Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/thunderbird@1:60.0-1?distro=trixie
Typedeb
Namespacedebian
Namethunderbird
Version1:60.0-1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1:60.2.1-1
Latest_non_vulnerable_version1:140.9.1esr-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-41zd-qkbf-bucq
vulnerability_id VCID-41zd-qkbf-bucq
summary
Multiple vulnerabilities have been found in Mozilla Firefox, the
    worst of which may allow execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5187.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5187.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-5187
reference_id
reference_type
scores
0
value 0.02336
scoring_system epss
scoring_elements 0.84866
published_at 2026-04-21T12:55:00Z
1
value 0.02336
scoring_system epss
scoring_elements 0.84836
published_at 2026-04-09T12:55:00Z
2
value 0.02336
scoring_system epss
scoring_elements 0.84854
published_at 2026-04-11T12:55:00Z
3
value 0.02336
scoring_system epss
scoring_elements 0.84851
published_at 2026-04-12T12:55:00Z
4
value 0.02336
scoring_system epss
scoring_elements 0.84846
published_at 2026-04-13T12:55:00Z
5
value 0.02336
scoring_system epss
scoring_elements 0.84867
published_at 2026-04-16T12:55:00Z
6
value 0.02336
scoring_system epss
scoring_elements 0.84868
published_at 2026-04-18T12:55:00Z
7
value 0.02336
scoring_system epss
scoring_elements 0.84772
published_at 2026-04-01T12:55:00Z
8
value 0.02336
scoring_system epss
scoring_elements 0.84787
published_at 2026-04-02T12:55:00Z
9
value 0.02336
scoring_system epss
scoring_elements 0.84806
published_at 2026-04-04T12:55:00Z
10
value 0.02336
scoring_system epss
scoring_elements 0.84808
published_at 2026-04-07T12:55:00Z
11
value 0.02336
scoring_system epss
scoring_elements 0.8483
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-5187
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12361
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12361
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12367
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12367
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12371
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12371
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5156
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5156
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5187
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5187
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1595039
reference_id 1595039
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1595039
9
reference_url https://security.archlinux.org/ASA-201806-14
reference_id ASA-201806-14
reference_type
scores
url https://security.archlinux.org/ASA-201806-14
10
reference_url https://security.archlinux.org/ASA-201808-8
reference_id ASA-201808-8
reference_type
scores
url https://security.archlinux.org/ASA-201808-8
11
reference_url https://security.archlinux.org/AVG-727
reference_id AVG-727
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-727
12
reference_url https://security.archlinux.org/AVG-751
reference_id AVG-751
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-751
13
reference_url https://security.gentoo.org/glsa/201811-13
reference_id GLSA-201811-13
reference_type
scores
url https://security.gentoo.org/glsa/201811-13
14
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-15
reference_id mfsa2018-15
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-15
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-16
reference_id mfsa2018-16
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-16
16
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-19
reference_id mfsa2018-19
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-19
17
reference_url https://usn.ubuntu.com/3705-1/
reference_id USN-3705-1
reference_type
scores
url https://usn.ubuntu.com/3705-1/
fixed_packages
0
url pkg:deb/debian/thunderbird@1:60.0-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:60.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:60.0-1%3Fdistro=trixie
1
url pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie
4
url pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5dw5-vpt8-zqbz
1
vulnerability VCID-9ag7-z86d-nba9
2
vulnerability VCID-qbzp-euvv-q7c7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie
5
url pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie
aliases CVE-2018-5187
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-41zd-qkbf-bucq
1
url VCID-4ewq-72xf-rfhq
vulnerability_id VCID-4ewq-72xf-rfhq
summary
Multiple vulnerabilities have been found in Mozilla Firefox, the
    worst of which may allow execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12371.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12371.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-12371
reference_id
reference_type
scores
0
value 0.00495
scoring_system epss
scoring_elements 0.6582
published_at 2026-04-18T12:55:00Z
1
value 0.00495
scoring_system epss
scoring_elements 0.65785
published_at 2026-04-08T12:55:00Z
2
value 0.00495
scoring_system epss
scoring_elements 0.65795
published_at 2026-04-09T12:55:00Z
3
value 0.00495
scoring_system epss
scoring_elements 0.65816
published_at 2026-04-11T12:55:00Z
4
value 0.00495
scoring_system epss
scoring_elements 0.65802
published_at 2026-04-12T12:55:00Z
5
value 0.00495
scoring_system epss
scoring_elements 0.65772
published_at 2026-04-13T12:55:00Z
6
value 0.00495
scoring_system epss
scoring_elements 0.65806
published_at 2026-04-21T12:55:00Z
7
value 0.00495
