Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/187124?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/187124?format=api", "purl": "pkg:rpm/redhat/thunderbird@1.5.0.10-1?arch=el5", "type": "rpm", "namespace": "redhat", "name": "thunderbird", "version": "1.5.0.10-1", "qualifiers": { "arch": "el5" }, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3135?format=api", "vulnerability_id": "VCID-14af-4kn2-zbde", "summary": "iDefense \nhas informed Mozilla about two potential buffer overflow\nvulnerabilities found by researcher regenrecht\nin the Network Security Services (NSS) code for processing \nthe SSLv2 protocol.SSL clients such as Firefox and Thunderbird can suffer\na buffer overflow if a malicious server presents a certificate\nwith a public key that is too small to encrypt the entire\n\"Master Secret\". Exploiting this overflow appears to be\nunreliable but possible if the SSLv2 protocol is enabled.Servers that use NSS \nfor the SSLv2 protocol can be exploited by\na client that presents a \"Client Master Key\" with invalid length\nvalues in any of several fields that are used without adequate\nerror checking. This can lead to a buffer overflow that\npresumably could be exploitable.Support for SSLv2 is disabled in Firefox 2 due to other known\nweaknesses in the protocol; Firefox 2 is not vulnerable unless\nthe user has modified hidden internal NSS settings to\nre-enable SSLv2 support.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0009.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0009.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0009", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.49542", "scoring_system": "epss", "scoring_elements": "0.97852", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.49542", "scoring_system": "epss", "scoring_elements": "0.97856", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0009" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=565576", "reference_id": "565576", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=565576" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0009", "reference_id": "CVE-2007-0009", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0009" }, { "reference_url": "https://security.gentoo.org/glsa/200703-18", "reference_id": "GLSA-200703-18", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-18" }, { "reference_url": "https://security.gentoo.org/glsa/200703-22", "reference_id": "GLSA-200703-22", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-22" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-06", "reference_id": "mfsa2007-06", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-06" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0077", "reference_id": "RHSA-2007:0077", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0077" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0078", "reference_id": "RHSA-2007:0078", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0078" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0079", "reference_id": "RHSA-2007:0079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0097", "reference_id": "RHSA-2007:0097", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0097" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0108", "reference_id": "RHSA-2007:0108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0108" }, { "reference_url": "https://usn.ubuntu.com/428-1/", "reference_id": "USN-428-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/428-1/" }, { "reference_url": "https://usn.ubuntu.com/431-1/", "reference_id": "USN-431-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/431-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2007-0009" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-14af-4kn2-zbde" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3134?format=api", "vulnerability_id": "VCID-1j51-1nhr-53fd", "summary": "iDefense \nhas informed Mozilla about two potential buffer overflow\nvulnerabilities found by researcher regenrecht\nin the Network Security Services (NSS) code for processing \nthe SSLv2 protocol.SSL clients such as Firefox and Thunderbird can suffer\na buffer overflow if a malicious server presents a certificate\nwith a public key that is too small to encrypt the entire\n\"Master Secret\". Exploiting this overflow appears to be\nunreliable but possible if the SSLv2 protocol is enabled.Servers that use NSS \nfor the SSLv2 protocol can be exploited by\na client that presents a \"Client Master Key\" with invalid length\nvalues in any of several fields that are used without adequate\nerror checking. This can lead to a buffer overflow that\npresumably could be exploitable.Support for SSLv2 is disabled in Firefox 2 due to other known\nweaknesses in the protocol; Firefox 2 is not vulnerable unless\nthe user has modified hidden internal NSS settings to\nre-enable SSLv2 support.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0008.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0008.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0008", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.17415", "scoring_system": "epss", "scoring_elements": "0.95191", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.17415", "scoring_system": "epss", "scoring_elements": "0.95199", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0008" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=565576", "reference_id": "565576", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=565576" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0008", "reference_id": "CVE-2007-0008", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0008" }, { "reference_url": "https://security.gentoo.org/glsa/200703-18", "reference_id": "GLSA-200703-18", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-18" }, { "reference_url": "https://security.gentoo.org/glsa/200703-22", "reference_id": "GLSA-200703-22", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-22" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-06", "reference_id": "mfsa2007-06", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-06" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0077", "reference_id": "RHSA-2007:0077", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0077" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0078", "reference_id": "RHSA-2007:0078", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0078" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0079", "reference_id": "RHSA-2007:0079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0097", "reference_id": "RHSA-2007:0097", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0097" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0108", "reference_id": "RHSA-2007:0108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0108" }, { "reference_url": "https://usn.ubuntu.com/428-1/", "reference_id": "USN-428-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/428-1/" }, { "reference_url": "https://usn.ubuntu.com/431-1/", "reference_id": "USN-431-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/431-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2007-0008" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1j51-1nhr-53fd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3101?format=api", "vulnerability_id": "VCID-94fg-bbsu-nfbk", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0995.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0995.