Lookup for vulnerable packages by Package URL.

Purlpkg:mozilla/Firefox@5.0.0
Typemozilla
Namespace
NameFirefox
Version5.0.0
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version6.0.0
Latest_non_vulnerable_version150.0.0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-1enu-fnuh-5qcv
vulnerability_id VCID-1enu-fnuh-5qcv
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2373.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2373.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-2373
reference_id
reference_type
scores
0
value 0.03638
scoring_system epss
scoring_elements 0.87854
published_at 2026-04-21T12:55:00Z
1
value 0.03638
scoring_system epss
scoring_elements 0.87788
published_at 2026-04-01T12:55:00Z
2
value 0.03638
scoring_system epss
scoring_elements 0.87798
published_at 2026-04-02T12:55:00Z
3
value 0.03638
scoring_system epss
scoring_elements 0.87809
published_at 2026-04-04T12:55:00Z
4
value 0.03638
scoring_system epss
scoring_elements 0.87812
published_at 2026-04-07T12:55:00Z
5
value 0.03638
scoring_system epss
scoring_elements 0.87834
published_at 2026-04-08T12:55:00Z
6
value 0.03638
scoring_system epss
scoring_elements 0.8784
published_at 2026-04-09T12:55:00Z
7
value 0.03638
scoring_system epss
scoring_elements 0.87852
published_at 2026-04-11T12:55:00Z
8
value 0.03638
scoring_system epss
scoring_elements 0.87846
published_at 2026-04-12T12:55:00Z
9
value 0.03638
scoring_system epss
scoring_elements 0.87845
published_at 2026-04-13T12:55:00Z
10
value 0.03638
scoring_system epss
scoring_elements 0.87859
published_at 2026-04-16T12:55:00Z
11
value 0.03638
scoring_system epss
scoring_elements 0.87857
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-2373
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=714577
reference_id 714577
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=714577
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2373
reference_id CVE-2011-2373
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2373
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2011-20
reference_id mfsa2011-20
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2011-20
6
reference_url https://access.redhat.com/errata/RHSA-2011:0885
reference_id RHSA-2011:0885
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0885
7
reference_url https://access.redhat.com/errata/RHSA-2011:0887
reference_id RHSA-2011:0887
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0887
8
reference_url https://access.redhat.com/errata/RHSA-2011:0888
reference_id RHSA-2011:0888
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0888
9
reference_url https://usn.ubuntu.com/1149-1/
reference_id USN-1149-1
reference_type
scores
url https://usn.ubuntu.com/1149-1/
10
reference_url https://usn.ubuntu.com/1150-1/
reference_id USN-1150-1
reference_type
scores
url https://usn.ubuntu.com/1150-1/
11
reference_url https://usn.ubuntu.com/1157-1/
reference_id USN-1157-1
reference_type
scores
url https://usn.ubuntu.com/1157-1/
fixed_packages
0
url pkg:mozilla/Firefox@3.6.18
purl pkg:mozilla/Firefox@3.6.18
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@3.6.18
1
url pkg:mozilla/Firefox@5.0.0
purl pkg:mozilla/Firefox@5.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@5.0.0
aliases CVE-2011-2373
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1enu-fnuh-5qcv
1
url VCID-3h7f-45eq-auh1
vulnerability_id VCID-3h7f-45eq-auh1
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-2370
reference_id
reference_type
scores
0
value 0.00309
scoring_system epss
scoring_elements 0.54146
published_at 2026-04-21T12:55:00Z
1
value 0.00309
scoring_system epss
scoring_elements 0.54043
published_at 2026-04-01T12:55:00Z
2
value 0.00309
scoring_system epss
scoring_elements 0.5406
published_at 2026-04-02T12:55:00Z
3
value 0.00309
scoring_system epss
scoring_elements 0.54089
published_at 2026-04-04T12:55:00Z
4
value 0.00309
scoring_system epss
scoring_elements 0.54062
published_at 2026-04-07T12:55:00Z
5
value 0.00309
scoring_system epss
scoring_elements 0.54114
published_at 2026-04-08T12:55:00Z
6
value 0.00309
scoring_system epss
scoring_elements 0.54112
published_at 2026-04-09T12:55:00Z
7
value 0.00309
scoring_system epss
scoring_elements 0.54162
published_at 2026-04-16T12:55:00Z
8
value 0.00309
scoring_system epss
scoring_elements 0.54144
published_at 2026-04-12T12:55:00Z
9
value 0.00309
scoring_system epss
scoring_elements 0.54123
published_at 2026-04-13T12:55:00Z
10
value 0.00309
scoring_system epss
