Lookup for vulnerable packages by Package URL.

Purlpkg:rpm/redhat/firefox@3.6.24-3?arch=el6_1
Typerpm
Namespaceredhat
Namefirefox
Version3.6.24-3
Qualifiers
arch el6_1
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-919p-8dqk-73du
vulnerability_id VCID-919p-8dqk-73du
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3650.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3650.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-3650
reference_id
reference_type
scores
0
value 0.01271
scoring_system epss
scoring_elements 0.79935
published_at 2026-06-11T12:55:00Z
1
value 0.01271
scoring_system epss
scoring_elements 0.79998
published_at 2026-06-12T12:55:00Z
2
value 0.01271
scoring_system epss
scoring_elements 0.80016
published_at 2026-06-13T12:55:00Z
3
value 0.01271
scoring_system epss
scoring_elements 0.80008
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-3650
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=751933
reference_id 751933
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=751933
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3650
reference_id CVE-2011-3650
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3650
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2011-49
reference_id mfsa2011-49
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2011-49
6
reference_url https://access.redhat.com/errata/RHSA-2011:1437
reference_id RHSA-2011:1437
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1437
7
reference_url https://access.redhat.com/errata/RHSA-2011:1439
reference_id RHSA-2011:1439
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1439
8
reference_url https://usn.ubuntu.com/1251-1/
reference_id USN-1251-1
reference_type
scores
url https://usn.ubuntu.com/1251-1/
9
reference_url https://usn.ubuntu.com/1254-1/
reference_id USN-1254-1
reference_type
scores
url https://usn.ubuntu.com/1254-1/
10
reference_url https://usn.ubuntu.com/1277-1/
reference_id USN-1277-1
reference_type
scores
url https://usn.ubuntu.com/1277-1/
11
reference_url https://usn.ubuntu.com/1282-1/
reference_id USN-1282-1
reference_type
scores
url https://usn.ubuntu.com/1282-1/
fixed_packages
aliases CVE-2011-3650
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-919p-8dqk-73du
1
url VCID-c676-v656-kqhe
vulnerability_id VCID-c676-v656-kqhe
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3648.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3648.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-3648
reference_id
reference_type
scores
0
value 0.00338
scoring_system epss
scoring_elements 0.57001
published_at 2026-06-11T12:55:00Z
1
value 0.00338
scoring_system epss
scoring_elements 0.5712
published_at 2026-06-12T12:55:00Z
2
value 0.00338
scoring_system epss
scoring_elements 0.57134
published_at 2026-06-13T12:55:00Z
3
value 0.00338
scoring_system epss
scoring_elements 0.57127
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-3648
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=751932
reference_id 751932
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=751932
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3648
reference_id CVE-2011-3648
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3648
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2011-47
reference_id mfsa2011-47
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2011-47
6
reference_url https://access.redhat.com/errata/RHSA-2011:1437
reference_id RHSA-2011:1437
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1437
7
reference_url https://access.redhat.com/errata/RHSA-2011:1438
reference_id RHSA-2011:1438
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1438
8
reference_url https://access.redhat.com/errata/RHSA-2011:1439
reference_id RHSA-2011:1439
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1439
9
reference_url https://access.redhat.com/errata/RHSA-2011:1440
reference_id RHSA-2011:1440
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1440
10
reference_url https://usn.ubuntu.com/1251-1/
reference_id USN-1251-1
reference_type
scores
url https://usn.ubuntu.com/1251-1/
11
reference_url https://usn.ubuntu.com/1254-1/
reference_id USN-1254-1
reference_type
scores
url https://usn.ubuntu.com/1254-1/
12
reference_url https://usn.ubuntu.com/1277-1/
reference_id USN-1277-1
reference_type
scores
url https://usn.ubuntu.com/1277-1/
13
reference_url https://usn.ubuntu.com/1282-1/
reference_id USN-1282-1
reference_type
scores
url https://usn.ubuntu.com/1282-1/
fixed_packages
aliases CVE-2011-3648
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c676-v656-kqhe
2
url VCID-tg2r-ue55-6qgr
vulnerability_id VCID-tg2r-ue55-6qgr
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3647.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3647.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-3647
reference_id
reference_type
scores
0
value 0.00769
scoring_system epss
scoring_elements 0.73951
published_at 2026-06-11T12:55:00Z
1
value 0.00769
scoring_system epss
scoring_elements 0.74024
published_at 2026-06-12T12:55:00Z
2
value 0.00769
scoring_system epss
scoring_elements 0.74038
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-3647
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=751931
reference_id 751931
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=751931
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3647
reference_id CVE-2011-3647
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3647
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2011-46
reference_id mfsa2011-46
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2011-46
6
reference_url https://access.redhat.com/errata/RHSA-2011:1437
reference_id RHSA-2011:1437
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1437
7
reference_url https://access.redhat.com/errata/RHSA-2011:1439
reference_id RHSA-2011:1439
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1439
8
reference_url https://usn.ubuntu.com/1251-1/
reference_id USN-1251-1
reference_type
scores
url https://usn.ubuntu.com/1251-1/
9
reference_url https://usn.ubuntu.com/1254-1/
reference_id USN-1254-1
reference_type
scores
url https://usn.ubuntu.com/1254-1/
fixed_packages
aliases CVE-2011-3647
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tg2r-ue55-6qgr
Fixing_vulnerabilities
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@3.6.24-3%3Farch=el6_1