CVE-2014-1572

CVE-2014-1572 affects Bugzilla 2.x through 4.5.x where confirm_create_account in token.cgi does not enforce scalar context for the realname parameter. This allows remote attackers to create accounts with unverified e-mail addresses by sending three realname values, with realname=login_name as the...

CVE-2011-2380

CVE-2011-2380 affects Bugzilla and allows remote attackers to determine the existence of private group names by crafting parameters during bug creation or editing. Affected versions include Bugzilla 2.23.3–2.22.7, 3.0.x–3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4....

CVE-2012-3981

Bugzilla contains an LDAP username handling flaw in Auth/Verify/LDAP.pm that does not restrict characters, potentially allowing remote attackers to inject data into an LDAP directory via crafted login attempts. Affected versions include Bugzilla 2.x/3.x before 3.6.11, 3.7.x and 4.0.x before 4.0.8...

CVE-2011-2979

Technical details for CVE-2011-2979 are not publicly available in the provided connected documents; monitor for updates. The materials reference the CVE but do not supply affected products, root cause, or fixes.

CVE-2010-2756

CVE-2010-2756 : Bugzilla's Search.pm exposes group membership information of arbitrary users via the Search interface (including boolean charts and group-based pronouns). Affects Bugzilla versions: 2.19.1–3.2.7, 3.3.1–3.4.7, 3.5.1–3.6.1, and 3.7–3.7.2. This constitutes an information disclosure v...

CVE-2012-0440

CVE-2012-0440 is a CSRF vulnerability in Bugzilla’s JSON-RPC API (jsonrpc.cgi) that could allow an attacker to hijack the authentication of arbitrary users for JSON-RPC requests. Affected Bugzilla versions include 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x bef...

CVE-2009-3166

Bugzilla 3.4rc1–3.4.1 vulnerability: token.cgi places a password in the login URL after a reset, allowing context-dependent attackers to obtain passwords via web server access logs, Referer logs, or browser history. The provided documents confirm Bugzilla involvement and CVE-2009-3166, but do not...

CVE-2007-4538

CVE-2007-4538 affects Bugzilla 2.23.4–3.0.0 via the email_in.pl path. The vulnerability arises when using Email::Send::Sendmail with the -f From address, enabling remote attackers to inject shell metacharacters and execute arbitrary commands. Exploitation is described in multiple sources (includi...

CVE-2009-3386

The CVE-2009-3386 vulnerability affects Bugzilla versions 3.3.2–3.4.3 and 3.5–3.5.1, where Template.pm allows an attacker to remotely read the alias of a private bug by inspecting the Related Bug fields (Depends On or Blocks). The underlying issue is an information-disclosure path in Bugzilla’s t...

CVE-2010-1204

CVE-2010-1204 concerns Bugzilla versions 2.17.1–3.7 where the Search.pm module mishandles a crafted boolean chart search URL, potentially exposing sensitive time-tracking data to remote attackers. The vulnerability arises from inadequate input handling in the search feature, enabling information ...

CVE-2005-2173

Bugzilla CVE-2005-2173 affects versions 2.17.1–2.18.1 and 2.19.1–2.19.3, where Flag::validate and Flag::modify do not verify that the flag ID matches the target bug or attachment. This permits changing flags on arbitrary bugs and obtaining a bug summary via process_bug.cgi, exposing information. ...

CVE-2009-0485

CVE-2009-0485 is a CSRF vulnerability in Bugzilla affecting 2.17–2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2. An attacker can cause deletion of unused flag types by delivering a crafted link or IMG tag to editflagtypes.cgi. The root cause is CSRF without sufficient user inter...

CVE-2009-3387

CVE-2009-3387 affects Bugzilla 3.3.1–3.4.4, 3.5.1–3.5.2; the root cause is that group restrictions are not preserved when moving a bug to a different product category, enabling remote attackers to view sensitive information via a bug request in opportunistic circumstances. The provided documents ...

