Mozilla Bugzilla vulnerabilities

• mozilla bugzilla A third party website can access information available to a user with access to a restricted bug... CVE-2018-5123 Fix available 8.8 HighMarch 19, 2018
• mozilla bugzilla Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4... CVE-2016-2803 Fix available 6.1 MediumMay 21, 2016
• mozilla bugzilla Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x... CVE-2015-8509 Fix available 3.5 LowJanuary 3, 2016
• mozilla bugzilla Cross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x... CVE-2015-8508 Fix available 4.7 MediumJanuary 3, 2016
• mozilla bugzilla Util.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.15, 4.3.x and 4.4.x before 4.4.10, and 5.x... CVE-2015-4499 Fix available 7.5 HighSeptember 14, 2015
• mozilla bugzilla, fedoraproject fedora +1 more Bugzilla before 4.0.16, 4.1.x and 4.2.x before 4.2.12, 4.3.x and 4.4.x before 4.4.7, and 5.x... CVE-2014-8630 Fix available 6.5 MediumJanuary 31, 2015
• mozilla bugzilla, fedoraproject fedora +1 more Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4... CVE-2014-1573 Fix available 4.3 MediumOctober 9, 2014
• mozilla bugzilla, fedoraproject fedora +1 more The confirm_create_account function in the account-creation feature in token.cgi in Bugzilla 2.x... CVE-2014-1572 Fix available 5.0 MediumOctober 9, 2014
• mozilla bugzilla, fedoraproject fedora +1 more Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4... CVE-2014-1571 Fix available 4.0 MediumOctober 9, 2014
• mozilla bugzilla The response function in the JSONP endpoint in WebService/Server/JSONRPC.pm in jsonrpc.cgi in... CVE-2014-1546 Fix available 4.3 MediumAugust 14, 2014
• mozilla bugzilla, fedoraproject fedora +1 more The login form in Bugzilla 2.x, 3.x, 4.x before 4.4.3, and 4.5.x before 4.5.3 does not properly... CVE-2014-1517 Fix available 4.0 MediumApril 20, 2014
• mozilla bugzilla Multiple cross-site scripting (XSS) vulnerabilities in report.cgi in Bugzilla 4.1.x and 4.2.x... CVE-2013-1743 Public exploitFix available 4.3 MediumOctober 24, 2013
• mozilla bugzilla Multiple cross-site scripting (XSS) vulnerabilities in editflagtypes.cgi in Bugzilla 2.x, 3.x,... CVE-2013-1742 Public exploitFix available 4.3 MediumOctober 24, 2013
• mozilla bugzilla Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.0.x... CVE-2013-1734 Fix available 6.8 MediumOctober 24, 2013
• mozilla bugzilla Cross-site request forgery (CSRF) vulnerability in process_bug.cgi in Bugzilla 4.4.x before 4.4.1... CVE-2013-1733 Fix available 6.8 MediumOctober 24, 2013
• mozilla bugzilla The Bugzilla::Search::build_subselect function in Bugzilla 2.x and 3.x before 3.6.13 and 3.7.x... CVE-2013-0786 5.0 MediumFebruary 24, 2013
• mozilla bugzilla Cross-site scripting (XSS) vulnerability in show_bug.cgi in Bugzilla before 3.6.13, 3.7.x and 4.0... CVE-2013-0785 4.3 MediumFebruary 24, 2013
• mozilla bugzilla The User.get method in Bugzilla/WebService/User.pm in Bugzilla 4.3.2 allows remote attackers to... CVE-2012-5884 5.0 MediumNovember 16, 2012
• mozilla bugzilla, yahoo yui +1 more Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0... CVE-2012-5883 4.3 MediumNovember 16, 2012
• mozilla bugzilla template/en/default/bug/field-events.js.tmpl in Bugzilla 3.x before 3.6.12, 3.7.x and 4.0.x... CVE-2012-4199 4.3 MediumNovember 16, 2012
• mozilla bugzilla The User.get method in Bugzilla/WebService/User.pm in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1... CVE-2012-4198 4.0 MediumNovember 16, 2012
• mozilla bugzilla Bugzilla/Attachment.pm in attachment.cgi in Bugzilla 2.x and 3.x before 3.6.12, 3.7.x and 4.0.x... CVE-2012-4197 5.0 MediumNovember 16, 2012
• mozilla bugzilla Cross-site scripting (XSS) vulnerability in Bugzilla 4.1.x and 4.2.x before 4.2.4, and 4.3.x and... CVE-2012-4189 4.3 MediumNovember 16, 2012
• mozilla bugzilla Bugzilla 2.x and 3.x through 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3,... CVE-2012-4747 5.0 MediumSeptember 4, 2012