scoring_elements 0.54166
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-2370
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2370
reference_id CVE-2011-2370
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2370
2
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
3
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2011-28
reference_id mfsa2011-28
reference_type
scores
0
value low
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2011-28
4
reference_url https://usn.ubuntu.com/1157-1/
reference_id USN-1157-1
reference_type
scores
url https://usn.ubuntu.com/1157-1/
fixed_packages
0
url pkg:mozilla/Firefox@5.0.0
purl pkg:mozilla/Firefox@5.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@5.0.0
aliases CVE-2011-2370
risk_score 1.4
exploitability 0.5
weighted_severity 2.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3h7f-45eq-auh1
2
url VCID-ab7e-t6q5-q3d4
vulnerability_id VCID-ab7e-t6q5-q3d4
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-2369
reference_id
reference_type
scores
0
value 0.00256
scoring_system epss
scoring_elements 0.48998
published_at 2026-04-18T12:55:00Z
1
value 0.00256
scoring_system epss
scoring_elements 0.48889
published_at 2026-04-01T12:55:00Z
2
value 0.00256
scoring_system epss
scoring_elements 0.48926
published_at 2026-04-02T12:55:00Z
3
value 0.00256
scoring_system epss
scoring_elements 0.48952
published_at 2026-04-04T12:55:00Z
4
value 0.00256
scoring_system epss
scoring_elements 0.48906
published_at 2026-04-07T12:55:00Z
5
value 0.00256
scoring_system epss
scoring_elements 0.4896
published_at 2026-04-21T12:55:00Z
6
value 0.00256
scoring_system epss
scoring_elements 0.48958
published_at 2026-04-09T12:55:00Z
7
value 0.00256
scoring_system epss
scoring_elements 0.48974
published_at 2026-04-11T12:55:00Z
8
value 0.00256
scoring_system epss
scoring_elements 0.48948
published_at 2026-04-12T12:55:00Z
9
value 0.00256
scoring_system epss
scoring_elements 0.48956
published_at 2026-04-13T12:55:00Z
10
value 0.00256
scoring_system epss
scoring_elements 0.49002
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-2369
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2369
reference_id CVE-2011-2369
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2369
2
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
3
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2011-27
reference_id mfsa2011-27
reference_type
scores
0
value none
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2011-27
4
reference_url https://usn.ubuntu.com/1157-1/
reference_id USN-1157-1
reference_type
scores
url https://usn.ubuntu.com/1157-1/
fixed_packages
0
url pkg:mozilla/Firefox@5.0.0
purl pkg:mozilla/Firefox@5.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@5.0.0
aliases CVE-2011-2369
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ab7e-t6q5-q3d4
3
url VCID-g8br-k7np-kqce
vulnerability_id VCID-g8br-k7np-kqce
summary
Mozilla security researcher Christoph Diehl reported two
crashes in WebGL code. One crash was the result of an out-of-bounds
read and could be used to read data from other processes who had
stored data in the GPU. The severity of this issue was determined to
be high. The second crash was the result of an invalid write and could
be used to execute arbitrary code. The severity of this issue was
determined to be critical.The WebGL functionality was introduced in the browser engine used
by Firefox 4 and SeaMonkey 2.1; the vulnerability does not affect earlier versions.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-2367
reference_id
reference_type
scores
0
value 0.00676
scoring_system epss
scoring_elements 0.715
published_at 2026-04-21T12:55:00Z
1
value 0.00676
scoring_system epss
scoring_elements 0.71431
published_at 2026-04-01T12:55:00Z
2
value 0.00676
scoring_system epss
scoring_elements 0.71439
published_at 2026-04-02T12:55:00Z
3
value 0.00676
scoring_system epss
scoring_elements 0.71456
published_at 2026-04-04T12:55:00Z
4
value 0.00676
scoring_system epss
scoring_elements 0.7143
published_at 2026-04-07T12:55:00Z
5
value 0.00676
scoring_system epss
scoring_elements 0.71471
published_at 2026-04-13T12:55:00Z
6
value 0.00676
scoring_system epss
scoring_elements 0.71483
published_at 2026-04-09T12:55:00Z
7
value 0.00676
scoring_system epss
scoring_elements 0.71505
published_at 2026-04-11T12:55:00Z
8
value 0.00676
scoring_system epss
scoring_elements 0.7149
published_at 2026-04-12T12:55:00Z
9
value 0.00676
scoring_system epss
scoring_elements 0.71516
