Lookup for vulnerable packages by Package URL.

Purlpkg:rpm/redhat/thunderbird@60.2.1-4?arch=el7_5
Typerpm
Namespaceredhat
Namethunderbird
Version60.2.1-4
Qualifiers
arch el7_5
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-3v78-2fyv-tqht
vulnerability_id VCID-3v78-2fyv-tqht
summary
Multiple vulnerabilities have been found in Mozilla Firefox, the
    worst of which may allow execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12385.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12385.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-12385
reference_id
reference_type
scores
0
value 0.0006
scoring_system epss
scoring_elements 0.18639
published_at 2026-04-21T12:55:00Z
1
value 0.0006
scoring_system epss
scoring_elements 0.18758
published_at 2026-04-11T12:55:00Z
2
value 0.0006
scoring_system epss
scoring_elements 0.18711
published_at 2026-04-12T12:55:00Z
3
value 0.0006
scoring_system epss
scoring_elements 0.18662
published_at 2026-04-13T12:55:00Z
4
value 0.0006
scoring_system epss
scoring_elements 0.18608
published_at 2026-04-16T12:55:00Z
5
value 0.0006
scoring_system epss
scoring_elements 0.1862
published_at 2026-04-18T12:55:00Z
6
value 0.0006
scoring_system epss
scoring_elements 0.18707
published_at 2026-04-01T12:55:00Z
7
value 0.0006
scoring_system epss
scoring_elements 0.18845
published_at 2026-04-02T12:55:00Z
8
value 0.0006
scoring_system epss
scoring_elements 0.18898
published_at 2026-04-04T12:55:00Z
9
value 0.0006
scoring_system epss
scoring_elements 0.18619
published_at 2026-04-07T12:55:00Z
10
value 0.0006
scoring_system epss
scoring_elements 0.18698
published_at 2026-04-08T12:55:00Z
11
value 0.0006
scoring_system epss
scoring_elements 0.18753
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-12385
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1632062
reference_id 1632062
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1632062
12
reference_url https://security.archlinux.org/ASA-201810-13
reference_id ASA-201810-13
reference_type
scores
url https://security.archlinux.org/ASA-201810-13
13
reference_url https://security.archlinux.org/AVG-782
reference_id AVG-782
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-782
14
reference_url https://security.gentoo.org/glsa/201811-13
reference_id GLSA-201811-13
reference_type
scores
url https://security.gentoo.org/glsa/201811-13
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-22
reference_id mfsa2018-22
reference_type
scores
0
value none
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-22
16
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-23
reference_id mfsa2018-23
reference_type
scores
0
value none
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-23
17
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-25
reference_id mfsa2018-25
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-25
18
reference_url https://access.redhat.com/errata/RHSA-2018:2834
reference_id RHSA-2018:2834
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2834
19
reference_url https://access.redhat.com/errata/RHSA-2018:2835
reference_id RHSA-2018:2835
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2835
20
reference_url https://access.redhat.com/errata/RHSA-2018:3403
reference_id RHSA-2018:3403
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3403
21
reference_url https://access.redhat.com/errata/RHSA-2018:3458
reference_id RHSA-2018:3458
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3458
22
reference_url https://usn.ubuntu.com/3778-1/
reference_id USN-3778-1
reference_type
scores
url https://usn.ubuntu.com/3778-1/
23
reference_url https://usn.ubuntu.com/3793-1/
reference_id USN-3793-1
reference_type
scores
url https://usn.ubuntu.com/3793-1/
fixed_packages
aliases CVE-2018-12385
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3v78-2fyv-tqht
1
url VCID-bccq-jn4j-8qd8
vulnerability_id VCID-bccq-jn4j-8qd8
summary
Multiple vulnerabilities have been found in Mozilla Firefox, the
    worst of which may allow execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16541.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16541.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-16541
reference_id
reference_type
scores
0
value 0.04526
scoring_system epss
scoring_elements 0.89177
published_at 2026-04-16T12:55:00Z
1
value 0.04526
scoring_system epss
scoring_elements 0.89164
published_at 2026-04-13T12:55:00Z
2
value 0.04526
scoring_system epss
scoring_elements 0.89112
