:16.04:LTS: mailman, Ubuntu:18.04:LTS: mailman, Ubuntu:20.04:LTS: mailman

GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.