https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:47:38.453770+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-02068 bdu:2016-02068 2026-10-02T17:47:38.615984+00:00 bdu:2016-02068 https://cve.radiocsirt.org/vuln/cnvd-2016-07107 cnvd-2016-07107 2026-10-02T17:47:38.616024+00:00 cnvd-2016-07107 https://cve.radiocsirt.org/vuln/euvd-2026-86224 EUVD-2026-86224 2026-10-02T17:47:38.616039+00:00 EUVD-2026-86224 https://cve.radiocsirt.org/vuln/fkie_cve-2016-6893 fkie_cve-2016-6893 2026-10-02T17:47:38.616050+00:00

Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account.

 https://cve.radiocsirt.org/vuln/ghsa-46p3-9vjv-gq2w GHSA-46p3-9vjv-gq2w 2026-10-02T17:47:38.616080+00:00

Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account.

 https://cve.radiocsirt.org/vuln/gsd-2016-6893 gsd-2016-6893 2026-10-02T17:47:38.616096+00:00 gsd-2016-6893 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10215-1 openSUSE-SU-2024:10215-1 — mailman-2.1.23-1.2 on GA media 2026-10-02T17:47:38.616106+00:00

mailman-2.1.23-1.2 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2018:1638-1 SUSE-SU-2018:1638-1 — Security update for mailman 2026-10-02T17:47:38.616125+00:00

Security update for mailman

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-6893 UBUNTU-CVE-2016-6893 2026-10-02T17:47:38.616139+00:00

Affected: Ubuntu:14.04:LTS: mailman, Ubuntu:16.04:LTS: mailman

Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account.