Lsoft

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Lsoft records in CISA KEV

No Lsoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Listserv 10 records MEDIUM

Records

10 records

TI-2000-00425 CVE-2000-0425 · GHSA-5984-j2rg-qm7x

Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote…

MEDIUM 52

Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05794 Published 2000-07-12 No fix listed

TI-2022-19156 CVE-2022-40319 · GHSA-mf9g-q8q5-vfm5

The LISTSERV 17 web interface allows remote attackers to conduct Insecure Direct Object…

MEDIUM 49

The LISTSERV 17 web interface allows remote attackers to conduct Insecure Direct Object References (IDOR) attacks via a modified email address in a wa.exe URL.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07389 Published 2023-01-17 No fix listed CWE-639

TI-2006-01014 CVE-2006-1044 · GHSA-j68x-f2hj-294c

Multiple buffer overflows in LISTSERV 14.3 and 14.4, including LISTSERV Lite and HPO…

MEDIUM 43

Multiple buffer overflows in LISTSERV 14.3 and 14.4, including LISTSERV Lite and HPO, with the web archive interface enabled, allow remote attackers to execute arbitrary code via unknown attack vectors related to the WA…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07466 Published 2006-03-07 No fix listed

TI-2000-00630 CVE-2000-0632 · GHSA-3v52-43ch-8qcg

Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows…

LOW 39

Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a long query string.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0364 Published 2000-10-13 No fix listed

TI-2019-11603 CVE-2019-15501 · GHSA-67ph-jjgq-8hr7

Reflected cross site scripting (XSS) in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter.

LOW 38

Reflected cross site scripting (XSS) in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.08145 Published 2019-08-26 No fix listed CWE-79

TI-2005-01680 CVE-2005-1773 · GHSA-f8fv-9hhr-x5vf

Multiple unknown vulnerabilities in L-Soft LISTSERV 14.3, 1.8e, and 1.8d allow remote…

LOW 38

Multiple unknown vulnerabilities in L-Soft LISTSERV 14.3, 1.8e, and 1.8d allow remote attackers to execute arbitrary code or cause a denial of service.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02688 Published 2005-05-31 No fix listed

TI-1999-00249 CVE-1999-0252 · GHSA-6gg4-9pgx-g64j

Buffer overflow in listserv allows arbitrary command execution.

LOW 38

Buffer overflow in listserv allows arbitrary command execution.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02857 Published 1999-09-29 No fix listed

TI-2022-18575 CVE-2022-39195 · GHSA-whgc-pmc8-wmv6

A cross-site scripting (XSS) vulnerability in the LISTSERV 17 web interface allows remote…

LOW 37

A cross-site scripting (XSS) vulnerability in the LISTSERV 17 web interface allows remote attackers to inject arbitrary JavaScript or HTML via the c parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.06485 Published 2023-01-17 No fix listed CWE-79

TI-2023-12351 CVE-2023-27641 · GHSA-83w9-cx5r-7hgx

The REPORT (after z but before a) parameter in wa.exe in L-Soft LISTSERV 16.5 before 17…

LOW 29

The REPORT (after z but before a) parameter in wa.exe in L-Soft LISTSERV 16.5 before 17 allows an attacker to conduct XSS attacks via a crafted URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01092 Published 2023-03-05 No fix listed CWE-79

TI-2010-02613 CVE-2010-2723 · GHSA-9mvj-q5mp-2wwf

Cross-site scripting (XSS) vulnerability in LISTSERV 15 and 16 allows remote attackers to…

LOW 22

Cross-site scripting (XSS) vulnerability in LISTSERV 15 and 16 allows remote attackers to inject arbitrary web script or HTML via the T parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00845 Published 2010-07-13 No fix listed CWE-79

Open these records in search →

Critical	1
High	5
Medium	4
Low	0
No CVSS	0