published_at 2026-04-01T12:55:00Z
3
value 0.04526
scoring_system epss
scoring_elements 0.89167
published_at 2026-04-12T12:55:00Z
4
value 0.04526
scoring_system epss
scoring_elements 0.89171
published_at 2026-04-11T12:55:00Z
5
value 0.04526
scoring_system epss
scoring_elements 0.89161
published_at 2026-04-09T12:55:00Z
6
value 0.04526
scoring_system epss
scoring_elements 0.89155
published_at 2026-04-08T12:55:00Z
7
value 0.04526
scoring_system epss
scoring_elements 0.8912
published_at 2026-04-02T12:55:00Z
8
value 0.04526
scoring_system epss
scoring_elements 0.89138
published_at 2026-04-07T12:55:00Z
9
value 0.04526
scoring_system epss
scoring_elements 0.89135
published_at 2026-04-04T12:55:00Z
10
value 0.07687
scoring_system epss
scoring_elements 0.91923
published_at 2026-04-21T12:55:00Z
11
value 0.07687
scoring_system epss
scoring_elements 0.91926
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-16541
2
reference_url https://blog.torproject.org/tor-browser-709-released
reference_id
reference_type
scores
url https://blog.torproject.org/tor-browser-709-released
3
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1412081
reference_id
reference_type
scores
url https://bugzilla.mozilla.org/show_bug.cgi?id=1412081
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499
12
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.6
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:N/A:N
1
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
13
reference_url https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html
14
reference_url https://security.gentoo.org/glsa/201810-01
reference_id
reference_type
scores
url https://security.gentoo.org/glsa/201810-01
15
reference_url https://trac.torproject.org/projects/tor/ticket/24052
reference_id
reference_type
scores
url https://trac.torproject.org/projects/tor/ticket/24052
16
reference_url https://www.bleepingcomputer.com/news/security/tormoil-vulnerability-leaks-real-ip-address-from-tor-browser-users/
reference_id
reference_type
scores
url https://www.bleepingcomputer.com/news/security/tormoil-vulnerability-leaks-real-ip-address-from-tor-browser-users/
17
reference_url https://www.debian.org/security/2018/dsa-4327
reference_id
reference_type
scores
url https://www.debian.org/security/2018/dsa-4327
18
reference_url https://www.wearesegment.com/research/tormoil-torbrowser-unspecified-critical-security-vulnerability/
reference_id
reference_type
scores
url https://www.wearesegment.com/research/tormoil-torbrowser-unspecified-critical-security-vulnerability/
19
reference_url http://www.securityfocus.com/bid/101665
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/101665
20
reference_url http://www.securitytracker.com/id/1041610
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1041610
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1510816
reference_id 1510816
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1510816
22
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*
23
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
reference_id cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
24
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
25
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
26
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
reference_id cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
27
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
28
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
29
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*
30
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*
31
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
32
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
36
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
37
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
38
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
39
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
40
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-16541
reference_id CVE-2017-16541
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:N/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2017-16541
41
reference_url https://security.gentoo.org/glsa/201811-13
reference_id GLSA-201811-13
reference_type
scores
url https://security.gentoo.org/glsa/201811-13
42
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-20
reference_id mfsa2018-20
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-20
43
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-21
