Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-xs3q-48t9-1qgn
Summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, and SeaMonkey, the worst of which may allow user-assisted
    execution of arbitrary code.
Aliases
0
alias CVE-2014-1580
Fixed_packages
0
url pkg:ebuild/dev-libs/nspr@2.33.1
purl pkg:ebuild/dev-libs/nspr@2.33.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-libs/nspr@2.33.1
1
url pkg:ebuild/dev-libs/nspr@4.10.6
purl pkg:ebuild/dev-libs/nspr@4.10.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-libs/nspr@4.10.6
2
url pkg:ebuild/dev-libs/nspr@31.5.0
purl pkg:ebuild/dev-libs/nspr@31.5.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-libs/nspr@31.5.0
3
url pkg:ebuild/dev-libs/nspr@31.5.3
purl pkg:ebuild/dev-libs/nspr@31.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-libs/nspr@31.5.3
4
url pkg:ebuild/mail-client/thunderbird@31.5.0
purl pkg:ebuild/mail-client/thunderbird@31.5.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/thunderbird@31.5.0
5
url pkg:ebuild/mail-client/thunderbird@31.5.3
purl pkg:ebuild/mail-client/thunderbird@31.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/thunderbird@31.5.3
6
url pkg:ebuild/mail-client/thunderbird-bin@31.5.0
purl pkg:ebuild/mail-client/thunderbird-bin@31.5.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/thunderbird-bin@31.5.0
7
url pkg:ebuild/mail-client/thunderbird-bin@31.5.3
purl pkg:ebuild/mail-client/thunderbird-bin@31.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/thunderbird-bin@31.5.3
8
url pkg:ebuild/www-client/firefox@31.5.3
purl pkg:ebuild/www-client/firefox@31.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/firefox@31.5.3
9
url pkg:ebuild/www-client/firefox-bin@31.5.3
purl pkg:ebuild/www-client/firefox-bin@31.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/firefox-bin@31.5.3
10
url pkg:ebuild/www-client/seamonkey@2.33.1
purl pkg:ebuild/www-client/seamonkey@2.33.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey@2.33.1
11
url pkg:ebuild/www-client/seamonkey@31.5.0
purl pkg:ebuild/www-client/seamonkey@31.5.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey@31.5.0
12
url pkg:ebuild/www-client/seamonkey@31.5.3
purl pkg:ebuild/www-client/seamonkey@31.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey@31.5.3
13
url pkg:ebuild/www-client/seamonkey-bin@2.33.1
purl pkg:ebuild/www-client/seamonkey-bin@2.33.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey-bin@2.33.1
14
url pkg:ebuild/www-client/seamonkey-bin@31.5.0
purl pkg:ebuild/www-client/seamonkey-bin@31.5.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey-bin@31.5.0
15
url pkg:ebuild/www-client/seamonkey-bin@31.5.3
purl pkg:ebuild/www-client/seamonkey-bin@31.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/seamonkey-bin@31.5.3
16
url pkg:mozilla/Firefox@33.0.0
purl pkg:mozilla/Firefox@33.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@33.0.0
17
url pkg:mozilla/Firefox%20OS@2.2.0
purl pkg:mozilla/Firefox%20OS@2.2.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox%2520OS@2.2.0
18
url pkg:mozilla/Seamonkey@2.30.0
purl pkg:mozilla/Seamonkey@2.30.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Seamonkey@2.30.0
Affected_packages
References
0
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
2
reference_url http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
3
reference_url http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
4
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1580.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1580.json
5
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-1580
reference_id
reference_type
scores
0
value 0.00456
scoring_system epss
scoring_elements 0.63932
published_at 2026-04-16T12:55:00Z
1
value 0.00456
scoring_system epss
scoring_elements 0.63818
published_at 2026-04-01T12:55:00Z
2
value 0.00456
scoring_system epss
scoring_elements 0.6393
published_at 2026-04-12T12:55:00Z
3
value 0.00456
scoring_system epss
scoring_elements 0.63897
published_at 2026-04-13T12:55:00Z
4
value 0.00456
scoring_system epss
scoring_elements 0.63879
published_at 2026-04-02T12:55:00Z
5
value 0.00456
scoring_system epss
scoring_elements 0.63906
published_at 2026-04-04T12:55:00Z
6
value 0.00456
scoring_system epss
scoring_elements 0.63863
published_at 2026-04-07T12:55:00Z
7
value 0.00456
scoring_system epss
scoring_elements 0.63914
published_at 2026-04-08T12:55:00Z
8
value 0.00456
scoring_system epss
scoring_elements 0.63931
published_at 2026-04-09T12:55:00Z
9
value 0.00456
scoring_system epss
scoring_elements 0.63944
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-1580
6
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1063733
reference_id
reference_type
scores
url https://bugzilla.mozilla.org/show_bug.cgi?id=1063733
7
reference_url http://secunia.com/advisories/62022
reference_id
reference_type
scores
url http://secunia.com/advisories/62022
8
reference_url http://secunia.com/advisories/62023
reference_id
reference_type
scores
url http://secunia.com/advisories/62023
9
reference_url http://www.mozilla.org/security/announce/2014/mfsa2014-78.html
reference_id
reference_type
scores
url http://www.mozilla.org/security/announce/2014/mfsa2014-78.html
10
reference_url http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
reference_id
reference_type
scores
url http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
11
reference_url http://www.securityfocus.com/bid/70431
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/70431
12
reference_url http://www.securitytracker.com/id/1031028
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1031028
13
reference_url http://www.ubuntu.com/usn/USN-2372-1
reference_id
reference_type
scores
url http://www.ubuntu.com/usn/USN-2372-1
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1152362
reference_id 1152362
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1152362
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:30.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mozilla:firefox:30.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:30.0:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:31.1.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mozilla:firefox:31.1.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:31.1.0:*:*:*:*:*:*:*
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1580
reference_id CVE-2014-1580
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1580
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-1580
reference_id CVE-2014-1580
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2014-1580
21
reference_url https://security.gentoo.org/glsa/201504-01
reference_id GLSA-201504-01
reference_type
scores
url https://security.gentoo.org/glsa/201504-01
22
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2014-78
reference_id mfsa2014-78
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2014-78
23
reference_url https://usn.ubuntu.com/2372-1/
reference_id USN-2372-1
reference_type
scores
url https://usn.ubuntu.com/2372-1/
Weaknesses
0
cwe_id 200
name Exposure of Sensitive Information to an Unauthorized Actor
description The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Exploits
Severity_range_score5.0 - 8.9
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-xs3q-48t9-1qgn