Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Mozilla
Bugzilla

Mozilla Bugzilla vulnerabilities

Known exploitedIn KEVPublic exploitFix available

mozilla bugzillaBugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 does not...CVE-2010-45674.3 MediumJanuary 28, 2011
mozilla bugzillaThe Old Charts implementation in Bugzilla 2.12 through 3.2.8, 3.4.8, 3.6.2, 3.7.3, and 4.1...CVE-2010-37645.0 MediumNovember 5, 2010
mozilla bugzillaCRLF injection vulnerability in Bugzilla before 3.2.9, 3.4.x before 3.4.9, 3.6.x before 3.6.3,...CVE-2010-31722.6 LowNovember 5, 2010
mozilla bugzillaBugzilla 2.23.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2,...CVE-2010-27594.0 MediumAugust 13, 2010
mozilla bugzillaBugzilla 2.17.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2...CVE-2010-27585.0 MediumAugust 13, 2010
mozilla bugzillaThe sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and...CVE-2010-27576.5 MediumAugust 13, 2010
mozilla bugzillaSearch.pm in Bugzilla 2.19.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7...CVE-2010-27565.0 MediumAugust 13, 2010
mozilla bugzillaInstall/Filesystem.pm in Bugzilla 3.5.1 through 3.6.1 and 3.7 through 3.7.1, when use_suexec is...CVE-2010-24701.9 LowJune 28, 2010
mozilla bugzillaSearch.pm in Bugzilla 2.17.1 through 3.2.6, 3.3.1 through 3.4.6, 3.5.1 through 3.6, and 3.7...CVE-2010-12045.0 MediumJune 28, 2010
mozilla bugzillaInstall/Filesystem.pm in Bugzilla 3.5.1 through 3.6 and 3.7, when use_suexec is enabled, uses...CVE-2010-01801.9 LowJune 28, 2010
mozilla bugzillaBugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not...CVE-2009-39894.3 MediumFebruary 3, 2010
mozilla bugzillaBugzilla 3.3.1 through 3.4.4, 3.5.1, and 3.5.2 does not allow group restrictions to be preserved...CVE-2009-33875.0 MediumFebruary 3, 2010
mozilla bugzillaTemplate.pm in Bugzilla 3.3.2 through 3.4.3 and 3.5 through 3.5.1 allows remote attackers to...CVE-2009-33865.0 MediumNovember 20, 2009
mozilla bugzillatoken.cgi in Bugzilla 3.4rc1 through 3.4.1 places a password in a URL at the beginning of a login...CVE-2009-31665.0 MediumSeptember 15, 2009
mozilla bugzillaSQL injection vulnerability in the Bug.create WebService function in Bugzilla 2.23.4 through 3.0...CVE-2009-3165Fix available7.5 HighSeptember 15, 2009
mozilla bugzillaSQL injection vulnerability in the Bug.search WebService function in Bugzilla 3.3.2 through 3.4.1...CVE-2009-31257.5 HighSeptember 15, 2009
mozilla bugzillaCross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3...CVE-2009-12136.8 MediumApril 1, 2009
mozilla bugzillaBugzilla 3.2 before 3.2 RC2, 3.0 before 3.0.6, 2.22 before 2.22.6, 2.20 before 2.20.7, and other...CVE-2008-60984.0 MediumFebruary 9, 2009
mozilla bugzillaBugzilla 3.2.1, 3.0.7, and 3.3.2, when running under mod_perl, calls the srand function at...CVE-2009-04867.5 HighFebruary 9, 2009
mozilla bugzillaCross-site request forgery (CSRF) vulnerability in Bugzilla 2.17 to 2.22.7, 3.0 before 3.0.7, 3.2...CVE-2009-04855.8 MediumFebruary 9, 2009
mozilla bugzillaCross-site request forgery (CSRF) vulnerability in Bugzilla 3.0 before 3.0.7, 3.2 before 3.2.1,...CVE-2009-04845.8 MediumFebruary 9, 2009
mozilla bugzillaCross-site request forgery (CSRF) vulnerability in Bugzilla 2.22 before 2.22.7, 3.0 before 3.0.7,...CVE-2009-04835.8 MediumFebruary 9, 2009
mozilla bugzillaCross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3...CVE-2009-04825.8 MediumFebruary 9, 2009
mozilla bugzillaBugzilla 2.x before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows...CVE-2009-04813.5 LowFebruary 9, 2009
