Approved changes feed: RSS · Atom
cpe:2.3:a:mozilla:bugzilla:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1) |
|---|---|
| Product | Bugzilla (e01796e2-013a-5496-a0c3-a87ebcd7e088) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/bugzilla/bugzilla-dev |
purl2cpe | 2026-06-01 10:17:53.600285 |
pkg:github/bugzilla/bugzilla |
purl2cpe | 2026-06-01 10:17:53.600289 |
pkg:rpm/fedora/bugzilla |
purl2cpe | 2026-06-01 10:17:53.600292 |
pkg:rpm/opensuse/bugzilla |
purl2cpe | 2026-06-01 10:17:53.600294 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-5123 |
vulnerable | 2026-06-08 05:11:50.270164 |
Details available
A third party website can access information available to a user with access to a restricted bug entry using the image generation in report.cgi in all Bugzilla versions prior to 4.4.
Published: 2019-04-29T15:34:03.000Z
Updated: 2024-08-05T05:26:46.948Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8630 |
vulnerable | 2026-06-08 05:06:09.762574 |
Details available
Bugzilla before 4.0.16, 4.1.x and 4.2.x before 4.2.12, 4.3.x and 4.4.x before 4.4.7, and 5.x before 5.0rc1 allows remote authenticated users to execute arbitrary commands by leveraging the editcomponents privilege and triggering crafted input to a two-argument Perl open call, as demonstrated by shell metacharacters in a product name.
Published: 2015-02-01T15:00:00.000Z
Updated: 2024-08-06T13:26:02.521Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0786 |
vulnerable | 2026-06-08 05:03:49.973753 |
Details available
The Bugzilla::Search::build_subselect function in Bugzilla 2.x and 3.x before 3.6.13 and 3.7.x and 4.0.x before 4.0.10 generates different error messages for invalid product queries depending on whether a product exists, which allows remote attackers to discover private product names by using debug mode for a query.
Published: 2013-02-24T11:00:00.000Z
Updated: 2024-08-06T14:41:47.160Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0785 |
vulnerable | 2026-06-08 05:03:49.946344 |
Details available
Cross-site scripting (XSS) vulnerability in show_bug.cgi in Bugzilla before 3.6.13, 3.7.x and 4.0.x before 4.0.10, 4.1.x and 4.2.x before 4.2.5, and 4.3.x and 4.4.x before 4.4rc2 allows remote attackers to inject arbitrary web script or HTML via the id parameter in conjunction with an invalid value of the format parameter.
Published: 2013-02-24T11:00:00.000Z
Updated: 2024-08-06T14:41:47.339Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4199 |
vulnerable | 2026-06-08 05:02:16.376247 |
Details available
template/en/default/bug/field-events.js.tmpl in Bugzilla 3.x before 3.6.12, 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 generates JavaScript function calls containing private product names or private component names in certain circumstances involving custom-field visibility control, which allows remote attackers to obtain sensitive information by reading HTML source code.
Published: 2012-11-16T11:00:00.000Z
Updated: 2024-08-06T20:28:07.557Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4197 |
vulnerable | 2026-06-08 05:02:16.360635 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0048 |
vulnerable | 2026-06-08 04:56:33.632805 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0046 |
vulnerable | 2026-06-08 04:56:33.599155 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4572 |
vulnerable | 2026-06-08 04:56:29.341232 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4567 |
vulnerable | 2026-06-08 04:56:29.231960 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4208 |
not_vulnerable | 2026-06-08 04:55:19.460158 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4207 |
not_vulnerable | 2026-06-08 04:55:19.459436 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3172 |
vulnerable | 2026-06-08 04:55:13.198875 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3989 |
vulnerable | 2026-06-08 04:51:45.837206 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5455 |
vulnerable | 2026-06-08 04:49:20.554744 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0769 |
vulnerable | 2026-06-08 04:47:51.123456 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0011 |
vulnerable | 2026-06-08 04:46:20.388776 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0010 |
vulnerable | 2026-06-08 04:46:20.388265 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0009 |
vulnerable | 2026-06-08 04:46:20.387576 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0008 |
vulnerable | 2026-06-08 04:46:20.387055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0007 |
vulnerable | 2026-06-08 04:46:20.386399 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.