Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*

part: a version: 2.16.2 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductBugzilla (e01796e2-013a-5496-a0c3-a87ebcd7e088)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/bugzilla/bugzilla-dev purl2cpe 2026-06-01 10:17:53.600368
pkg:github/bugzilla/bugzilla purl2cpe 2026-06-01 10:17:53.600370
pkg:rpm/fedora/bugzilla purl2cpe 2026-06-01 10:17:53.600371
pkg:rpm/opensuse/bugzilla purl2cpe 2026-06-01 10:17:53.600372

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-2803 vulnerable 2026-06-08 05:07:43.044950 Details available
Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML.
Published: 2017-04-12T22:00:00.000Z
Updated: 2024-08-05T23:32:21.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8509 vulnerable 2026-06-08 05:07:04.209481 Details available
Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2 does not properly construct CSV files, which allows remote attackers to obtain sensitive information by leveraging a web browser that interprets CSV data as JavaScript code.
Published: 2016-01-03T02:00:00.000Z
Updated: 2024-08-06T08:20:42.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8508 vulnerable 2026-06-08 05:07:04.139713 Details available
Cross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2, when a local dot configuration is used, allows remote attackers to inject arbitrary web script or HTML via a crafted bug summary.
Published: 2016-01-03T02:00:00.000Z
Updated: 2024-08-06T08:20:42.648Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4499 vulnerable 2026-06-08 05:06:39.973189 Details available
Util.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.15, 4.3.x and 4.4.x before 4.4.10, and 5.x before 5.0.1 mishandles long e-mail addresses during account registration, which allows remote attackers to obtain the default privileges for an arbitrary domain name by placing that name in a substring of an address, as demonstrated by truncation of an @mozilla.com.example.com address to an @mozilla.com address.
Published: 2015-09-14T01:00:00.000Z
Updated: 2024-08-06T06:18:11.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1573 vulnerable 2026-06-08 05:05:25.608730 Details available
Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 does not ensure that a scalar context is used for certain CGI parameters, which allows remote attackers to conduct cross-site scripting (XSS) attacks by sending three values for a single parameter name.
Published: 2014-10-13T01:00:00.000Z
Updated: 2024-08-06T09:42:36.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1572 vulnerable 2026-06-08 05:05:25.602424 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1571 vulnerable 2026-06-08 05:05:25.570482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1517 vulnerable 2026-06-08 05:05:25.157401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1742 vulnerable 2026-06-08 05:03:56.055517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1734 vulnerable 2026-06-08 05:03:55.915126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0786 vulnerable 2026-06-08 05:03:49.988205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4747 vulnerable 2026-06-08 05:02:52.472279 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4197 vulnerable 2026-06-08 05:02:16.347019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3981 vulnerable 2026-06-08 05:02:15.227353 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1969 vulnerable 2026-06-08 05:00:52.088309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0466 vulnerable 2026-06-08 05:00:42.911461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0448 vulnerable 2026-06-08 05:00:42.652345 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3669 vulnerable 2026-06-08 04:59:27.568148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3668 vulnerable 2026-06-08 04:59:27.477383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3667 vulnerable 2026-06-08 04:59:27.473014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3657 vulnerable 2026-06-08 04:59:27.264685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2978 vulnerable 2026-06-08 04:58:09.905590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2976 vulnerable 2026-06-08 04:58:09.902057 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2379 vulnerable 2026-06-08 04:58:05.674618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0048 vulnerable 2026-06-08 04:56:33.633134 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0046 vulnerable 2026-06-08 04:56:33.599494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4572 vulnerable 2026-06-08 04:56:29.341550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4568 vulnerable 2026-06-08 04:56:29.308602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4567 vulnerable 2026-06-08 04:56:29.244801 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3764 vulnerable 2026-06-08 04:55:16.686633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3172 vulnerable 2026-06-08 04:55:13.208301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3989 vulnerable 2026-06-08 04:51:45.846436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0483 vulnerable 2026-06-08 04:51:09.651590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0482 vulnerable 2026-06-08 04:51:09.649614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0481 vulnerable 2026-06-08 04:51:09.619636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2105 vulnerable 2026-06-08 04:50:22.967924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4534 vulnerable 2026-06-08 04:48:44.203339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1565 vulnerable 2026-06-08 04:48:26.944004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1564 vulnerable 2026-06-08 04:48:26.936966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1563 vulnerable 2026-06-08 04:48:26.930202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1635 not_vulnerable 2026-06-08 04:47:54.685980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1634 vulnerable 2026-06-08 04:47:54.685136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1633 vulnerable 2026-06-08 04:47:54.680619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1061 vulnerable 2026-06-08 04:47:52.675292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0707 vulnerable 2026-06-08 04:47:50.918450 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0706 vulnerable 2026-06-08 04:47:50.917675 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0705 not_vulnerable 2026-06-08 04:47:50.916795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0704 not_vulnerable 2026-06-08 04:47:50.915961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0703 vulnerable 2026-06-08 04:47:50.915172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0702 vulnerable 2026-06-08 04:47:50.909393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1046 vulnerable 2026-06-08 04:47:23.223256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1045 vulnerable 2026-06-08 04:47:23.222480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1044 vulnerable 2026-06-08 04:47:23.221399 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1043 vulnerable 2026-06-08 04:47:23.220284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1042 vulnerable 2026-06-08 04:47:23.219460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0603 vulnerable 2026-06-08 04:47:21.972169 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0602 vulnerable 2026-06-08 04:47:21.971540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2260 vulnerable 2026-06-08 04:47:19.553589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.