Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2733▼ 589 respecto a la semana anterior

Críticas / altas1313▼ 190 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)294▼ 216 respecto a la semana anterior

58 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2002-0277	Modificada	Alta (7.5)	3.3%	—	Add2it Mailman Free	31/5/2002	16/6/2026	Add2it Mailman Free 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter.
CVE-2001-0884	Modificada	Media (5.1)	1.9%	—	GNU Mailman	21/12/2001	16/6/2026	Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication credentials via a malicious link that is accessed by other web users.
CVE-2001-1132	Modificada	Alta (7.5)	2.5%	—	GNU Mailman	5/9/2001	16/6/2026	Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not properly handled during the call to the crypt function during authentication.
CVE-2001-0290	Modificada	Media (4.6)	0.33%	—	GNU Mailman	3/5/2001	16/6/2026	Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords.
CVE-2001-0021	Modificada	Alta (10)	13%	💥 Exploit	Endymion Mailman Webmail	16/2/2001	16/6/2026	MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template parameter.
CVE-2000-0861	Modificada	Alta (7.2)	0.68%	—	GNU Mailman	14/11/2000	16/6/2026	Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.
CVE-2000-0701	Modificada	Media (4.6)	0.39%	—	GNU Mailman Conectiva Linux Redhat Linux	20/10/2000	16/6/2026	The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges.
CVE-1999-0850	Modificada	Baja (3.6)	0.32%	—	Endymion Mailman Webmail	2/12/1999	16/6/2026	The default permissions for Endymion MailMan allow local users to read email or modify files.