https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 04:49:41 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-09678 cnvd-2025-09678 https://cve.radiocsirt.org/vuln/cnvd-2025-09678 https://cve.radiocsirt.org/vuln/euvd-2026-235345 EUVD-2026-235345 https://cve.radiocsirt.org/vuln/euvd-2026-235345 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43920 <p>GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands via shell metacharacters in an email Subject line. NOTE: multiple third parties report that they are unable to reproduce this, regardless of whether cPanel or WHM is used.</p> <p>GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands via shell metacharacters in an email Subject line. NOTE: multiple third parties report that they are unable to reproduce this, regardless of whether cPanel or WHM is used.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-43920 https://cve.radiocsirt.org/vuln/ghsa-35m2-m3ch-fgh4 <p>GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to execute arbitrary OS commands via shell metacharacters in an email Subject line.</p> <p>GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to execute arbitrary OS commands via shell metacharacters in an email Subject line.</p> https://cve.radiocsirt.org/vuln/ghsa-35m2-m3ch-fgh4 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-43920 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: mailman, Ubuntu:18.04:LTS: mailman, Ubuntu:Pro:20.04:LTS: mailman</p> <p>GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands via shell metacharacters in an email Subject line. NOTE: multiple third parties report that they are unable to reproduce this, regardless of whether cPanel or WHM is used.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: mailman, Ubuntu:18.04:LTS: mailman, Ubuntu:Pro:20.04:LTS: mailman</p> <p>GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands via shell metacharacters in an email Subject line. NOTE: multiple third parties report that they are unable to reproduce this, regardless of whether cPanel or WHM is used.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-43920 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0858 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in cPanel/WHM ausnutzen, um Informationen offenzulegen, um beliebige Kommandos auszuführen und um Sicherheitsmechanismen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in cPanel/WHM ausnutzen, um Informationen offenzulegen, um beliebige Kommandos auszuführen und um Sicherheitsmechanismen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0858