scoring_system epss
scoring_elements 0.65687
published_at 2026-04-01T12:55:00Z
8
value 0.00495
scoring_system epss
scoring_elements 0.65737
published_at 2026-04-02T12:55:00Z
9
value 0.00495
scoring_system epss
scoring_elements 0.65767
published_at 2026-04-04T12:55:00Z
10
value 0.00495
scoring_system epss
scoring_elements 0.65732
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-12371
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12361
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12361
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12367
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12367
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12371
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12371
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5156
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5156
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5187
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5187
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1595036
reference_id 1595036
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1595036
9
reference_url https://security.archlinux.org/ASA-201806-14
reference_id ASA-201806-14
reference_type
scores
url https://security.archlinux.org/ASA-201806-14
10
reference_url https://security.archlinux.org/ASA-201808-8
reference_id ASA-201808-8
reference_type
scores
url https://security.archlinux.org/ASA-201808-8
11
reference_url https://security.archlinux.org/AVG-727
reference_id AVG-727
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-727
12
reference_url https://security.archlinux.org/AVG-751
reference_id AVG-751
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-751
13
reference_url https://security.gentoo.org/glsa/201811-13
reference_id GLSA-201811-13
reference_type
scores
url https://security.gentoo.org/glsa/201811-13
14
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-15
reference_id mfsa2018-15
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-15
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-16
reference_id mfsa2018-16
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-16
16
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-19
reference_id mfsa2018-19
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-19
17
reference_url https://usn.ubuntu.com/3705-1/
reference_id USN-3705-1
reference_type
scores
url https://usn.ubuntu.com/3705-1/
fixed_packages
0
url pkg:deb/debian/thunderbird@1:60.0-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:60.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:60.0-1%3Fdistro=trixie
1
url pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie
4
url pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5dw5-vpt8-zqbz
1
vulnerability VCID-9ag7-z86d-nba9
2
vulnerability VCID-qbzp-euvv-q7c7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie
5
url pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie
aliases CVE-2018-12371
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4ewq-72xf-rfhq
2
url VCID-adfd-zkn8-3fgd
vulnerability_id VCID-adfd-zkn8-3fgd
summary
Multiple vulnerabilities have been found in Mozilla Firefox, the
    worst of which may allow execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5156.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5156.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-5156
reference_id
reference_type
scores
0
value 0.03107
scoring_system epss
scoring_elements 0.86836
published_at 2026-04-21T12:55:00Z
1
value 0.03107
scoring_system epss
scoring_elements 0.86812
published_at 2026-04-09T12:55:00Z
2
value 0.03107
scoring_system epss
scoring_elements 0.86825
published_at 2026-04-11T12:55:00Z
3
value 0.03107
scoring_system epss
scoring_elements 0.86822
published_at 2026-04-12T12:55:00Z
4
value 0.03107
scoring_system epss
scoring_elements 0.86817
published_at 2026-04-13T12:55:00Z
5
value 0.03107
scoring_system epss
scoring_elements 0.86833
published_at 2026-04-16T12:55:00Z
6
value 0.03107
scoring_system epss
scoring_elements 0.86837
published_at 2026-04-18T12:55:00Z
7
value 0.03107
scoring_system epss
scoring_elements 0.86756
published_at 2026-04-01T12:55:00Z
8
value 0.03107
scoring_system epss
scoring_elements 0.86767
published_at 2026-04-02T12:55:00Z
9
value 0.03107
scoring_system epss
scoring_elements 0.86786
published_at 2026-04-04T12:55:00Z
10
value 0.03107
scoring_system epss
scoring_elements 0.86783
published_at 2026-04-07T12:55:00Z
11
value 0.03107
scoring_system epss
scoring_elements 0.86803
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-5156
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12359
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12359
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12360
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12360
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12361
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12361
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12362
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12362
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12363
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12363
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12364
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12364
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12365
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12365
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12366
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12366
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12367
