Lookup for vulnerable packages by Package URL.

Purlpkg:rpm/redhat/firefox@3.6.23-2?arch=el6_1
Typerpm
Namespaceredhat
Namefirefox
Version3.6.23-2
Qualifiers
arch el6_1
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-3ruv-44ep-2kcx
vulnerability_id VCID-3ruv-44ep-2kcx
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2998.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2998.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-2998
reference_id
reference_type
scores
0
value 0.03711
scoring_system epss
scoring_elements 0.88234
published_at 2026-06-11T12:55:00Z
1
value 0.03711
scoring_system epss
scoring_elements 0.88274
published_at 2026-06-12T12:55:00Z
2
value 0.03711
scoring_system epss
scoring_elements 0.8828
published_at 2026-06-13T12:55:00Z
3
value 0.03711
scoring_system epss
scoring_elements 0.88279
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-2998
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=741924
reference_id 741924
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=741924
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2998
reference_id CVE-2011-2998
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2998
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2011-37
reference_id mfsa2011-37
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2011-37
6
reference_url https://access.redhat.com/errata/RHSA-2011:1341
reference_id RHSA-2011:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1341
7
reference_url https://access.redhat.com/errata/RHSA-2011:1342
reference_id RHSA-2011:1342
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1342
8
reference_url https://access.redhat.com/errata/RHSA-2011:1343
reference_id RHSA-2011:1343
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1343
9
reference_url https://access.redhat.com/errata/RHSA-2011:1344
reference_id RHSA-2011:1344
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1344
fixed_packages
aliases CVE-2011-2998
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3ruv-44ep-2kcx
1
url VCID-3utz-sxut-e3cr
vulnerability_id VCID-3utz-sxut-e3cr
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2999.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2999.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-2999
reference_id
reference_type
scores
0
value 0.00722
scoring_system epss
scoring_elements 0.7298
published_at 2026-06-11T12:55:00Z
1
value 0.00722
scoring_system epss
scoring_elements 0.73057
published_at 2026-06-12T12:55:00Z
2
value 0.00722
scoring_system epss
scoring_elements 0.73072
published_at 2026-06-13T12:55:00Z
3
value 0.00722
scoring_system epss
scoring_elements 0.7307
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-2999
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=741904
reference_id 741904
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=741904
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2999
reference_id CVE-2011-2999
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2999
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2011-38
reference_id mfsa2011-38
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2011-38
6
reference_url https://access.redhat.com/errata/RHSA-2011:1341
reference_id RHSA-2011:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1341
7
reference_url https://access.redhat.com/errata/RHSA-2011:1342
reference_id RHSA-2011:1342
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1342
8
reference_url https://access.redhat.com/errata/RHSA-2011:1343
reference_id RHSA-2011:1343
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1343
9
reference_url https://access.redhat.com/errata/RHSA-2011:1344
reference_id RHSA-2011:1344
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1344
10
reference_url https://usn.ubuntu.com/1210-1/
reference_id USN-1210-1
reference_type
scores
url https://usn.ubuntu.com/1210-1/
11
reference_url https://usn.ubuntu.com/1213-1/
reference_id USN-1213-1
reference_type
scores
url https://usn.ubuntu.com/1213-1/
12
reference_url https://usn.ubuntu.com/1222-1/
reference_id USN-1222-1
reference_type
scores
url https://usn.ubuntu.com/1222-1/
fixed_packages
aliases CVE-2011-2999
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3utz-sxut-e3cr
2
url VCID-46p1-7y1v-qfb7
vulnerability_id VCID-46p1-7y1v-qfb7
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3000.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3000.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-3000
reference_id
reference_type
scores
0
value 0.01301
scoring_system epss
scoring_elements 0.80153
published_at 2026-06-11T12:55:00Z
1
value 0.01301
scoring_system epss
scoring_elements 0.80215
published_at 2026-06-12T12:55:00Z
2
value 0.01301
scoring_system epss
scoring_elements 0.8023
published_at 2026-06-13T12:55:00Z
3
value 0.01301
scoring_system epss
scoring_elements 0.80222
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-3000
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=741905
reference_id 741905
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=741905
