Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*

part: a version: 2.8 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductBugzilla (e01796e2-013a-5496-a0c3-a87ebcd7e088)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/bugzilla/bugzilla-dev purl2cpe 2026-06-01 10:17:53.617581
pkg:github/bugzilla/bugzilla purl2cpe 2026-06-01 10:17:53.617582
pkg:rpm/fedora/bugzilla purl2cpe 2026-06-01 10:17:53.617584
pkg:rpm/opensuse/bugzilla purl2cpe 2026-06-01 10:17:53.617585

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-2803 vulnerable 2026-06-08 05:07:43.041518 Details available
Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML.
Published: 2017-04-12T22:00:00.000Z
Updated: 2024-08-05T23:32:21.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8509 vulnerable 2026-06-08 05:07:04.209297 Details available
Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2 does not properly construct CSV files, which allows remote attackers to obtain sensitive information by leveraging a web browser that interprets CSV data as JavaScript code.
Published: 2016-01-03T02:00:00.000Z
Updated: 2024-08-06T08:20:42.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8508 vulnerable 2026-06-08 05:07:04.134080 Details available
Cross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2, when a local dot configuration is used, allows remote attackers to inject arbitrary web script or HTML via a crafted bug summary.
Published: 2016-01-03T02:00:00.000Z
Updated: 2024-08-06T08:20:42.648Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4499 vulnerable 2026-06-08 05:06:39.965439 Details available
Util.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.15, 4.3.x and 4.4.x before 4.4.10, and 5.x before 5.0.1 mishandles long e-mail addresses during account registration, which allows remote attackers to obtain the default privileges for an arbitrary domain name by placing that name in a substring of an address, as demonstrated by truncation of an @mozilla.com.example.com address to an @mozilla.com address.
Published: 2015-09-14T01:00:00.000Z
Updated: 2024-08-06T06:18:11.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1573 vulnerable 2026-06-08 05:05:25.608495 Details available
Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 does not ensure that a scalar context is used for certain CGI parameters, which allows remote attackers to conduct cross-site scripting (XSS) attacks by sending three values for a single parameter name.
Published: 2014-10-13T01:00:00.000Z
Updated: 2024-08-06T09:42:36.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1572 vulnerable 2026-06-08 05:05:25.602189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1571 vulnerable 2026-06-08 05:05:25.570231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1517 vulnerable 2026-06-08 05:05:25.150038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1742 vulnerable 2026-06-08 05:03:56.055283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1734 vulnerable 2026-06-08 05:03:55.914889 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0786 vulnerable 2026-06-08 05:03:49.980622 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4747 vulnerable 2026-06-08 05:02:52.465165 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4197 vulnerable 2026-06-08 05:02:16.346785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3981 vulnerable 2026-06-08 05:02:15.219312 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1969 vulnerable 2026-06-08 05:00:52.088069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0466 vulnerable 2026-06-08 05:00:42.911230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0448 vulnerable 2026-06-08 05:00:42.644082 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3669 vulnerable 2026-06-08 04:59:27.567919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3668 vulnerable 2026-06-08 04:59:27.477145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3667 vulnerable 2026-06-08 04:59:27.472776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3657 vulnerable 2026-06-08 04:59:27.256115 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2379 vulnerable 2026-06-08 04:58:05.666146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0048 vulnerable 2026-06-08 04:56:33.632902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0046 vulnerable 2026-06-08 04:56:33.599257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4572 vulnerable 2026-06-08 04:56:29.341325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4567 vulnerable 2026-06-08 04:56:29.235324 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3764 vulnerable 2026-06-08 04:55:16.686410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3172 vulnerable 2026-06-08 04:55:13.199583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2759 vulnerable 2026-06-08 04:55:10.038261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2758 vulnerable 2026-06-08 04:55:10.017210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2757 vulnerable 2026-06-08 04:55:10.015053 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2756 vulnerable 2026-06-08 04:55:09.970853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3989 vulnerable 2026-06-08 04:51:45.839859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4437 vulnerable 2026-06-08 04:50:38.965825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2105 vulnerable 2026-06-08 04:50:22.962403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4539 vulnerable 2026-06-08 04:49:56.482373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4538 vulnerable 2026-06-08 04:49:56.480279 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1635 not_vulnerable 2026-06-08 04:47:54.685802 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1634 vulnerable 2026-06-08 04:47:54.684953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0707 vulnerable 2026-06-08 04:47:50.918269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0706 vulnerable 2026-06-08 04:47:50.917498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0705 not_vulnerable 2026-06-08 04:47:50.916613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0704 not_vulnerable 2026-06-08 04:47:50.915780 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0703 vulnerable 2026-06-08 04:47:50.914980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0702 vulnerable 2026-06-08 04:47:50.903876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1046 vulnerable 2026-06-08 04:47:23.223074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1045 vulnerable 2026-06-08 04:47:23.222299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1044 vulnerable 2026-06-08 04:47:23.221205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1043 vulnerable 2026-06-08 04:47:23.220082 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1042 vulnerable 2026-06-08 04:47:23.219213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1407 vulnerable 2026-06-08 04:46:19.829078 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1406 vulnerable 2026-06-08 04:46:19.828686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1405 vulnerable 2026-06-08 04:46:19.828283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1404 vulnerable 2026-06-08 04:46:19.827876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1403 vulnerable 2026-06-08 04:46:19.827475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1402 vulnerable 2026-06-08 04:46:19.827038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1401 vulnerable 2026-06-08 04:46:19.824669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0330 vulnerable 2026-06-08 04:45:20.052477 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0329 vulnerable 2026-06-08 04:45:20.050828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0421 vulnerable 2026-06-08 04:44:58.488894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.