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12367
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12371
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12371
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5156
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5156
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5187
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5187
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5188
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5188
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1595037
reference_id 1595037
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1595037
17
reference_url https://security.archlinux.org/ASA-201808-8
reference_id ASA-201808-8
reference_type
scores
url https://security.archlinux.org/ASA-201808-8
18
reference_url https://security.archlinux.org/AVG-751
reference_id AVG-751
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-751
19
reference_url https://security.gentoo.org/glsa/201811-13
reference_id GLSA-201811-13
reference_type
scores
url https://security.gentoo.org/glsa/201811-13
20
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-15
reference_id mfsa2018-15
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-15
21
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-16
reference_id mfsa2018-16
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-16
22
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-17
reference_id mfsa2018-17
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-17
23
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-19
reference_id mfsa2018-19
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-19
24
reference_url https://access.redhat.com/errata/RHSA-2018:2112
reference_id RHSA-2018:2112
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2112
25
reference_url https://access.redhat.com/errata/RHSA-2018:2113
reference_id RHSA-2018:2113
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2113
26
reference_url https://usn.ubuntu.com/3705-1/
reference_id USN-3705-1
reference_type
scores
url https://usn.ubuntu.com/3705-1/
fixed_packages
0
url pkg:deb/debian/thunderbird@1:60.0-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:60.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:60.0-1%3Fdistro=trixie
1
url pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie
4
url pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5dw5-vpt8-zqbz
1
vulnerability VCID-9ag7-z86d-nba9
2
vulnerability VCID-qbzp-euvv-q7c7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie
5
url pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie
aliases CVE-2018-5156
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-adfd-zkn8-3fgd
3
url VCID-f79a-dxkf-8yeu
vulnerability_id VCID-f79a-dxkf-8yeu
summary
Multiple vulnerabilities have been found in Mozilla Firefox, the
    worst of which may allow execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12361.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12361.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-12361
reference_id
reference_type
scores
0
value 0.0117
scoring_system epss
scoring_elements 0.78679
published_at 2026-04-21T12:55:00Z
1
value 0.0117
scoring_system epss
scoring_elements 0.78652
published_at 2026-04-08T12:55:00Z
2
value 0.0117
scoring_system epss
scoring_elements 0.78658
published_at 2026-04-09T12:55:00Z
3
value 0.0117
scoring_system epss
scoring_elements 0.78683
published_at 2026-04-18T12:55:00Z
4
value 0.0117
scoring_system epss
scoring_elements 0.78664
published_at 2026-04-12T12:55:00Z
5
value 0.0117
scoring_system epss
scoring_elements 0.78656
published_at 2026-04-13T12:55:00Z
6
value 0.0117
scoring_system epss
scoring_elements 0.78685
published_at 2026-04-16T12:55:00Z
7
value 0.0117
scoring_system epss
scoring_elements 0.78607
published_at 2026-04-01T12:55:00Z
8
value 0.0117
scoring_system epss
scoring_elements 0.78614
published_at 2026-04-02T12:55:00Z
9
value 0.0117
scoring_system epss
scoring_elements 0.78645
published_at 2026-04-04T12:55:00Z
10
value 0.0117
scoring_system epss
scoring_elements 0.78626
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-12361
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12361
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12361
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12367
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12367
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12371
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12371
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5156
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5156
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5187
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5187
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1595026
reference_id 1595026
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1595026
9
reference_url https://security.archlinux.org/ASA-201806-14
reference_id ASA-201806-14
reference_type
scores
url https://security.archlinux.org/ASA-201806-14
10
reference_url https://security.archlinux.org/ASA-201808-8
reference_id ASA-201808-8
reference_type
scores
url https://security.archlinux.org/ASA-201808-8
11
reference_url https://security.archlinux.org/AVG-727
reference_id AVG-727
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-727
12
reference_url https://security.archlinux.org/AVG-751
reference_id AVG-751
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-751
13
reference_url https://security.gentoo.org/glsa/201811-13