mozilla bugzillaDirectory traversal vulnerability in importxml.pl in Bugzilla before 2.22.5, and 3.x before 3.0.5...CVE-2008-4437Public exploitFix available7.1 HighOctober 3, 2008
mozilla bugzillaemail_in.pl in Bugzilla 2.23.4, 3.0.x before 3.0.4, and 3.1.x before 3.1.4 allows remote...CVE-2008-21053.5 LowMay 7, 2008
mozilla bugzillaThe WebService in Bugzilla 3.1.3 allows remote authenticated users without canconfirm privileges...CVE-2008-21044.0 MediumMay 7, 2008
mozilla bugzillaCross-site scripting (XSS) vulnerability in Bugzilla 2.17.2 and later allows remote attackers to...CVE-2008-21034.3 MediumMay 7, 2008
mozilla bugzillaThe offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3...CVE-2007-50387.5 HighSeptember 24, 2007
mozilla bugzillaCross-site scripting (XSS) vulnerability in enter_bug.cgi in Bugzilla 2.17.1 through 2.20.4, 2.22...CVE-2007-45434.3 MediumAugust 27, 2007
mozilla bugzillaThe WebService (XML-RPC) interface in Bugzilla 2.23.3 through 3.0.0 does not enforce permissions...CVE-2007-45395.0 MediumAugust 27, 2007
mozilla bugzillaemail_in.pl in Bugzilla 2.23.4 through 3.0.0 allows remote attackers to execute arbitrary...CVE-2007-45385.0 MediumAugust 27, 2007
mozilla bugzillaThe mod_perl initialization script in Bugzilla 2.23.3 does not set the Bugzilla Apache...CVE-2007-07927.5 HighFebruary 6, 2007
mozilla bugzillaCross-site scripting (XSS) vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3,...CVE-2007-07914.3 MediumFebruary 6, 2007
mozilla bugzillaCross-site request forgery (CSRF) vulnerability in editversions.cgi in Bugzilla before 2.22.1 and...CVE-2006-54552.6 LowOctober 23, 2006
mozilla bugzillaBugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23...CVE-2006-54545.0 MediumOctober 23, 2006
mozilla bugzillaMultiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.18.x before 2.18.6, 2.20.x...CVE-2006-54533.5 LowOctober 23, 2006
mozilla bugzillaBugzilla 2.20rc1 through 2.20 and 2.21.1, when using RSS 1.0, allows remote attackers to conduct...CVE-2006-24204.3 MediumMay 16, 2006
mozilla bugzillaBugzilla 2.19.3 through 2.20 does not properly handle "//" sequences in URLs when redirecting a...CVE-2006-09167.5 HighFebruary 28, 2006
mozilla bugzillaBugzilla 2.16.10 does not properly handle certain characters in the (1) maxpatchsize and (2)...CVE-2006-09157.5 HighFebruary 28, 2006
mozilla bugzillaBugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in...CVE-2006-09145.5 MediumFebruary 28, 2006
mozilla bugzillaSQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows...CVE-2006-09135.5 MediumFebruary 28, 2006
mozilla bugzillaThe shadow database feature (syncshadowdb) in Bugzilla 2.9 through 2.16.10 allows local users to...CVE-2005-45347.5 HighDecember 28, 2005
mozilla bugzillaBugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows...CVE-2005-31395.0 MediumOctober 5, 2005
mozilla bugzillaBugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain...CVE-2005-31385.0 MediumOctober 5, 2005
mozilla bugzillaBugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before 2.20rc1 inserts a bug into the...CVE-2005-21742.6 LowJuly 8, 2005
mozilla bugzillaThe Flag::validate and Flag::modify functions in Bugzilla 2.17.1 to 2.18.1 and 2.19.1 to 2.19.3...CVE-2005-21735.0 MediumJuly 8, 2005
mozilla bugzillaBugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different error message depending on...CVE-2005-15635.0 MediumMay 14, 2005
mozilla bugzillaBugzilla 2.17.1 through 2.18, 2.19.1, and 2.19.2, when a user is prompted to log in while...CVE-2005-15655.0 MediumMay 12, 2005
mozilla bugzillapost_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users...CVE-2005-15647.5 HighMay 12, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open