reference_id mfsa2018-21
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-21
44
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-25
reference_id mfsa2018-25
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-25
45
reference_url https://access.redhat.com/errata/RHSA-2018:2692
reference_id RHSA-2018:2692
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2692
46
reference_url https://access.redhat.com/errata/RHSA-2018:2693
reference_id RHSA-2018:2693
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2693
47
reference_url https://access.redhat.com/errata/RHSA-2018:3403
reference_id RHSA-2018:3403
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3403
48
reference_url https://access.redhat.com/errata/RHSA-2018:3458
reference_id RHSA-2018:3458
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3458
fixed_packages
aliases CVE-2017-16541
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bccq-jn4j-8qd8
2
url VCID-f4pn-vjxk-ybfx
vulnerability_id VCID-f4pn-vjxk-ybfx
summary
Multiple vulnerabilities have been found in Mozilla Firefox, the
    worst of which may allow execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12379.json
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12379.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-12379
reference_id
reference_type
scores
0
value 0.00098
scoring_system epss
scoring_elements 0.26943
published_at 2026-04-21T12:55:00Z
1
value 0.00098
scoring_system epss
scoring_elements 0.27097
published_at 2026-04-11T12:55:00Z
2
value 0.00098
scoring_system epss
scoring_elements 0.27053
published_at 2026-04-12T12:55:00Z
3
value 0.00098
scoring_system epss
scoring_elements 0.26996
published_at 2026-04-13T12:55:00Z
4
value 0.00098
scoring_system epss
scoring_elements 0.27005
published_at 2026-04-16T12:55:00Z
5
value 0.00098
scoring_system epss
scoring_elements 0.26979
published_at 2026-04-18T12:55:00Z
6
value 0.00098
scoring_system epss
scoring_elements 0.27111
published_at 2026-04-01T12:55:00Z
7
value 0.00098
scoring_system epss
scoring_elements 0.27152
published_at 2026-04-02T12:55:00Z
8
value 0.00098
scoring_system epss
scoring_elements 0.27188
published_at 2026-04-04T12:55:00Z
9
value 0.00098
scoring_system epss
scoring_elements 0.2698
published_at 2026-04-07T12:55:00Z
10
value 0.00098
scoring_system epss
scoring_elements 0.27048
published_at 2026-04-08T12:55:00Z
11
value 0.00098
scoring_system epss
scoring_elements 0.27094
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-12379
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1625528
reference_id 1625528
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1625528
12
reference_url https://security.archlinux.org/ASA-201810-13
reference_id ASA-201810-13
reference_type
scores
url https://security.archlinux.org/ASA-201810-13
13
reference_url https://security.archlinux.org/AVG-782
reference_id AVG-782
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-782
14
reference_url https://security.gentoo.org/glsa/201811-13
reference_id GLSA-201811-13
reference_type
scores
url https://security.gentoo.org/glsa/201811-13
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-20
reference_id mfsa2018-20
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-20
16
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-21
reference_id mfsa2018-21
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-21
17
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-25
reference_id mfsa2018-25
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-25
18
reference_url https://access.redhat.com/errata/RHSA-2018:2692
reference_id RHSA-2018:2692
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2692
19
reference_url https://access.redhat.com/errata/RHSA-2018:2693
reference_id RHSA-2018:2693
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2693
20
reference_url https://access.redhat.com/errata/RHSA-2018:3403
reference_id RHSA-2018:3403
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3403
21
reference_url https://access.redhat.com/errata/RHSA-2018:3458
reference_id RHSA-2018:3458
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3458
fixed_packages
aliases CVE-2018-12379
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f4pn-vjxk-ybfx
3
url VCID-gr1m-pdaw-a3h1
vulnerability_id VCID-gr1m-pdaw-a3h1
summary
Multiple vulnerabilities have been found in Mozilla Firefox, the
