Lookup for vulnerable packages by Package URL.

Purlpkg:mozilla/NSS@3.12.3
Typemozilla
Namespace
NameNSS
Version3.12.3
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version3.16.5
Latest_non_vulnerable_version3.73.0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-frwk-mbxe-jbhp
vulnerability_id VCID-frwk-mbxe-jbhp
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2404.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2404.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2404
reference_id
reference_type
scores
0
value 0.21024
scoring_system epss
scoring_elements 0.95655
published_at 2026-04-21T12:55:00Z
1
value 0.21024
scoring_system epss
scoring_elements 0.95606
published_at 2026-04-01T12:55:00Z
2
value 0.21024
scoring_system epss
scoring_elements 0.95615
published_at 2026-04-02T12:55:00Z
3
value 0.21024
scoring_system epss
scoring_elements 0.9562
published_at 2026-04-04T12:55:00Z
4
value 0.21024
scoring_system epss
scoring_elements 0.95623
published_at 2026-04-07T12:55:00Z
5
value 0.21024
scoring_system epss
scoring_elements 0.95631
published_at 2026-04-08T12:55:00Z
6
value 0.21024
scoring_system epss
scoring_elements 0.95635
published_at 2026-04-09T12:55:00Z
7
value 0.21024
scoring_system epss
scoring_elements 0.9564
published_at 2026-04-12T12:55:00Z
8
value 0.21024
scoring_system epss
scoring_elements 0.95642
published_at 2026-04-13T12:55:00Z
9
value 0.21024
scoring_system epss
scoring_elements 0.9565
published_at 2026-04-16T12:55:00Z
10
value 0.21024
scoring_system epss
scoring_elements 0.95654
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2404
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=512912
reference_id 512912
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=512912
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539934
reference_id 539934
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539934
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2404
reference_id CVE-2009-2404
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2404
5
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
6
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-43
reference_id mfsa2009-43
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-43
7
reference_url https://access.redhat.com/errata/RHSA-2009:1184
reference_id RHSA-2009:1184
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1184
8
reference_url https://access.redhat.com/errata/RHSA-2009:1185
reference_id RHSA-2009:1185
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1185
9
reference_url https://access.redhat.com/errata/RHSA-2009:1186
reference_id RHSA-2009:1186
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1186
10
reference_url https://access.redhat.com/errata/RHSA-2009:1190
reference_id RHSA-2009:1190
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1190
11
reference_url https://access.redhat.com/errata/RHSA-2009:1207
reference_id RHSA-2009:1207
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1207
12
reference_url https://usn.ubuntu.com/810-1/
reference_id USN-810-1
reference_type
scores
url https://usn.ubuntu.com/810-1/
fixed_packages
0
url pkg:mozilla/NSS@3.12.3
purl pkg:mozilla/NSS@3.12.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/NSS@3.12.3
aliases CVE-2009-2404
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-frwk-mbxe-jbhp
1
url VCID-uytp-sf6j-xyf6
vulnerability_id VCID-uytp-sf6j-xyf6
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2408.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2408.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2408
reference_id
reference_type
scores
0
value 0.01855
scoring_system epss
scoring_elements 0.83057
published_at 2026-04-21T12:55:00Z
1
value 0.01855
scoring_system epss
scoring_elements 0.83054
published_at 2026-04-18T12:55:00Z
2
value 0.02503
scoring_system epss
scoring_elements 0.85286
published_at 2026-04-02T12:55:00Z
3
value 0.02503
scoring_system epss
scoring_elements 0.85305
published_at 2026-04-04T12:55:00Z
4
value 0.02503
scoring_system epss
scoring_elements 0.85307
published_at 2026-04-07T12:55:00Z
5
value 0.02503
scoring_system epss
scoring_elements 0.85329
published_at 2026-04-08T12:55:00Z
6
value 0.02503
scoring_system epss
scoring_elements 0.85351
published_at 2026-04-11T12:55:00Z
7
value 0.02503
scoring_system epss
scoring_elements 0.85349
published_at 2026-04-12T12:55:00Z
8
value 0.02503
scoring_system epss
scoring_elements 0.85346
published_at 2026-04-13T12:55:00Z
9
value 0.02503
scoring_system epss
scoring_elements 0.85337
published_at 2026-04-09T12:55:00Z
10
value 0.02503
scoring_system epss
scoring_elements 0.85274
published_at 2026-04-01T12:55:00Z
11
value 0.03361
scoring_system epss
scoring_elements 0.87363
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2408
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=510251
reference_id 510251
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=510251
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539934
reference_id 539934
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539934
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2408
reference_id CVE-2009-2408
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2408
5
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
6
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-42
reference_id mfsa2009-42
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-42
7
reference_url https://access.redhat.com/errata/RHSA-2009:1184
reference_id RHSA-2009:1184
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1184
8
reference_url https://access.redhat.com/errata/RHSA-2009:1186
reference_id RHSA-2009:1186
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1186
9
reference_url https://access.redhat.com/errata/RHSA-2009:1190
reference_id RHSA-2009:1190
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1190
10
reference_url https://access.redhat.com/errata/RHSA-2009:1207
reference_id RHSA-2009:1207
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1207
11
reference_url https://access.redhat.com/errata/RHSA-2009:1432
reference_id RHSA-2009:1432
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1432
12
reference_url https://usn.ubuntu.com/810-1/
reference_id USN-810-1
reference_type
scores
url https://usn.ubuntu.com/810-1/
fixed_packages
0
url pkg:mozilla/NSS@3.12.3
purl pkg:mozilla/NSS@3.12.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/NSS@3.12.3
aliases CVE-2009-2408
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uytp-sf6j-xyf6
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:mozilla/NSS@3.12.3