Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

mozilla bugzilla 4.4.8 vulnerabilities and exploits

(subscribe to this query)
4.7
CVSSv3

CVE-2015-8508

Cross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x prior to 4.2.16, 4.3.x and 4.4.x prior to 4.4.11, and 4.5.x and 5.0.x prior to 5.0.2, when a local dot configuration is used, allows remote malicious users to inject arbitrary web sc...
Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.6.9Mozilla Bugzilla 2.0Mozilla Bugzilla 2.16.8Mozilla Bugzilla 2.22.7Mozilla Bugzilla 3.4.3Mozilla Bugzilla 4.4.7Mozilla Bugzilla 4.4.8Mozilla Bugzilla 3.0.1Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.18.6Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.20Mozilla Bugzilla 3.6.1Mozilla Bugzilla 3.2.6Mozilla Bugzilla 4.2.5Mozilla Bugzilla 3.4.14Mozilla Bugzilla 3.4.2Mozilla Bugzilla 2.16.2Mozilla Bugzilla 2.16.11Mozilla Bugzilla 3.6.3Mozilla Bugzilla 3.2.5
3.5
CVSSv3

CVE-2015-8509

Template.pm in Bugzilla 2.x, 3.x, and 4.x prior to 4.2.16, 4.3.x and 4.4.x prior to 4.4.11, and 4.5.x and 5.0.x prior to 5.0.2 does not properly construct CSV files, which allows remote malicious users to obtain sensitive information by leveraging a web browser that interprets CS...
Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.6.9Mozilla Bugzilla 2.0Mozilla Bugzilla 2.16.8Mozilla Bugzilla 2.22.7Mozilla Bugzilla 3.4.3Mozilla Bugzilla 4.4.7Mozilla Bugzilla 4.4.8Mozilla Bugzilla 3.0.1Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.18.6Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.20Mozilla Bugzilla 3.6.1Mozilla Bugzilla 3.2.6Mozilla Bugzilla 4.2.5Mozilla Bugzilla 3.4.14Mozilla Bugzilla 3.4.2Mozilla Bugzilla 2.16.2Mozilla Bugzilla 2.16.11Mozilla Bugzilla 3.6.3Mozilla Bugzilla 3.2.5
NA

CVE-2015-4499

Util.pm in Bugzilla 2.x, 3.x, and 4.x prior to 4.2.15, 4.3.x and 4.4.x prior to 4.4.10, and 5.x prior to 5.0.1 mishandles long e-mail addresses during account registration, which allows remote malicious users to obtain the default privileges for an arbitrary domain name by placin...
Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.0Mozilla Bugzilla 3.6.9Mozilla Bugzilla 4.1.1Mozilla Bugzilla 3.1.3Mozilla Bugzilla 2.0Mozilla Bugzilla 2.16.8Mozilla Bugzilla 4.3.1Mozilla Bugzilla 3.0.0Mozilla Bugzilla 2.22.7Mozilla Bugzilla 3.7.2Mozilla Bugzilla 3.4.3Mozilla Bugzilla 4.4.7Mozilla Bugzilla 4.4.8Mozilla Bugzilla 3.3.2Mozilla Bugzilla 4.3.2Mozilla Bugzilla 3.0.1Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.16Mozilla Bugzilla 4.2Mozilla Bugzilla 3.2Mozilla Bugzilla 2.18.5
6.1
CVSSv3

CVE-2016-2803

Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 up to and including 4.4.11, and 4.5.1 up to and including 5.0.2 allows remote malicious users to inject arbitrary web script or HTML.
Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.0Mozilla Bugzilla 3.6.9Mozilla Bugzilla 4.1.1Mozilla Bugzilla 3.1.3Mozilla Bugzilla 2.18.6+Mozilla Bugzilla 2.16.8Mozilla Bugzilla 4.3.1Mozilla Bugzilla 3.0.0Mozilla Bugzilla 2.22.7Mozilla Bugzilla 4.4.11Mozilla Bugzilla 3.7.2Mozilla Bugzilla 3.4.3Mozilla Bugzilla 2.16 Rc2Mozilla Bugzilla 4.4.7Mozilla Bugzilla 5.0Mozilla Bugzilla 4.4.8Mozilla Bugzilla 3.3.2Mozilla Bugzilla 4.3.2Mozilla Bugzilla 3.0.1Mozilla Bugzilla 2.18.8Mozilla Bugzilla 2.17.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4541CVE-2024-3080CVE-2024-4787log injectionCVE-2024-5967injectCVE-2024-30078CVE-2024-5899
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook