Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*

part: a version: 2.16.1 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductBugzilla (e01796e2-013a-5496-a0c3-a87ebcd7e088)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/bugzilla/bugzilla-dev purl2cpe 2026-06-01 10:17:53.600352
pkg:github/bugzilla/bugzilla purl2cpe 2026-06-01 10:17:53.600353
pkg:rpm/fedora/bugzilla purl2cpe 2026-06-01 10:17:53.600354
pkg:rpm/opensuse/bugzilla purl2cpe 2026-06-01 10:17:53.600356

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-2803 vulnerable 2026-06-08 05:07:43.044278 Details available
Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML.
Published: 2017-04-12T22:00:00.000Z
Updated: 2024-08-05T23:32:21.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8509 vulnerable 2026-06-08 05:07:04.209464 Details available
Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2 does not properly construct CSV files, which allows remote attackers to obtain sensitive information by leveraging a web browser that interprets CSV data as JavaScript code.
Published: 2016-01-03T02:00:00.000Z
Updated: 2024-08-06T08:20:42.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8508 vulnerable 2026-06-08 05:07:04.139234 Details available
Cross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2, when a local dot configuration is used, allows remote attackers to inject arbitrary web script or HTML via a crafted bug summary.
Published: 2016-01-03T02:00:00.000Z
Updated: 2024-08-06T08:20:42.648Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4499 vulnerable 2026-06-08 05:06:39.972626 Details available
Util.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.15, 4.3.x and 4.4.x before 4.4.10, and 5.x before 5.0.1 mishandles long e-mail addresses during account registration, which allows remote attackers to obtain the default privileges for an arbitrary domain name by placing that name in a substring of an address, as demonstrated by truncation of an @mozilla.com.example.com address to an @mozilla.com address.
Published: 2015-09-14T01:00:00.000Z
Updated: 2024-08-06T06:18:11.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1573 vulnerable 2026-06-08 05:05:25.608713 Details available
Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 does not ensure that a scalar context is used for certain CGI parameters, which allows remote attackers to conduct cross-site scripting (XSS) attacks by sending three values for a single parameter name.
Published: 2014-10-13T01:00:00.000Z
Updated: 2024-08-06T09:42:36.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1572 vulnerable 2026-06-08 05:05:25.602408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1571 vulnerable 2026-06-08 05:05:25.570466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1517 vulnerable 2026-06-08 05:05:25.156879 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1742 vulnerable 2026-06-08 05:03:56.055500 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1734 vulnerable 2026-06-08 05:03:55.915110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0786 vulnerable 2026-06-08 05:03:49.987581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4747 vulnerable 2026-06-08 05:02:52.471769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4197 vulnerable 2026-06-08 05:02:16.347003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3981 vulnerable 2026-06-08 05:02:15.226813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1969 vulnerable 2026-06-08 05:00:52.088293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0466 vulnerable 2026-06-08 05:00:42.911445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0448 vulnerable 2026-06-08 05:00:42.651675 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3669 vulnerable 2026-06-08 04:59:27.568130 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3668 vulnerable 2026-06-08 04:59:27.477367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3667 vulnerable 2026-06-08 04:59:27.472998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3657 vulnerable 2026-06-08 04:59:27.264069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2978 vulnerable 2026-06-08 04:58:09.905571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2976 vulnerable 2026-06-08 04:58:09.902039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2379 vulnerable 2026-06-08 04:58:05.674096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0048 vulnerable 2026-06-08 04:56:33.633116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0046 vulnerable 2026-06-08 04:56:33.599478 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4572 vulnerable 2026-06-08 04:56:29.341535 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4568 vulnerable 2026-06-08 04:56:29.308585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4567 vulnerable 2026-06-08 04:56:29.244051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3764 vulnerable 2026-06-08 04:55:16.686617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3172 vulnerable 2026-06-08 04:55:13.207773 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3989 vulnerable 2026-06-08 04:51:45.845934 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0483 vulnerable 2026-06-08 04:51:09.651575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0482 vulnerable 2026-06-08 04:51:09.649598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0481 vulnerable 2026-06-08 04:51:09.619108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2105 vulnerable 2026-06-08 04:50:22.967427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4534 vulnerable 2026-06-08 04:48:44.202876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1565 vulnerable 2026-06-08 04:48:26.943987 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1564 vulnerable 2026-06-08 04:48:26.936949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1563 vulnerable 2026-06-08 04:48:26.929597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1635 not_vulnerable 2026-06-08 04:47:54.685965 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1634 vulnerable 2026-06-08 04:47:54.685119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1633 vulnerable 2026-06-08 04:47:54.680601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1061 vulnerable 2026-06-08 04:47:52.675267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0707 vulnerable 2026-06-08 04:47:50.918433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0706 vulnerable 2026-06-08 04:47:50.917660 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0705 not_vulnerable 2026-06-08 04:47:50.916779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0704 not_vulnerable 2026-06-08 04:47:50.915945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0703 vulnerable 2026-06-08 04:47:50.915150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0702 vulnerable 2026-06-08 04:47:50.908919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1046 vulnerable 2026-06-08 04:47:23.223240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1045 vulnerable 2026-06-08 04:47:23.222464 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1044 vulnerable 2026-06-08 04:47:23.221383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1043 vulnerable 2026-06-08 04:47:23.220267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1042 vulnerable 2026-06-08 04:47:23.219441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0603 vulnerable 2026-06-08 04:47:21.972146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0602 vulnerable 2026-06-08 04:47:21.971518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0013 vulnerable 2026-06-08 04:47:20.201064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0012 vulnerable 2026-06-08 04:47:20.200470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2260 vulnerable 2026-06-08 04:47:19.553122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.