Bugzilla Vulnerabilidad

Cronología

Versión

2.17.1	44
2.14	39
2.14.1	34
2.16	33
2.10	27

Contramedidas

Official Fix	120
Temporary Fix	0
Workaround	2
Unavailable	0
Not Defined	37

Explotabilidad

High	4
Functional	0
Proof-of-Concept	45
Unproven	3
Not Defined	107

Vector de acceso

Not Defined	0
Physical	0
Local	11
Adjacent	1
Network	147

Autenticación

Not Defined	0
High	1
Low	21
None	137

La interacción del usuario

Not Defined	0
Required	61
None	98

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	18
≤5	36
≤6	51
≤7	19
≤8	31
≤9	0
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	28
≤5	46
≤6	45
≤7	33
≤8	3
≤9	0
≤10	4

VulDB

≤1	0
≤2	0
≤3	0
≤4	19
≤5	38
≤6	49
≤7	18
≤8	31
≤9	0
≤10	4

NVD

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	0
≤7	1
≤8	0
≤9	2
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	3
<2k	15
<5k	6
<10k	52
<25k	82
<50k	1
<100k	0
≥100k	0

Explotar hoy

<1k	140
<2k	3
<5k	11
<10k	5
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

Affected Versions (177): 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 2.10, 2.11, 2.12, 2.13, 2.14, 2.14.1, 2.14.2, 2.14.3, 2.14.4, 2.14.5, 2.15, 2.16, 2.16.1, 2.16.2, 2.16.3, 2.16.4, 2.16.5, 2.16.6, 2.16.7, 2.16.8, 2.16.9, 2.16.11, 2.17, 2.17.1, 2.17.2, 2.17.3, 2.17.4, 2.17.5, 2.17.6, 2.17.7, 2.18, 2.18.1, 2.18.2, 2.18.3, 2.18.4, 2.18.5, 2.19, 2.19.1, 2.19.2, 2.19.3, 2.20, 2.20.1, 2.20.2, 2.20.3, 2.20.4, 2.21, 2.21.1, 2.21.2, 2.22, 2.22.1, 2.22.2, 2.22.3, 2.22.4, 2.23, 2.23.1, 2.23.2, 2.23.3, 2.23.4, 3, 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.2, 3.2.1, 3.2.2, 3.2.3, 3.2.4, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.3.4, 3.4, 3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.5, 3.5.1, 3.5.2, 3.5.3, 3.6, 3.6.1, 3.6.2, 3.6.3, 3.6.4, 3.6.5, 3.6.6, 3.6.7, 3.6.8, 3.6.9, 3.6.11, 3.6.12, 3.7, 3.7.1, 3.7.2, 3.7.3, 4, 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.8, 4.0.9, 4.0.11, 4.0.12, 4.0.13, 4.1, 4.1.1, 4.1.2, 4.1.3, 4.2, 4.2.1, 4.2.2, 4.2.3, 4.2.4, 4.2.5, 4.2.6, 4.2.7, 4.2.8, 4.2.9, 4.2.11, 4.2.12, 4.2.13, 4.2.14, 4.3, 4.3.1, 4.3.2, 4.3.3, 4.4, 4.4.1, 4.4.2, 4.4.3, 4.4.4, 4.4.5, 4.4.6, 4.4.7, 4.4.8, 4.4.9, 4.4.11, 4.4.12, 4.4rc1, 4.5, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 5, 5.0, 5.0.1, 5.0.2, 5.0.3

Tipo de software: Bug Tracking Software

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2019-04-04	6.0	6.0	Bugzilla Plugin Global Configuration Credentials escalada de privilegios	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2019-1003066
2018-02-16	6.5	6.4	Bugzilla report.cgi cross site request forgery	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-5123
2017-04-12	5.2	5.1	Bugzilla Dependency Graph cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-2803
2016-01-03	4.1	4.0	Bugzilla CSV File Template.pm divulgación de información	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2015-8509
2016-01-03	4.7	4.6	Bugzilla Bug Summary showdependencygraph.cgi cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2015-8508
2015-09-10	7.3	6.4	Mozilla Bugzilla Email Address Util.pm escalada de privilegios	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00	CVE-2015-4499
2015-02-01	6.3	6.0	Mozilla Bugzilla escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2014-8630
2014-10-06	4.3	4.1	Mozilla Bugzilla cross site scripting	$5k-$25k	$0-$5k	High	Official Fix	0.02	CVE-2014-1573
2014-10-06	5.3	4.6	Mozilla Bugzilla Account Creation escalada de privilegios	$5k-$25k	$0-$5k	Unproven	Official Fix	0.03	CVE-2014-1572
2014-10-06	5.3	4.6	Mozilla Bugzilla Comment divulgación de información	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00	CVE-2014-1571
2014-07-24	4.3	4.1	Mozilla Bugzilla JSONP Endpoint cross site request forgery	$5k-$25k	$0-$5k	High	Official Fix	0.02	CVE-2014-1546
2014-04-18	5.3	4.8	Mozilla Bugzilla Data Display autenticación débil	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2014-1517
2013-10-17	4.3	3.9	Mozilla Bugzilla cross site scripting	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2013-1743
2013-10-17	6.3	5.7	Mozilla Bugzilla editflagtypes.cgi cross site scripting	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2013-1742
2013-10-17	5.4	4.9	Mozilla Bugzilla CSRF Token process_bug.cgi cross site request forgery	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2013-1733
2013-10-17	5.4	4.9	Mozilla Bugzilla CSRF Token attachment.cgi cross site request forgery	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2013-1734
2013-02-24	4.3	4.1	Mozilla Bugzilla Error Message build_subselect divulgación de información	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2013-0786
2013-02-16	6.3	5.7	Bugzilla show_bug.cgi cross site scripting	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2013-0785
2012-11-16	4.3	4.3	Mozilla Bugzilla swfstore.swf cross site scripting	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.05	CVE-2012-5883
2012-11-13	5.3	4.6	Bugzilla code-error.html.tmpl divulgación de información	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2012-4197
2012-11-13	5.5	5.3	Bugzilla report-table.html.tmpl cross site scripting	$0-$5k	$0-$5k	High	Official Fix	0.00	CVE-2012-4189
2012-11-13	5.3	5.1	Bugzilla Custom Field divulgación de información	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2012-4199
2012-11-13	5.3	4.6	Bugzilla User.get divulgación de información	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2012-4198
2012-09-04	5.3	5.3	Mozilla Bugzilla escalada de privilegios	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2012-4747
2012-08-30	6.5	5.9	Mozilla Bugzilla Username Parser search escalada de privilegios	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2012-3981

134 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 134 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!