EUVD-2014-9323

Malware in sbrugna...

Bugzilla Privilege Escalation Security Patch

Developers and organizations that use the Bugzilla open source bug-tracking system should upgrade to current versions after the disclosure of details of a vulnerability in its email-based permissions process. The flaw, CVE-2015-4499, was patched last week in versions 4.2.15, 4.4.10 and 5.0.1 afte...

CVE-2014-9506

Affected software: MantisBT before 1.2.18. Issue: Inadequate permission checking when sending an email that indicates a monitored issue is related to another issue, enabling remote authenticated users to access information about restricted issues. Impact: Information disclosure of restricted issu...