Known vulnerabilities in mailman (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
mailman (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:mailman_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
10
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
1:2.1.15-1ubuntu2
1:2.1.15-1ubuntu1
1:2.1.14-1ubuntu1
1:2.1.14-1ubuntu2
1:2.1.13-4ubuntu0.2
1:2.1.13-1ubuntu0.2
1:2.1.12-2ubuntu0.2
1:2.1.11-11ubuntu1
1:2.1.9-9ubuntu1.1
1:2.1.9-9ubuntu1.2
1:2.1.9-9ubuntu1.4
1:2.1.9-9ubuntu1
1:2.1.9-8ubuntu0.2
1:2.1.9-2ubuntu1
1:2.1.9-4ubuntu1.2
1:2.1.9-4ubuntu1
0:2.1.8-1ubuntu1
1:2.1.8-2ubuntu1
1:2.1.9-4ubuntu1~edgy1
1:2.1.8-2ubuntu2.1
1:2.1.8-2ubuntu2
2.1.5-9ubuntu1
2.1.5-9ubuntu2
2.1.5-9ubuntu3
2.1.5-9ubuntu4.1
2.1.5-9ubuntu4.2
2.1.5-9ubuntu4.4
2.1.5-9ubuntu4
2.1.5-8ubuntu2.1
2.1.5-8ubuntu2.2
2.1.5-8ubuntu2.3
2.1.5-8ubuntu2
2.1.5-7ubuntu0.1
2.1.5-7ubuntu0.2
2.1.5-7ubuntu0.3
2.1.5-1ubuntu2.4
2.1.5-1ubuntu2.5
2.1.5-1ubuntu2.7
2.1.5-1ubuntu2
1:2.1.20-1ubuntu0.6+esm3
1:2.1.29-1ubuntu3.1+esm2
1:2.1.29-1ubuntu3.1
1:2.1.26-1ubuntu0.6
1:2.1.26-1ubuntu0.5
1:2.1.26-1ubuntu0.4
1:2.1.26-1ubuntu0.3
1:2.1.20-1ubuntu0.6
1:2.1.26-1ubuntu0.2
1:2.1.20-1ubuntu0.5
2.1.29-1ubuntu3
2.1.29
2.1.29-1
2.1.26
2.1.26-1ubuntu0.1
2.1.26-1
2.1.20
2.1.20-1ubuntu0.4
2.1.20-1
2.1.16
2.1.16-2ubuntu0.5
2.1.16-2
2.1.14
2.1.14-3ubuntu0.4
2.1.14-3
1:2.1.29-1ubuntu3
1:2.1.29-1ubuntu2
1:2.1.29-1ubuntu1
1:2.1.29-1build1
1:2.1.26-1ubuntu0.1
1:2.1.20-1ubuntu0.4
1:2.1.27-1.1
1:2.1.29-1
1:2.1.27-1
1:2.1.26-1
1:2.1.25-1
1:2.1.24-1
1:2.1.23-1ubuntu0.2
1:2.1.20-1ubuntu0.3
1:2.1.16-2ubuntu0.5
1:2.1.16-2ubuntu0.3
1:2.1.15~rc1-1
1:2.1.16~rc2-1
0:2.1.7+2.1.8rc1-1
1:2.1.10~b3-1
1:2.1.10~b4-1
1:2.1.23-1
1:2.1.22-1ubuntu0.1
1:2.1.22-1
1:2.1.20-1ubuntu0.1
1:2.1.20-1
1:2.1.18-2
1:2.1.18-1ubuntu1
1:2.1.18-1
1:2.1.18-1ubuntu0.1
1:2.1.16-2ubuntu0.2
1:2.1.14-4
1:2.1.15-1
1:2.1.16-1
1:2.1.16-1exp1
1:2.1.16-1exp2
1:2.1.16-2
1:2.1.16-2ubuntu0.1
1:2.1.14-3ubuntu0.4
1.0b4-1
1.0b4-2
1.0b7-1
1.0b7-2
1.0b7-3
1.0b8-1
1.0b8-2
1.0b8-3
1.0b9-1
1.0b10-1
1.0b11-1
1.0b11-2
1.0rc1-1
1.0rc2-1
1.0rc2-0.slink1
1.0rc2-3
1.0rc2-4
1.0rc2-5
1.0rc2-6
1.0rc3-1
1.0rc3-2
1.0rel-1
1.0rel-2
1.0rel-3
1.0rel-4
1.0rel-5
1.1-1
1.1-2
1.1-3
1.1-4
1.1-5
1.1-6
1.1-7
1.1-8
1.1-9
2.0beta2-1
2.0beta3-1
2.0beta4-1
2.0beta5-1
2.0final-1
2.0.2-1
2.0.3-1
2.0.3-2
2.0.3-3
2.0.3-4
2.0.3-5
2.0.3-6
2.0.3-7
2.0.4-1
2.0.4-2
2.0.5-1
2.0.5-2
2.0.6-1
2.0.6-2
2.0.6-3
2.0.6-4
2.0.6-5
2.0.7-1
2.0.7-2
2.0.7-3
2.0.8-1
2.0.8-2
2.0.8-3
2.0.8-4
2.0.9-1
2.0.9-2
2.0.10-1
2.0.11-1
2.0.11-2
2.1-1
2.1-2
2.1-3
2.1-4
2.1-5
2.1.1-1
2.1.1-2
2.1.1-3
2.1.1-4
2.1.1-5
2.1.2-1
2.1.2-2
2.1.2-3
2.1.2-4
2.1.2-5
2.1.2-6
2.1.2-7
2.1.3-1
2.1.3-2
2.1.4-1
2.1.4-2
2.1.4-3
2.1.4-4
2.1.4-5
2.1.5-1
2.1.5-1.1
2.1.5-2
2.1.5-3
2.1.5-4
2.1.5-5