    worst of which may allow execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12377.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12377.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-12377
reference_id
reference_type
scores
0
value 0.03107
scoring_system epss
scoring_elements 0.86836
published_at 2026-04-21T12:55:00Z
1
value 0.03107
scoring_system epss
scoring_elements 0.86825
published_at 2026-04-11T12:55:00Z
2
value 0.03107
scoring_system epss
scoring_elements 0.86822
published_at 2026-04-12T12:55:00Z
3
value 0.03107
scoring_system epss
scoring_elements 0.86817
published_at 2026-04-13T12:55:00Z
4
value 0.03107
scoring_system epss
scoring_elements 0.86833
published_at 2026-04-16T12:55:00Z
5
value 0.03107
scoring_system epss
scoring_elements 0.86837
published_at 2026-04-18T12:55:00Z
6
value 0.03107
scoring_system epss
scoring_elements 0.86756
published_at 2026-04-01T12:55:00Z
7
value 0.03107
scoring_system epss
scoring_elements 0.86767
published_at 2026-04-02T12:55:00Z
8
value 0.03107
scoring_system epss
scoring_elements 0.86786
published_at 2026-04-04T12:55:00Z
9
value 0.03107
scoring_system epss
scoring_elements 0.86783
published_at 2026-04-07T12:55:00Z
10
value 0.03107
scoring_system epss
scoring_elements 0.86803
published_at 2026-04-08T12:55:00Z
11
value 0.03107
scoring_system epss
scoring_elements 0.86812
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-12377
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1625526
reference_id 1625526
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1625526
12
reference_url https://security.archlinux.org/ASA-201810-13
reference_id ASA-201810-13
reference_type
scores
url https://security.archlinux.org/ASA-201810-13
13
reference_url https://security.archlinux.org/AVG-782
reference_id AVG-782
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-782
14
reference_url https://security.gentoo.org/glsa/201811-13
reference_id GLSA-201811-13
reference_type
scores
url https://security.gentoo.org/glsa/201811-13
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-20
reference_id mfsa2018-20
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-20
16
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-21
reference_id mfsa2018-21
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-21
17
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-25
reference_id mfsa2018-25
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-25
18
reference_url https://access.redhat.com/errata/RHSA-2018:2692
reference_id RHSA-2018:2692
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2692
19
reference_url https://access.redhat.com/errata/RHSA-2018:2693
reference_id RHSA-2018:2693
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2693
20
reference_url https://access.redhat.com/errata/RHSA-2018:3403
reference_id RHSA-2018:3403
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3403
21
reference_url https://access.redhat.com/errata/RHSA-2018:3458
reference_id RHSA-2018:3458
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3458
22
reference_url https://usn.ubuntu.com/3761-1/
reference_id USN-3761-1
reference_type
scores
url https://usn.ubuntu.com/3761-1/
23
reference_url https://usn.ubuntu.com/3793-1/
reference_id USN-3793-1
reference_type
scores
url https://usn.ubuntu.com/3793-1/
fixed_packages
aliases CVE-2018-12377
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gr1m-pdaw-a3h1
4
url VCID-kbqr-p81f-k3ch
vulnerability_id VCID-kbqr-p81f-k3ch
summary
Multiple vulnerabilities have been found in Mozilla Firefox, the
    worst of which may allow execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12383.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12383.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-12383
reference_id
reference_type
scores
0
value 0.0008
scoring_system epss
scoring_elements 0.23534
published_at 2026-04-21T12:55:00Z
1
value 0.0008
scoring_system epss
scoring_elements 0.23606
published_at 2026-04-12T12:55:00Z
2
value 0.0008
scoring_system epss
scoring_elements 0.2355
published_at 2026-04-13T12:55:00Z
3
value 0.0008
scoring_system epss
scoring_elements 0.23561
published_at 2026-04-16T12:55:00Z
4
value 0.0008
scoring_system epss
scoring_elements 0.23554
published_at 2026-04-18T12:55:00Z
5
value 0.0008
scoring_system epss
scoring_elements 0.23532
published_at 2026-04-01T12:55:00Z
6
value 0.0008
scoring_system epss
scoring_elements 0.23692
published_at 2026-04-02T12:55:00Z
7
value 0.0008
scoring_system epss
scoring_elements 0.23734
published_at 2026-04-04T12:55:00Z
8
value 0.0008
