Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*

part: a version: 2.6 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductBugzilla (e01796e2-013a-5496-a0c3-a87ebcd7e088)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/bugzilla/bugzilla-dev purl2cpe 2026-06-01 10:17:53.617576
pkg:github/bugzilla/bugzilla purl2cpe 2026-06-01 10:17:53.617577
pkg:rpm/fedora/bugzilla purl2cpe 2026-06-01 10:17:53.617578
pkg:rpm/opensuse/bugzilla purl2cpe 2026-06-01 10:17:53.617580

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-2803 vulnerable 2026-06-08 05:07:43.040849 Details available
Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML.
Published: 2017-04-12T22:00:00.000Z
Updated: 2024-08-05T23:32:21.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8509 vulnerable 2026-06-08 05:07:04.209279 Details available
Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2 does not properly construct CSV files, which allows remote attackers to obtain sensitive information by leveraging a web browser that interprets CSV data as JavaScript code.
Published: 2016-01-03T02:00:00.000Z
Updated: 2024-08-06T08:20:42.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8508 vulnerable 2026-06-08 05:07:04.133583 Details available
Cross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2, when a local dot configuration is used, allows remote attackers to inject arbitrary web script or HTML via a crafted bug summary.
Published: 2016-01-03T02:00:00.000Z
Updated: 2024-08-06T08:20:42.648Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4499 vulnerable 2026-06-08 05:06:39.964892 Details available
Util.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.15, 4.3.x and 4.4.x before 4.4.10, and 5.x before 5.0.1 mishandles long e-mail addresses during account registration, which allows remote attackers to obtain the default privileges for an arbitrary domain name by placing that name in a substring of an address, as demonstrated by truncation of an @mozilla.com.example.com address to an @mozilla.com address.
Published: 2015-09-14T01:00:00.000Z
Updated: 2024-08-06T06:18:11.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1573 vulnerable 2026-06-08 05:05:25.608478 Details available
Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 does not ensure that a scalar context is used for certain CGI parameters, which allows remote attackers to conduct cross-site scripting (XSS) attacks by sending three values for a single parameter name.
Published: 2014-10-13T01:00:00.000Z
Updated: 2024-08-06T09:42:36.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1572 vulnerable 2026-06-08 05:05:25.602173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1571 vulnerable 2026-06-08 05:05:25.570213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1517 vulnerable 2026-06-08 05:05:25.149484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1742 vulnerable 2026-06-08 05:03:56.055267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1734 vulnerable 2026-06-08 05:03:55.914872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0786 vulnerable 2026-06-08 05:03:49.979957 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4747 vulnerable 2026-06-08 05:02:52.464678 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4197 vulnerable 2026-06-08 05:02:16.346768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3981 vulnerable 2026-06-08 05:02:15.218770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1969 vulnerable 2026-06-08 05:00:52.088051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0466 vulnerable 2026-06-08 05:00:42.911212 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0448 vulnerable 2026-06-08 05:00:42.643456 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3669 vulnerable 2026-06-08 04:59:27.567903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3668 vulnerable 2026-06-08 04:59:27.477129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3667 vulnerable 2026-06-08 04:59:27.472759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3657 vulnerable 2026-06-08 04:59:27.255625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2379 vulnerable 2026-06-08 04:58:05.665655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0048 vulnerable 2026-06-08 04:56:33.632885 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0046 vulnerable 2026-06-08 04:56:33.599238 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4572 vulnerable 2026-06-08 04:56:29.341308 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4567 vulnerable 2026-06-08 04:56:29.234768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3764 vulnerable 2026-06-08 04:55:16.686393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3172 vulnerable 2026-06-08 04:55:13.199564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2759 vulnerable 2026-06-08 04:55:10.038243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2758 vulnerable 2026-06-08 04:55:10.017192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2757 vulnerable 2026-06-08 04:55:10.015034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2756 vulnerable 2026-06-08 04:55:09.970110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3989 vulnerable 2026-06-08 04:51:45.839380 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4437 vulnerable 2026-06-08 04:50:38.965341 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2105 vulnerable 2026-06-08 04:50:22.961890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4539 vulnerable 2026-06-08 04:49:56.482354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4538 vulnerable 2026-06-08 04:49:56.479773 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1635 not_vulnerable 2026-06-08 04:47:54.685784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1634 vulnerable 2026-06-08 04:47:54.684933 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0707 vulnerable 2026-06-08 04:47:50.918251 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0706 vulnerable 2026-06-08 04:47:50.917480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0705 not_vulnerable 2026-06-08 04:47:50.916595 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0704 not_vulnerable 2026-06-08 04:47:50.915762 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0703 vulnerable 2026-06-08 04:47:50.914961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0702 vulnerable 2026-06-08 04:47:50.903375 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1046 vulnerable 2026-06-08 04:47:23.223056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1045 vulnerable 2026-06-08 04:47:23.222280 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1044 vulnerable 2026-06-08 04:47:23.221182 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1043 vulnerable 2026-06-08 04:47:23.220061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1042 vulnerable 2026-06-08 04:47:23.218643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1407 vulnerable 2026-06-08 04:46:19.829061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1406 vulnerable 2026-06-08 04:46:19.828666 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1405 vulnerable 2026-06-08 04:46:19.828262 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1404 vulnerable 2026-06-08 04:46:19.827856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1403 vulnerable 2026-06-08 04:46:19.827456 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1402 vulnerable 2026-06-08 04:46:19.827017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1401 vulnerable 2026-06-08 04:46:19.824122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0330 vulnerable 2026-06-08 04:45:20.052458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0329 vulnerable 2026-06-08 04:45:20.050237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.