EUVD-2012-4133

Malware in sbrugna...

SUSE CVE-2011-3657

Multiple cross-site scripting XSS vulnerabilities in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, and 4.1.x through 4.1.3, when debug mode is used, allow remote attackers to inject arbitrary web script or HTML via vectors involving a 1 tabular...

CVE-2013-1743

Multiple cross-site scripting XSS vulnerabilities in report.cgi in Bugzilla 4.1.x and 4.2.x before 4.2.7 and 4.3.x and 4.4.x before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during construction of a tabular report, as...

CVE-2013-1743

Multiple cross-site scripting XSS vulnerabilities in report.cgi in Bugzilla 4.1.x and 4.2.x before 4.2.7 and 4.3.x and 4.4.x before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during construction of a tabular report, as...

PT-2013-3372

Name of the Vulnerable Software and Affected Versions Bugzilla versions 4.1.x through 4.2.6 Bugzilla versions 4.3.x Bugzilla versions 4.4.x prior to 4.4.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during...

CVE-2012-4189

Cross-site scripting XSS vulnerability in Bugzilla 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during construction of a tabular report, as demonstrated by the Version...

CVE-2012-4189

Cross-site scripting XSS vulnerability in Bugzilla 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during construction of a tabular report, as demonstrated by the Version...

CVE-2012-4189

Cross-site scripting XSS vulnerability in Bugzilla 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during construction of a tabular report, as demonstrated by the Version...

PT-2012-5233

Name of the Vulnerable Software and Affected Versions Bugzilla versions 4.1.x through 4.2.3 Bugzilla versions 4.3.x through 4.4rc1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during...

CVE-2012-4189: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Bugzilla 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during construction of a tabular report, as demonstrated by the Version...

CVE-2011-3657

Multiple cross-site scripting XSS vulnerabilities in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, and 4.1.x through 4.1.3, when debug mode is used, allow remote attackers to inject arbitrary web script or HTML via vectors involving a 1 tabular...

PT-2012-1729

Name of the Vulnerable Software and Affected Versions Bugzilla versions 2.x through 3.4.12 Bugzilla versions 3.5.x through 3.6.6 Bugzilla versions 3.7.x through 4.0.2 Bugzilla versions 4.1.x through 4.1.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via...

CVE-2011-3657: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, and 4.1.x through 4.1.3, when debug mode is used, allow remote attackers to inject arbitrary web script or HTML via vectors involving a 1 tabular...