Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*

part: a version: 2.16.5 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductBugzilla (e01796e2-013a-5496-a0c3-a87ebcd7e088)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/bugzilla/bugzilla-dev purl2cpe 2026-06-01 10:17:53.600385
pkg:github/bugzilla/bugzilla purl2cpe 2026-06-01 10:17:53.600386
pkg:rpm/fedora/bugzilla purl2cpe 2026-06-01 10:17:53.600388
pkg:rpm/opensuse/bugzilla purl2cpe 2026-06-01 10:17:53.600389

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-2803 vulnerable 2026-06-08 05:07:43.046844 Details available
Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML.
Published: 2017-04-12T22:00:00.000Z
Updated: 2024-08-05T23:32:21.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8509 vulnerable 2026-06-08 05:07:04.209530 Details available
Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2 does not properly construct CSV files, which allows remote attackers to obtain sensitive information by leveraging a web browser that interprets CSV data as JavaScript code.
Published: 2016-01-03T02:00:00.000Z
Updated: 2024-08-06T08:20:42.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8508 vulnerable 2026-06-08 05:07:04.141503 Details available
Cross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2, when a local dot configuration is used, allows remote attackers to inject arbitrary web script or HTML via a crafted bug summary.
Published: 2016-01-03T02:00:00.000Z
Updated: 2024-08-06T08:20:42.648Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4499 vulnerable 2026-06-08 05:06:39.974719 Details available
Util.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.15, 4.3.x and 4.4.x before 4.4.10, and 5.x before 5.0.1 mishandles long e-mail addresses during account registration, which allows remote attackers to obtain the default privileges for an arbitrary domain name by placing that name in a substring of an address, as demonstrated by truncation of an @mozilla.com.example.com address to an @mozilla.com address.
Published: 2015-09-14T01:00:00.000Z
Updated: 2024-08-06T06:18:11.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1573 vulnerable 2026-06-08 05:05:25.608780 Details available
Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 does not ensure that a scalar context is used for certain CGI parameters, which allows remote attackers to conduct cross-site scripting (XSS) attacks by sending three values for a single parameter name.
Published: 2014-10-13T01:00:00.000Z
Updated: 2024-08-06T09:42:36.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1572 vulnerable 2026-06-08 05:05:25.602584 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1571 vulnerable 2026-06-08 05:05:25.570534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1517 vulnerable 2026-06-08 05:05:25.158915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1742 vulnerable 2026-06-08 05:03:56.055567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1734 vulnerable 2026-06-08 05:03:55.915181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0786 vulnerable 2026-06-08 05:03:49.989867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4747 vulnerable 2026-06-08 05:02:52.473932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4197 vulnerable 2026-06-08 05:02:16.347069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3981 vulnerable 2026-06-08 05:02:15.229054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1969 vulnerable 2026-06-08 05:00:52.088358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0466 vulnerable 2026-06-08 05:00:42.911511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0448 vulnerable 2026-06-08 05:00:42.654333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3669 vulnerable 2026-06-08 04:59:27.568201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3668 vulnerable 2026-06-08 04:59:27.477430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3667 vulnerable 2026-06-08 04:59:27.473063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3657 vulnerable 2026-06-08 04:59:27.266410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2978 vulnerable 2026-06-08 04:58:09.905643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2976 vulnerable 2026-06-08 04:58:09.902109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2379 vulnerable 2026-06-08 04:58:05.676478 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0048 vulnerable 2026-06-08 04:56:33.633189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0046 vulnerable 2026-06-08 04:56:33.599544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4572 vulnerable 2026-06-08 04:56:29.341599 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4568 vulnerable 2026-06-08 04:56:29.308652 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4567 vulnerable 2026-06-08 04:56:29.247001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3764 vulnerable 2026-06-08 04:55:16.686683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3172 vulnerable 2026-06-08 04:55:13.210157 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3989 vulnerable 2026-06-08 04:51:45.848039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0483 vulnerable 2026-06-08 04:51:09.651637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0482 vulnerable 2026-06-08 04:51:09.649666 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0481 vulnerable 2026-06-08 04:51:09.621113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2105 vulnerable 2026-06-08 04:50:22.969383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4534 vulnerable 2026-06-08 04:48:44.204785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1565 vulnerable 2026-06-08 04:48:26.944053 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1564 vulnerable 2026-06-08 04:48:26.937016 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1563 vulnerable 2026-06-08 04:48:26.931774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1635 not_vulnerable 2026-06-08 04:47:54.686030 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1634 vulnerable 2026-06-08 04:47:54.685189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1633 vulnerable 2026-06-08 04:47:54.680669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1061 vulnerable 2026-06-08 04:47:52.675349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0707 vulnerable 2026-06-08 04:47:50.918503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0706 vulnerable 2026-06-08 04:47:50.917723 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0705 not_vulnerable 2026-06-08 04:47:50.916843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0704 not_vulnerable 2026-06-08 04:47:50.916010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0703 vulnerable 2026-06-08 04:47:50.915225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0702 vulnerable 2026-06-08 04:47:50.910853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2260 vulnerable 2026-06-08 04:47:19.555186 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.