Mozilla Bugzilla 2.17.1
Approved changes feed: RSS · Atom
cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*
part: a version: 2.17.1 update: *
| Vendor | Mozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1) |
|---|---|
| Product | Bugzilla (e01796e2-013a-5496-a0c3-a87ebcd7e088) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/bugzilla/bugzilla-dev |
purl2cpe | 2026-06-01 10:17:53.617279 |
pkg:github/bugzilla/bugzilla |
purl2cpe | 2026-06-01 10:17:53.617281 |
pkg:rpm/fedora/bugzilla |
purl2cpe | 2026-06-01 10:17:53.617282 |
pkg:rpm/opensuse/bugzilla |
purl2cpe | 2026-06-01 10:17:53.617283 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-2803 |
vulnerable | 2026-06-08 05:07:43.052906 |
Details available
Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML.
Published: 2017-04-12T22:00:00.000Z
Updated: 2024-08-05T23:32:21.226Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4499 |
vulnerable | 2026-06-08 05:06:39.979378 |
Details available
Util.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.15, 4.3.x and 4.4.x before 4.4.10, and 5.x before 5.0.1 mishandles long e-mail addresses during account registration, which allows remote attackers to obtain the default privileges for an arbitrary domain name by placing that name in a substring of an address, as demonstrated by truncation of an @mozilla.com.example.com address to an @mozilla.com address.
Published: 2015-09-14T01:00:00.000Z
Updated: 2024-08-06T06:18:11.279Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1573 |
vulnerable | 2026-06-08 05:05:25.608930 |
Details available
Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 does not ensure that a scalar context is used for certain CGI parameters, which allows remote attackers to conduct cross-site scripting (XSS) attacks by sending three values for a single parameter name.
Published: 2014-10-13T01:00:00.000Z
Updated: 2024-08-06T09:42:36.650Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1572 |
vulnerable | 2026-06-08 05:05:25.602735 |
Details available
The confirm_create_account function in the account-creation feature in token.cgi in Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 does not specify a scalar context for the realname parameter, which allows remote attackers to create accounts with unverified e-mail addresses by sending three realname values with realname=login_name as the second, as demonstrated by selecting an e-mail address with a domain name for which group privileges are automatically granted.
Published: 2014-10-13T01:00:00.000Z
Updated: 2024-08-06T09:42:36.509Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1571 |
vulnerable | 2026-06-08 05:05:25.574812 |
Details available
Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 allows remote authenticated users to obtain sensitive private-comment information by leveraging a role as a flag recipient, related to Bug.pm, Flag.pm, and a mail template.
Published: 2014-10-13T01:00:00.000Z
Updated: 2024-08-06T09:42:36.529Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1517 |
vulnerable | 2026-06-08 05:05:25.163439 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1742 |
vulnerable | 2026-06-08 05:03:56.055699 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1734 |
vulnerable | 2026-06-08 05:03:55.915314 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0786 |
vulnerable | 2026-06-08 05:03:49.994019 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4747 |
vulnerable | 2026-06-08 05:02:52.478088 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4197 |
vulnerable | 2026-06-08 05:02:16.347211 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3981 |
vulnerable | 2026-06-08 05:02:15.233292 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1969 |
vulnerable | 2026-06-08 05:00:52.088491 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0466 |
vulnerable | 2026-06-08 05:00:42.911640 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0448 |
vulnerable | 2026-06-08 05:00:42.658686 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3669 |
vulnerable | 2026-06-08 04:59:27.568347 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3668 |
vulnerable | 2026-06-08 04:59:27.564636 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3667 |
vulnerable | 2026-06-08 04:59:27.473211 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3657 |
vulnerable | 2026-06-08 04:59:27.270999 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2978 |
vulnerable | 2026-06-08 04:58:09.905770 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2976 |
vulnerable | 2026-06-08 04:58:09.902246 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2381 |
vulnerable | 2026-06-08 04:58:05.760706 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2379 |
vulnerable | 2026-06-08 04:58:05.680963 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0048 |
vulnerable | 2026-06-08 04:56:33.633338 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0046 |
vulnerable | 2026-06-08 04:56:33.599693 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4572 |
vulnerable | 2026-06-08 04:56:29.341879 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4568 |
vulnerable | 2026-06-08 04:56:29.308783 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4567 |
vulnerable | 2026-06-08 04:56:29.252834 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3764 |
vulnerable | 2026-06-08 04:55:16.686840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3172 |
vulnerable | 2026-06-08 04:55:13.214602 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2758 |
vulnerable | 2026-06-08 04:55:10.024145 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1204 |
vulnerable | 2026-06-08 04:54:06.357272 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0485 |
vulnerable | 2026-06-08 04:51:09.653912 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0483 |
vulnerable | 2026-06-08 04:51:09.651788 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0482 |
vulnerable | 2026-06-08 04:51:09.649819 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0481 |
vulnerable | 2026-06-08 04:51:09.625883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2105 |
vulnerable | 2026-06-08 04:50:22.973467 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4543 |
vulnerable | 2026-06-08 04:49:56.488662 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0913 |
vulnerable | 2026-06-08 04:48:55.769105 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2174 |
vulnerable | 2026-06-08 04:48:28.558415 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2173 |
vulnerable | 2026-06-08 04:48:28.554656 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1565 |
vulnerable | 2026-06-08 04:48:26.944085 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1564 |
vulnerable | 2026-06-08 04:48:26.939515 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1635 |
not_vulnerable | 2026-06-08 04:47:54.686062 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1634 |
vulnerable | 2026-06-08 04:47:54.685222 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1633 |
vulnerable | 2026-06-08 04:47:54.680703 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1061 |
vulnerable | 2026-06-08 04:47:52.679105 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0707 |
vulnerable | 2026-06-08 04:47:50.918535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0706 |
vulnerable | 2026-06-08 04:47:50.917757 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0705 |
not_vulnerable | 2026-06-08 04:47:50.916957 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0704 |
not_vulnerable | 2026-06-08 04:47:50.916043 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0703 |
vulnerable | 2026-06-08 04:47:50.915259 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0702 |
vulnerable | 2026-06-08 04:47:50.911831 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1046 |
vulnerable | 2026-06-08 04:47:23.223289 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1045 |
vulnerable | 2026-06-08 04:47:23.222512 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1044 |
vulnerable | 2026-06-08 04:47:23.221431 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1043 |
vulnerable | 2026-06-08 04:47:23.220318 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1042 |
vulnerable | 2026-06-08 04:47:23.219496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0603 |
vulnerable | 2026-06-08 04:47:21.972203 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0602 |
vulnerable | 2026-06-08 04:47:21.971579 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0013 |
vulnerable | 2026-06-08 04:47:20.201095 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0012 |
vulnerable | 2026-06-08 04:47:20.200503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-2260 |
vulnerable | 2026-06-08 04:47:19.559050 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.