Lookup for vulnerable packages by Package URL.

Purlpkg:rpm/redhat/thunderbird@45.3.0-1?arch=el6_8
Typerpm
Namespaceredhat
Namethunderbird
Version45.3.0-1
Qualifiers
arch el6_8
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-wgxa-54sd-rqd6
vulnerability_id VCID-wgxa-54sd-rqd6
summary
Multiple vulnerabilities have been found in Mozilla Firefox and
    Thunderbird the worst of which could lead to the execution of arbitrary
    code.
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html
2
reference_url http://rhn.redhat.com/errata/RHSA-2016-1551.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2016-1551.html
3
reference_url http://rhn.redhat.com/errata/RHSA-2016-1809.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2016-1809.html
4
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2836.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2836.json
5
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-2836
reference_id
reference_type
scores
0
value 0.00533
scoring_system epss
scoring_elements 0.67304
published_at 2026-04-01T12:55:00Z
1
value 0.00533
scoring_system epss
scoring_elements 0.67404
published_at 2026-04-21T12:55:00Z
2
value 0.00533
scoring_system epss
scoring_elements 0.67413
published_at 2026-04-12T12:55:00Z
3
value 0.00533
scoring_system epss
scoring_elements 0.67379
published_at 2026-04-13T12:55:00Z
4
value 0.00533
scoring_system epss
scoring_elements 0.67415
published_at 2026-04-16T12:55:00Z
5
value 0.00533
scoring_system epss
scoring_elements 0.67427
published_at 2026-04-18T12:55:00Z
6
value 0.00533
scoring_system epss
scoring_elements 0.6734
published_at 2026-04-07T12:55:00Z
7
value 0.00533
scoring_system epss
scoring_elements 0.67363
published_at 2026-04-04T12:55:00Z
8
value 0.00533
scoring_system epss
scoring_elements 0.67391
published_at 2026-04-08T12:55:00Z
9
value 0.00533
scoring_system epss
scoring_elements 0.67405
published_at 2026-04-09T12:55:00Z
10
value 0.00533
scoring_system epss
scoring_elements 0.67425
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-2836
6
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1154923
reference_id
reference_type
scores
url https://bugzilla.mozilla.org/show_bug.cgi?id=1154923
7
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1249578
reference_id
reference_type
scores
url https://bugzilla.mozilla.org/show_bug.cgi?id=1249578
8
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1257765
reference_id
reference_type
scores
url https://bugzilla.mozilla.org/show_bug.cgi?id=1257765
9
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1258079
reference_id
reference_type
scores
url https://bugzilla.mozilla.org/show_bug.cgi?id=1258079
10
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1268626
reference_id
reference_type
scores
url https://bugzilla.mozilla.org/show_bug.cgi?id=1268626
11
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1282502
reference_id
reference_type
scores
url https://bugzilla.mozilla.org/show_bug.cgi?id=1282502
12
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1283823
reference_id
reference_type
scores
url https://bugzilla.mozilla.org/show_bug.cgi?id=1283823
13
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=822081
reference_id
reference_type
scores
url https://bugzilla.mozilla.org/show_bug.cgi?id=822081
14
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
15
reference_url http://www.debian.org/security/2016/dsa-3640
reference_id
reference_type
scores
url http://www.debian.org/security/2016/dsa-3640
16
reference_url http://www.mozilla.org/security/announce/2016/mfsa2016-62.html
reference_id
reference_type
scores
url http://www.mozilla.org/security/announce/2016/mfsa2016-62.html
17
reference_url http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
reference_id
reference_type
scores
url http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
18
reference_url http://www.securityfocus.com/bid/92261
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/92261
19
reference_url http://www.securitytracker.com/id/1036508
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1036508
20
reference_url http://www.ubuntu.com/usn/USN-3044-1
reference_id
reference_type
scores
url http://www.ubuntu.com/usn/USN-3044-1
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1361974
reference_id 1361974
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1361974
22
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
23
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:45.1.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mozilla:firefox:45.1.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:45.1.0:*:*:*:*:*:*:*
24
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:45.1.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mozilla:firefox:45.1.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:45.1.1:*:*:*:*:*:*:*
25
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:45.2.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mozilla:firefox:45.2.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:45.2.0:*:*:*:*:*:*:*
26
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:45.3.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mozilla:firefox:45.3.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:45.3.0:*:*:*:*:*:*:*
27
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2836
reference_id CVE-2016-2836
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2836
28
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-2836
reference_id CVE-2016-2836
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
1
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2016-2836
29
reference_url https://security.gentoo.org/glsa/201701-15
reference_id GLSA-201701-15
reference_type
scores
url https://security.gentoo.org/glsa/201701-15
30
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2016-62
reference_id mfsa2016-62
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2016-62
31
reference_url https://access.redhat.com/errata/RHSA-2016:1551
reference_id RHSA-2016:1551
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1551
32
reference_url https://access.redhat.com/errata/RHSA-2016:1809
reference_id RHSA-2016:1809
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1809
33
reference_url https://usn.ubuntu.com/3044-1/
reference_id USN-3044-1
reference_type
scores
url https://usn.ubuntu.com/3044-1/
34
reference_url https://usn.ubuntu.com/3073-1/
reference_id USN-3073-1
reference_type
scores
url https://usn.ubuntu.com/3073-1/
fixed_packages
aliases CVE-2016-2836
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wgxa-54sd-rqd6
Fixing_vulnerabilities
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:rpm/redhat/thunderbird@45.3.0-1%3Farch=el6_8