reference_id GLSA-201811-13
reference_type
scores
url https://security.gentoo.org/glsa/201811-13
14
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-15
reference_id mfsa2018-15
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-15
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-16
reference_id mfsa2018-16
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-16
16
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-19
reference_id mfsa2018-19
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-19
17
reference_url https://usn.ubuntu.com/3705-1/
reference_id USN-3705-1
reference_type
scores
url https://usn.ubuntu.com/3705-1/
fixed_packages
0
url pkg:deb/debian/thunderbird@1:60.0-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:60.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:60.0-1%3Fdistro=trixie
1
url pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie
4
url pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5dw5-vpt8-zqbz
1
vulnerability VCID-9ag7-z86d-nba9
2
vulnerability VCID-qbzp-euvv-q7c7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie
5
url pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie
aliases CVE-2018-12361
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f79a-dxkf-8yeu
4
url VCID-n454-esxc-ckhd
vulnerability_id VCID-n454-esxc-ckhd
summary
Multiple vulnerabilities have been found in Mozilla Firefox, the
    worst of which may allow execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12367.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12367.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-12367
reference_id
reference_type
scores
0
value 0.01271
scoring_system epss
scoring_elements 0.79532
published_at 2026-04-21T12:55:00Z
1
value 0.01271
scoring_system epss
scoring_elements 0.79503
published_at 2026-04-09T12:55:00Z
2
value 0.01271
scoring_system epss
scoring_elements 0.79525
published_at 2026-04-11T12:55:00Z
3
value 0.01271
scoring_system epss
scoring_elements 0.79508
published_at 2026-04-12T12:55:00Z
4
value 0.01271
scoring_system epss
scoring_elements 0.79499
published_at 2026-04-13T12:55:00Z
5
value 0.01271
scoring_system epss
scoring_elements 0.79529
published_at 2026-04-16T12:55:00Z
6
value 0.01271
scoring_system epss
scoring_elements 0.79528
published_at 2026-04-18T12:55:00Z
7
value 0.01271
scoring_system epss
scoring_elements 0.7945
published_at 2026-04-01T12:55:00Z
8
value 0.01271
scoring_system epss
scoring_elements 0.79457
published_at 2026-04-02T12:55:00Z
9
value 0.01271
scoring_system epss
scoring_elements 0.7948
published_at 2026-04-04T12:55:00Z
10
value 0.01271
scoring_system epss
scoring_elements 0.79467
published_at 2026-04-07T12:55:00Z
11
value 0.01271
scoring_system epss
scoring_elements 0.79495
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-12367
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12361
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12361
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12367
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12367
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12371
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12371
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5156
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5156
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5187
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5187
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1595032
reference_id 1595032
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1595032
9
reference_url https://security.archlinux.org/ASA-201806-14
reference_id ASA-201806-14
reference_type
scores
url https://security.archlinux.org/ASA-201806-14
10
reference_url https://security.archlinux.org/ASA-201808-8
reference_id ASA-201808-8
reference_type
scores
url https://security.archlinux.org/ASA-201808-8
11
reference_url https://security.archlinux.org/AVG-727
reference_id AVG-727
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-727
12
reference_url https://security.archlinux.org/AVG-751
reference_id AVG-751
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-751
13
reference_url https://security.gentoo.org/glsa/201811-13
reference_id GLSA-201811-13
reference_type
scores
url https://security.gentoo.org/glsa/201811-13
14
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-15
reference_id mfsa2018-15
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-15
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-16
reference_id mfsa2018-16
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-16
16
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-19
reference_id mfsa2018-19
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-19
17
reference_url https://usn.ubuntu.com/3705-1/
reference_id USN-3705-1
reference_type
scores
url https://usn.ubuntu.com/3705-1/
fixed_packages
0
url pkg:deb/debian/thunderbird@1:60.0-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:60.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:60.0-1%3Fdistro=trixie
1
url pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie
4
url pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5dw5-vpt8-zqbz
1
vulnerability VCID-9ag7-z86d-nba9
2
vulnerability VCID-qbzp-euvv-q7c7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie
5
url pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie
aliases CVE-2018-12367
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n454-esxc-ckhd
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:60.0-1%3Fdistro=trixie