Package · Ubuntu

sympa

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Feed

High 7.5

CVE-2021-46900

Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this paramet…

sympa sympa Debian Ubuntu

Dec 31, 2023
Unscored —

CVE-2020-29668

Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except o…

sympa sympa Debian Ubuntu

Dec 10, 2020
Unscored —

CVE-2020-26932

debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for sympa_newaliases-wrapper, wh…

sympa sympa Debian Ubuntu

Oct 10, 2020
Unscored —

CVE-2020-26880

Sympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full root access by modifyin…

sympa sympa Debian Ubuntu

Oct 7, 2020
Unscored —

CVE-2020-10936

Sympa before 6.2.56 allows privilege escalation.

sympa sympa Debian Ubuntu

May 27, 2020
Unscored —

CVE-2018-1000671 Scanner template

sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in…

sympa sympa Debian Ubuntu

Sep 6, 2018
Unscored —

CVE-2018-1000550

The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal vulnerability in wwsympa.fcgi …

sympa sympa Debian Ubuntu

Jun 26, 2018