361,800
Total CVEs
26,223
Critical
85,816
High
1,626
CISA KEV
88
This Week
3 results · Page 1/1
Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the ALTERNATE_TEMPLATES parameter for various mmstdo*.cgi programs.
endymion
Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the param_name parameter.
endymion
The default permissions for Endymion MailMan allow local users to read email or modify files.
endymion