Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mozilla bugzilla 2.17.1 vulnerabilities and exploits
(subscribe to this query)
2.6
CVSSv2
CVE-2005-2174
Bugzilla 2.17.x, 2.18 prior to 2.18.2, 2.19.x, and 2.20 prior to 2.20rc1 inserts a bug into the database before it is marked private, which introduces a race condition and allows malicious users to access information about the bug via buglist.cgi before MySQL replication is compl...
Mozilla Bugzilla 2.17.6
Mozilla Bugzilla 2.19.3
Mozilla Bugzilla 2.19
Mozilla Bugzilla 2.18
Mozilla Bugzilla 2.17.4
Mozilla Bugzilla 2.17.1
Mozilla Bugzilla 2.18.1
Mozilla Bugzilla 2.19.1
Mozilla Bugzilla 2.17.5
Mozilla Bugzilla 2.17.3
Mozilla Bugzilla 2.17.7
Mozilla Bugzilla 2.19.2
7.5
CVSSv2
CVE-2005-1564
post_bug.cgi in Bugzilla 2.10 up to and including 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product.
Mozilla Bugzilla 2.17.6
Mozilla Bugzilla 2.16.1
Mozilla Bugzilla 2.18
Mozilla Bugzilla 2.16.2
Mozilla Bugzilla 2.17.4
Mozilla Bugzilla 2.10
Mozilla Bugzilla 2.17.1
Mozilla Bugzilla 2.16
Mozilla Bugzilla 2.14.2
Mozilla Bugzilla 2.14.3
Mozilla Bugzilla 2.14.4
Mozilla Bugzilla 2.19.1
Mozilla Bugzilla 2.17.5
Mozilla Bugzilla 2.17.3
Mozilla Bugzilla 2.16.4
Mozilla Bugzilla 2.12
Mozilla Bugzilla 2.16.3
Mozilla Bugzilla 2.14.5
Mozilla Bugzilla 2.17.7
Mozilla Bugzilla 2.17
Mozilla Bugzilla 2.14.1
Mozilla Bugzilla 2.16.5
5
CVSSv2
CVE-2005-1565
Bugzilla 2.17.1 up to and including 2.18, 2.19.1, and 2.19.2, when a user is prompted to log in while attempting to view a chart, displays the password in the URL, which may allow local users to gain sensitive information from web logs or browser history.
Mozilla Bugzilla 2.17.6
Mozilla Bugzilla 2.16.1
Mozilla Bugzilla 2.18
Mozilla Bugzilla 2.16.2
Mozilla Bugzilla 2.17.4
Mozilla Bugzilla 2.10
Mozilla Bugzilla 2.17.1
Mozilla Bugzilla 2.16
Mozilla Bugzilla 2.14.2
Mozilla Bugzilla 2.14.3
Mozilla Bugzilla 2.14.4
Mozilla Bugzilla 2.19.1
Mozilla Bugzilla 2.17.5
Mozilla Bugzilla 2.17.3
Mozilla Bugzilla 2.16.4
Mozilla Bugzilla 2.12
Mozilla Bugzilla 2.16.3
Mozilla Bugzilla 2.14.5
Mozilla Bugzilla 2.17.7
Mozilla Bugzilla 2.17
Mozilla Bugzilla 2.14.1
Mozilla Bugzilla 2.16.5
4.3
CVSSv2
CVE-2004-1061
Cross-site scripting (XSS) vulnerability in Bugzilla prior to 2.18, including 2.16.x prior to 2.16.11, allows remote malicious users to inject arbitrary HTML and web script via forced error messages, as demonstrated using the action parameter.
Mozilla Bugzilla 2.16.8
Mozilla Bugzilla 2.17.6
Mozilla Bugzilla 2.16.1
Mozilla Bugzilla 2.16.2
Mozilla Bugzilla 2.16.11
Mozilla Bugzilla 2.17.4
Mozilla Bugzilla 2.17.1
Mozilla Bugzilla 2.16.9
Mozilla Bugzilla 2.16.7
Mozilla Bugzilla 2.17.5
Mozilla Bugzilla 2.17.3
Mozilla Bugzilla 2.16.4
Mozilla Bugzilla 2.16.3
Mozilla Bugzilla 2.17.7
Mozilla Bugzilla 2.17
Mozilla Bugzilla 2.16.6
Mozilla Bugzilla 2.16.5
Mozilla Bugzilla 2.16.10
5
CVSSv2
CVE-2004-1634
show_bug.cgi in Bugzilla 2.17.1 up to and including 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote malicious users to gain sensitive information.
Mozilla Bugzilla 2.17.6
Mozilla Bugzilla 2.16.1
Mozilla Bugzilla 2.18
Mozilla Bugzilla 2.16.2
Mozilla Bugzilla 2.17.4
Mozilla Bugzilla 2.10
Mozilla Bugzilla 2.17.1
Mozilla Bugzilla 2.16
Mozilla Bugzilla 2.14.2
Mozilla Bugzilla 2.14.3
Mozilla Bugzilla 2.14.4
Mozilla Bugzilla 2.6
Mozilla Bugzilla 2.17.5
Mozilla Bugzilla 2.17.3
Mozilla Bugzilla 2.4
Mozilla Bugzilla 2.16.4
Mozilla Bugzilla 2.12
Mozilla Bugzilla 2.8
Mozilla Bugzilla 2.16.3
Mozilla Bugzilla 2.14.5
Mozilla Bugzilla 2.17.7
Mozilla Bugzilla 2.17
5
CVSSv2
CVE-2004-1633
process_bug.cgi in Bugzilla 2.9 up to and including 2.18rc2 and 2.19 from CVS does not check edit permissions on the keywords field, which allows remote authenticated users to modify the keywords in a bug via the keywordaction parameter.
