Product
debian/mailman vulnerabilities
26 published CVES affecting debian/mailman, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 26
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unscored
- 24
- CISA KEV
- 0
Latest debian/mailman CVEs
Newest publication first · page 1 of 2
-
Unknown
-
DLA-2791-1 mailman - security update
PublishedUnknown -
DSA-4991-1 mailman - security update
PublishedUnknown -
DLA-2276-1 mailman - security update
PublishedUnknown -
DLA-2265-1 mailman - security update
PublishedUnknown -
DLA-2204-1 mailman - security update
PublishedUnknown -
DLA-2200-1 mailman - security update
PublishedUnknown -
DSA-4664-1 mailman - security update
PublishedUnknown -
DLA-1442-2 mailman - regression update
PublishedUnknown -
DLA-1442-1 mailman - security update
PublishedUnknown -
DSA-4246-1 mailman - security update
PublishedUnknown -
DSA-4108-1 mailman - security update
PublishedUnknown -
DLA-1272-1 mailman - security update
PublishedUnknown -
DSA-3668-1 mailman - security update
PublishedUnknown -
DLA-608-1 mailman - security update
PublishedUnknown -
DSA-3214-1 mailman - security update
PublishedUnknown -
DLA-186-1 mailman - security update
PublishedUnknown -
Unknown
-
MediumCVSS 4.3 EPSS 1.9%
Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) editing templates and (2) the list's "info attribute" in the web administrator interface, a differen...
-
DSA-1188-1 mailman
PublishedUnknown -
DSA-1027-1 mailman - programming error
PublishedUnknown -
DSA-955-1 mailman - DoS
PublishedUnknown -
MediumCVSS 5.0 EPSS 2.7%
Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).
-
Unknown
-
Unknown
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.