Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:mailman:2.1.7:*:*:*:*:*:*:*

part: a version: 2.1.7 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductMailman (26be9dbf-0ffe-5018-a393-b7faf52952bb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mailman purl2cpe 2026-06-01 10:11:55.444546
pkg:deb/ubuntu/mailman purl2cpe 2026-06-01 10:11:55.444547
pkg:github/koumbit/mailman2 purl2cpe 2026-06-01 10:11:55.444548
pkg:github/mailman/mailman purl2cpe 2026-06-01 10:11:55.444550
pkg:gitlab/mailman/mailman purl2cpe 2026-06-01 10:11:55.444551
pkg:gnu/mailman purl2cpe 2026-06-01 10:11:55.444552
pkg:pypi/mailman purl2cpe 2026-06-01 10:11:55.444554
pkg:rpm/fedora/mailman purl2cpe 2026-06-01 10:11:55.444555
pkg:rpm/opensuse/mailman purl2cpe 2026-06-01 10:11:55.444556
pkg:sourceforge/mailman purl2cpe 2026-06-01 10:11:55.444558

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-5024 vulnerable 2026-06-08 04:59:34.199737 Details available
Cross-site scripting (XSS) vulnerability in mmsearch/design in the Mailman/htdig integration patch for Mailman allows remote attackers to inject arbitrary web script or HTML via the config parameter.
Published: 2011-12-29T11:00:00.000Z
Updated: 2024-09-16T20:51:59.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0707 vulnerable 2026-06-08 04:56:38.735125 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confirmation message.
Published: 2011-02-22T18:00:00.000Z
Updated: 2024-08-06T21:58:26.088Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3089 vulnerable 2026-06-08 04:55:12.644441 Details available
Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) the list information field or (2) the list description field.
Published: 2010-09-15T19:00:00.000Z
Updated: 2024-08-07T02:55:46.792Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3636 vulnerable 2026-06-08 04:49:09.859071 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2006-09-06T00:00:00.000Z
Updated: 2024-08-07T18:39:53.576Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2941 vulnerable 2026-06-08 04:49:07.934561 Details available
Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers".
Published: 2006-09-06T00:00:00.000Z
Updated: 2024-08-07T18:06:27.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1712 vulnerable 2026-06-08 04:48:57.878122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.