https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 07:26:39 +0000 https://vulnerability.circl.lu/vuln/cve-2021-43332 <p>In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be cracked by a moderator via an offline brute-force attack.</p> <p>In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be cracked by a moderator via an offline brute-force attack.</p> https://vulnerability.circl.lu/vuln/cve-2021-43332 https://vulnerability.circl.lu/vuln/usn-5151-1 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: mailman, Ubuntu:18.04:LTS: mailman</p> <p>It was discovered that Mailman incorrectly handled certain URL. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-43331)</p> <p>It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information. (CVE-2021-43332)</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: mailman, Ubuntu:18.04:LTS: mailman</p> <p>It was discovered that Mailman incorrectly handled certain URL. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-43331)</p> <p>It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information. (CVE-2021-43332)</p> https://vulnerability.circl.lu/vuln/usn-5151-1