Skip to content

Mozilla Bugzilla vulnerabilities

mozilla bugzillaCross-site scripting (XSS) vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11...CVE-2004-10614.3 MediumDecember 31, 2004
mozilla bugzillashow_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup...CVE-2004-16345.0 MediumOctober 25, 2004
mozilla bugzillaprocess_bug.cgi in Bugzilla 2.9 through 2.18rc2 and 2.19 from CVS does not check edit permissions...CVE-2004-16335.0 MediumOctober 25, 2004
mozilla bugzillaBuffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in...CVE-2004-076910.0 HighAugust 4, 2004
mozilla bugzillaSQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2...CVE-2004-07077.5 HighJuly 21, 2004
mozilla bugzillaBugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users...CVE-2004-07062.1 LowJuly 21, 2004
mozilla bugzillaUnknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows...CVE-2004-07037.5 HighJuly 21, 2004
mozilla bugzillaDBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the...CVE-2004-07025.0 MediumJuly 21, 2004
mozilla bugzilladescribecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership...CVE-2003-10467.5 HighJune 3, 2004
mozilla bugzillavotes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote attackers to...CVE-2003-10455.0 MediumJune 3, 2004
mozilla bugzillaeditproducts.cgi in Bugzilla 2.16.3 and earlier, when usebuggroups is enabled, does not properly...CVE-2003-10447.5 HighJune 3, 2004
mozilla bugzillaSQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows...CVE-2003-104310.0 HighJune 3, 2004
mozilla bugzillaSQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and earlier allows remote...CVE-2003-104210.0 HighJune 3, 2004
mozilla bugzillaBugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versions allows local users to...CVE-2003-06032.1 LowJuly 29, 2003
mozilla bugzillaMultiple cross-site scripting vulnerabilities (XSS) in Bugzilla 2.16.x before 2.16.3 and 2.17.x...CVE-2003-06026.8 MediumJuly 29, 2003
mozilla bugzillaThe default .htaccess scripts for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x...CVE-2003-00137.5 HighJanuary 16, 2003
mozilla bugzillaThe data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x...CVE-2003-00122.1 LowJanuary 16, 2003
mozilla bugzillaCross-site scripting (XSS) vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2...CVE-2002-2260Fix available4.3 MediumDecember 30, 2002
mozilla bugzillaBugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during...CVE-2002-11987.5 HighOctober 28, 2002
mozilla bugzillabugzilla_email_append.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows...CVE-2002-11977.5 HighOctober 28, 2002
mozilla bugzillaeditproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the ...CVE-2002-1196Fix available7.5 HighOctober 9, 2002
mozilla bugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the...CVE-2002-08105.0 MediumAugust 12, 2002
mozilla bugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field...CVE-2002-08097.5 HighAugust 12, 2002
mozilla bugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the...CVE-2002-08087.5 HighAugust 12, 2002
mozilla bugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing...CVE-2002-08062.1 LowAugust 12, 2002
mozilla bugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, (1) creates new directories with world...CVE-2002-08054.6 MediumAugust 12, 2002
mozilla bugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS...CVE-2002-08047.5 HighAugust 12, 2002
mozilla bugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a...CVE-2002-08117.5 HighJuly 31, 2002
mozilla bugzillaCross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2,...CVE-2002-08077.5 HighJuly 31, 2002
mozilla bugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display...CVE-2002-08035.0 MediumJuly 31, 2002
mozilla bugzillaInformation leak in doeditvotes.cgi in Bugzilla before 2.14.1 may allow remote attackers to more...CVE-2002-00115.0 MediumJanuary 31, 2002
mozilla bugzillashow_bug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other...CVE-2002-00095.0 MediumJanuary 31, 2002
mozilla bugzillaCGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous...CVE-2002-000710.0 HighJanuary 31, 2002
mozilla bugzillaBugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or...CVE-2002-00107.5 HighJanuary 10, 2002
mozilla bugzillaBugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to...CVE-2002-00087.5 HighJanuary 10, 2002
mozilla bugzillaBugzilla before 2.14 allows Bugzilla users to bypass group security checks by marking a bug as...CVE-2001-14077.5 HighSeptember 10, 2001
mozilla bugzillaprocess_bug.cgi in Bugzilla before 2.14 does not set the "groupset" bit when a bug is moved...CVE-2001-14062.1 LowSeptember 10, 2001
mozilla bugzillaBugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to...CVE-2001-14052.1 LowSeptember 10, 2001
mozilla bugzillaBugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email...CVE-2001-14047.5 HighSeptember 10, 2001
mozilla bugzillaBugzilla before 2.14 includes the username and password in URLs, which could allow attackers to...CVE-2001-14037.5 HighSeptember 10, 2001
mozilla bugzillaBugzilla before 2.14 does not properly escape untrusted parameters, which could allow remote...CVE-2001-14027.5 HighSeptember 10, 2001
mozilla bugzillaBugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow...CVE-2001-14017.5 HighSeptember 10, 2001
mozilla bugzillaBugzilla 2.10 allows remote attackers to access sensitive information, including the database...CVE-2001-03307.5 HighJune 27, 2001
mozilla bugzillaBugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a...CVE-2001-0329Public exploit7.5 HighMay 24, 2001
mozilla bugzillaThe process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via...CVE-2000-04217.5 HighMay 11, 2000