Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla bugzilla 2.18.6 vulnerabilities and exploits

(subscribe to this query)
5.8
CVSSv2
CVE-2009-0485
Cross-site request forgery (CSRF) vulnerability in Bugzilla 2.17 to 2.22.7, 3.0 prior to 3.0.7, 3.2 prior to 3.2.1, and 3.3 prior to 3.3.2 allows remote malicious users to delete unused flag types via a link or IMG tag to editflagtypes.cgi.
Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.18.3Mozilla Bugzilla 2.18.4Mozilla Bugzilla 2.20Mozilla Bugzilla 2.20.6Mozilla Bugzilla 2.20.7Mozilla Bugzilla 2.22.3Mozilla Bugzilla 2.22.4Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.0.5Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.18Mozilla Bugzilla 2.19Mozilla Bugzilla 2.19.1Mozilla Bugzilla 2.20.2Mozilla Bugzilla 2.20.3Mozilla Bugzilla 2.22Mozilla Bugzilla 3.0Mozilla Bugzilla 3.0.1Mozilla Bugzilla 3.2
4.3
CVSSv2
CVE-2009-3989
Bugzilla prior to 3.0.11, 3.2.x prior to 3.2.6, 3.4.x prior to 3.4.5, and 3.5.x prior to 3.5.3 does not block access to files and directories that are used by custom installations, which allows remote malicious users to obtain sensitive information via requests for (1) CVS/, (2) ...
Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.0.6Mozilla Bugzilla 3.0.7Mozilla Bugzilla 3.0.9Mozilla Bugzilla 3.4.2Mozilla Bugzilla 3.4.3Mozilla Bugzilla 2.20Mozilla Bugzilla 2.20.1Mozilla Bugzilla 2.22.5Mozilla Bugzilla 2.22.4Mozilla Bugzilla 2.18.4Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.18.6Mozilla Bugzilla 2.18.2Mozilla Bugzilla 2.18.3Mozilla Bugzilla 2.16.8Mozilla Bugzilla 2.16.7Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.16Mozilla Bugzilla 2.12Mozilla Bugzilla 2.10Mozilla Bugzilla 3.4
5
CVSSv2
CVE-2010-3764
The Old Charts implementation in Bugzilla 2.12 up to and including 3.2.8, 3.4.8, 3.6.2, 3.7.3, and 4.1 creates graph files with predictable names in graphs/, which allows remote malicious users to obtain sensitive information via a modified URL.
Mozilla Bugzilla 2.18.6\\+Mozilla Bugzilla 2.19Mozilla Bugzilla 2.19.1Mozilla Bugzilla 2.20.2Mozilla Bugzilla 2.20.3Mozilla Bugzilla 2.23.1Mozilla Bugzilla 2.23Mozilla Bugzilla 2.8Mozilla Bugzilla 2.16.5Mozilla Bugzilla 2.16.10Mozilla Bugzilla 3.2.8Mozilla Bugzilla 2.16.1Mozilla Bugzilla 3.2.3Mozilla Bugzilla 2.16Mozilla Bugzilla 2.18.1Mozilla Bugzilla 2.18.2Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.16.9Mozilla Bugzilla 2.18.9Mozilla Bugzilla 3.2.1Mozilla Bugzilla 3.2.6
5
CVSSv2
CVE-2010-2758
Bugzilla 2.17.1 up to and including 3.2.7, 3.3.1 up to and including 3.4.7, 3.5.1 up to and including 3.6.1, and 3.7 up to and including 3.7.2 generates different error messages depending on whether a product exists, which makes it easier for remote malicious users to guess produ...
Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.2Mozilla Bugzilla 2.20Mozilla Bugzilla 2.20.7Mozilla Bugzilla 2.22.3Mozilla Bugzilla 2.20.3Mozilla Bugzilla 2.20.4Mozilla Bugzilla 2.21.1Mozilla Bugzilla 2.21.2Mozilla Bugzilla 2.22.7Mozilla Bugzilla 2.22Mozilla Bugzilla 2.8Mozilla Bugzilla 2.9Mozilla Bugzilla 3.0.3Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.1.0Mozilla Bugzilla 3.1.1Mozilla Bugzilla 3.2.6Mozilla Bugzilla 3.2.7Mozilla Bugzilla 3.4.3Mozilla Bugzilla 3.4.4Mozilla Bugzilla 3.6
5
CVSSv2
CVE-2013-0786
The Bugzilla::Search::build_subselect function in Bugzilla 2.x and 3.x prior to 3.6.13 and 3.7.x and 4.0.x prior to 4.0.10 generates different error messages for invalid product queries depending on whether a product exists, which allows remote malicious users to discover private...
Mozilla BugzillaMozilla Bugzilla 3.6Mozilla Bugzilla 3.6.9Mozilla Bugzilla 3.6.1Mozilla Bugzilla 3.6.0Mozilla Bugzilla 3.6.10Mozilla Bugzilla 3.6.11Mozilla Bugzilla 3.6.4Mozilla Bugzilla 3.6.5Mozilla Bugzilla 3.6.7Mozilla Bugzilla 3.6.2Mozilla Bugzilla 3.6.3Mozilla Bugzilla 3.6.6Mozilla Bugzilla 3.6.8Mozilla Bugzilla 3.7.1Mozilla Bugzilla 3.7.2Mozilla Bugzilla 3.7.3Mozilla Bugzilla 3.7Mozilla Bugzilla 4.0Mozilla Bugzilla 4.0.8Mozilla Bugzilla 4.0.7Mozilla Bugzilla 4.0.4
4.3
CVSSv2
CVE-2008-2103
Cross-site scripting (XSS) vulnerability in Bugzilla 2.17.2 and later allows remote malicious users to inject arbitrary web script or HTML via the id parameter to the "Format for Printing" view or "Long Format" bug list.