• mozilla bugzilla Auth/Verify/LDAP.pm in Bugzilla 2.x and 3.x before 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x... CVE-2012-3981 5.0 MediumSeptember 4, 2012
• mozilla bugzilla The get_attachment_link function in Template.pm in Bugzilla 2.x and 3.x before 3.6.10, 3.7.x and... CVE-2012-1969 4.3 MediumJuly 28, 2012
• mozilla bugzilla Bugzilla 4.1.x and 4.2.x before 4.2.2 and 4.3.x before 4.3.2 uses bug-editor privileges instead... CVE-2012-1968 4.3 MediumJuly 28, 2012
• mozilla bugzilla template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x... CVE-2012-0466 4.0 MediumApril 27, 2012
• mozilla bugzilla Bugzilla 3.5.x and 3.6.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4... CVE-2012-0465 4.3 MediumApril 27, 2012
• mozilla bugzilla Cross-site request forgery (CSRF) vulnerability in xmlrpc.cgi in Bugzilla 4.0.2 through 4.0.4 and... CVE-2012-0453 5.1 MediumFebruary 25, 2012
• mozilla bugzilla Bugzilla 2.x and 3.x before 3.4.14, 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4,... CVE-2012-0448 4.0 MediumFebruary 2, 2012
• mozilla bugzilla Cross-site request forgery (CSRF) vulnerability in jsonrpc.cgi in Bugzilla 3.5.x and 3.6.x before... CVE-2012-0440 5.1 MediumFebruary 2, 2012
• mozilla bugzilla Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.x... CVE-2011-3669 6.8 MediumJanuary 2, 2012
• mozilla bugzilla Cross-site request forgery (CSRF) vulnerability in post_bug.cgi in Bugzilla 2.x, 3.x, and 4.x... CVE-2011-3668 6.8 MediumJanuary 2, 2012
• mozilla bugzilla The User.offer_account_by_email WebService method in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x... CVE-2011-3667 6.8 MediumJanuary 2, 2012
• mozilla bugzilla Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x... CVE-2011-3657 4.3 MediumJanuary 2, 2012
• mozilla bugzilla Bugzilla 4.1.x before 4.1.3 generates different responses for certain assignee queries depending... CVE-2011-2979 Fix available 5.0 MediumAugust 9, 2011
• mozilla bugzilla Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3... CVE-2011-2978 Fix available 5.0 MediumAugust 9, 2011
• mozilla bugzilla Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does... CVE-2011-2977 2.1 LowAugust 9, 2011
• mozilla bugzilla Cross-site scripting (XSS) vulnerability in Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x,... CVE-2011-2976 4.3 MediumAugust 9, 2011
• mozilla bugzilla CRLF injection vulnerability in Bugzilla 2.17.1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before... CVE-2011-2381 Fix available 4.3 MediumAugust 9, 2011
• mozilla bugzilla Bugzilla 2.23.3 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6... CVE-2011-2380 Fix available 5.0 MediumAugust 9, 2011
• mozilla bugzilla Cross-site scripting (XSS) vulnerability in Bugzilla 2.4 through 2.22.7, 3.0.x through 3.3.x, 3.4... CVE-2011-2379 Fix available 4.3 MediumAugust 9, 2011
• mozilla bugzilla Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not... CVE-2008-7292 2.1 LowAugust 9, 2011
• mozilla bugzilla Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 creates... CVE-2011-0048 Fix available 4.3 MediumJanuary 28, 2011
• mozilla bugzilla Multiple cross-site request forgery (CSRF) vulnerabilities in Bugzilla before 3.2.10, 3.4.x... CVE-2011-0046 Fix available 6.8 MediumJanuary 28, 2011
• mozilla bugzilla CRLF injection vulnerability in chart.cgi in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x... CVE-2010-4572 Fix available 4.3 MediumJanuary 28, 2011
• mozilla bugzilla Cross-site scripting (XSS) vulnerability in the duplicate-detection functionality in Bugzilla 3.7... CVE-2010-4570 4.3 MediumJanuary 28, 2011
• mozilla bugzilla Cross-site scripting (XSS) vulnerability in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows... CVE-2010-4569 4.3 MediumJanuary 28, 2011
• mozilla bugzilla Bugzilla 2.14 through 2.22.7; 3.0.x, 3.1.x, and 3.2.x before 3.2.10; 3.4.x before 3.4.10; 3.6.x... CVE-2010-4568 Fix available 7.5 HighJanuary 28, 2011
• Show olderLoading…