Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/56759?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56759?format=api",
    "vulnerability_id": "VCID-2xe3-59tz-zbc3",
    "summary": "Multiple vulnerabilities have been found in Mozilla Firefox and\n    Thunderbird the worst of which could lead to the execution of arbitrary\n    code.",
    "aliases": [
        {
            "alias": "CVE-2016-9901"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/371590?format=api",
            "purl": "pkg:alpm/archlinux/firefox@50.1.0-1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4z19-eyh7-9yf4"
                },
                {
                    "vulnerability": "VCID-5n3q-eby7-67de"
                },
                {
                    "vulnerability": "VCID-84kk-wfxx-t3c8"
                },
                {
                    "vulnerability": "VCID-af6b-4jqc-fugx"
                },
                {
                    "vulnerability": "VCID-ahzr-nr7g-5ue2"
                },
                {
                    "vulnerability": "VCID-bjyq-1zfk-eugq"
                },
                {
                    "vulnerability": "VCID-c8p3-ef58-wudt"
                },
                {
                    "vulnerability": "VCID-dv2d-9a59-xkaq"
                },
                {
                    "vulnerability": "VCID-e2ww-ngam-cugq"
                },
                {
                    "vulnerability": "VCID-gcen-3yba-a3ht"
                },
                {
                    "vulnerability": "VCID-hhtb-ha1v-tffj"
                },
                {
                    "vulnerability": "VCID-htpg-t39z-nbex"
                },
                {
                    "vulnerability": "VCID-hyhc-qud7-6uax"
                },
                {
                    "vulnerability": "VCID-m59v-ygc2-qucg"
                },
                {
                    "vulnerability": "VCID-qjs9-h3tt-qucf"
                },
                {
                    "vulnerability": "VCID-r34s-64j2-dfff"
                },
                {
                    "vulnerability": "VCID-r7te-y4n3-1uhj"
                },
                {
                    "vulnerability": "VCID-tjjd-y1pq-ckf4"
                },
                {
                    "vulnerability": "VCID-u1nc-fgsw-mkhc"
                },
                {
                    "vulnerability": "VCID-vnuz-wp96-pqgt"
                },
                {
                    "vulnerability": "VCID-vtwg-jhr9-nydc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@50.1.0-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/427137?format=api",
            "purl": "pkg:apk/alpine/firefox-esr@45.6.0?arch=armhf&distroversion=v3.4&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@45.6.0%3Farch=armhf&distroversion=v3.4&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/427138?format=api",
            "purl": "pkg:apk/alpine/firefox-esr@45.6.0?arch=x86&distroversion=v3.4&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@45.6.0%3Farch=x86&distroversion=v3.4&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/427139?format=api",
            "purl": "pkg:apk/alpine/firefox-esr@45.6.0?arch=x86_64&distroversion=v3.4&reponame=community",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@45.6.0%3Farch=x86_64&distroversion=v3.4&reponame=community"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/582794?format=api",
            "purl": "pkg:deb/debian/firefox@50.1.0-1?distro=sid",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox@50.1.0-1%3Fdistro=sid"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/582059?format=api",
            "purl": "pkg:deb/debian/firefox@149.0-1?distro=sid",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox@149.0-1%3Fdistro=sid"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1059611?format=api",
            "purl": "pkg:deb/debian/firefox@149.0.2-1?distro=sid",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox@149.0.2-1%3Fdistro=sid"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/582152?format=api",
            "purl": "pkg:deb/debian/firefox-esr@45.6.0esr-1?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@45.6.0esr-1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/582079?format=api",
            "purl": "pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5dw5-vpt8-zqbz"
                },
                {
                    "vulnerability": "VCID-9ag7-z86d-nba9"
                },
                {
                    "vulnerability": "VCID-qbzp-euvv-q7c7"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/582080?format=api",
            "purl": "pkg:deb/debian/firefox-esr@128.14.0esr-1~deb12u1?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-f81v-9fv8-93cd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.14.0esr-1~deb12u1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/582081?format=api",
            "purl": "pkg:deb/debian/firefox-esr@140.8.0esr-1~deb13u1?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-f81v-9fv8-93cd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.8.0esr-1~deb13u1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/582082?format=api",
            "purl": "pkg:deb/debian/firefox-esr@140.9.0esr-1?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5dw5-vpt8-zqbz"
                },
                {
                    "vulnerability": "VCID-9ag7-z86d-nba9"
                },
                {
                    "vulnerability": "VCID-f81v-9fv8-93cd"
                },
                {
                    "vulnerability": "VCID-qbzp-euvv-q7c7"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.9.0esr-1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1059612?format=api",
            "purl": "pkg:deb/debian/firefox-esr@140.9.1esr-1?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-f81v-9fv8-93cd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.9.1esr-1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/83125?format=api",
            "purl": "pkg:ebuild/mail-client/thunderbird@45.6.0",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/thunderbird@45.6.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/83126?format=api",
            "purl": "pkg:ebuild/mail-client/thunderbird-bin@45.6.0",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/thunderbird-bin@45.6.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/83123?format=api",
            "purl": "pkg:ebuild/www-client/firefox@45.6.0",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/firefox@45.6.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/83124?format=api",
            "purl": "pkg:ebuild/www-client/firefox-bin@45.6.0",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/firefox-bin@45.6.0"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/371598?format=api",
            "purl": "pkg:alpm/archlinux/firefox@50.0.2-1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1tcx-3zn1-ykdq"
                },
                {
                    "vulnerability": "VCID-2ptm-gx1p-uyhf"
                },
                {
                    "vulnerability": "VCID-2xe3-59tz-zbc3"
                },
                {
                    "vulnerability": "VCID-4d2q-usge-77ft"
                },
                {
                    "vulnerability": "VCID-5dyh-s3yd-vqes"
                },
                {
                    "vulnerability": "VCID-9fsb-vzuc-efc5"
                },
                {
                    "vulnerability": "VCID-fgnu-kh7z-xuau"
                },
                {
                    "vulnerability": "VCID-gqhc-h5p7-dyh1"
                },
                {
                    "vulnerability": "VCID-m5pb-75ag-tfep"
                },
                {
                    "vulnerability": "VCID-pbrt-gcqj-kycv"
                },
                {
                    "vulnerability": "VCID-qu91-vc1p-dyb1"
                },
                {
                    "vulnerability": "VCID-wffz-7y83-qkbm"
                },
                {
                    "vulnerability": "VCID-ysg5-wc3n-fbgw"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@50.0.2-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/113473?format=api",
            "purl": "pkg:rpm/redhat/firefox@45.6.0-1?arch=el5_11",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1tcx-3zn1-ykdq"
                },
                {
                    "vulnerability": "VCID-2ptm-gx1p-uyhf"
                },
                {
                    "vulnerability": "VCID-2xe3-59tz-zbc3"
                },
                {
                    "vulnerability": "VCID-4d2q-usge-77ft"
                },
                {
                    "vulnerability": "VCID-5dyh-s3yd-vqes"
                },
                {
                    "vulnerability": "VCID-fgnu-kh7z-xuau"
                },
                {
                    "vulnerability": "VCID-pbrt-gcqj-kycv"
                },
                {
                    "vulnerability": "VCID-q4x5-dz5r-jqgr"
                },
                {
                    "vulnerability": "VCID-qu91-vc1p-dyb1"
                },
                {
                    "vulnerability": "VCID-ysg5-wc3n-fbgw"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@45.6.0-1%3Farch=el5_11"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/113476?format=api",
            "purl": "pkg:rpm/redhat/firefox@45.6.0-1?arch=el6_8",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1tcx-3zn1-ykdq"
                },
                {
                    "vulnerability": "VCID-2ptm-gx1p-uyhf"
                },
                {
                    "vulnerability": "VCID-2xe3-59tz-zbc3"
                },
                {
                    "vulnerability": "VCID-4d2q-usge-77ft"
                },
                {
                    "vulnerability": "VCID-5dyh-s3yd-vqes"
                },
                {
                    "vulnerability": "VCID-fgnu-kh7z-xuau"
                },
                {
                    "vulnerability": "VCID-pbrt-gcqj-kycv"
                },
                {
                    "vulnerability": "VCID-q4x5-dz5r-jqgr"
                },
                {
                    "vulnerability": "VCID-qu91-vc1p-dyb1"
                },
                {
                    "vulnerability": "VCID-ysg5-wc3n-fbgw"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@45.6.0-1%3Farch=el6_8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/113474?format=api",
            "purl": "pkg:rpm/redhat/firefox@45.6.0-1?arch=el7_3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1tcx-3zn1-ykdq"
                },
                {
                    "vulnerability": "VCID-2ptm-gx1p-uyhf"
                },
                {
                    "vulnerability": "VCID-2xe3-59tz-zbc3"
                },
                {
                    "vulnerability": "VCID-4d2q-usge-77ft"
                },
                {
                    "vulnerability": "VCID-5dyh-s3yd-vqes"
                },
                {
                    "vulnerability": "VCID-fgnu-kh7z-xuau"
                },
                {
                    "vulnerability": "VCID-pbrt-gcqj-kycv"
                },
                {
                    "vulnerability": "VCID-q4x5-dz5r-jqgr"
                },
                {
                    "vulnerability": "VCID-qu91-vc1p-dyb1"
                },
                {
                    "vulnerability": "VCID-ysg5-wc3n-fbgw"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@45.6.0-1%3Farch=el7_3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/113472?format=api",
            "purl": "pkg:rpm/redhat/thunderbird@45.6.0-1?arch=el7_3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2xe3-59tz-zbc3"
                },
                {
                    "vulnerability": "VCID-5dyh-s3yd-vqes"
                },
                {
                    "vulnerability": "VCID-fgnu-kh7z-xuau"
                },
                {
                    "vulnerability": "VCID-pbrt-gcqj-kycv"
                },
                {
                    "vulnerability": "VCID-q4x5-dz5r-jqgr"
                },
                {
                    "vulnerability": "VCID-qu91-vc1p-dyb1"
                },
                {
                    "vulnerability": "VCID-ysg5-wc3n-fbgw"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/thunderbird@45.6.0-1%3Farch=el7_3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/113475?format=api",
            "purl": "pkg:rpm/redhat/thunderbird@45.6.0-1?arch=el5_11",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2xe3-59tz-zbc3"
                },
                {
                    "vulnerability": "VCID-5dyh-s3yd-vqes"
                },
                {
                    "vulnerability": "VCID-fgnu-kh7z-xuau"
                },
                {
                    "vulnerability": "VCID-pbrt-gcqj-kycv"
                },
                {
                    "vulnerability": "VCID-q4x5-dz5r-jqgr"
                },
                {
                    "vulnerability": "VCID-qu91-vc1p-dyb1"
                },
                {
                    "vulnerability": "VCID-ysg5-wc3n-fbgw"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/thunderbird@45.6.0-1%3Farch=el5_11"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/113477?format=api",
            "purl": "pkg:rpm/redhat/thunderbird@45.6.0-1?arch=el6_8",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2xe3-59tz-zbc3"
                },
                {
                    "vulnerability": "VCID-5dyh-s3yd-vqes"
                },
                {
                    "vulnerability": "VCID-fgnu-kh7z-xuau"
                },
                {
                    "vulnerability": "VCID-pbrt-gcqj-kycv"
                },
                {
                    "vulnerability": "VCID-q4x5-dz5r-jqgr"
                },
                {
                    "vulnerability": "VCID-qu91-vc1p-dyb1"
                },
                {
                    "vulnerability": "VCID-ysg5-wc3n-fbgw"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/thunderbird@45.6.0-1%3Farch=el6_8"
        }
    ],
    "references": [
        {
            "reference_url": "http://rhn.redhat.com/errata/RHSA-2016-2946.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2946.html"
        },
        {
            "reference_url": "http://rhn.redhat.com/errata/RHSA-2016-2973.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2973.html"
        },
        {
            "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9901.json",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                }
            ],
            "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9901.json"
        },
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9901",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.0203",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83831",
                    "published_at": "2026-04-18T12:55:00Z"
                },
                {
                    "value": "0.0203",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83762",
                    "published_at": "2026-04-07T12:55:00Z"
                },
                {
                    "value": "0.0203",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83786",
                    "published_at": "2026-04-08T12:55:00Z"
                },
                {
                    "value": "0.0203",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83792",
                    "published_at": "2026-04-09T12:55:00Z"
                },
                {
                    "value": "0.0203",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83808",
                    "published_at": "2026-04-11T12:55:00Z"
                },
                {
                    "value": "0.0203",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83801",
                    "published_at": "2026-04-12T12:55:00Z"
                },
                {
                    "value": "0.0203",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83797",
                    "published_at": "2026-04-13T12:55:00Z"
                },
                {
                    "value": "0.0203",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83731",
                    "published_at": "2026-04-01T12:55:00Z"
                },
                {
                    "value": "0.0203",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83744",
                    "published_at": "2026-04-02T12:55:00Z"
                },
                {
                    "value": "0.0203",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83759",
                    "published_at": "2026-04-04T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9901"
        },
        {
            "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1320057",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1320057"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9893",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9893"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9895",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9895"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9897",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9897"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9898",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9898"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9899",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9899"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9900",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9900"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9901",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9901"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9902",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9902"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9904",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9904"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9905",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9905"
        },
        {
            "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "5.1",
                    "scoring_system": "cvssv2",
                    "scoring_elements": "AV:N/AC:H/Au:N/C:P/I:P/A:P"
                }
            ],
            "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
        },
        {
            "reference_url": "https://www.mozilla.org/security/advisories/mfsa2016-94/",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://www.mozilla.org/security/advisories/mfsa2016-94/"
        },
        {
            "reference_url": "https://www.mozilla.org/security/advisories/mfsa2016-95/",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://www.mozilla.org/security/advisories/mfsa2016-95/"
        },
        {
            "reference_url": "http://www.securityfocus.com/bid/94885",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.securityfocus.com/bid/94885"
        },
        {
            "reference_url": "http://www.securitytracker.com/id/1037461",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.securitytracker.com/id/1037461"
        },
        {
            "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1404358",
            "reference_id": "1404358",
            "reference_type": "",
            "scores": [],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1404358"
        },
        {
            "reference_url": "https://security.archlinux.org/ASA-201612-15",
            "reference_id": "ASA-201612-15",
            "reference_type": "",
            "scores": [],
            "url": "https://security.archlinux.org/ASA-201612-15"
        },
        {
            "reference_url": "https://security.archlinux.org/AVG-106",
            "reference_id": "AVG-106",
            "reference_type": "",
            "scores": [
                {
                    "value": "Critical",
                    "scoring_system": "archlinux",
                    "scoring_elements": ""
                }
            ],
            "url": "https://security.archlinux.org/AVG-106"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_aus:7.3:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:o:redhat:enterprise_linux_aus:7.3:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_aus:7.3:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_aus:7.4:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:o:redhat:enterprise_linux_aus:7.4:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_aus:7.4:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9901",
            "reference_id": "CVE-2016-9901",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.5",
                    "scoring_system": "cvssv2",
                    "scoring_elements": "AV:N/AC:L/Au:N/C:P/I:P/A:P"
                },
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                }
            ],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9901"
        },
        {
            "reference_url": "https://security.gentoo.org/glsa/201701-15",
            "reference_id": "GLSA-201701-15",
            "reference_type": "",
            "scores": [],
            "url": "https://security.gentoo.org/glsa/201701-15"
        },
        {
            "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2016-94",
            "reference_id": "mfsa2016-94",
            "reference_type": "",
            "scores": [
                {
                    "value": "critical",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2016-94"
        },
        {
            "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2016-95",
            "reference_id": "mfsa2016-95",
            "reference_type": "",
            "scores": [
                {
                    "value": "critical",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2016-95"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2016:2946",
            "reference_id": "RHSA-2016:2946",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2016:2946"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2016:2973",
            "reference_id": "RHSA-2016:2973",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2016:2973"
        },
        {
            "reference_url": "https://usn.ubuntu.com/3155-1/",
            "reference_id": "USN-3155-1",
            "reference_type": "",
            "scores": [],
            "url": "https://usn.ubuntu.com/3155-1/"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 20,
            "name": "Improper Input Validation",
            "description": "The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly."
        }
    ],
    "exploits": [],
    "severity_range_score": "5.1 - 10.0",
    "exploitability": "0.5",
    "weighted_severity": "9.0",
    "risk_score": 4.5,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2xe3-59tz-zbc3"
}