| Bug | Description | 
|---|
| CVE-2020-29668 | Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API ... | 
| CVE-2020-26932 | debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg- ... | 
| CVE-2020-26880 | Sympa through 6.2.57b.2 allows a local privilege escalation from the s ... | 
| CVE-2020-10936 | Sympa before 6.2.56 allows privilege escalation. | 
| CVE-2020-9369 | Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial  ... | 
| CVE-2018-1000671 | sympa version 6.2.16 and later contains a CWE-601: URL Redirection to  ... | 
| CVE-2018-1000550 | The Sympa Community Sympa version prior to version 6.2.32 contains a D ... | 
| CVE-2015-1306 | The newsletter posting area in the web interface in Sympa 6.0.x before ... | 
| CVE-2012-2352 | The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in ... | 
| CVE-2008-4476 | sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary file ... | 
| CVE-2008-1648 | Sympa before 5.4 allows remote attackers to cause a denial of service  ... | 
| CVE-2005-0073 | Buffer overflow in queue.c in a support script for sympa 3.3.3, when r ... | 
| CVE-2004-1735 | Cross-site scripting (XSS) vulnerability in the create list option in  ... |