Gnu Mailman vulnerabilities, page 3
46 vulnerabilities
Known vulnerabilities in Gnu Mailman, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2006-2191debianmailman+1
EPSS score2.65%
Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable.CVE-2006-2941gnumailmanEPSS score2.65%
Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers".CVE-2006-1712gnumailmanEPSS score1.43%
Cross-site scripting (XSS) vulnerability in the private archive script (private.py) in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument.CVE-2006-0052debianmailman+3EPSS score2.70%
The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary.CVE-2006-4624gnumailman+2EPSS score2.98%
CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to spoof messages in the error log and possibly trick the administrator into visiting malicious URLs via CRLF sequences in the URI.CVE-2006-3636gnumailmanEPSS score6.95%
Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.