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0995", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02184", "scoring_system": "epss", "scoring_elements": "0.84674", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.02184", "scoring_system": "epss", "scoring_elements": "0.84698", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0995" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618287", "reference_id": "1618287", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618287" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0995", "reference_id": "CVE-2007-0995", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0995" }, { "reference_url": "https://security.gentoo.org/glsa/200703-04", "reference_id": "GLSA-200703-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-04" }, { "reference_url": "https://security.gentoo.org/glsa/200703-08", "reference_id": "GLSA-200703-08", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-08" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-02", "reference_id": "mfsa2007-02", "reference_type": "", "scores": [ { "value": "low", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0077", "reference_id": "RHSA-2007:0077", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0077" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0078", "reference_id": "RHSA-2007:0078", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0078" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0079", "reference_id": "RHSA-2007:0079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0097", "reference_id": "RHSA-2007:0097", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0097" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0108", "reference_id": "RHSA-2007:0108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0108" }, { "reference_url": "https://usn.ubuntu.com/428-1/", "reference_id": "USN-428-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/428-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2007-0995" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-94fg-bbsu-nfbk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3136?format=api", "vulnerability_id": "VCID-f2kp-75dy-juep", "summary": "Michal Zalewski demonstrated that setting location.hostname\nto a value with embedded null characters can confuse the browsers domain\nchecks. Setting the value triggers a load, but the networking software reads\nthe hostname only up to the null character while other checks for \"parent\ndomain\" start at the right and so can have a completely different idea of what\nthe current host is.This cannot be used for a direct same-origin violation to perform cross-site\nscripting: those checks are performed on the complete hostname including\nthe nulls. However, other mechanisms rely on matching parent domains and those\ncan be fooled by this trick. For example, this flaw allows a malicious page\nto set domain cookies for any arbitrary site, which might be useful in a\nsession-fixation attack. This also allows setting document.domain to any\narbitrary value which could be used to perform a cross-site scripting\nattack against any page which also sets document.domain.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0981.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0981.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0981", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.16432", "scoring_system": "epss", "scoring_elements": "0.95002", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.16432", "scoring_system": "epss", "scoring_elements": "0.95011", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0981" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=229253", "reference_id": "229253", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=229253" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0981", "reference_id": "CVE-2007-0981", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0981" }, { "reference_url": "https://security.gentoo.org/glsa/200703-04", "reference_id": "GLSA-200703-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-04" }, { "reference_url": "https://security.gentoo.org/glsa/200703-08", "reference_id": "GLSA-200703-08", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-08" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-07", "reference_id": "mfsa2007-07", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-07" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/3340.html", "reference_id": "OSVDB-32104;CVE-2007-0981", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/3340.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0077", "reference_id": "RHSA-2007:0077", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0077" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0078", "reference_id": "RHSA-2007:0078", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0078" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0079", "reference_id": "RHSA-2007:0079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0097", "reference_id": "RHSA-2007:0097", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0097" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0108", "reference_id": "RHSA-2007:0108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0108" }, { "reference_url": "https://usn.ubuntu.com/428-1/", "reference_id": "USN-428-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/428-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2007-0981" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-f2kp-75dy-juep" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3140?format=api", "vulnerability_id": "VCID-ffnp-4cx7-4ucu", "summary": "Aad reported that two web pages can collide in the disk cache\nwith the result that depending on order loaded the end of the longer\ndocument can be appended to the shorter when the shorter is reloaded from\nthe cache. It is possible a determined hacker could construct a targeted\nattack to steal some sensitive data from a particular web page (for example,\ntransaction history from a financial account). The potential victim would\nhave to be already logged into the targeted service (or be fooled into doing\nso) and then visit the malicious site.We have not calculated how much effort would be required to compute a colliding\nURL on a different host from the target page.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0778.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0778.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0778", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0112", "scoring_system": "epss", "scoring_elements": "0.78578", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0112", "scoring_system": "epss", "scoring_elements": "0.78605", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0778" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618276", "reference_id": "1618276", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618276" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0778", "reference_id": "CVE-2007-0778", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0778" }, { "reference_url": "https://security.gentoo.org/glsa/200703-04", "reference_id": "GLSA-200703-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-04" }, { "reference_url": "https://security.gentoo.org/glsa/200703-08", "reference_id": "GLSA-200703-08", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-08" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-03", "reference_id": "mfsa2007-03", "reference_type": "", "scores": [ { "value": "none", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-03" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0077", "reference_id": "RHSA-2007:0077", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0077" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0078", "reference_id": "RHSA-2007:0078", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0078" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0079", "reference_id": "RHSA-2007:0079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0097", "reference_id": "RHSA-2007:0097", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0097" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0108", "reference_id": "RHSA-2007:0108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0108" }, { "reference_url": "https://usn.ubuntu.com/428-1/", "reference_id": "USN-428-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/428-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2007-0778" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ffnp-4cx7-4ucu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3107?format=api", "vulnerability_id": "VCID-gpay-hcxj-3uf7", "summary": "As part of the Firefox 2.0.0.2 and 1.5.0.10 update releases we fixed\nseveral bugs to improve the stability of the product. Some of these were\ncrashes that showed evidence of memory corruption and we presume that\nwith enough effort at least some of these could be exploited to run\narbitrary code.Thunderbird shares the browser engine with Firefox\nand could be vulnerable if JavaScript were to be enabled in\nmail. This is not the default setting and we strongly discourage users from\nrunning JavaScript in mail. Without further investigation we cannot rule out\nthe possibility that for some of these an attacker might be able to prepare\nmemory for exploitation through some means other than JavaScript, such as\nlarge images.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0777.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0777.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0777", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.42764", "scoring_system": "epss", "scoring_elements": "0.97545", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.42764", "scoring_system": "epss", "scoring_elements": "0.9755", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0777" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618275", "reference_id": "1618275", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0777", "reference_id": "CVE-2007-0777", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0777" }, { "reference_url": "https://security.gentoo.org/glsa/200703-04", "reference_id": "GLSA-200703-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-04" }, { "reference_url": "https://security.gentoo.org/glsa/200703-08", "reference_id": "GLSA-200703-08", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-08" }, { "reference_url": "https://security.gentoo.org/glsa/200703-18", "reference_id": "GLSA-200703-18", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-18" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-01", "reference_id": "mfsa2007-01", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-01" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0077", "reference_id": "RHSA-2007:0077", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0077" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0078", "reference_id": "RHSA-2007:0078", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0078" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0079", "reference_id": "RHSA-2007:0079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0097", "reference_id": "RHSA-2007:0097", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0097" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0108", "reference_id": "RHSA-2007:0108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0108" }, { "reference_url": "https://usn.ubuntu.com/428-1/", "reference_id": "USN-428-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/428-1/" }, { "reference_url": "https://usn.ubuntu.com/431-1/", "reference_id": "USN-431-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/431-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2007-0777" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gpay-hcxj-3uf7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/117343?format=api", "vulnerability_id": "VCID-j9da-akma-yfbq", "summary": "security flaw", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1282.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1282.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-1282", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03431", "scoring_system": "epss", "scoring_elements": "0.87687", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.03431", "scoring_system": "epss", "scoring_elements": "0.87708", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-1282" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618295", "reference_id": "1618295", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618295" }, { "reference_url": "https://security.gentoo.org/glsa/200703-18", "reference_id": "GLSA-200703-18", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-18" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0077", "reference_id": "RHSA-2007:0077", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0077" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0078", "reference_id": "RHSA-2007:0078", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0078" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0108", "reference_id": "RHSA-2007:0108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0108" } ], "fixed_packages": [], "aliases": [ "CVE-2007-1282" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j9da-akma-yfbq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3102?format=api", "vulnerability_id": "VCID-k47t-q8b3-7uer", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0996.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0996.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0996", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02609", "scoring_system": "epss", "scoring_elements": "0.85917", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.02609", "scoring_system": "epss", "scoring_elements": "0.85939", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0996" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618288", "reference_id": "1618288", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618288" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0996", "reference_id": "CVE-2007-0996", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0996" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-02", "reference_id": "mfsa2007-02", "reference_type": "", "scores": [ { "value": "low", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0077", "reference_id": "RHSA-2007:0077", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0077" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0078", "reference_id": "RHSA-2007:0078", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0078" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0079", "reference_id": "RHSA-2007:0079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0097", "reference_id": "RHSA-2007:0097", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0097" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0108", "reference_id": "RHSA-2007:0108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0108" }, { "reference_url": "https://usn.ubuntu.com/428-1/", "reference_id": "USN-428-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/428-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2007-0996" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k47t-q8b3-7uer" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3129?format=api", "vulnerability_id": "VCID-ppd4-9vpc-rkg4", "summary": "shutdown reported that if you could convince a user to\nopen a blocked popup you could perform a cross-site scripting attack against\nany site that contains a frame whose source is a data: URL. To accomplish this\nthe attacker's site would have to frame the target site plus another frame\nwhose source is the exact same data: url as the victim site, and then\nattempt to open a popup with a javascript: url from the data: frame. It is\nunclear whether any high-value target sites that match this description\nactually exist.Similarly, Michal Zalewski reported that although pages\nloaded from the web normally cannot open windows containing local files,\nif you could convince a user to open a blocked popup then this restriction\ncould be bypassed. In order to take advantage of this flaw the attacker\nwould have to know the full path to a locally-saved file containing\nmalicious script. He also reported that a flaw in the seeding of the\npseudo-random number generator resulted in downloaded files being\nsaved to temporary files with a reasonably predictable name. The two combined\ncould be used to steal information saved on the local disk.