CVE-2011-2978

Bugzilla CVE-2011-2978: The vulnerability arises because Bugzilla does not prevent changes to the confirmation email address (old_email) when a user initiates an email change, allowing an attacker with access to another user’s session (e.g., an unattended workstation) to redirect the change notif...

CVE-2012-0453

The CVE-2012-0453 entry describes a Cross-site Request Forgery (CSRF) vulnerability in Bugzilla versions 4.0.2–4.0.4 and 4.1.1–4.2rc2 when using mod_perl. The flaw allows remote attackers to hijack the authentication of arbitrary users for requests that modify the product’s installation via the X...

CVE-2010-3764

Affected software/versions: Bugzilla 2.12–3.2.8, 3.4.8, 3.6.2, 3.7.3, 4.1.** Root cause / vulnerability:** Old Charts implementation creates graph files in graphs/ with predictable names, enabling remote attackers to retrieve sensitive information via a modified URL.** Impact:** Unauthorized disc...

CVE-2009-0484

CVE-2009-0484 is a CSRF vulnerability in Bugzilla that allows remote attackers to delete shared or saved searches via a crafted link or IMG tag to buglist.cgi. Affected are Bugzilla 3.0.x before 3.0.7, 3.2.x before 3.2.1, and 3.3.x before 3.3.2. The underlying issue is cross-site request forgery ...

CVE-2005-1563

Bugzilla 2.10–2.18, 2.19.1, and 2.19.2 contain an information-disclosure flaw: the error message differs depending on whether a product exists, enabling remote attackers to infer the existence of hidden products. This CVE (CVE-2005-1563) is documented across CVE/NVD/CVE List entries and related a...

CVE-2006-0913

CVE-2006-0913 describes an SQL injection in the Bugzilla component for the web front end. The vulnerability affects Bugzilla versions 2.17 through 2.18.4 and 2.20, where remote authenticated users with administrative privileges can exploit the flaw via the whinedays parameter exposed from editpar...

CVE-2013-0786

The CVE-2013-0786 issue affects Bugzilla 2.x and 3.x before 3.6.13, and 4.0.x before 4.0.10, where Bugzilla::Search::build_subselect generates different error messages for invalid product queries depending on product existence. This behavior allows remote attackers to discover private product nam...

CVE-2010-2758

CVE-2010-2758 concerns Bugzilla where error messages differ depending on whether a product exists, enabling remote users to enumerate product names. Affected versions include Bugzilla 2.17.1–3.2.7, 3.3.1–3.4.7, 3.5.1–3.6.1, and 3.7–3.7.2. The connected documents reference Fedora/OpenVAS advisorie...

CVE-2006-0914

The CVE-2006-0914 entry affects Bugzilla versions 2.16.10, 2.17 through 2.18.4, and 2.20. The vulnerability arises because character handling in the mostfreqthreshold parameter within duplicates.cgi is insufficient, allowing remote attackers to trigger a SQL error. This is documented across multi...

CVE-2007-4539

CVE-2007-4539 concerns Bugzilla’s WebService (XML-RPC) interface. Affected product versions are Bugzilla 2.23.3 through 3.0.0. The root cause is that the XML-RPC interface does not enforce permissions for the time-tracking fields of bugs, enabling a remote attacker to obtain sensitive information...

CVE-2012-4197

CVE-2012-4197 affects Bugzilla’s Attachment.pm in attachment.cgi, allowing remote attackers to read attachment descriptions from private bugs via an obsolete=1 insert action. Affected: Bugzilla 2.x/3.x before 3.6.12, 3.7.x, 4.0.x before 4.0.9, 4.1.x/4.2.x before 4.2.4, and 4.3.x/4.4.x before 4.4r...

CVE-2009-0483

CVE-2009-0483 describes a Cross-site request forgery (CSRF) vulnerability in Bugzilla versions 2.22 before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2. The flaw allows remote attackers to delete keywords and user preferences by delivering a crafted link or IMG tag to editkeyw...

CVE-2002-0810

Bugzilla 2.14 before 2.14.2 and 2.16 before 2.16rc2 contains an information leakage vulnerability in the syncshadowdb command. Error messages are written to HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails. Affected versions should be updat...