published_at 2026-04-16T12:55:00Z
10
value 0.00676
scoring_system epss
scoring_elements 0.71522
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-2367
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2367
reference_id CVE-2011-2367
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2367
2
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2011-26
reference_id mfsa2011-26
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2011-26
3
reference_url https://usn.ubuntu.com/1157-1/
reference_id USN-1157-1
reference_type
scores
url https://usn.ubuntu.com/1157-1/
fixed_packages
0
url pkg:mozilla/Firefox@5.0.0
purl pkg:mozilla/Firefox@5.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@5.0.0
aliases CVE-2011-2367
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g8br-k7np-kqce
4
url VCID-pekr-h59g-7bfj
vulnerability_id VCID-pekr-h59g-7bfj
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2377.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2377.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-2377
reference_id
reference_type
scores
0
value 0.05899
scoring_system epss
scoring_elements 0.90609
published_at 2026-04-21T12:55:00Z
1
value 0.05899
scoring_system epss
scoring_elements 0.90552
published_at 2026-04-01T12:55:00Z
2
value 0.05899
scoring_system epss
scoring_elements 0.90556
published_at 2026-04-02T12:55:00Z
3
value 0.05899
scoring_system epss
scoring_elements 0.90567
published_at 2026-04-04T12:55:00Z
4
value 0.05899
scoring_system epss
scoring_elements 0.90575
published_at 2026-04-07T12:55:00Z
5
value 0.05899
scoring_system epss
scoring_elements 0.90587
published_at 2026-04-08T12:55:00Z
6
value 0.05899
scoring_system epss
scoring_elements 0.90593
published_at 2026-04-09T12:55:00Z
7
value 0.05899
scoring_system epss
scoring_elements 0.90602
published_at 2026-04-12T12:55:00Z
8
value 0.05899
scoring_system epss
scoring_elements 0.90597
published_at 2026-04-13T12:55:00Z
9
value 0.05899
scoring_system epss
scoring_elements 0.90615
published_at 2026-04-16T12:55:00Z
10
value 0.05899
scoring_system epss
scoring_elements 0.90612
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-2377
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=714929
reference_id 714929
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=714929
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2377
reference_id CVE-2011-2377
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2377
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2011-21
reference_id mfsa2011-21
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2011-21
6
reference_url https://access.redhat.com/errata/RHSA-2011:0885
reference_id RHSA-2011:0885
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0885
7
reference_url https://access.redhat.com/errata/RHSA-2011:0886
reference_id RHSA-2011:0886
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0886
8
reference_url https://access.redhat.com/errata/RHSA-2011:0887
reference_id RHSA-2011:0887
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0887
9
reference_url https://access.redhat.com/errata/RHSA-2011:0888
reference_id RHSA-2011:0888
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0888
10
reference_url https://usn.ubuntu.com/1149-1/
reference_id USN-1149-1
reference_type
scores
url https://usn.ubuntu.com/1149-1/
11
reference_url https://usn.ubuntu.com/1150-1/
reference_id USN-1150-1
reference_type
scores
url https://usn.ubuntu.com/1150-1/
12
reference_url https://usn.ubuntu.com/1157-1/
reference_id USN-1157-1
reference_type
scores
url https://usn.ubuntu.com/1157-1/
fixed_packages
0
url pkg:mozilla/Firefox@3.6.18
purl pkg:mozilla/Firefox@3.6.18
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@3.6.18
1
url pkg:mozilla/Firefox@5.0.0
purl pkg:mozilla/Firefox@5.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@5.0.0
aliases CVE-2011-2377
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pekr-h59g-7bfj
5
url VCID-r7nh-efjt-5qg1
vulnerability_id VCID-r7nh-efjt-5qg1
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2374.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2374.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-2374
reference_id
reference_type
scores
0
value 0.03995
scoring_system epss
scoring_elements 0.88429
published_at 2026-04-21T12:55:00Z
1
value 0.03995
scoring_system epss
scoring_elements 0.88371
published_at 2026-04-01T12:55:00Z
2
value 0.03995
scoring_system epss
scoring_elements 0.88379
published_at 2026-04-02T12:55:00Z
3
value 0.03995
