https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:46:40 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-35381 cnvd-2020-35381 https://cve.radiocsirt.org/vuln/cnvd-2020-35381 https://cve.radiocsirt.org/vuln/euvd-2026-41120 EUVD-2026-41120 https://cve.radiocsirt.org/vuln/euvd-2026-41120 https://cve.radiocsirt.org/vuln/fkie_cve-2020-12108 <p>/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.</p> <p>/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-12108 https://cve.radiocsirt.org/vuln/ghsa-67xg-7gqq-pccf <p>/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.</p> <p>/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.</p> https://cve.radiocsirt.org/vuln/ghsa-67xg-7gqq-pccf https://cve.radiocsirt.org/vuln/gsd-2020-12108 gsd-2020-12108 https://cve.radiocsirt.org/vuln/gsd-2020-12108 https://cve.radiocsirt.org/vuln/oesa-2021-1405 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: mailman, openEuler:20.03-LTS-SP2: mailman</p> <p>Mailman is free software for managing electronic mail discussion and e-newsletter lists. Mailman is integrated with the web, making it easy for users to manage their accounts and for list owners to administer their lists. Mailman supports built-in archiving, automatic bounce processing, content filtering, digest delivery, spam filters, and more. Security Fix(es): /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.(CVE-2020-12108) GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing, conclude that the MIME type should have been text/html, and execute JavaScript code.(CVE-2020-12137) GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.(CVE-2020-15011)</p> <p>GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password.(CVE-2021-42096)</p> <p>GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: mailman, openEuler:20.03-LTS-SP2: mailman</p> <p>Mailman is free software for managing electronic mail discussion and e-newsletter lists. Mailman is integrated with the web, making it easy for users to manage their accounts and for list owners to administer their lists. Mailman supports built-in archiving, automatic bounce processing, content filtering, digest delivery, spam filters, and more. Security Fix(es): /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.(CVE-2020-12108) GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing, conclude that the MIME type should have been text/html, and execute JavaScript code.(CVE-2020-12137) GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.(CVE-2020-15011)</p> <p>GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password.(CVE-2021-42096)</p> <p>GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for…</p> https://cve.radiocsirt.org/vuln/oesa-2021-1405 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0661-1 <p>Security update for mailman</p> <p>Security update for mailman</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0661-1 https://cve.radiocsirt.org/vuln/suse-su-2020:1301-1 <p>Security update for mailman</p> <p>Security update for mailman</p> https://cve.radiocsirt.org/vuln/suse-su-2020:1301-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-12108 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mailman, Ubuntu:18.04:LTS: mailman, Ubuntu:20.04:LTS: mailman</p> <p>/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mailman, Ubuntu:18.04:LTS: mailman, Ubuntu:20.04:LTS: mailman</p> <p>/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-12108