Lookup for vulnerable packages by Package URL.

Purlpkg:alpm/archlinux/firefox@67.0.4-1
Typealpm
Namespacearchlinux
Namefirefox
Version67.0.4-1
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version68.0-1
Latest_non_vulnerable_version101.0-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-ff85-wfhy-huaw
vulnerability_id VCID-ff85-wfhy-huaw
summary Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing arbitrary code on the user's computer.
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11707
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11707
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11708
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11708
2
reference_url https://security.archlinux.org/ASA-201906-20
reference_id ASA-201906-20
reference_type
scores
url https://security.archlinux.org/ASA-201906-20
3
reference_url https://security.archlinux.org/AVG-997
reference_id AVG-997
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-997
4
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2019-19
reference_id mfsa2019-19
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2019-19
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2019-20
reference_id mfsa2019-20
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2019-20
fixed_packages
0
url pkg:alpm/archlinux/firefox@67.0.4-1
purl pkg:alpm/archlinux/firefox@67.0.4-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@67.0.4-1
aliases CVE-2019-11708
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ff85-wfhy-huaw
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@67.0.4-1