Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/2495?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2495?format=api", "vulnerability_id": "VCID-359y-hcyn-x3ck", "summary": "Security researcher Gregory Fleischer demonstrated that\nweb content fetched via the jar: protocol can use Java via\nLiveConnect to open socket connections to arbitrary ports on the user's machine\n(\"localhost\"). The issue is caused by improper parsing of the content origin\npassed from the browser to the Java plugin. Such content was incorrectly\nevaluated to have a null host, assumed to be a local file, and was\nsubsequently allowed permission to connect to the localhost. Sun has updated\nthe Java Runtime Environment with a fix for this problem. Mozilla has also\nadded a fix to LiveConnect to protect users who don't have the latest version\nof Java.", "aliases": [ { "alias": "CVE-2008-1240" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/193020?format=api", "purl": "pkg:ebuild/mail-client/mozilla-thunderbird@2.0.0.14", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/mozilla-thunderbird@2.0.0.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/193021?format=api", "purl": "pkg:ebuild/mail-client/mozilla-thunderbird-bin@2.0.0.14", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/mozilla-thunderbird-bin@2.0.0.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/193027?format=api", "purl": "pkg:ebuild/net-libs/xulrunner@1.1.9", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/net-libs/xulrunner@1.1.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/193028?format=api", "purl": "pkg:ebuild/net-libs/xulrunner@1.1.9-r1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/net-libs/xulrunner@1.1.9-r1" }, { "url": "http://public2.vulnerablecode.io/api/packages/193029?format=api", "purl": "pkg:ebuild/net-libs/xulrunner@1.8.1.14", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/net-libs/xulrunner@1.8.1.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/193030?format=api", "purl": "pkg:ebuild/net-libs/xulrunner@2.0.0.14", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/net-libs/xulrunner@2.0.0.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/193018?format=api", "purl": "pkg:ebuild/www-client/mozilla-firefox@2.0.0.14", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/mozilla-firefox@2.0.0.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/193019?format=api", "purl": "pkg:ebuild/www-client/mozilla-firefox-bin@2.0.0.14", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/mozilla-firefox-bin@2.0.0.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/193022?format=api", "purl": "pkg:ebuild/www-client/seamonkey@1.1.9-r1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey@1.1.9-r1" }, { "url": "http://public2.vulnerablecode.io/api/packages/193023?format=api", "purl": "pkg:ebuild/www-client/seamonkey@2.0.0.14", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey@2.0.0.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/193024?format=api", "purl": "pkg:ebuild/www-client/seamonkey-bin@1.1.9", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey-bin@1.1.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/193025?format=api", "purl": "pkg:ebuild/www-client/seamonkey-bin@1.1.9-r1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey-bin@1.1.9-r1" }, { "url": "http://public2.vulnerablecode.io/api/packages/193026?format=api", "purl": "pkg:ebuild/www-client/seamonkey-bin@2.0.0.14", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey-bin@2.0.0.14" } ], "affected_packages": [], "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2008-1240", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.04851", "scoring_system": "epss", "scoring_elements": "0.89724", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.04851", "scoring_system": "epss", "scoring_elements": "0.8974", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2008-1240" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1240", "reference_id": "CVE-2008-1240", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1240" }, { "reference_url": "https://security.gentoo.org/glsa/200805-18", "reference_id": "GLSA-200805-18", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200805-18" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2008-18", "reference_id": "mfsa2008-18", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2008-18" }, { "reference_url": "https://usn.ubuntu.com/592-1/", "reference_id": "USN-592-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/592-1/" } ], "weaknesses": [], "exploits": [], "severity_range_score": "7.0 - 8.9", "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-359y-hcyn-x3ck" }