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3000
reference_id CVE-2011-3000
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3000
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2011-39
reference_id mfsa2011-39
reference_type
scores
0
value none
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2011-39
6
reference_url https://access.redhat.com/errata/RHSA-2011:1341
reference_id RHSA-2011:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1341
7
reference_url https://access.redhat.com/errata/RHSA-2011:1342
reference_id RHSA-2011:1342
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1342
8
reference_url https://usn.ubuntu.com/1210-1/
reference_id USN-1210-1
reference_type
scores
url https://usn.ubuntu.com/1210-1/
9
reference_url https://usn.ubuntu.com/1213-1/
reference_id USN-1213-1
reference_type
scores
url https://usn.ubuntu.com/1213-1/
10
reference_url https://usn.ubuntu.com/1222-1/
reference_id USN-1222-1
reference_type
scores
url https://usn.ubuntu.com/1222-1/
fixed_packages
aliases CVE-2011-3000
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-46p1-7y1v-qfb7
3
url VCID-ncgb-5qb6-r7ce
vulnerability_id VCID-ncgb-5qb6-r7ce
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2995.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2995.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-2995
reference_id
reference_type
scores
0
value 0.0266
scoring_system epss
scoring_elements 0.86112
published_at 2026-06-11T12:55:00Z
1
value 0.0266
scoring_system epss
scoring_elements 0.86163
published_at 2026-06-12T12:55:00Z
2
value 0.0266
scoring_system epss
scoring_elements 0.86174
published_at 2026-06-13T12:55:00Z
3
value 0.0266
scoring_system epss
scoring_elements 0.86172
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-2995
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=741902
reference_id 741902
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=741902
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2995
reference_id CVE-2011-2995
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2995
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2011-36
reference_id mfsa2011-36
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2011-36
6
reference_url https://access.redhat.com/errata/RHSA-2011:1341
reference_id RHSA-2011:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1341
7
reference_url https://access.redhat.com/errata/RHSA-2011:1342
reference_id RHSA-2011:1342
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1342
8
reference_url https://usn.ubuntu.com/1210-1/
reference_id USN-1210-1
reference_type
scores
url https://usn.ubuntu.com/1210-1/
9
reference_url https://usn.ubuntu.com/1213-1/
reference_id USN-1213-1
reference_type
scores
url https://usn.ubuntu.com/1213-1/
10
reference_url https://usn.ubuntu.com/1222-1/
reference_id USN-1222-1
reference_type
scores
url https://usn.ubuntu.com/1222-1/
fixed_packages
aliases CVE-2011-2995
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ncgb-5qb6-r7ce
4
url VCID-nx4g-qep4-jugk
vulnerability_id VCID-nx4g-qep4-jugk
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2372.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2372.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-2372
reference_id
reference_type
scores
0
value 0.00429
scoring_system epss
scoring_elements 0.62922
published_at 2026-06-11T12:55:00Z
1
value 0.00429
scoring_system epss
scoring_elements 0.63023
published_at 2026-06-12T12:55:00Z
2
value 0.00429
scoring_system epss
scoring_elements 0.63035
published_at 2026-06-13T12:55:00Z
3
value 0.00429
scoring_system epss
scoring_elements 0.63032
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-2372
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=741917
reference_id 741917
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=741917
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2372
reference_id CVE-2011-2372
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2372
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2011-40
reference_id mfsa2011-40
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2011-40
6
reference_url https://access.redhat.com/errata/RHSA-2011:1341
reference_id RHSA-2011:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1341
7
reference_url https://access.redhat.com/errata/RHSA-2011:1342
reference_id RHSA-2011:1342
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1342
8
reference_url https://usn.ubuntu.com/1210-1/
reference_id USN-1210-1
reference_type
scores
url https://usn.ubuntu.com/1210-1/
9
reference_url https://usn.ubuntu.com/1213-1/
reference_id USN-1213-1
reference_type
scores
url https://usn.ubuntu.com/1213-1/
10
reference_url https://usn.ubuntu.com/1222-1/
reference_id USN-1222-1
reference_type
scores
url https://usn.ubuntu.com/1222-1/
fixed_packages
aliases CVE-2011-2372
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nx4g-qep4-jugk
Fixing_vulnerabilities
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@3.6.23-2%3Farch=el6_1