scoring_system epss
scoring_elements 0.88387
published_at 2026-04-04T12:55:00Z
4
value 0.03995
scoring_system epss
scoring_elements 0.88392
published_at 2026-04-07T12:55:00Z
5
value 0.03995
scoring_system epss
scoring_elements 0.88411
published_at 2026-04-08T12:55:00Z
6
value 0.03995
scoring_system epss
scoring_elements 0.88418
published_at 2026-04-09T12:55:00Z
7
value 0.03995
scoring_system epss
scoring_elements 0.88428
published_at 2026-04-11T12:55:00Z
8
value 0.03995
scoring_system epss
scoring_elements 0.88421
published_at 2026-04-12T12:55:00Z
9
value 0.03995
scoring_system epss
scoring_elements 0.8842
published_at 2026-04-13T12:55:00Z
10
value 0.03995
scoring_system epss
scoring_elements 0.88435
published_at 2026-04-16T12:55:00Z
11
value 0.03995
scoring_system epss
scoring_elements 0.88431
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-2374
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=714576
reference_id 714576
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=714576
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2374
reference_id CVE-2011-2374
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2374
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2011-19
reference_id mfsa2011-19
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2011-19
6
reference_url https://access.redhat.com/errata/RHSA-2011:0885
reference_id RHSA-2011:0885
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0885
7
reference_url https://access.redhat.com/errata/RHSA-2011:0886
reference_id RHSA-2011:0886
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0886
8
reference_url https://access.redhat.com/errata/RHSA-2011:0887
reference_id RHSA-2011:0887
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0887
9
reference_url https://access.redhat.com/errata/RHSA-2011:0888
reference_id RHSA-2011:0888
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0888
10
reference_url https://usn.ubuntu.com/1149-1/
reference_id USN-1149-1
reference_type
scores
url https://usn.ubuntu.com/1149-1/
11
reference_url https://usn.ubuntu.com/1150-1/
reference_id USN-1150-1
reference_type
scores
url https://usn.ubuntu.com/1150-1/
12
reference_url https://usn.ubuntu.com/1157-1/
reference_id USN-1157-1
reference_type
scores
url https://usn.ubuntu.com/1157-1/
fixed_packages
0
url pkg:mozilla/Firefox@3.6.18
purl pkg:mozilla/Firefox@3.6.18
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@3.6.18
1
url pkg:mozilla/Firefox@5.0.0
purl pkg:mozilla/Firefox@5.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@5.0.0
aliases CVE-2011-2374
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r7nh-efjt-5qg1
6
url VCID-u7rd-j8cp-cbe8
vulnerability_id VCID-u7rd-j8cp-cbe8
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2371.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2371.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-2371
reference_id
reference_type
scores
0
value 0.86212
scoring_system epss
scoring_elements 0.99404
published_at 2026-04-18T12:55:00Z
1
value 0.86212
scoring_system epss
scoring_elements 0.99396
published_at 2026-04-01T12:55:00Z
2
value 0.86212
scoring_system epss
scoring_elements 0.99395
published_at 2026-04-02T12:55:00Z
3
value 0.86212
scoring_system epss
scoring_elements 0.99397
published_at 2026-04-04T12:55:00Z
4
value 0.86212
scoring_system epss
scoring_elements 0.99398
published_at 2026-04-07T12:55:00Z
5
value 0.86212
scoring_system epss
scoring_elements 0.99399
published_at 2026-04-08T12:55:00Z
6
value 0.86212
scoring_system epss
scoring_elements 0.994
published_at 2026-04-09T12:55:00Z
7
value 0.86212
scoring_system epss
scoring_elements 0.99401
published_at 2026-04-11T12:55:00Z
8
value 0.86212
scoring_system epss
scoring_elements 0.99402
published_at 2026-04-13T12:55:00Z
9
value 0.86212
scoring_system epss
scoring_elements 0.99405
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-2371
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=714580
reference_id 714580
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=714580
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2371
reference_id CVE-2011-2371
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2371
4
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/17974.html
reference_id CVE-2011-2371;OSVDB-73184
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/17974.html
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/17976.rb
reference_id CVE-2011-2371;OSVDB-73184
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/17976.rb
