Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:mailman:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Mailman (26be9dbf-0ffe-5018-a393-b7faf52952bb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/mailman |
purl2cpe | 2026-06-01 10:11:55.443421 |
pkg:deb/ubuntu/mailman |
purl2cpe | 2026-06-01 10:11:55.443423 |
pkg:github/koumbit/mailman2 |
purl2cpe | 2026-06-01 10:11:55.443425 |
pkg:github/mailman/mailman |
purl2cpe | 2026-06-01 10:11:55.443426 |
pkg:gitlab/mailman/mailman |
purl2cpe | 2026-06-01 10:11:55.443428 |
pkg:gnu/mailman |
purl2cpe | 2026-06-01 10:11:55.443429 |
pkg:pypi/mailman |
purl2cpe | 2026-06-01 10:11:55.443430 |
pkg:rpm/fedora/mailman |
purl2cpe | 2026-06-01 10:11:55.443432 |
pkg:rpm/opensuse/mailman |
purl2cpe | 2026-06-01 10:11:55.443433 |
pkg:sourceforge/mailman |
purl2cpe | 2026-06-01 10:11:55.443434 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-43921 |
vulnerable | 2026-06-08 07:25:10.474319 |
Details available
MEDIUM (5.3)
GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint. NOTE: multiple third parties report that they are unable to reproduce this, regardless of whether cPanel or WHM is used.
Published: 2025-04-20T00:00:00.000Z
Updated: 2025-04-28T13:45:41.386Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-43920 |
vulnerable | 2026-06-08 07:25:10.474034 |
Details available
MEDIUM (5.4)
GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands via shell metacharacters in an email Subject line. NOTE: multiple third parties report that they are unable to reproduce this, regardless of whether cPanel or WHM is used.
Published: 2025-04-20T00:00:00.000Z
Updated: 2025-04-28T13:44:29.998Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-43919 |
vulnerable | 2026-06-08 07:25:10.473586 |
Details available
MEDIUM (5.8)
GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailman (aka the private archive authentication endpoint) via the username parameter. NOTE: multiple third parties report that they are unable to reproduce this, regardless of whether cPanel or WHM is used.
Published: 2025-04-20T00:00:00.000Z
Updated: 2025-04-28T13:43:23.197Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44227 |
vulnerable | 2026-06-08 05:36:45.191559 |
Details available
In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.
Published: 2021-12-02T02:52:31.000Z
Updated: 2024-08-04T04:17:24.848Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43332 |
vulnerable | 2026-06-08 05:36:43.259455 |
Details available
In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be cracked by a moderator via an offline brute-force attack.
Published: 2021-11-12T20:45:35.000Z
Updated: 2024-08-04T03:55:28.492Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43331 |
vulnerable | 2026-06-08 05:36:43.258678 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42097 |
vulnerable | 2026-06-08 05:35:21.773606 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42096 |
vulnerable | 2026-06-08 05:35:21.773086 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34337 |
vulnerable | 2026-06-08 05:32:13.018208 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15011 |
vulnerable | 2026-06-08 05:19:25.109174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12137 |
vulnerable | 2026-06-08 05:17:56.602631 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12108 |
vulnerable | 2026-06-08 05:17:56.471885 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5950 |
vulnerable | 2026-06-08 05:11:53.131775 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13796 |
vulnerable | 2026-06-08 05:10:51.914218 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0618 |
vulnerable | 2026-06-08 05:10:24.252302 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2775 |
vulnerable | 2026-06-08 05:06:35.791035 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0707 |
vulnerable | 2026-06-08 04:56:38.716041 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3089 |
vulnerable | 2026-06-08 04:55:12.636786 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-4624 |
vulnerable | 2026-06-08 04:49:18.400683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2191 |
vulnerable | 2026-06-08 04:48:59.083594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0182 |
vulnerable | 2026-06-08 04:47:48.874470 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0992 |
vulnerable | 2026-06-08 04:47:23.060852 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0965 |
vulnerable | 2026-06-08 04:47:22.933968 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0389 |
vulnerable | 2026-06-08 04:46:21.344769 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0388 |
vulnerable | 2026-06-08 04:46:21.344423 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-1132 |
vulnerable | 2026-06-08 04:45:21.497420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-0884 |
vulnerable | 2026-06-08 04:45:20.963424 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-0290 |
vulnerable | 2026-06-08 04:45:19.999044 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.