2.1.5-6
2.1.5-7
2.1.5-8
2.1.5-9
2.1.5-10
2.1.5-11
2.1.6-1
2.1.6-2
2.1.7-1
2.1.7-2
0:2.1.8-1
1:2.1.8-2
1:2.1.8-3
1:2.1.8-4
1:2.1.9-1
1:2.1.9-2
1:2.1.9-3
1:2.1.9-4
1:2.1.9-5
1:2.1.9-6
1:2.1.9-7
1:2.1.9-8
1:2.1.9-9
1:2.1.9-10
1:2.1.10-1
1:2.1.10-2
1:2.1.11-1
1:2.1.11-2
1:2.1.11-3
1:2.1.11-4
1:2.1.11-5
1:2.1.11-6
1:2.1.11-7
1:2.1.11-8
1:2.1.11-9
1:2.1.11-10
1:2.1.11-11
1:2.1.12-1
1:2.1.12-2
1:2.1.12-3
1:2.1.13-1
1:2.1.13-2
1:2.1.13-3
1:2.1.13-4
1:2.1.13-4.1
1:2.1.14-1
1:2.1.14-2
1:2.1.14-3
1:2.1.14-3ubuntu0.1
1:2.1.14-3ubuntu0.2
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU58503 - Cross-Site Request Forgery (CSRF) CVE-2021-44227 |
CWE-352 | Medium | 1:2.1.20-1ubuntu0.6+esm3, 1:2.1.26-1ubuntu0.6, 1:2.1.29-1ubuntu3.1+esm2 | 03.12.2021 |
SB2021120305 SB2021120306 SB2021120314 and 12 more |
||
| #VU58350 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2021-43332 |
CWE-338 | Low | 1:2.1.26-1ubuntu0.5, 1:2.1.29-1ubuntu3.1 | 24.11.2021 |
SB2021112406 SB2021111823 SB2022053136 and 2 more |
||
| #VU58349 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-43331 |
CWE-79 | Low | 1:2.1.26-1ubuntu0.5, 1:2.1.29-1ubuntu3.1 | 24.11.2021 |
SB2021112406 SB2021111823 SB2022053136 and 2 more |
||
| #VU58348 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2021-42096 |
CWE-338 | Medium | 1:2.1.26-1ubuntu0.4, 1:2.1.26-1ubuntu0.6, 1:2.1.29-1ubuntu3.1 | 24.11.2021 |
SB2021112405 SB2021112417 SB2021112419 and 9 more |
||
| #VU58347 - Cross-Site Request Forgery (CSRF) CVE-2021-42097 |
CWE-352 | Medium | 1:2.1.26-1ubuntu0.4, 1:2.1.26-1ubuntu0.6, 1:2.1.29-1ubuntu3.1 | 24.11.2021 |
SB2021112405 SB2021112417 SB2021112419 and 10 more |
||
| #VU29388 - Improper Control of Generation of Code ('Code Injection') CVE-2020-15011 |
CWE-94 | Low | 1:2.1.20-1ubuntu0.6, 1:2.1.26-1ubuntu0.3, 1:2.1.29-1ubuntu3.1 | 30.06.2020 |
SB2020063009 SB2021052038 SB2021110117 and 3 more |
||
| #VU28635 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2020-12108 |
CWE-451 | Medium | 1:2.1.20-1ubuntu0.5, 1:2.1.26-1ubuntu0.2, 1:2.1.29-1ubuntu3.1 | 05.06.2020 |
SB2020050628 SB2020060501 SB2020051521 and 7 more |
||
| #VU27366 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-12137 |
CWE-79 | Medium | 1:2.1.20-1ubuntu0.4, 1:2.1.26-1ubuntu0.1, 1:2.1.29-1ubuntu3.1 | 27.04.2020 |
SB2020042718 SB2020043008 SB2020043015 and 6 more |
||
| #VU14330 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2018-13796 |
CWE-451 | Low | 1:2.1.20-1ubuntu0.4, 1:2.1.26-1ubuntu0.1 | 13.08.2018 |
SB2018081314 SB2018081315 SB2019040811 and 5 more |
||
| #VU13585 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-0618 |
CWE-79 | Low | 1:2.1.20-1ubuntu0.4, 1:2.1.26-1ubuntu0.1 | 30.06.2018 |
SB2018070505 SB2018063003 SB2018071601 and 7 more |