Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla bugzilla 2.23.1 vulnerabilities and exploits

(subscribe to this query)
231
VMScore
CVE-2006-5455
Cross-site request forgery (CSRF) vulnerability in editversions.cgi in Bugzilla prior to 2.22.1 and 2.23.x prior to 2.23.3 allows user-assisted remote malicious users to create, modify, or delete arbitrary bug reports via a crafted URL.
Mozilla Bugzilla 2.23Mozilla Bugzilla 2.23.1Mozilla Bugzilla 2.23.2Mozilla Bugzilla
312
VMScore
CVE-2006-5453
Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.18.x prior to 2.18.6, 2.20.x prior to 2.20.3, 2.22.x prior to 2.22.1, and 2.23.x prior to 2.23.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) page headers using the H1, H2, and H3...
Mozilla Bugzilla 2.18.4Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.20Mozilla Bugzilla 2.22Mozilla Bugzilla 2.18.2Mozilla Bugzilla 2.18.3Mozilla Bugzilla 2.20.1Mozilla Bugzilla 2.20.2Mozilla Bugzilla 2.18Mozilla Bugzilla 2.23Mozilla Bugzilla 2.23.1Mozilla Bugzilla 2.18.1Mozilla Bugzilla 2.23.2
445
VMScore
CVE-2006-5454
Bugzilla 2.18.x prior to 2.18.6, 2.20.x prior to 2.20.3, 2.22.x prior to 2.22.1, and 2.23.x prior to 2.23.3 allow remote malicious users to obtain (1) the description of arbitrary attachments by viewing the attachment in "diff" mode in attachment.cgi, and (2) the deadli...
Mozilla Bugzilla 2.18.2Mozilla Bugzilla 2.18.3Mozilla Bugzilla 2.20.1Mozilla Bugzilla 2.20.2Mozilla Bugzilla 2.18Mozilla Bugzilla 2.18.1Mozilla Bugzilla 2.20Mozilla Bugzilla 2.23.1Mozilla Bugzilla 2.23.2Mozilla Bugzilla 2.18.4Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.22Mozilla Bugzilla 2.23
715
VMScore
CVE-2008-4437
Directory traversal vulnerability in importxml.pl in Bugzilla prior to 2.22.5, and 3.x prior to 3.0.5, when --attach_path is enabled, allows remote malicious users to read arbitrary files via an XML file with a .. (dot dot) in the data element.
Mozilla Bugzilla 2.22.2Mozilla Bugzilla 2.22.3Mozilla Bugzilla 2.4Mozilla Bugzilla 2.6Mozilla Bugzilla 3.1.3Mozilla Bugzilla 2.22.4Mozilla Bugzilla 2.23Mozilla Bugzilla 2.8Mozilla Bugzilla 2.9Mozilla Bugzilla 2.23.1Mozilla Bugzilla 2.23.2Mozilla Bugzilla 3.0.2Mozilla Bugzilla 3.1.2Mozilla Bugzilla 2.22.1Mozilla Bugzilla 2.23.3Mozilla Bugzilla 2.23.4Mozilla Bugzilla 3.1.1Mozilla Bugzilla 3.1.4
383
VMScore
CVE-2008-2103
Cross-site scripting (XSS) vulnerability in Bugzilla 2.17.2 and later allows remote malicious users to inject arbitrary web script or HTML via the id parameter to the "Format for Printing" view or "Long Format" bug list.
Mozilla Bugzilla 2.17.2Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.18.3Mozilla Bugzilla 2.18.4Mozilla Bugzilla 2.19.2Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.20Mozilla Bugzilla 2.21.1Mozilla Bugzilla 2.22Mozilla Bugzilla 2.23Mozilla Bugzilla 3.0.3Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.0 Rc1Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.18Mozilla Bugzilla 2.20.4Mozilla Bugzilla 2.20.5Mozilla Bugzilla 2.22.1Mozilla Bugzilla 2.22.2Mozilla Bugzilla 2.23.3Mozilla Bugzilla 2.23.4
356
VMScore
CVE-2010-2759
Bugzilla 2.23.1 up to and including 3.2.7, 3.3.1 up to and including 3.4.7, 3.5.1 up to and including 3.6.1, and 3.7 up to and including 3.7.2, when PostgreSQL is used, does not properly handle large integers in (1) bug and (2) attachment phrases, which allows remote authenticate...
