Bugzilla@4.0.16 Security Vulnerabilities and Issues — Bugzilla@4.0.16 CVE List

Lucene search

MozillaBugzilla4.0.16

4 matches found

CVE•added 2015/09/14 1:59 a.m.•56 views

CVE-2015-4499

Util.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.15, 4.3.x and 4.4.x before 4.4.10, and 5.x before 5.0.1 mishandles long e-mail addresses during account registration, which allows remote attackers to obtain the default privileges for an arbitrary domain name by placing that name in a substring of a...

7.5CVSS4.7AI score0.02112EPSS

CVE•added 2017/04/12 10:59 p.m.•55 views

CVE-2016-2803

Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML.

6.1CVSS5.9AI score0.0039EPSS

CVE•added 2016/01/03 5:59 a.m.•54 views

CVE-2015-8509

Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2 does not properly construct CSV files, which allows remote attackers to obtain sensitive information by leveraging a web browser that interprets CSV data as JavaScript code.

4.3CVSS4.1AI score0.00112EPSS

CVE•added 2016/01/03 5:59 a.m.•50 views

CVE-2015-8508

Cross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2, when a local dot configuration is used, allows remote attackers to inject arbitrary web script or HTML via a crafted bug ...

4.7CVSS4.6AI score0.00166EPSS