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0780.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0780.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0780", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02238", "scoring_system": "epss", "scoring_elements": "0.84857", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.02238", "scoring_system": "epss", "scoring_elements": "0.8488", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0780" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618278", "reference_id": "1618278", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618278" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0780", "reference_id": "CVE-2007-0780", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0780" }, { "reference_url": "https://security.gentoo.org/glsa/200703-04", "reference_id": "GLSA-200703-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-04" }, { "reference_url": "https://security.gentoo.org/glsa/200703-08", "reference_id": "GLSA-200703-08", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-08" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-05", "reference_id": "mfsa2007-05", "reference_type": "", "scores": [ { "value": "none", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0077", "reference_id": "RHSA-2007:0077", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0077" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0078", "reference_id": "RHSA-2007:0078", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0078" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0079", "reference_id": "RHSA-2007:0079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0097", "reference_id": "RHSA-2007:0097", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0097" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0108", "reference_id": "RHSA-2007:0108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0108" }, { "reference_url": "https://usn.ubuntu.com/428-1/", "reference_id": "USN-428-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/428-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2007-0780" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ppd4-9vpc-rkg4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3105?format=api", "vulnerability_id": "VCID-rxjp-56cu-r7c2", "summary": "As part of the Firefox 2.0.0.2 and 1.5.0.10 update releases we fixed\nseveral bugs to improve the stability of the product. Some of these were\ncrashes that showed evidence of memory corruption and we presume that\nwith enough effort at least some of these could be exploited to run\narbitrary code.Thunderbird shares the browser engine with Firefox\nand could be vulnerable if JavaScript were to be enabled in\nmail. This is not the default setting and we strongly discourage users from\nrunning JavaScript in mail. Without further investigation we cannot rule out\nthe possibility that for some of these an attacker might be able to prepare\nmemory for exploitation through some means other than JavaScript, such as\nlarge images.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0775.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0775.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0775", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.21003", "scoring_system": "epss", "scoring_elements": "0.9575", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.21003", "scoring_system": "epss", "scoring_elements": "0.95755", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0775" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618273", "reference_id": "1618273", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618273" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0775", "reference_id": "CVE-2007-0775", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0775" }, { "reference_url": "https://security.gentoo.org/glsa/200703-04", "reference_id": "GLSA-200703-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-04" }, { "reference_url": "https://security.gentoo.org/glsa/200703-08", "reference_id": "GLSA-200703-08", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-08" }, { "reference_url": "https://security.gentoo.org/glsa/200703-18", "reference_id": "GLSA-200703-18", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-18" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-01", "reference_id": "mfsa2007-01", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-01" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0077", "reference_id": "RHSA-2007:0077", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0077" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0078", "reference_id": "RHSA-2007:0078", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0078" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0079", "reference_id": "RHSA-2007:0079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0097", "reference_id": "RHSA-2007:0097", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0097" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0108", "reference_id": "RHSA-2007:0108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0108" }, { "reference_url": "https://usn.ubuntu.com/428-1/", "reference_id": "USN-428-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/428-1/" }, { "reference_url": "https://usn.ubuntu.com/431-1/", "reference_id": "USN-431-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/431-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2007-0775" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rxjp-56cu-r7c2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3115?format=api", "vulnerability_id": "VCID-t7af-aka8-jyhj", "summary": "David Eckel reported that browser UI elements--such as the host name\nand security indicators--could be spoofed by using a large, mostly\ntransparent, custom cursor and adjusting the CSS3 hotspot property\nso that the visible part of the cursor floated outside the browser\ncontent area.This feature was introduced in Firefox 1.5 and does not affect products\nbased on Mozilla 1.7 or earlier such as Firefox 1.0", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0779.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0779.