Filter
AND
Mozilla BugzillaBugzilla 2.x and 3.x through 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and…
First published (updated )
Mozilla Bugzillaeditproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the "usebuggroups"…
7.5
First published (updated )
Mozilla Bugzillabugzilla_email_append.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote a…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mozilla BugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, (1) creates new directories with world-writabl…
4.6
First published (updated )
Mozilla BugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb c…
First published (updated )
Mozilla BugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field nam…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mozilla BugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted …
First published (updated )
Mozilla BugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups…
7.5
First published (updated )
Mozilla BugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groups…
7.5
First published (updated )
Mozilla BugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing privil…
2.1
First published (updated )
Mozilla BugzillaCross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mozilla Bugzillashow_bug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other prod…
First published (updated )
Mozilla BugzillaBugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain…
7.5
First published (updated )
Mozilla BugzillaCGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bi…
10
First published (updated )
Mozilla BugzillaInformation leak in doeditvotes.cgi in Bugzilla before 2.14.1 may allow remote attackers to more eas…
First published (updated )
Mozilla BugzillaBugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to pr…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mozilla Bugzillaeditproducts.cgi in Bugzilla 2.16.3 and earlier, when usebuggroups is enabled, does not properly rem…
7.5
First published (updated )
Mozilla Bugzillavotes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote attackers to read…
First published (updated )
Mozilla Bugzilladescribecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mozilla BugzillaBugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versions allows local users to over…
2.1
First published (updated )
Mozilla BugzillaThe default .htaccess scripts for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x be…
7.5
First published (updated )
Mozilla BugzillaThe data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x befor…
2.1
First published (updated )
Mozilla Bugzillashow_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup featu…
First published (updated )
Mozilla BugzillaBugzilla 2.17.1 through 2.18rc2 and 2.19 from cvs, when using the insidergroup feature, does not suf…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.