Mozilla Bugzilla 2.8Mozilla Bugzilla 2.9Mozilla Bugzilla 3.0.3Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.1.1Mozilla Bugzilla 3.2.5Mozilla Bugzilla 3.2.6Mozilla Bugzilla 3.2.7Mozilla Bugzilla 3.4.3Mozilla Bugzilla 3.4.4Mozilla Bugzilla 3.6.1Mozilla Bugzilla 3.7Mozilla Bugzilla 2.23.1Mozilla Bugzilla 2.23.2Mozilla Bugzilla 3.0Mozilla Bugzilla 3.0.0Mozilla Bugzilla 3.0.5Mozilla Bugzilla 3.0.6Mozilla Bugzilla 3.2.4Mozilla Bugzilla 3.2.3Mozilla Bugzilla 3.3.1Mozilla Bugzilla 3.3.2
578
VMScore
CVE-2010-2757
The sudo feature in Bugzilla 2.22rc1 up to and including 3.2.7, 3.3.1 up to and including 3.4.7, 3.5.1 up to and including 3.6.1, and 3.7 up to and including 3.7.2 does not properly send impersonation notifications, which makes it easier for remote authenticated users to imperson...
Mozilla Bugzilla 2.22.5Mozilla Bugzilla 2.22.6Mozilla Bugzilla 2.23.4Mozilla Bugzilla 2.4Mozilla Bugzilla 3.0.11Mozilla Bugzilla 3.0.2Mozilla Bugzilla 3.0.9Mozilla Bugzilla 3.0Mozilla Bugzilla 3.2Mozilla Bugzilla 2.22.7Mozilla Bugzilla 2.22Mozilla Bugzilla 2.6Mozilla Bugzilla 2.8Mozilla Bugzilla 3.0.3Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.1.0Mozilla Bugzilla 3.1.1Mozilla Bugzilla 3.1.3Mozilla Bugzilla 3.2.6Mozilla Bugzilla 3.4.3Mozilla Bugzilla 3.4.4Mozilla Bugzilla 3.6
356
VMScore
CVE-2008-6098
Bugzilla 3.2 prior to 3.2 RC2, 3.0 prior to 3.0.6, 2.22 prior to 2.22.6, 2.20 prior to 2.20.7, and other versions after 2.17.4 allows remote authenticated users to bypass moderation to approve and disapprove quips via a direct request to quips.cgi with the action parameter set to...
Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.18.1Mozilla Bugzilla 2.18.9Mozilla Bugzilla 2.18.8Mozilla Bugzilla 2.18Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.20.5Mozilla Bugzilla 2.21.2Mozilla Bugzilla 2.23Mozilla Bugzilla 2.22.1Mozilla Bugzilla 2.23.4Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.0.0Mozilla Bugzilla 3.0.7Mozilla Bugzilla 3.2Mozilla Bugzilla 3.1.1Mozilla Bugzilla 3.2.1Mozilla Bugzilla 2.17.5Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.19.2Mozilla Bugzilla 2.20
312
VMScore
CVE-2008-2105
email_in.pl in Bugzilla 2.23.4, 3.0.x prior to 3.0.4, and 3.1.x prior to 3.1.4 allows remote authenticated users to more easily spoof the changer of a bug via a @reporter command in the body of an e-mail message, which overrides the e-mail address as normally obtained from the Fr...
Mozilla Bugzilla 2.10Mozilla Bugzilla 2.12Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.16.5Mozilla Bugzilla 2.16.6Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.18.4Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.20.1Mozilla Bugzilla 2.21.1Mozilla Bugzilla 2.21.2Mozilla Bugzilla 2.23Mozilla Bugzilla 2.23.1Mozilla Bugzilla 3.0.0Mozilla Bugzilla 3.0.1Mozilla Bugzilla 2.14Mozilla Bugzilla 2.14.1Mozilla Bugzilla 2.16.11Mozilla Bugzilla 2.16.2
445
VMScore
CVE-2011-2380
Bugzilla 2.23.3 up to and including 2.22.7, 3.0.x up to and including 3.3.x, 3.4.x prior to 3.4.12, 3.5.x, 3.6.x prior to 3.6.6, 3.7.x, 4.0.x prior to 4.0.2, and 4.1.x prior to 4.1.3 allows remote malicious users to determine the existence of private group names via a crafted par...
Mozilla Bugzilla 2.23.3Mozilla Bugzilla 2.23.1Mozilla Bugzilla 2.23.2Mozilla Bugzilla 2.22.7Mozilla Bugzilla 2.23Mozilla Bugzilla 3.4Mozilla Bugzilla 3.4.1Mozilla Bugzilla 3.4.2Mozilla Bugzilla 3.4.3Mozilla Bugzilla 3.4.11Mozilla Bugzilla 3.4.8Mozilla Bugzilla 3.4.10Mozilla Bugzilla 3.4.7Mozilla Bugzilla 3.4.9Mozilla Bugzilla 3.4.4Mozilla Bugzilla 3.4.6Mozilla Bugzilla 3.4.5Mozilla Bugzilla 3.5.2Mozilla Bugzilla 3.5.3Mozilla Bugzilla 3.5.1Mozilla Bugzilla 3.5Mozilla Bugzilla 3.6.2
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTICVE-2024-35863CVE-2024-35910man-in-the-middleCVE-2024-35912CVE-2024-25742LFICVE-2024-32002CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook