| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-16d6-e24t-dfb7 |
| vulnerability_id |
VCID-16d6-e24t-dfb7 |
| summary |
Firefox integer underflow in FTP directory list parser |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3384 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01257 |
| scoring_system |
epss |
| scoring_elements |
0.7934 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.01257 |
| scoring_system |
epss |
| scoring_elements |
0.79347 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.01257 |
| scoring_system |
epss |
| scoring_elements |
0.7937 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.01257 |
| scoring_system |
epss |
| scoring_elements |
0.79356 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.01257 |
| scoring_system |
epss |
| scoring_elements |
0.79382 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.01257 |
| scoring_system |
epss |
| scoring_elements |
0.79391 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.01257 |
| scoring_system |
epss |
| scoring_elements |
0.79414 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.01257 |
| scoring_system |
epss |
| scoring_elements |
0.79399 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.01257 |
| scoring_system |
epss |
| scoring_elements |
0.79387 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.01257 |
| scoring_system |
epss |
| scoring_elements |
0.79419 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.01257 |
| scoring_system |
epss |
| scoring_elements |
0.79417 |
| published_at |
2026-04-18T12:55:00Z |
|
| 11 |
| value |
0.01257 |
| scoring_system |
epss |
| scoring_elements |
0.7942 |
| published_at |
2026-04-21T12:55:00Z |
|
| 12 |
| value |
0.01257 |
| scoring_system |
epss |
| scoring_elements |
0.79453 |
| published_at |
2026-04-24T12:55:00Z |
|
| 13 |
| value |
0.01257 |
| scoring_system |
epss |
| scoring_elements |
0.79458 |
| published_at |
2026-04-26T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3384 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3384
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-16d6-e24t-dfb7 |
|
| 1 |
| url |
VCID-2jhf-j64s-gygy |
| vulnerability_id |
VCID-2jhf-j64s-gygy |
| summary |
Security researcher Alin Rad Pop of Secunia
Research reported a heap-based buffer overflow in Mozilla's string to
floating point number conversion routines. Using this vulnerability
an attacker could craft some malicious JavaScript code containing a
very long string to be converted to a floating point number which
would result in improper memory allocation and the execution of an
arbitrary memory location. This vulnerability could thus be leveraged
by the attacker to run arbitrary code on a victim's computer.Update: The underlying flaw in the dtoa routines used
by Mozilla appears to be essentially the same as that reported against the
libc gdtoa routine by Maksymilian Arciemowicz. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-0689 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.4176 |
| scoring_system |
epss |
| scoring_elements |
0.97434 |
| published_at |
2026-04-26T12:55:00Z |
|
| 1 |
| value |
0.4176 |
| scoring_system |
epss |
| scoring_elements |
0.97395 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.4176 |
| scoring_system |
epss |
| scoring_elements |
0.97433 |
| published_at |
2026-04-21T12:55:00Z |
|
| 3 |
| value |
0.4176 |
| scoring_system |
epss |
| scoring_elements |
0.97432 |
| published_at |
2026-04-24T12:55:00Z |
|
| 4 |
| value |
0.4176 |
| scoring_system |
epss |
| scoring_elements |
0.97402 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.4176 |
| scoring_system |
epss |
| scoring_elements |
0.97406 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.4176 |
| scoring_system |
epss |
| scoring_elements |
0.97408 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.4176 |
| scoring_system |
epss |
| scoring_elements |
0.97415 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.4176 |
| scoring_system |
epss |
| scoring_elements |
0.97417 |
| published_at |
2026-04-09T12:55:00Z |
|
| 9 |
| value |
0.4176 |
| scoring_system |
epss |
| scoring_elements |
0.97419 |
| published_at |
2026-04-11T12:55:00Z |
|
| 10 |
| value |
0.4176 |
| scoring_system |
epss |
| scoring_elements |
0.97421 |
| published_at |
2026-04-13T12:55:00Z |
|
| 11 |
| value |
0.4176 |
| scoring_system |
epss |
| scoring_elements |
0.97429 |
| published_at |
2026-04-16T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-0689 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-0689
|
| risk_score |
10.0 |
| exploitability |
2.0 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-2jhf-j64s-gygy |
|
| 2 |
| url |
VCID-4vaj-81k4-n3a6 |
| vulnerability_id |
VCID-4vaj-81k4-n3a6 |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3374 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00887 |
| scoring_system |
epss |
| scoring_elements |
0.75533 |
| published_at |
2026-04-26T12:55:00Z |
|
| 1 |
| value |
0.00887 |
| scoring_system |
epss |
| scoring_elements |
0.75404 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.00887 |
| scoring_system |
epss |
| scoring_elements |
0.75407 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.00887 |
| scoring_system |
epss |
| scoring_elements |
0.75439 |
| published_at |
2026-04-04T12:55:00Z |
|
| 4 |
| value |
0.00887 |
| scoring_system |
epss |
| scoring_elements |
0.75419 |
| published_at |
2026-04-07T12:55:00Z |
|
| 5 |
| value |
0.00887 |
| scoring_system |
epss |
| scoring_elements |
0.75462 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.00887 |
| scoring_system |
epss |
| scoring_elements |
0.75472 |
| published_at |
2026-04-09T12:55:00Z |
|
| 7 |
| value |
0.00887 |
| scoring_system |
epss |
| scoring_elements |
0.75491 |
| published_at |
2026-04-11T12:55:00Z |
|
| 8 |
| value |
0.00887 |
| scoring_system |
epss |
| scoring_elements |
0.7547 |
| published_at |
2026-04-12T12:55:00Z |
|
| 9 |
| value |
0.00887 |
| scoring_system |
epss |
| scoring_elements |
0.75459 |
| published_at |
2026-04-13T12:55:00Z |
|
| 10 |
| value |
0.00887 |
| scoring_system |
epss |
| scoring_elements |
0.75501 |
| published_at |
2026-04-16T12:55:00Z |
|
| 11 |
| value |
0.00887 |
| scoring_system |
epss |
| scoring_elements |
0.75507 |
| published_at |
2026-04-18T12:55:00Z |
|
| 12 |
| value |
0.00887 |
| scoring_system |
epss |
| scoring_elements |
0.75495 |
| published_at |
2026-04-21T12:55:00Z |
|
| 13 |
| value |
0.00887 |
| scoring_system |
epss |
| scoring_elements |
0.75528 |
| published_at |
2026-04-24T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3374 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3374
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-4vaj-81k4-n3a6 |
|
| 3 |
| url |
VCID-58z4-jhs8-kyay |
| vulnerability_id |
VCID-58z4-jhs8-kyay |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3372 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0177 |
| scoring_system |
epss |
| scoring_elements |
0.82719 |
| published_at |
2026-04-26T12:55:00Z |
|
| 1 |
| value |
0.0177 |
| scoring_system |
epss |
| scoring_elements |
0.8258 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.0177 |
| scoring_system |
epss |
| scoring_elements |
0.82595 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.0177 |
| scoring_system |
epss |
| scoring_elements |
0.82611 |
| published_at |
2026-04-04T12:55:00Z |
|
| 4 |
| value |
0.0177 |
| scoring_system |
epss |
| scoring_elements |
0.82607 |
| published_at |
2026-04-07T12:55:00Z |
|
| 5 |
| value |
0.0177 |
| scoring_system |
epss |
| scoring_elements |
0.82633 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.0177 |
| scoring_system |
epss |
| scoring_elements |
0.8264 |
| published_at |
2026-04-09T12:55:00Z |
|
| 7 |
| value |
0.0177 |
| scoring_system |
epss |
| scoring_elements |
0.82658 |
| published_at |
2026-04-11T12:55:00Z |
|
| 8 |
| value |
0.0177 |
| scoring_system |
epss |
| scoring_elements |
0.82652 |
| published_at |
2026-04-12T12:55:00Z |
|
| 9 |
| value |
0.0177 |
| scoring_system |
epss |
| scoring_elements |
0.82647 |
| published_at |
2026-04-13T12:55:00Z |
|
| 10 |
| value |
0.0177 |
| scoring_system |
epss |
| scoring_elements |
0.82685 |
| published_at |
2026-04-18T12:55:00Z |
|
| 11 |
| value |
0.0177 |
| scoring_system |
epss |
| scoring_elements |
0.82688 |
| published_at |
2026-04-21T12:55:00Z |
|
| 12 |
| value |
0.0177 |
| scoring_system |
epss |
| scoring_elements |
0.8271 |
| published_at |
2026-04-24T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3372 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3372
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-58z4-jhs8-kyay |
|
| 4 |
| url |
VCID-5bdt-dd2k-c7gq |
| vulnerability_id |
VCID-5bdt-dd2k-c7gq |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3376 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.03024 |
| scoring_system |
epss |
| scoring_elements |
0.86664 |
| published_at |
2026-04-26T12:55:00Z |
|
| 1 |
| value |
0.03024 |
| scoring_system |
epss |
| scoring_elements |
0.86561 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.03024 |
| scoring_system |
epss |
| scoring_elements |
0.86572 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.03024 |
| scoring_system |
epss |
| scoring_elements |
0.86591 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.03024 |
| scoring_system |
epss |
| scoring_elements |
0.8661 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.03024 |
| scoring_system |
epss |
| scoring_elements |
0.8662 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.03024 |
| scoring_system |
epss |
| scoring_elements |
0.86634 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.03024 |
| scoring_system |
epss |
| scoring_elements |
0.86632 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.03024 |
| scoring_system |
epss |
| scoring_elements |
0.86625 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.03024 |
| scoring_system |
epss |
| scoring_elements |
0.86638 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.03024 |
| scoring_system |
epss |
| scoring_elements |
0.86644 |
| published_at |
2026-04-18T12:55:00Z |
|
| 11 |
| value |
0.03024 |
| scoring_system |
epss |
| scoring_elements |
0.86637 |
| published_at |
2026-04-21T12:55:00Z |
|
| 12 |
| value |
0.03024 |
| scoring_system |
epss |
| scoring_elements |
0.86655 |
| published_at |
2026-04-24T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3376 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3376
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.7 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5bdt-dd2k-c7gq |
|
| 5 |
| url |
VCID-aw3w-yap1-u7cx |
| vulnerability_id |
VCID-aw3w-yap1-u7cx |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3375 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00462 |
| scoring_system |
epss |
| scoring_elements |
0.64255 |
| published_at |
2026-04-26T12:55:00Z |
|
| 1 |
| value |
0.00462 |
| scoring_system |
epss |
| scoring_elements |
0.64102 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.00462 |
| scoring_system |
epss |
| scoring_elements |
0.64158 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.00462 |
| scoring_system |
epss |
| scoring_elements |
0.64186 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00462 |
| scoring_system |
epss |
| scoring_elements |
0.64146 |
| published_at |
2026-04-07T12:55:00Z |
|
| 5 |
| value |
0.00462 |
| scoring_system |
epss |
| scoring_elements |
0.64196 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.00462 |
| scoring_system |
epss |
| scoring_elements |
0.64212 |
| published_at |
2026-04-09T12:55:00Z |
|
| 7 |
| value |
0.00462 |
| scoring_system |
epss |
| scoring_elements |
0.64226 |
| published_at |
2026-04-11T12:55:00Z |
|
| 8 |
| value |
0.00462 |
| scoring_system |
epss |
| scoring_elements |
0.64215 |
| published_at |
2026-04-12T12:55:00Z |
|
| 9 |
| value |
0.00462 |
| scoring_system |
epss |
| scoring_elements |
0.64221 |
| published_at |
2026-04-21T12:55:00Z |
|
| 10 |
| value |
0.00462 |
| scoring_system |
epss |
| scoring_elements |
0.64233 |
| published_at |
2026-04-18T12:55:00Z |
|
| 11 |
| value |
0.00462 |
| scoring_system |
epss |
| scoring_elements |
0.64242 |
| published_at |
2026-04-24T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3375 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3375
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-aw3w-yap1-u7cx |
|
| 6 |
| url |
VCID-b76x-3z8j-4fa9 |
| vulnerability_id |
VCID-b76x-3z8j-4fa9 |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3274 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0014 |
| scoring_system |
epss |
| scoring_elements |
0.33705 |
| published_at |
2026-04-26T12:55:00Z |
|
| 1 |
| value |
0.0014 |
| scoring_system |
epss |
| scoring_elements |
0.33873 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.0014 |
| scoring_system |
epss |
| scoring_elements |
0.34211 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.0014 |
| scoring_system |
epss |
| scoring_elements |
0.34244 |
| published_at |
2026-04-04T12:55:00Z |
|
| 4 |
| value |
0.0014 |
| scoring_system |
epss |
| scoring_elements |
0.34106 |
| published_at |
2026-04-07T12:55:00Z |
|
| 5 |
| value |
0.0014 |
| scoring_system |
epss |
| scoring_elements |
0.34149 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.0014 |
| scoring_system |
epss |
| scoring_elements |
0.34178 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.0014 |
| scoring_system |
epss |
| scoring_elements |
0.34135 |
| published_at |
2026-04-18T12:55:00Z |
|
| 8 |
| value |
0.0014 |
| scoring_system |
epss |
| scoring_elements |
0.34111 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.0014 |
| scoring_system |
epss |
| scoring_elements |
0.34148 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.0014 |
| scoring_system |
epss |
| scoring_elements |
0.341 |
| published_at |
2026-04-21T12:55:00Z |
|
| 11 |
| value |
0.0014 |
| scoring_system |
epss |
| scoring_elements |
0.33727 |
| published_at |
2026-04-24T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3274 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3274
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.7 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-b76x-3z8j-4fa9 |
|
| 7 |
| url |
VCID-h68j-ht6w-jqbm |
| vulnerability_id |
VCID-h68j-ht6w-jqbm |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3373 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.11615 |
| scoring_system |
epss |
| scoring_elements |
0.93684 |
| published_at |
2026-04-26T12:55:00Z |
|
| 1 |
| value |
0.11615 |
| scoring_system |
epss |
| scoring_elements |
0.93616 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.11615 |
| scoring_system |
epss |
| scoring_elements |
0.93625 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.11615 |
| scoring_system |
epss |
| scoring_elements |
0.93634 |
| published_at |
2026-04-04T12:55:00Z |
|
| 4 |
| value |
0.11615 |
| scoring_system |
epss |
| scoring_elements |
0.93636 |
| published_at |
2026-04-07T12:55:00Z |
|
| 5 |
| value |
0.11615 |
| scoring_system |
epss |
| scoring_elements |
0.93645 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.11615 |
| scoring_system |
epss |
| scoring_elements |
0.93647 |
| published_at |
2026-04-09T12:55:00Z |
|
| 7 |
| value |
0.11615 |
| scoring_system |
epss |
| scoring_elements |
0.93651 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.11615 |
| scoring_system |
epss |
| scoring_elements |
0.93652 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.11615 |
| scoring_system |
epss |
| scoring_elements |
0.9367 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.11615 |
| scoring_system |
epss |
| scoring_elements |
0.93677 |
| published_at |
2026-04-18T12:55:00Z |
|
| 11 |
| value |
0.11615 |
| scoring_system |
epss |
| scoring_elements |
0.9368 |
| published_at |
2026-04-21T12:55:00Z |
|
| 12 |
| value |
0.11615 |
| scoring_system |
epss |
| scoring_elements |
0.93685 |
| published_at |
2026-04-24T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3373 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3373
|
| risk_score |
10.0 |
| exploitability |
2.0 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-h68j-ht6w-jqbm |
|
| 8 |
| url |
VCID-nx8g-hhbk-yyep |
| vulnerability_id |
VCID-nx8g-hhbk-yyep |
| summary |
Mozilla upgraded several third party libraries used in media
rendering to address multiple memory safety and stability bugs
identified by members of the Mozilla community. Some of the bugs
discovered could potentially be used by an attacker to crash a
victim's browser and execute arbitrary code on their
computer. liboggz, libvorbis,
and liboggplay were all upgraded to address these
issues.Audio and video capabilities were added in Firefox 3.5
so prior releases of Firefox were not affected. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3370 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00556 |
| scoring_system |
epss |
| scoring_elements |
0.68231 |
| published_at |
2026-04-26T12:55:00Z |
|
| 1 |
| value |
0.00556 |
| scoring_system |
epss |
| scoring_elements |
0.68179 |
| published_at |
2026-04-21T12:55:00Z |
|
| 2 |
| value |
0.00556 |
| scoring_system |
epss |
| scoring_elements |
0.68222 |
| published_at |
2026-04-24T12:55:00Z |
|
| 3 |
| value |
0.00556 |
| scoring_system |
epss |
| scoring_elements |
0.68084 |
| published_at |
2026-04-01T12:55:00Z |
|
| 4 |
| value |
0.00556 |
| scoring_system |
epss |
| scoring_elements |
0.68107 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00556 |
| scoring_system |
epss |
| scoring_elements |
0.68125 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00556 |
| scoring_system |
epss |
| scoring_elements |
0.68102 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00556 |
| scoring_system |
epss |
| scoring_elements |
0.68154 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00556 |
| scoring_system |
epss |
| scoring_elements |
0.68169 |
| published_at |
2026-04-09T12:55:00Z |
|
| 9 |
| value |
0.00556 |
| scoring_system |
epss |
| scoring_elements |
0.68194 |
| published_at |
2026-04-11T12:55:00Z |
|
| 10 |
| value |
0.00556 |
| scoring_system |
epss |
| scoring_elements |
0.6818 |
| published_at |
2026-04-12T12:55:00Z |
|
| 11 |
| value |
0.00556 |
| scoring_system |
epss |
| scoring_elements |
0.68147 |
| published_at |
2026-04-13T12:55:00Z |
|
| 12 |
| value |
0.00556 |
| scoring_system |
epss |
| scoring_elements |
0.68185 |
| published_at |
2026-04-16T12:55:00Z |
|
| 13 |
| value |
0.00556 |
| scoring_system |
epss |
| scoring_elements |
0.68197 |
| published_at |
2026-04-18T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3370 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3370
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nx8g-hhbk-yyep |
|
| 9 |
| url |
VCID-qqg4-kz4u-hbh8 |
| vulnerability_id |
VCID-qqg4-kz4u-hbh8 |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2009-1563
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qqg4-kz4u-hbh8 |
|
| 10 |
| url |
VCID-sua6-rkjm-qyge |
| vulnerability_id |
VCID-sua6-rkjm-qyge |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3382 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.15845 |
| scoring_system |
epss |
| scoring_elements |
0.94761 |
| published_at |
2026-04-26T12:55:00Z |
|
| 1 |
| value |
0.15845 |
| scoring_system |
epss |
| scoring_elements |
0.94709 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.15845 |
| scoring_system |
epss |
| scoring_elements |
0.94717 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.15845 |
| scoring_system |
epss |
| scoring_elements |
0.94721 |
| published_at |
2026-04-04T12:55:00Z |
|
| 4 |
| value |
0.15845 |
| scoring_system |
epss |
| scoring_elements |
0.94723 |
| published_at |
2026-04-07T12:55:00Z |
|
| 5 |
| value |
0.15845 |
| scoring_system |
epss |
| scoring_elements |
0.94733 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.15845 |
| scoring_system |
epss |
| scoring_elements |
0.94737 |
| published_at |
2026-04-09T12:55:00Z |
|
| 7 |
| value |
0.15845 |
| scoring_system |
epss |
| scoring_elements |
0.94741 |
| published_at |
2026-04-11T12:55:00Z |
|
| 8 |
| value |
0.15845 |
| scoring_system |
epss |
| scoring_elements |
0.94745 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.15845 |
| scoring_system |
epss |
| scoring_elements |
0.94754 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.15845 |
| scoring_system |
epss |
| scoring_elements |
0.94757 |
| published_at |
2026-04-18T12:55:00Z |
|
| 11 |
| value |
0.15845 |
| scoring_system |
epss |
| scoring_elements |
0.9476 |
| published_at |
2026-04-24T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3382 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3382
|
| risk_score |
10.0 |
| exploitability |
2.0 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sua6-rkjm-qyge |
|
| 11 |
| url |
VCID-yn4z-ymst-1bew |
| vulnerability_id |
VCID-yn4z-ymst-1bew |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3380 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0364 |
| scoring_system |
epss |
| scoring_elements |
0.87884 |
| published_at |
2026-04-26T12:55:00Z |
|
| 1 |
| value |
0.0364 |
| scoring_system |
epss |
| scoring_elements |
0.87795 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.0364 |
| scoring_system |
epss |
| scoring_elements |
0.87806 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.0364 |
| scoring_system |
epss |
| scoring_elements |
0.87817 |
| published_at |
2026-04-04T12:55:00Z |
|
| 4 |
| value |
0.0364 |
| scoring_system |
epss |
| scoring_elements |
0.8782 |
| published_at |
2026-04-07T12:55:00Z |
|
| 5 |
| value |
0.0364 |
| scoring_system |
epss |
| scoring_elements |
0.87842 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.0364 |
| scoring_system |
epss |
| scoring_elements |
0.87849 |
| published_at |
2026-04-09T12:55:00Z |
|
| 7 |
| value |
0.0364 |
| scoring_system |
epss |
| scoring_elements |
0.8786 |
| published_at |
2026-04-11T12:55:00Z |
|
| 8 |
| value |
0.0364 |
| scoring_system |
epss |
| scoring_elements |
0.87854 |
| published_at |
2026-04-12T12:55:00Z |
|
| 9 |
| value |
0.0364 |
| scoring_system |
epss |
| scoring_elements |
0.87853 |
| published_at |
2026-04-13T12:55:00Z |
|
| 10 |
| value |
0.0364 |
| scoring_system |
epss |
| scoring_elements |
0.87867 |
| published_at |
2026-04-16T12:55:00Z |
|
| 11 |
| value |
0.0364 |
| scoring_system |
epss |
| scoring_elements |
0.87865 |
| published_at |
2026-04-18T12:55:00Z |
|
| 12 |
| value |
0.0364 |
| scoring_system |
epss |
| scoring_elements |
0.87862 |
| published_at |
2026-04-21T12:55:00Z |
|
| 13 |
| value |
0.0364 |
| scoring_system |
epss |
| scoring_elements |
0.87878 |
| published_at |
2026-04-24T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3380 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3380
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-yn4z-ymst-1bew |
|
|