scoring_system epss
scoring_elements 0.23515
published_at 2026-04-07T12:55:00Z
9
value 0.0008
scoring_system epss
scoring_elements 0.23587
published_at 2026-04-08T12:55:00Z
10
value 0.0008
scoring_system epss
scoring_elements 0.23633
published_at 2026-04-09T12:55:00Z
11
value 0.0008
scoring_system epss
scoring_elements 0.23648
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-12383
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1625531
reference_id 1625531
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1625531
11
reference_url https://security.archlinux.org/ASA-201810-13
reference_id ASA-201810-13
reference_type
scores
url https://security.archlinux.org/ASA-201810-13
12
reference_url https://security.archlinux.org/AVG-782
reference_id AVG-782
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-782
13
reference_url https://security.gentoo.org/glsa/201811-13
reference_id GLSA-201811-13
reference_type
scores
url https://security.gentoo.org/glsa/201811-13
14
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-20
reference_id mfsa2018-20
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-20
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-23
reference_id mfsa2018-23
reference_type
scores
0
value none
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-23
16
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-25
reference_id mfsa2018-25
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-25
17
reference_url https://access.redhat.com/errata/RHSA-2018:2834
reference_id RHSA-2018:2834
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2834
18
reference_url https://access.redhat.com/errata/RHSA-2018:2835
reference_id RHSA-2018:2835
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2835
19
reference_url https://access.redhat.com/errata/RHSA-2018:3403
reference_id RHSA-2018:3403
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3403
20
reference_url https://access.redhat.com/errata/RHSA-2018:3458
reference_id RHSA-2018:3458
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3458
21
reference_url https://usn.ubuntu.com/3761-1/
reference_id USN-3761-1
reference_type
scores
url https://usn.ubuntu.com/3761-1/
22
reference_url https://usn.ubuntu.com/3793-1/
reference_id USN-3793-1
reference_type
scores
url https://usn.ubuntu.com/3793-1/
fixed_packages
aliases CVE-2018-12383
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kbqr-p81f-k3ch
5
url VCID-pryc-r9jn-9bds
vulnerability_id VCID-pryc-r9jn-9bds
summary
Multiple vulnerabilities have been found in Mozilla Firefox, the
    worst of which may allow execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12378.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12378.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-12378
reference_id
reference_type
scores
0
value 0.03107
scoring_system epss
scoring_elements 0.86836
published_at 2026-04-21T12:55:00Z
1
value 0.03107
scoring_system epss
scoring_elements 0.86825
published_at 2026-04-11T12:55:00Z
2
value 0.03107
scoring_system epss
scoring_elements 0.86822
published_at 2026-04-12T12:55:00Z
3
value 0.03107
scoring_system epss
scoring_elements 0.86817
published_at 2026-04-13T12:55:00Z
4
value 0.03107
scoring_system epss
scoring_elements 0.86833
published_at 2026-04-16T12:55:00Z
5
value 0.03107
scoring_system epss
scoring_elements 0.86837
published_at 2026-04-18T12:55:00Z
6
value 0.03107
scoring_system epss
scoring_elements 0.86756
published_at 2026-04-01T12:55:00Z
7
value 0.03107
scoring_system epss
scoring_elements 0.86767
published_at 2026-04-02T12:55:00Z
8
value 0.03107
scoring_system epss
scoring_elements 0.86786
published_at 2026-04-04T12:55:00Z
9
value 0.03107
scoring_system epss
scoring_elements 0.86783
published_at 2026-04-07T12:55:00Z
10
value 0.03107
scoring_system epss
scoring_elements 0.86803
published_at 2026-04-08T12:55:00Z
11
value 0.03107
scoring_system epss
scoring_elements 0.86812
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-12378
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1625527
reference_id 1625527
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1625527
12
reference_url https://security.archlinux.org/ASA-201810-13
reference_id ASA-201810-13
reference_type
scores
url https://security.archlinux.org/ASA-201810-13
13
reference_url https://security.archlinux.org/AVG-782
reference_id AVG-782
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-782
14
reference_url https://security.gentoo.org/glsa/201811-13
reference_id GLSA-201811-13
reference_type
scores
url https://security.gentoo.org/glsa/201811-13
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-20
reference_id mfsa2018-20
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-20
16
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-21
reference_id mfsa2018-21
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-21
17
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-25
reference_id mfsa2018-25
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-25
18
reference_url https://access.redhat.com/errata/RHSA-2018:2692
reference_id RHSA-2018:2692
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2692
19
reference_url https://access.redhat.com/errata/RHSA-2018:2693
reference_id RHSA-2018:2693
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2693
20
reference_url https://access.redhat.com/errata/RHSA-2018:3403
reference_id RHSA-2018:3403
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3403
21
reference_url https://access.redhat.com/errata/RHSA-2018:3458
reference_id RHSA-2018:3458
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3458
22
reference_url https://usn.ubuntu.com/3761-1/
reference_id USN-3761-1
reference_type
scores
url https://usn.ubuntu.com/3761-1/
23
reference_url https://usn.ubuntu.com/3793-1/
reference_id USN-3793-1
reference_type
scores
url https://usn.ubuntu.com/3793-1/
fixed_packages
aliases CVE-2018-12378
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pryc-r9jn-9bds
6
url VCID-rhdv-jxvv-5yb2
vulnerability_id VCID-rhdv-jxvv-5yb2
summary A same-origin policy violation allowing the theft of cross-origin URL entries when using a <meta> meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18499.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18499.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-18499
reference_id
reference_type
scores
0
value 0.0012
scoring_system epss
scoring_elements 0.30865
published_at 2026-04-21T12:55:00Z
1
value 0.0012
scoring_system epss
scoring_elements 0.30899
published_at 2026-04-18T12:55:00Z
2
value 0.00198
scoring_system epss
scoring_elements 0.41817
published_at 2026-04-07T12:55:00Z
3
value 0.00198
scoring_system epss
scoring_elements 0.41794
published_at 2026-04-01T12:55:00Z
4
value 0.00198
scoring_system epss
scoring_elements 0.41877
published_at 2026-04-09T12:55:00Z
5
value 0.00198
scoring_system epss
scoring_elements 0.41901
published_at 2026-04-11T12:55:00Z
6
value 0.00198
scoring_system epss
scoring_elements 0.41866
published_at 2026-04-12T12:55:00Z
7
value 0.00198
scoring_system epss
scoring_elements 0.41853
published_at 2026-04-13T12:55:00Z
8
value 0.00198
scoring_system epss
scoring_elements 0.41903
published_at 2026-04-16T12:55:00Z
9
value 0.00198
scoring_system epss
scoring_elements 0.41859
published_at 2026-04-02T12:55:00Z
10
value 0.00198
scoring_system epss
scoring_elements 0.41889
published_at 2026-04-04T12:55:00Z
11
value 0.00198
scoring_system epss
scoring_elements 0.41867
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-18499
2
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1468523
reference_id
reference_type
scores
url https://bugzilla.mozilla.org/show_bug.cgi?id=1468523
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499
11
reference_url https://www.mozilla.org/security/advisories/mfsa2018-20/
reference_id
reference_type
scores
url https://www.mozilla.org/security/advisories/mfsa2018-20/
12
reference_url https://www.mozilla.org/security/advisories/mfsa2018-21/
reference_id
reference_type
scores
url https://www.mozilla.org/security/advisories/mfsa2018-21/
13
reference_url https://www.mozilla.org/security/advisories/mfsa2018-25/
reference_id
reference_type
scores
url https://www.mozilla.org/security/advisories/mfsa2018-25/
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1849971
reference_id 1849971
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1849971
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-18499
reference_id CVE-2018-18499
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:N/A:N
1
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2018-18499
19
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-20
reference_id mfsa2018-20
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-20
20
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-21
reference_id mfsa2018-21
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-21
21
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-25
reference_id mfsa2018-25
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-25
22
reference_url https://access.redhat.com/errata/RHSA-2018:2692
reference_id RHSA-2018:2692
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2692
23
reference_url https://access.redhat.com/errata/RHSA-2018:2693
reference_id RHSA-2018:2693
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2693
24
reference_url https://access.redhat.com/errata/RHSA-2018:3403
reference_id RHSA-2018:3403
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3403
25
reference_url https://access.redhat.com/errata/RHSA-2018:3458
reference_id RHSA-2018:3458
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3458
fixed_packages
aliases CVE-2018-18499
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rhdv-jxvv-5yb2
7
url VCID-wj3c-xpra-vffj
vulnerability_id VCID-wj3c-xpra-vffj
summary
Multiple vulnerabilities have been found in Mozilla Firefox, the
    worst of which may allow execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12376.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12376.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-12376
reference_id
reference_type
scores
0
value 0.03107
scoring_system epss
scoring_elements 0.86836
published_at 2026-04-21T12:55:00Z
1
value 0.03107
scoring_system epss
scoring_elements 0.86825
published_at 2026-04-11T12:55:00Z
2
value 0.03107
scoring_system epss
scoring_elements 0.86822
published_at 2026-04-12T12:55:00Z
3
value 0.03107
scoring_system epss
scoring_elements 0.86817
published_at 2026-04-13T12:55:00Z
4
value 0.03107
scoring_system epss
scoring_elements 0.86833
published_at 2026-04-16T12:55:00Z
5
value 0.03107
scoring_system epss
scoring_elements 0.86837
published_at 2026-04-18T12:55:00Z
6
value 0.03107
scoring_system epss
scoring_elements 0.86756
published_at 2026-04-01T12:55:00Z
7
value 0.03107
scoring_system epss
scoring_elements 0.86767
published_at 2026-04-02T12:55:00Z
8
value 0.03107
scoring_system epss
scoring_elements 0.86786
published_at 2026-04-04T12:55:00Z
9
value 0.03107
scoring_system epss
scoring_elements 0.86783
published_at 2026-04-07T12:55:00Z
10
value 0.03107
scoring_system epss
scoring_elements 0.86803
published_at 2026-04-08T12:55:00Z
11
value 0.03107
scoring_system epss
scoring_elements 0.86812
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-12376
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1625525
reference_id 1625525
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1625525
12
reference_url https://security.archlinux.org/ASA-201810-13
reference_id ASA-201810-13
reference_type
scores
url https://security.archlinux.org/ASA-201810-13
13
reference_url https://security.archlinux.org/AVG-782
reference_id AVG-782
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-782
14
reference_url https://security.gentoo.org/glsa/201811-13
reference_id GLSA-201811-13
reference_type
scores
url https://security.gentoo.org/glsa/201811-13
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-20
reference_id mfsa2018-20
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-20
16
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-21
reference_id mfsa2018-21
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-21
17
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-25
reference_id mfsa2018-25
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-25
18
reference_url https://access.redhat.com/errata/RHSA-2018:2692
reference_id RHSA-2018:2692
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2692
19
reference_url https://access.redhat.com/errata/RHSA-2018:2693
reference_id RHSA-2018:2693
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2693
20
reference_url https://access.redhat.com/errata/RHSA-2018:3403
reference_id RHSA-2018:3403
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3403
21
reference_url https://access.redhat.com/errata/RHSA-2018:3458
reference_id RHSA-2018:3458
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3458
22
reference_url https://usn.ubuntu.com/3761-1/
reference_id USN-3761-1
reference_type
scores
url https://usn.ubuntu.com/3761-1/
23
reference_url https://usn.ubuntu.com/3793-1/
reference_id USN-3793-1
reference_type
scores
url https://usn.ubuntu.com/3793-1/
fixed_packages
aliases CVE-2018-12376
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wj3c-xpra-vffj
Fixing_vulnerabilities
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:rpm/redhat/thunderbird@60.2.1-4%3Farch=el7_5