Mozilla Bugzilla 2.17.6
Mozilla Bugzilla 2.16.1
Mozilla Bugzilla 2.19
Mozilla Bugzilla 2.18
Mozilla Bugzilla 2.16.2
Mozilla Bugzilla 2.17.4
Mozilla Bugzilla 2.10
Mozilla Bugzilla 2.17.1
Mozilla Bugzilla 2.16
Mozilla Bugzilla 2.14.2
Mozilla Bugzilla 2.14.3
Mozilla Bugzilla 2.14.4
Mozilla Bugzilla 2.17.5
Mozilla Bugzilla 2.17.3
Mozilla Bugzilla 2.16.4
Mozilla Bugzilla 2.12
Mozilla Bugzilla 2.16.3
Mozilla Bugzilla 2.14.5
Mozilla Bugzilla 2.17.7
Mozilla Bugzilla 2.17
Mozilla Bugzilla 2.9
Mozilla Bugzilla 2.14.1
10
CVSSv2
CVE-2003-1042
SQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and previous versions allows remote authenticated users with editproducts privileges to execute arbitrary SQL via the product name.
Mozilla Bugzilla 2.16.1
Mozilla Bugzilla 2.16.2
Mozilla Bugzilla 2.17.4
Mozilla Bugzilla 2.10
Mozilla Bugzilla 2.17.1
Mozilla Bugzilla 2.16
Mozilla Bugzilla 2.14.2
Mozilla Bugzilla 2.14.3
Mozilla Bugzilla 2.14.4
Mozilla Bugzilla 2.6
Mozilla Bugzilla 2.17.3
Mozilla Bugzilla 2.4
Mozilla Bugzilla 2.12
Mozilla Bugzilla 2.8
Mozilla Bugzilla 2.16.3
Mozilla Bugzilla 2.14.5
Mozilla Bugzilla 2.14.1
Mozilla Bugzilla 2.14
7.5
CVSSv2
CVE-2003-1044
editproducts.cgi in Bugzilla 2.16.3 and previous versions, when usebuggroups is enabled, does not properly remove group add privileges from a group that is being deleted, which allows users with those privileges to perform unauthorized additions to the next group that is assigned...
Mozilla Bugzilla 2.16.1
Mozilla Bugzilla 2.16.2
Mozilla Bugzilla 2.17.4
Mozilla Bugzilla 2.10
Mozilla Bugzilla 2.17.1
Mozilla Bugzilla 2.16
Mozilla Bugzilla 2.14.2
Mozilla Bugzilla 2.14.3
Mozilla Bugzilla 2.14.4
Mozilla Bugzilla 2.6
Mozilla Bugzilla 2.17.3
Mozilla Bugzilla 2.4
Mozilla Bugzilla 2.12
Mozilla Bugzilla 2.8
Mozilla Bugzilla 2.16.3
Mozilla Bugzilla 2.14.5
Mozilla Bugzilla 2.14.1
Mozilla Bugzilla 2.14
7.5
CVSSv2
CVE-2003-1046
describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows remote malicious users to list component descriptions for otherwise restricted products.
Mozilla Bugzilla 2.16.1
Mozilla Bugzilla 2.16.2
Mozilla Bugzilla 2.17.4
Mozilla Bugzilla 2.10
Mozilla Bugzilla 2.17.1
Mozilla Bugzilla 2.16
Mozilla Bugzilla 2.14.2
Mozilla Bugzilla 2.14.3
Mozilla Bugzilla 2.14.4
Mozilla Bugzilla 2.6
Mozilla Bugzilla 2.17.3
Mozilla Bugzilla 2.4
Mozilla Bugzilla 2.12
Mozilla Bugzilla 2.8
Mozilla Bugzilla 2.16.3
Mozilla Bugzilla 2.14.5
Mozilla Bugzilla 2.14.1
Mozilla Bugzilla 2.14
10
CVSSv2
CVE-2003-1043
SQL injection vulnerability in Bugzilla 2.16.3 and previous versions, and 2.17.1 up to and including 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi.
Mozilla Bugzilla 2.16.1
Mozilla Bugzilla 2.16.2
Mozilla Bugzilla 2.17.4
Mozilla Bugzilla 2.10
Mozilla Bugzilla 2.17.1
Mozilla Bugzilla 2.16
Mozilla Bugzilla 2.14.2
Mozilla Bugzilla 2.14.3
Mozilla Bugzilla 2.14.4
Mozilla Bugzilla 2.6
Mozilla Bugzilla 2.17.3
Mozilla Bugzilla 2.4
Mozilla Bugzilla 2.12
Mozilla Bugzilla 2.8
Mozilla Bugzilla 2.16.3
Mozilla Bugzilla 2.14.5
Mozilla Bugzilla 2.14.1
Mozilla Bugzilla 2.14
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversal
CVE-2024-33545
CVE-2024-35725
CVE-2024-32704
overflow
file upload
CVE-2024-0230
CVE-2024-32705
CVE-2024-23692
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »