Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

mozilla bugzilla 2.16 rc2 vulnerabilities and exploits

(subscribe to this query)
6.1
CVSSv3

CVE-2016-2803

Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 up to and including 4.4.11, and 4.5.1 up to and including 5.0.2 allows remote malicious users to inject arbitrary web script or HTML.
Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.0Mozilla Bugzilla 3.6.9Mozilla Bugzilla 4.1.1Mozilla Bugzilla 3.1.3Mozilla Bugzilla 2.18.6+Mozilla Bugzilla 2.16.8Mozilla Bugzilla 4.3.1Mozilla Bugzilla 3.0.0Mozilla Bugzilla 2.22.7Mozilla Bugzilla 4.4.11Mozilla Bugzilla 3.7.2Mozilla Bugzilla 3.4.3Mozilla Bugzilla 2.16 Rc2Mozilla Bugzilla 4.4.7Mozilla Bugzilla 5.0Mozilla Bugzilla 4.4.8Mozilla Bugzilla 3.3.2Mozilla Bugzilla 4.3.2Mozilla Bugzilla 3.0.1Mozilla Bugzilla 2.18.8Mozilla Bugzilla 2.17.6
NA

CVE-2014-1571

Bugzilla 2.x up to and including 4.0.x prior to 4.0.15, 4.1.x and 4.2.x prior to 4.2.11, 4.3.x and 4.4.x prior to 4.4.6, and 4.5.x prior to 4.5.6 allows remote authenticated users to obtain sensitive private-comment information by leveraging a role as a flag recipient, related to...
Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.0Mozilla Bugzilla 3.6.9Mozilla Bugzilla 4.1.1Mozilla Bugzilla 3.1.3Mozilla Bugzilla 2.0Mozilla Bugzilla 2.18.6+Mozilla Bugzilla 2.16.8Mozilla Bugzilla 4.3.1Mozilla Bugzilla 3.0.0Mozilla Bugzilla 2.22.7Mozilla Bugzilla 3.7.2Mozilla Bugzilla 3.4.3Mozilla Bugzilla 2.16 Rc2Mozilla Bugzilla 3.3.2Mozilla Bugzilla 4.3.2Mozilla Bugzilla 3.0.1Mozilla Bugzilla 2.18.8Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.16Mozilla Bugzilla 4.2Mozilla Bugzilla 3.2
NA

CVE-2014-1572

The confirm_create_account function in the account-creation feature in token.cgi in Bugzilla 2.x up to and including 4.0.x prior to 4.0.15, 4.1.x and 4.2.x prior to 4.2.11, 4.3.x and 4.4.x prior to 4.4.6, and 4.5.x prior to 4.5.6 does not specify a scalar context for the realname...
Fedoraproject Fedora 20Fedoraproject Fedora 21Fedoraproject Fedora 19Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.0Mozilla Bugzilla 3.6.9Mozilla Bugzilla 4.1.1Mozilla Bugzilla 3.1.3Mozilla Bugzilla 2.0Mozilla Bugzilla 2.18.6+Mozilla Bugzilla 2.16.8Mozilla Bugzilla 4.3.1Mozilla Bugzilla 3.0.0Mozilla Bugzilla 2.22.7Mozilla Bugzilla 3.7.2Mozilla Bugzilla 3.4.3Mozilla Bugzilla 2.16 Rc2Mozilla Bugzilla 3.3.2Mozilla Bugzilla 4.3.2Mozilla Bugzilla 3.0.1Mozilla Bugzilla 2.18.8Mozilla Bugzilla 2.17.6
NA

CVE-2014-1573

Bugzilla 2.x up to and including 4.0.x prior to 4.0.15, 4.1.x and 4.2.x prior to 4.2.11, 4.3.x and 4.4.x prior to 4.4.6, and 4.5.x prior to 4.5.6 does not ensure that a scalar context is used for certain CGI parameters, which allows remote malicious users to conduct cross-site sc...
Fedoraproject Fedora 20Fedoraproject Fedora 21Fedoraproject Fedora 19Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.0Mozilla Bugzilla 3.6.9Mozilla Bugzilla 4.1.1Mozilla Bugzilla 3.1.3Mozilla Bugzilla 2.0Mozilla Bugzilla 2.18.6+Mozilla Bugzilla 2.16.8Mozilla Bugzilla 4.3.1Mozilla Bugzilla 3.0.0Mozilla Bugzilla 2.22.7Mozilla Bugzilla 3.7.2Mozilla Bugzilla 3.4.3Mozilla Bugzilla 2.16 Rc2Mozilla Bugzilla 3.3.2Mozilla Bugzilla 4.3.2Mozilla Bugzilla 3.0.1Mozilla Bugzilla 2.18.8Mozilla Bugzilla 2.17.6
NA

CVE-2011-3669

Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.x prior to 4.2rc1 allows remote malicious users to hijack the authentication of arbitrary users for requests that upload attachments.
Mozilla Bugzilla 2.0Mozilla Bugzilla 2.18.6+Mozilla Bugzilla 2.16.8Mozilla Bugzilla 2.22.7Mozilla Bugzilla 2.16 Rc2Mozilla Bugzilla 2.18.8Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.16Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.20Mozilla Bugzilla 2.18.6Mozilla Bugzilla 2.17.2Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.19Mozilla Bugzilla 2.18Mozilla Bugzilla 2.16.2Mozilla Bugzilla 2.16.11Mozilla Bugzilla 2.20.5Mozilla Bugzilla 2.20.6Mozilla Bugzilla 2.22.3Mozilla Bugzilla 2.22.6
NA

CVE-2011-3668

Cross-site request forgery (CSRF) vulnerability in post_bug.cgi in Bugzilla 2.x, 3.x, and 4.x prior to 4.2rc1 allows remote malicious users to hijack the authentication of arbitrary users for requests that create bug reports.
Mozilla Bugzilla 2.0Mozilla Bugzilla 2.18.6+Mozilla Bugzilla 2.16.8Mozilla Bugzilla 2.22.7Mozilla Bugzilla 2.16 Rc2Mozilla Bugzilla 2.18.8Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.16Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.20Mozilla Bugzilla 2.18.6Mozilla Bugzilla 2.17.2Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.19Mozilla Bugzilla 2.18Mozilla Bugzilla 2.16.2Mozilla Bugzilla 2.16.11Mozilla Bugzilla 2.20.5Mozilla Bugzilla 2.20.6Mozilla Bugzilla 2.22.3Mozilla Bugzilla 2.22.6
NA

CVE-2011-0046

Multiple cross-site request forgery (CSRF) vulnerabilities in Bugzilla prior to 3.2.10, 3.4.x prior to 3.4.10, 3.6.x prior to 3.6.4, and 4.0.x prior to 4.0rc2 allow remote malicious users to hijack the authentication of arbitrary users for requests related to (1) adding a saved s...
Mozilla Bugzilla 2.0Mozilla Bugzilla 2.18.6+Mozilla Bugzilla 2.16.8Mozilla Bugzilla 2.22.7Mozilla Bugzilla 3.4.3Mozilla Bugzilla 2.16 Rc2Mozilla Bugzilla 2.18.8Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.16Mozilla Bugzilla 3.2Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.20Mozilla Bugzilla 2.18.6Mozilla Bugzilla 2.17.2Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.19Mozilla Bugzilla 2.18Mozilla Bugzilla 3.6.1Mozilla Bugzilla 3.2.6Mozilla Bugzilla 3.6.0Mozilla Bugzilla 3.4.2
NA

CVE-2010-4567

Bugzilla prior to 3.2.10, 3.4.x prior to 3.4.10, 3.6.x prior to 3.6.4, and 4.0.x prior to 4.0rc2 does not properly handle whitespace preceding a (1) javascript: or (2) data: URI, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via the URL (aka bu...
Mozilla Bugzilla 2.0Mozilla Bugzilla 2.18.6+Mozilla Bugzilla 2.16.8Mozilla Bugzilla 2.22.7Mozilla Bugzilla 3.4.3Mozilla Bugzilla 2.16 Rc2Mozilla Bugzilla 2.18.8Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.16Mozilla Bugzilla 3.2Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.20Mozilla Bugzilla 2.18.6Mozilla Bugzilla 2.17.2Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.19Mozilla Bugzilla 2.18Mozilla Bugzilla 3.6.1Mozilla Bugzilla 3.2.6Mozilla Bugzilla 3.6.0Mozilla Bugzilla 3.4.2
NA

CVE-2011-0048

Bugzilla prior to 3.2.10, 3.4.x prior to 3.4.10, 3.6.x prior to 3.6.4, and 4.0.x prior to 4.0rc2 creates a clickable link for a (1) javascript: or (2) data: URI in the URL (aka bug_file_loc) field, which allows remote malicious users to conduct cross-site scripting (XSS) attacks ...
Mozilla Bugzilla 2.0Mozilla Bugzilla 2.18.6+Mozilla Bugzilla 2.16.8Mozilla Bugzilla 2.22.7Mozilla Bugzilla 3.4.3Mozilla Bugzilla 2.16 Rc2Mozilla Bugzilla 2.18.8Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.16Mozilla Bugzilla 3.2Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.20Mozilla Bugzilla 2.18.6Mozilla Bugzilla 2.17.2Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.19Mozilla Bugzilla 2.18Mozilla Bugzilla 3.6.1Mozilla Bugzilla 3.2.6Mozilla Bugzilla 3.6.0Mozilla Bugzilla 3.4.2
NA

CVE-2010-4572

CRLF injection vulnerability in chart.cgi in Bugzilla prior to 3.2.10, 3.4.x prior to 3.4.10, 3.6.x prior to 3.6.4, and 4.0.x prior to 4.0rc2 allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the query string, a differe...
Mozilla Bugzilla 2.0Mozilla Bugzilla 2.18.6+Mozilla Bugzilla 2.16.8Mozilla Bugzilla 2.22.7Mozilla Bugzilla 3.4.3Mozilla Bugzilla 2.16 Rc2Mozilla Bugzilla 2.18.8Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.16Mozilla Bugzilla 3.2Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.20Mozilla Bugzilla 2.18.6Mozilla Bugzilla 2.17.2Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.19Mozilla Bugzilla 2.18Mozilla Bugzilla 3.6.1Mozilla Bugzilla 3.2.6Mozilla Bugzilla 3.6.0Mozilla Bugzilla 3.4.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-28995CVE-2024-36680CVE-2024-35537unauthorizedCVE-2024-21518CVE-2024-37673cross-site scriptingSSRFCVE-2024-6241
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook