Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/146830?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/146830?format=api", "purl": "pkg:rpm/redhat/thunderbird@60.2.1-4?arch=el7_5", "type": "rpm", "namespace": "redhat", "name": "thunderbird", "version": "60.2.1-4", "qualifiers": { "arch": "el7_5" }, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1435?format=api", "vulnerability_id": "VCID-5xvv-hqxh-9uaw", "summary": "Browser proxy settings can be bypassed by using the automount feature with autofs to create a mount point on the local file system. Content can be loaded from this mounted file system directly using a file: URI, bypassing configured proxy settings. *Note: this issue only affects OS X in default configurations. On Linux systems, autofs must be installed for the vulnerability to occur and Windows is not affected.*", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16541.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16541.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-16541", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.07687", "scoring_system": "epss", "scoring_elements": "0.92066", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.07687", "scoring_system": "epss", "scoring_elements": "0.92054", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-16541" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:P/I:N/A:N" }, { "value": "4.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1510816", "reference_id": "1510816", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1510816" }, { "reference_url": "https://security.gentoo.org/glsa/201811-13", "reference_id": "GLSA-201811-13", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201811-13" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-20", "reference_id": "mfsa2018-20", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-20" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-21", "reference_id": "mfsa2018-21", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-21" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-25", "reference_id": "mfsa2018-25", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-25" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2692", "reference_id": "RHSA-2018:2692", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2692" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2693", "reference_id": "RHSA-2018:2693", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2693" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3403", "reference_id": "RHSA-2018:3403", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3403" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3458", "reference_id": "RHSA-2018:3458", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3458" } ], "fixed_packages": [], "aliases": [ "CVE-2017-16541" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5xvv-hqxh-9uaw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1438?format=api", "vulnerability_id": "VCID-7h53-f3h7-bfhx", "summary": "Mozilla developers and community members Alex Gaynor, Boris Zbarsky, Christoph Diehl, Christian Holler, Jason Kratzer, Jed Davis, Tyson Smith, Bogdan Tara, Karl Tomlinson, Mats Palmgren, Nika Layzell, Ted Campbell, and Andrei Cristian Petcu reported memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12376.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12376.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-12376", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02953", "scoring_system": "epss", "scoring_elements": "0.86749", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.02953", "scoring_system": "epss", "scoring_elements": "0.86726", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-12376" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1625525", "reference_id": "1625525", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1625525" }, { "reference_url": "https://security.archlinux.org/ASA-201810-13", "reference_id": "ASA-201810-13", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201810-13" }, { "reference_url": "https://security.archlinux.org/AVG-782", "reference_id": "AVG-782", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-782" }, { "reference_url": "https://security.gentoo.org/glsa/201811-13", "reference_id": "GLSA-201811-13", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201811-13" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-20", "reference_id": "mfsa2018-20", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-20" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-21", "reference_id": "mfsa2018-21", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-21" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-25", "reference_id": "mfsa2018-25", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-25" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2692", "reference_id": "RHSA-2018:2692", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2692" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2693", "reference_id": "RHSA-2018:2693", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2693" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3403", "reference_id": "RHSA-2018:3403", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3403" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3458", "reference_id": "RHSA-2018:3458", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3458" }, { "reference_url": "https://usn.ubuntu.com/3761-1/", "reference_id": "USN-3761-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3761-1/" }, { "reference_url": "https://usn.ubuntu.com/3793-1/", "reference_id": "USN-3793-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3793-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2018-12376" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7h53-f3h7-bfhx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1434?format=api", "vulnerability_id": "VCID-aazs-ecx6-e7ch", "summary": "When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading to a potentially exploitable crash. This requires running the Mozilla Updater manually on the local system with the malicious MAR file in order to occur.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12379.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12379.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-12379", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00098", "scoring_system": "epss", "scoring_elements": "0.27031", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00098", "scoring_system": "epss", "scoring_elements": "0.26929", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-12379" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1625528", "reference_id": "1625528", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1625528" }, { "reference_url": "https://security.archlinux.org/ASA-201810-13", "reference_id": "ASA-201810-13", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201810-13" }, { "reference_url": "https://security.archlinux.org/AVG-782", "reference_id": "AVG-782", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-782" }, { "reference_url": "https://security.gentoo.org/glsa/201811-13", "reference_id": "GLSA-201811-13", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201811-13" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-20", "reference_id": "mfsa2018-20", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-20" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-21", "reference_id": "mfsa2018-21", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-21" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-25", "reference_id": "mfsa2018-25", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-25" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2692", "reference_id": "RHSA-2018:2692", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2692" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2693", "reference_id": "RHSA-2018:2693", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2693" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3403", "reference_id": "RHSA-2018:3403", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3403" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3458", "reference_id": "RHSA-2018:3458", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3458" } ], "fixed_packages": [], "aliases": [ "CVE-2018-12379" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-aazs-ecx6-e7ch" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1436?format=api", "vulnerability_id": "VCID-da2s-wmfa-xqf1", "summary": "A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory. This issue is only exploitable in combination with another vulnerability allowing an attacker to write data into the local cache or from locally installed malware. This issue also triggers a non-exploitable startup crash for users switching between the Nightly and Release versions of Firefox if the same profile is used.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12385.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12385.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-12385", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0006", "scoring_system": "epss", "scoring_elements": "0.18933", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0006", "scoring_system": "epss", "scoring_elements": "0.18858", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-12385" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1632062", "reference_id": "1632062", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1632062" }, { "reference_url": "https://security.archlinux.org/ASA-201810-13", "reference_id": "ASA-201810-13", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201810-13" }, { "reference_url": "https://security.archlinux.org/AVG-782", "reference_id": "AVG-782", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-782" }, { "reference_url": "https://security.gentoo.org/glsa/201811-13", "reference_id": "GLSA-201811-13", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201811-13" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-22", "reference_id": "mfsa2018-22", "reference_type": "", "scores": [ { "value": "none", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-22" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-23", "reference_id": "mfsa2018-23", "reference_type": "", "scores": [ { "value": "none", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-23" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-25", "reference_id": "mfsa2018-25", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-25" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2834", "reference_id": "RHSA-2018:2834", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2834" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2835", "reference_id": "RHSA-2018:2835", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2835" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3403", "reference_id": "RHSA-2018:3403", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3403" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3458", "reference_id": "RHSA-2018:3458", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3458" }, { "reference_url": "https://usn.ubuntu.com/3778-1/", "reference_id": "USN-3778-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3778-1/" }, { "reference_url": "https://usn.ubuntu.com/3793-1/", "reference_id": "USN-3793-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3793-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2018-12385" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-da2s-wmfa-xqf1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1432?format=api", "vulnerability_id": "VCID-spxa-ythw-gyg6", "summary": "A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to be stored. This results in a potentially exploitable crash.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12378.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12378.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-12378", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02953", "scoring_system": "epss", "scoring_elements": "0.86749", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.02953", "scoring_system": "epss", "scoring_elements": "0.86726", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-12378" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1625527", "reference_id": "1625527", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1625527" }, { "reference_url": "https://security.archlinux.org/ASA-201810-13", "reference_id": "ASA-201810-13", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201810-13" }, { "reference_url": "https://security.archlinux.org/AVG-782", "reference_id": "AVG-782", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-782" }, { "reference_url": "https://security.gentoo.org/glsa/201811-13", "reference_id": "GLSA-201811-13", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201811-13" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-20", "reference_id": "mfsa2018-20", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-20" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-21", "reference_id": "mfsa2018-21", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-21" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-25", "reference_id": "mfsa2018-25", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-25" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2692", "reference_id": "RHSA-2018:2692", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2692" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2693", "reference_id": "RHSA-2018:2693", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2693" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3403", "reference_id": "RHSA-2018:3403", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3403" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3458", "reference_id": "RHSA-2018:3458", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3458" }, { "reference_url": "https://usn.ubuntu.com/3761-1/", "reference_id": "USN-3761-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3761-1/" }, { "reference_url": "https://usn.ubuntu.com/3793-1/", "reference_id": "USN-3793-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3793-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2018-12378" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-spxa-ythw-gyg6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1433?format=api", "vulnerability_id": "VCID-wnqg-xnw4-wbhp", "summary": "A same-origin policy violation allowing the theft of cross-origin URL entries when using a <meta> meta http-equiv=\"refresh\" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18499.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18499.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-18499", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0012", "scoring_system": "epss", "scoring_elements": "0.3044", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0012", "scoring_system": "epss", "scoring_elements": "0.30512", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-18499" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1849971", "reference_id": "1849971", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1849971" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-20", "reference_id": "mfsa2018-20", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-20" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-21", "reference_id": "mfsa2018-21", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-21" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-25", "reference_id": "mfsa2018-25", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-25" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2692", "reference_id": "RHSA-2018:2692", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2692" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2693", "reference_id": "RHSA-2018:2693", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2693" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3403", "reference_id": "RHSA-2018:3403", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3403" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3458", "reference_id": "RHSA-2018:3458", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3458" } ], "fixed_packages": [], "aliases": [ "CVE-2018-18499" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wnqg-xnw4-wbhp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1431?format=api", "vulnerability_id": "VCID-xfu2-ppx1-fqgs", "summary": "A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use. This results in a potentially exploitable crash.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12377.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12377.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-12377", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02953", "scoring_system": "epss", "scoring_elements": "0.86749", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.02953", "scoring_system": "epss", "scoring_elements": "0.86726", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-12377" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1625526", "reference_id": "1625526", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1625526" }, { "reference_url": "https://security.archlinux.org/ASA-201810-13", "reference_id": "ASA-201810-13", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201810-13" }, { "reference_url": "https://security.archlinux.org/AVG-782", "reference_id": "AVG-782", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-782" }, { "reference_url": "https://security.gentoo.org/glsa/201811-13", "reference_id": "GLSA-201811-13", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201811-13" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-20", "reference_id": "mfsa2018-20", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-20" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-21", "reference_id": "mfsa2018-21", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-21" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-25", "reference_id": "mfsa2018-25", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-25" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2692", "reference_id": "RHSA-2018:2692", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2692" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2693", "reference_id": "RHSA-2018:2693", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2693" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3403", "reference_id": "RHSA-2018:3403", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3403" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3458", "reference_id": "RHSA-2018:3458", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3458" }, { "reference_url": "https://usn.ubuntu.com/3761-1/", "reference_id": "USN-3761-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3761-1/" }, { "reference_url": "https://usn.ubuntu.com/3793-1/", "reference_id": "USN-3793-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3793-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2018-12377" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xfu2-ppx1-fqgs" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1437?format=api", "vulnerability_id": "VCID-ynhx-gk9x-v3f3", "summary": "If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Firefox 58. The new master password is added only on the new file. This could allow the exposure of stored password data outside of user expectations.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12383.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12383.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-12383", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0008", "scoring_system": "epss", "scoring_elements": "0.23671", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0008", "scoring_system": "epss", "scoring_elements": "0.23588", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-12383" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12376" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12377" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12378" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12379" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12383" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12385" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18499" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1625531", "reference_id": "1625531", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1625531" }, { "reference_url": "https://security.archlinux.org/ASA-201810-13", "reference_id": "ASA-201810-13", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201810-13" }, { "reference_url": "https://security.archlinux.org/AVG-782", "reference_id": "AVG-782", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-782" }, { "reference_url": "https://security.gentoo.org/glsa/201811-13", "reference_id": "GLSA-201811-13", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201811-13" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-20", "reference_id": "mfsa2018-20", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-20" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-23", "reference_id": "mfsa2018-23", "reference_type": "", "scores": [ { "value": "none", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-23" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-25", "reference_id": "mfsa2018-25", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-25" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2834", "reference_id": "RHSA-2018:2834", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2834" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2835", "reference_id": "RHSA-2018:2835", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2835" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3403", "reference_id": "RHSA-2018:3403", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3403" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3458", "reference_id": "RHSA-2018:3458", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3458" }, { "reference_url": "https://usn.ubuntu.com/3761-1/", "reference_id": "USN-3761-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3761-1/" }, { "reference_url": "https://usn.ubuntu.com/3793-1/", "reference_id": "USN-3793-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3793-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2018-12383" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ynhx-gk9x-v3f3" } ], "fixing_vulnerabilities": [], "risk_score": "4.5", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/thunderbird@60.2.1-4%3Farch=el7_5" }