Most recent entries from all

cnvd-2018-15739

EUVD-2026-60791

fkie_cve-2018-0618

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

GHSA-66w8-h82c-2m79

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

gsd-2018-0618

jvndb-2018-000067

Mailman provided by GNU Mailman contains a stored cross-site scripting vulnerability (CWE-79). Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

RHSA-2020:1054 — Red Hat Security Advisory: mailman security and bug fix update

mailman: Cross-site scripting vulnerability allows malicious listowners to inject scripts into listinfo pages mailman: Mishandled URLs in Utils.py:GetPathPieces() allows attackers to display arbitrary text on trusted sites

SUSE-SU-2018:4296-1 — Security update for mailman

Security update for mailman

UBUNTU-CVE-2018-0618

Affected: Ubuntu:16.04:LTS: mailman, Ubuntu:18.04:LTS: mailman

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.