Filter
AND
Mozilla BugzillaBugzilla 2.x and 3.x through 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and…
First published (updated )
Mozilla Bugzillaprocess_bug.cgi in Bugzilla before 2.14 does not set the "groupset" bit when a bug is moved between …
2.1
First published (updated )
Mozilla BugzillaBugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to cause …
2.1
First published (updated )
Mozilla BugzillaBugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email mess…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mozilla BugzillaBugzilla before 2.14 allows Bugzilla users to bypass group security checks by marking a bug as the d…
7.5
First published (updated )
Mozilla BugzillaBugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain…
7.5
First published (updated )
Mozilla BugzillaBugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow Bugzi…
7.5
First published (updated )
Mozilla BugzillaBugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a us…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mozilla BugzillaBugzilla 2.10 allows remote attackers to access sensitive information, including the database userna…
7.5
First published (updated )
Mozilla Bugzillaeditproducts.cgi in Bugzilla 2.16.3 and earlier, when usebuggroups is enabled, does not properly rem…
7.5
First published (updated )
Mozilla Bugzillavotes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote attackers to read…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mozilla Bugzilladescribecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when …
7.5
First published (updated )
Mozilla Bugzillashow_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup featu…
First published (updated )
Mozilla BugzillaBugzilla 2.17.1 through 2.18rc2 and 2.19 from cvs, when using the insidergroup feature, does not suf…
First published (updated )
Mozilla BugzillaUnknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.…
First published (updated )
Mozilla BugzillaBugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to…
2.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mozilla BugzillaDBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQ…
First published (updated )
Mozilla BugzillaUnknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users …
7.5
First published (updated )
Mozilla Bugzillaemail_in.pl in Bugzilla 2.23.4 through 3.0.0 allows remote attackers to execute arbitrary commands v…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mozilla BugzillaThe WebService (XML-RPC) interface in Bugzilla 2.23.3 through 3.0.0 does not enforce permissions for…
First published (updated )
Mozilla Bugzillaemail_in.pl in Bugzilla 2.23.4, 3.0.x before 3.0.4, and 3.1.x before 3.1.4 allows remote authenticat…
3.5
First published (updated )
Mozilla BugzillaBugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not bloc…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.