CVE-2004-1634

The CVE-2004-1634 entry concerns Bugzilla. Affected versions are Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, where the insidergroup feature and XML export of a bug can reveal private comments and attachment summaries. This exposes sensitive information to remote attackers. The underlying c...

CVE-2009-0482

CVE-2009-0482 is a CSRF vulnerability in Bugzilla affecting versions before 3.2.1, before 3.2. for 3.2-era, and 3.3 before 3.3.2, enabling remote attackers to perform bug-updating actions as other users via a crafted link or IMG tag to process_bug.cgi. Public references in the connected documents...

CVE-2012-4747

Bugzilla vulnerability CVE-2012-4747: Bugzilla 2.x and 3.x (up to 3.6.11), 3.7.x, 4.0.x before 4.0.8, 4.1.x, 4.2.x before 4.2.3, and 4.3.x before 4.3.3 stores potentially sensitive information under the web root due to insufficient access control. This allows remote attackers to read (1) template...

CVE-2004-0702

Bugzilla 2.17.1–2.17.7 is affected by CVE-2004-0702: the DBI layer displays the database password in an error message when the SQL server is not running, enabling potential information disclosure to remote attackers. The issue concerns the Bugzilla CGI/database interaction rather than input valid...

CVE-2012-5884

Technical details for CVE-2012-5884 are not provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2002-0009

In Bugzilla versions before 2.14.1, a user with Bugs Access privileges could trigger information disclosure by submitting a bug and reading the resulting Product pulldown menu, revealing other products not accessible to them. The root cause is insufficient access controls around the Product pulld...

CVE-2002-0011

The CVE refers to Bugzilla, where the doeditvotes.cgi component in versions prior to 2.14.1 has an information leak that could allow remote attackers to more easily conduct attacks on the login. This is a partial confidentiality impact vulnerability (NVD metrics show MEDIUM severity, CVSS v2.0: A...

CVE-2003-1045

CVE-2003-1045 affects Bugzilla: votes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1–2.17.4. The vulnerability lets remote attackers read a user’s voting page if that user voted on a restricted bug, by modifying the who parameter to access potentially sensitive voting information. The underlying ...

CVE-2004-1633

The CVE-2004-1633 issue affects Bugzilla 2.9 through 2.18rc2 and 2.19 from CVS, where process_bug.cgi does not enforce edit permissions on the keywords field. An authenticated remote user can modify a bug’s keywords via the keywordaction parameter. The connection documents confirm the vulnerable ...

CVE-2006-5454

CVE-2006-5454 affects Bugzilla: versions 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3. The vulnerability allows remote attackers to (1) obtain the description of arbitrary attachments by viewing an attachment in diff mode (attachment.cgi), and (2) rea...

CVE-2002-0803

The CVE-2002-0803 issue affects Bugzilla where versions 2.14 before 2.14.2 and 2.16 before 2.16rc2 allow remote attackers to disclose restricted products and components through a direct HTTP request to queryhelp.cgi. Root cause is improper access control on the queryhelp.cgi endpoint, enabling in...

CVE-2005-1565

CVE-2005-1565 affects Bugzilla versions 2.17.1–2.18 and 2.19.1–2.19.2. When a user is prompted to log in while viewing a chart, Bugzilla may display the password in the URL, potentially allowing local users to access sensitive information via web logs or browser history. The provided documents do...

CVE-2005-3139

CVE-2005-3139 affects Bugzilla 2.19.1 through 2.20rc2 and 2.21. When user matching is enabled in substring mode, it can disclose usernames that match an arbitrary substring, even with useVisibilityGroups set. Root cause is substring-based user search bypassing visibility controls, leading to part...

CVE-2005-3138

CVE-2005-3138 affects Bugzilla 2.18rc1–2.18.3, 2.19–2.20rc2, and 2.21. An unauthorized remote attacker can retrieve sensitive information (e.g., the list of installed products) through the config.cgi endpoint, which remains accessible even when the requirelogin parameter is set. The underlying is...