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0779", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.04122", "scoring_system": "epss", "scoring_elements": "0.88824", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.04122", "scoring_system": "epss", "scoring_elements": "0.88842", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0779" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618277", "reference_id": "1618277", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618277" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0779", "reference_id": "CVE-2007-0779", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0779" }, { "reference_url": "https://security.gentoo.org/glsa/200703-04", "reference_id": "GLSA-200703-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-04" }, { "reference_url": "https://security.gentoo.org/glsa/200703-08", "reference_id": "GLSA-200703-08", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-08" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-04", "reference_id": "mfsa2007-04", "reference_type": "", "scores": [ { "value": "low", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-04" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0077", "reference_id": "RHSA-2007:0077", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0077" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0078", "reference_id": "RHSA-2007:0078", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0078" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0079", "reference_id": "RHSA-2007:0079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0097", "reference_id": "RHSA-2007:0097", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0097" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0108", "reference_id": "RHSA-2007:0108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0108" }, { "reference_url": "https://usn.ubuntu.com/428-1/", "reference_id": "USN-428-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/428-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2007-0779" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-t7af-aka8-jyhj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3130?format=api", "vulnerability_id": "VCID-w2zu-gxse-cff6", "summary": "shutdown reported that if you could convince a user to\nopen a blocked popup you could perform a cross-site scripting attack against\nany site that contains a frame whose source is a data: URL. To accomplish this\nthe attacker's site would have to frame the target site plus another frame\nwhose source is the exact same data: url as the victim site, and then\nattempt to open a popup with a javascript: url from the data: frame. It is\nunclear whether any high-value target sites that match this description\nactually exist.Similarly, Michal Zalewski reported that although pages\nloaded from the web normally cannot open windows containing local files,\nif you could convince a user to open a blocked popup then this restriction\ncould be bypassed. In order to take advantage of this flaw the attacker\nwould have to know the full path to a locally-saved file containing\nmalicious script. He also reported that a flaw in the seeding of the\npseudo-random number generator resulted in downloaded files being\nsaved to temporary files with a reasonably predictable name. The two combined\ncould be used to steal information saved on the local disk.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0800.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0800.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0800", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.04655", "scoring_system": "epss", "scoring_elements": "0.89493", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.04655", "scoring_system": "epss", "scoring_elements": "0.89511", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-0800" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618279", "reference_id": "1618279", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618279" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0800", "reference_id": "CVE-2007-0800", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0800" }, { "reference_url": "https://security.gentoo.org/glsa/200703-04", "reference_id": "GLSA-200703-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-04" }, { "reference_url": "https://security.gentoo.org/glsa/200703-08", "reference_id": "GLSA-200703-08", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-08" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-05", "reference_id": "mfsa2007-05", "reference_type": "", "scores": [ { "value": "none", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0077", "reference_id": "RHSA-2007:0077", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0077" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0078", "reference_id": "RHSA-2007:0078", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0078" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0079", "reference_id": "RHSA-2007:0079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0097", "reference_id": "RHSA-2007:0097", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0097" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0108", "reference_id": "RHSA-2007:0108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0108" }, { "reference_url": "https://usn.ubuntu.com/428-1/", "reference_id": "USN-428-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/428-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2007-0800" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w2zu-gxse-cff6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3103?format=api", "vulnerability_id": "VCID-z446-q57n-rqhq", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-6077.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-6077.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2006-6077", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03057", "scoring_system": "epss", "scoring_elements": "0.86956", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.03057", "scoring_system": "epss", "scoring_elements": "0.86979", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2006-6077" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618236", "reference_id": "1618236", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618236" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6077", "reference_id": "CVE-2006-6077", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6077" }, { "reference_url": "https://security.gentoo.org/glsa/200703-04", "reference_id": "GLSA-200703-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-04" }, { "reference_url": "https://security.gentoo.org/glsa/200703-08", "reference_id": "GLSA-200703-08", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200703-08" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-02", "reference_id": "mfsa2007-02", "reference_type": "", "scores": [ { "value": "low", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2007-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0077", "reference_id": "RHSA-2007:0077", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0077" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0078", "reference_id": "RHSA-2007:0078", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0078" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0079", "reference_id": "RHSA-2007:0079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0097", "reference_id": "RHSA-2007:0097", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0097" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2007:0108", "reference_id": "RHSA-2007:0108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2007:0108" }, { "reference_url": "https://usn.ubuntu.com/428-1/", "reference_id": "USN-428-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/428-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2006-6077" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z446-q57n-rqhq" } ], "fixing_vulnerabilities": [], "risk_score": "10.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/thunderbird@1.5.0.10-1%3Farch=el5" }