6
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/18531.html
reference_id CVE-2011-2371;OSVDB-73184
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/18531.html
7
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
8
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2011-22
reference_id mfsa2011-22
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2011-22
9
reference_url https://access.redhat.com/errata/RHSA-2011:0885
reference_id RHSA-2011:0885
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0885
10
reference_url https://access.redhat.com/errata/RHSA-2011:0887
reference_id RHSA-2011:0887
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0887
11
reference_url https://access.redhat.com/errata/RHSA-2011:0888
reference_id RHSA-2011:0888
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0888
12
reference_url https://usn.ubuntu.com/1149-1/
reference_id USN-1149-1
reference_type
scores
url https://usn.ubuntu.com/1149-1/
13
reference_url https://usn.ubuntu.com/1150-1/
reference_id USN-1150-1
reference_type
scores
url https://usn.ubuntu.com/1150-1/
14
reference_url https://usn.ubuntu.com/1157-1/
reference_id USN-1157-1
reference_type
scores
url https://usn.ubuntu.com/1157-1/
fixed_packages
0
url pkg:mozilla/Firefox@3.6.18
purl pkg:mozilla/Firefox@3.6.18
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@3.6.18
1
url pkg:mozilla/Firefox@5.0.0
purl pkg:mozilla/Firefox@5.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@5.0.0
aliases CVE-2011-2371
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u7rd-j8cp-cbe8
7
url VCID-urpm-48cc-hkaw
vulnerability_id VCID-urpm-48cc-hkaw
summary
Security research firm Context IS discovered that
an image from a different domain could be loaded into a WebGL texture,
and then each pixel could be rendered into a canvas element with a
shader program, creating an approximation of the image in a form that
was readable by the creator of the WebGL texture.  This could be used
to steal image data from a different site and is considered a
violation of the same-origin policy.The WebGL functionality was introduced in the browser engine used
by Firefox 4 and SeaMonkey 2.1; the vulnerability does not affect earlier versions.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2366.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2366.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-2366
reference_id
reference_type
scores
0
value 0.00606
scoring_system epss
scoring_elements 0.69655
published_at 2026-04-21T12:55:00Z
1
value 0.00606
scoring_system epss
scoring_elements 0.69557
published_at 2026-04-01T12:55:00Z
2
value 0.00606
scoring_system epss
scoring_elements 0.69569
published_at 2026-04-02T12:55:00Z
3
value 0.00606
scoring_system epss
scoring_elements 0.69585
published_at 2026-04-04T12:55:00Z
4
value 0.00606
scoring_system epss
scoring_elements 0.69563
published_at 2026-04-07T12:55:00Z
5
value 0.00606
scoring_system epss
scoring_elements 0.69614
published_at 2026-04-08T12:55:00Z
6
value 0.00606
scoring_system epss
scoring_elements 0.69631
published_at 2026-04-09T12:55:00Z
7
value 0.00606
scoring_system epss
scoring_elements 0.69653
published_at 2026-04-11T12:55:00Z
8
value 0.00606
scoring_system epss
scoring_elements 0.69638
published_at 2026-04-12T12:55:00Z
9
value 0.00606
scoring_system epss
scoring_elements 0.69624
published_at 2026-04-13T12:55:00Z
10
value 0.00606
scoring_system epss
scoring_elements 0.69664
published_at 2026-04-16T12:55:00Z
11
value 0.00606
scoring_system epss
scoring_elements 0.69673
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-2366
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=741376
reference_id 741376
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=741376
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2366
reference_id CVE-2011-2366
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2366
4
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2011-25
reference_id mfsa2011-25
reference_type
scores
0
value none
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2011-25
5
reference_url https://usn.ubuntu.com/1157-1/
reference_id USN-1157-1
reference_type
scores
url https://usn.ubuntu.com/1157-1/
fixed_packages
0
url pkg:mozilla/Firefox@5.0.0
purl pkg:mozilla/Firefox@5.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@5.0.0
aliases CVE-2011-2366
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-urpm-48cc-hkaw
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@5.0.0