Mozilla Bugzilla 2.17.2Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.18.3Mozilla Bugzilla 2.18.4Mozilla Bugzilla 2.19.2Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.20Mozilla Bugzilla 2.21.1Mozilla Bugzilla 2.22Mozilla Bugzilla 2.23Mozilla Bugzilla 3.0.3Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.0 Rc1Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.18Mozilla Bugzilla 2.20.4Mozilla Bugzilla 2.20.5Mozilla Bugzilla 2.22.1Mozilla Bugzilla 2.22.2Mozilla Bugzilla 2.23.3Mozilla Bugzilla 2.23.4
7.5
CVSSv2
CVE-2010-4568
Bugzilla 2.14 up to and including 2.22.7; 3.0.x, 3.1.x, and 3.2.x prior to 3.2.10; 3.4.x prior to 3.4.10; 3.6.x prior to 3.6.4; and 4.0.x prior to 4.0rc2 does not properly generate random values for cookies and tokens, which allows remote malicious users to obtain access to arbit...
Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.16Mozilla Bugzilla 2.16.5Mozilla Bugzilla 2.16.6Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.17.5Mozilla Bugzilla 2.18.3Mozilla Bugzilla 2.18.4Mozilla Bugzilla 2.19.2Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.20Mozilla Bugzilla 2.21Mozilla Bugzilla 2.21.1Mozilla Bugzilla 2.22.5Mozilla Bugzilla 2.22.6Mozilla Bugzilla 2.14.3Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.16.3Mozilla Bugzilla 2.16.4Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.18.1
4.3
CVSSv2
CVE-2010-4567
Bugzilla prior to 3.2.10, 3.4.x prior to 3.4.10, 3.6.x prior to 3.6.4, and 4.0.x prior to 4.0rc2 does not properly handle whitespace preceding a (1) javascript: or (2) data: URI, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via the URL (aka bu...
Mozilla Bugzilla 3.2.7Mozilla Bugzilla 3.2Mozilla Bugzilla 3.4.7Mozilla Bugzilla 3.4.1Mozilla Bugzilla 2.20.7Mozilla Bugzilla 2.22.7Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.20Mozilla Bugzilla 2.21.2Mozilla Bugzilla 2.22Mozilla Bugzilla 2.6Mozilla Bugzilla 2.4Mozilla Bugzilla 2.18.6Mozilla Bugzilla 2.16.4Mozilla Bugzilla 2.16.7Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.18Mozilla Bugzilla 2.18.1Mozilla Bugzilla 3.2.4Mozilla Bugzilla 3.4.2Mozilla Bugzilla 3.4.3
4.3
CVSSv2
CVE-2010-4572
CRLF injection vulnerability in chart.cgi in Bugzilla prior to 3.2.10, 3.4.x prior to 3.4.10, 3.6.x prior to 3.6.4, and 4.0.x prior to 4.0rc2 allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the query string, a differe...
Mozilla Bugzilla 3.2.5Mozilla Bugzilla 3.2.1Mozilla Bugzilla 3.2.6Mozilla Bugzilla 3.4.8Mozilla Bugzilla 3.6.1Mozilla Bugzilla 2.16Mozilla Bugzilla 2.2Mozilla Bugzilla 2.20Mozilla Bugzilla 2.19.2Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.21Mozilla Bugzilla 2.21.1Mozilla Bugzilla 2.23.3Mozilla Bugzilla 2.23.2Mozilla Bugzilla 2.16.7Mozilla Bugzilla 2.16.6Mozilla Bugzilla 2.16.11Mozilla Bugzilla 2.14.2Mozilla Bugzilla 2.18.2Mozilla Bugzilla 2.18.3Mozilla Bugzilla 3.2Mozilla Bugzilla 3.2.2
6.8
CVSSv2
CVE-2011-0046
Multiple cross-site request forgery (CSRF) vulnerabilities in Bugzilla prior to 3.2.10, 3.4.x prior to 3.4.10, 3.6.x prior to 3.6.4, and 4.0.x prior to 4.0rc2 allow remote malicious users to hijack the authentication of arbitrary users for requests related to (1) adding a saved s...
Mozilla Bugzilla 3.2.5Mozilla Bugzilla 3.2Mozilla Bugzilla 3.2.6Mozilla Bugzilla 3.4.4Mozilla Bugzilla 3.6.1Mozilla Bugzilla 3.6.2Mozilla Bugzilla 2.2Mozilla Bugzilla 2.0Mozilla Bugzilla 2.19.2Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.21.1Mozilla Bugzilla 2.23.1Mozilla Bugzilla 2.23.2Mozilla Bugzilla 2.9Mozilla Bugzilla 2.16.6Mozilla Bugzilla 2.16.11Mozilla Bugzilla 3.2.4Mozilla Bugzilla 3.4.2Mozilla Bugzilla 3.4.3Mozilla Bugzilla 3.6.0Mozilla Bugzilla 4.0Mozilla Bugzilla 2.19
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-35000CVE-2024-4439unauthorizedCVE-2024-0042CVE-2024-31848CVE-2023-40694cache poisoningCVE-2024-23707firmware
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook