| 0 |
| url |
VCID-1e61-jk2b-aubw |
| vulnerability_id |
VCID-1e61-jk2b-aubw |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox, the
worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-23994 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00348 |
| scoring_system |
epss |
| scoring_elements |
0.57347 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00348 |
| scoring_system |
epss |
| scoring_elements |
0.57368 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.00348 |
| scoring_system |
epss |
| scoring_elements |
0.57238 |
| published_at |
2026-04-01T12:55:00Z |
|
| 3 |
| value |
0.00348 |
| scoring_system |
epss |
| scoring_elements |
0.57388 |
| published_at |
2026-04-11T12:55:00Z |
|
| 4 |
| value |
0.00348 |
| scoring_system |
epss |
| scoring_elements |
0.57373 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00348 |
| scoring_system |
epss |
| scoring_elements |
0.57371 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.00348 |
| scoring_system |
epss |
| scoring_elements |
0.57344 |
| published_at |
2026-04-04T12:55:00Z |
|
| 7 |
| value |
0.00348 |
| scoring_system |
epss |
| scoring_elements |
0.5732 |
| published_at |
2026-04-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-23994 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-23994
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1e61-jk2b-aubw |
|
| 1 |
| url |
VCID-1rj3-tt63-4yc1 |
| vulnerability_id |
VCID-1rj3-tt63-4yc1 |
| summary |
Through use of reportValidity() and window.open(), a plain-text validation message could have been overlaid on another origin, leading to possible user confusion and spoofing attacks. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38497 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00197 |
| scoring_system |
epss |
| scoring_elements |
0.41657 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00197 |
| scoring_system |
epss |
| scoring_elements |
0.41672 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.00198 |
| scoring_system |
epss |
| scoring_elements |
0.41896 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.00198 |
| scoring_system |
epss |
| scoring_elements |
0.41831 |
| published_at |
2026-04-01T12:55:00Z |
|
| 4 |
| value |
0.00198 |
| scoring_system |
epss |
| scoring_elements |
0.41924 |
| published_at |
2026-04-04T12:55:00Z |
|
| 5 |
| value |
0.00198 |
| scoring_system |
epss |
| scoring_elements |
0.41851 |
| published_at |
2026-04-07T12:55:00Z |
|
| 6 |
| value |
0.00198 |
| scoring_system |
epss |
| scoring_elements |
0.419 |
| published_at |
2026-04-08T12:55:00Z |
|
| 7 |
| value |
0.00198 |
| scoring_system |
epss |
| scoring_elements |
0.41911 |
| published_at |
2026-04-09T12:55:00Z |
|
| 8 |
| value |
0.00198 |
| scoring_system |
epss |
| scoring_elements |
0.41935 |
| published_at |
2026-04-11T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38497 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38497
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1rj3-tt63-4yc1 |
|
| 2 |
| url |
VCID-2cd3-m37k-5ydh |
| vulnerability_id |
VCID-2cd3-m37k-5ydh |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox, the
worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29946 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.37243 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.374 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.37228 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.37279 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.37293 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.37304 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.3727 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.37207 |
| published_at |
2026-04-01T12:55:00Z |
|
| 8 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.37374 |
| published_at |
2026-04-02T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29946 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29946
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-2cd3-m37k-5ydh |
|
| 3 |
| url |
VCID-2k99-39yt-gkbe |
| vulnerability_id |
VCID-2k99-39yt-gkbe |
| summary |
During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploitable crash. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38496 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0109 |
| scoring_system |
epss |
| scoring_elements |
0.77937 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.0109 |
| scoring_system |
epss |
| scoring_elements |
0.77938 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.0149 |
| scoring_system |
epss |
| scoring_elements |
0.81001 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.0149 |
| scoring_system |
epss |
| scoring_elements |
0.80992 |
| published_at |
2026-04-01T12:55:00Z |
|
| 4 |
| value |
0.0149 |
| scoring_system |
epss |
| scoring_elements |
0.81025 |
| published_at |
2026-04-04T12:55:00Z |
|
| 5 |
| value |
0.0149 |
| scoring_system |
epss |
| scoring_elements |
0.81023 |
| published_at |
2026-04-07T12:55:00Z |
|
| 6 |
| value |
0.0149 |
| scoring_system |
epss |
| scoring_elements |
0.81051 |
| published_at |
2026-04-08T12:55:00Z |
|
| 7 |
| value |
0.0149 |
| scoring_system |
epss |
| scoring_elements |
0.81058 |
| published_at |
2026-04-09T12:55:00Z |
|
| 8 |
| value |
0.0149 |
| scoring_system |
epss |
| scoring_elements |
0.81076 |
| published_at |
2026-04-11T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38496 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
| 41 |
|
| 42 |
|
| 43 |
|
| 44 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38496
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-2k99-39yt-gkbe |
|
| 4 |
| url |
VCID-2syj-hbw7-fkbp |
| vulnerability_id |
VCID-2syj-hbw7-fkbp |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29988 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0062 |
| scoring_system |
epss |
| scoring_elements |
0.7003 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.0062 |
| scoring_system |
epss |
| scoring_elements |
0.70043 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.0062 |
| scoring_system |
epss |
| scoring_elements |
0.70059 |
| published_at |
2026-04-11T12:55:00Z |
|
| 3 |
| value |
0.0062 |
| scoring_system |
epss |
| scoring_elements |
0.69968 |
| published_at |
2026-04-01T12:55:00Z |
|
| 4 |
| value |
0.0062 |
| scoring_system |
epss |
| scoring_elements |
0.70035 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.0062 |
| scoring_system |
epss |
| scoring_elements |
0.70019 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.0062 |
| scoring_system |
epss |
| scoring_elements |
0.69971 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.0062 |
| scoring_system |
epss |
| scoring_elements |
0.69994 |
| published_at |
2026-04-04T12:55:00Z |
|
| 8 |
| value |
0.0062 |
| scoring_system |
epss |
| scoring_elements |
0.6998 |
| published_at |
2026-04-02T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29988 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29988
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-2syj-hbw7-fkbp |
|
| 5 |
| url |
VCID-3zwq-1hwc-3fgj |
| vulnerability_id |
VCID-3zwq-1hwc-3fgj |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29976 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0059 |
| scoring_system |
epss |
| scoring_elements |
0.69187 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.0059 |
| scoring_system |
epss |
| scoring_elements |
0.69158 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.0059 |
| scoring_system |
epss |
| scoring_elements |
0.69139 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.0059 |
| scoring_system |
epss |
| scoring_elements |
0.69189 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.0059 |
| scoring_system |
epss |
| scoring_elements |
0.69208 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.0059 |
| scoring_system |
epss |
| scoring_elements |
0.6923 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.0059 |
| scoring_system |
epss |
| scoring_elements |
0.69215 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.0059 |
| scoring_system |
epss |
| scoring_elements |
0.69121 |
| published_at |
2026-04-01T12:55:00Z |
|
| 8 |
| value |
0.0059 |
| scoring_system |
epss |
| scoring_elements |
0.69137 |
| published_at |
2026-04-02T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29976 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29976
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-3zwq-1hwc-3fgj |
|
| 6 |
| url |
VCID-4vt1-q4wj-87bm |
| vulnerability_id |
VCID-4vt1-q4wj-87bm |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29980 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.61371 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.6139 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.61405 |
| published_at |
2026-04-11T12:55:00Z |
|
| 3 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.61244 |
| published_at |
2026-04-01T12:55:00Z |
|
| 4 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.61384 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.61369 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.61322 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.61353 |
| published_at |
2026-04-04T12:55:00Z |
|
| 8 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.61324 |
| published_at |
2026-04-02T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29980 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29980
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-4vt1-q4wj-87bm |
|
| 7 |
| url |
VCID-5aga-y5nk-5fha |
| vulnerability_id |
VCID-5aga-y5nk-5fha |
| summary |
A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would processing incorrectly, leading to an out-of-bounds read.
*This bug only affects Firefox on Windows. Other operating systems are unaffected.* |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29964 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00324 |
| scoring_system |
epss |
| scoring_elements |
0.55463 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00324 |
| scoring_system |
epss |
| scoring_elements |
0.5544 |
| published_at |
2026-04-07T12:55:00Z |
|
| 2 |
| value |
0.00324 |
| scoring_system |
epss |
| scoring_elements |
0.55491 |
| published_at |
2026-04-09T12:55:00Z |
|
| 3 |
| value |
0.00324 |
| scoring_system |
epss |
| scoring_elements |
0.55501 |
| published_at |
2026-04-11T12:55:00Z |
|
| 4 |
| value |
0.00324 |
| scoring_system |
epss |
| scoring_elements |
0.5548 |
| published_at |
2026-04-12T12:55:00Z |
|
| 5 |
| value |
0.00324 |
| scoring_system |
epss |
| scoring_elements |
0.55326 |
| published_at |
2026-04-01T12:55:00Z |
|
| 6 |
| value |
0.00324 |
| scoring_system |
epss |
| scoring_elements |
0.55437 |
| published_at |
2026-04-02T12:55:00Z |
|
| 7 |
| value |
0.00324 |
| scoring_system |
epss |
| scoring_elements |
0.55461 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29964 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29964
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5aga-y5nk-5fha |
|
| 8 |
| url |
VCID-5qap-6r9b-6qbv |
| vulnerability_id |
VCID-5qap-6r9b-6qbv |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38493 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00418 |
| scoring_system |
epss |
| scoring_elements |
0.61856 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00418 |
| scoring_system |
epss |
| scoring_elements |
0.61802 |
| published_at |
2026-04-07T12:55:00Z |
|
| 2 |
| value |
0.00418 |
| scoring_system |
epss |
| scoring_elements |
0.61851 |
| published_at |
2026-04-08T12:55:00Z |
|
| 3 |
| value |
0.00418 |
| scoring_system |
epss |
| scoring_elements |
0.61867 |
| published_at |
2026-04-09T12:55:00Z |
|
| 4 |
| value |
0.00418 |
| scoring_system |
epss |
| scoring_elements |
0.61888 |
| published_at |
2026-04-11T12:55:00Z |
|
| 5 |
| value |
0.00418 |
| scoring_system |
epss |
| scoring_elements |
0.61876 |
| published_at |
2026-04-12T12:55:00Z |
|
| 6 |
| value |
0.00418 |
| scoring_system |
epss |
| scoring_elements |
0.61727 |
| published_at |
2026-04-01T12:55:00Z |
|
| 7 |
| value |
0.00418 |
| scoring_system |
epss |
| scoring_elements |
0.61801 |
| published_at |
2026-04-02T12:55:00Z |
|
| 8 |
| value |
0.00418 |
| scoring_system |
epss |
| scoring_elements |
0.61832 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38493 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38493
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5qap-6r9b-6qbv |
|
| 9 |
| url |
VCID-66dg-7sm8-vbgx |
| vulnerability_id |
VCID-66dg-7sm8-vbgx |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29970 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00742 |
| scoring_system |
epss |
| scoring_elements |
0.72962 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00742 |
| scoring_system |
epss |
| scoring_elements |
0.72936 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.00742 |
| scoring_system |
epss |
| scoring_elements |
0.72911 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.00742 |
| scoring_system |
epss |
| scoring_elements |
0.72949 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00742 |
| scoring_system |
epss |
| scoring_elements |
0.72963 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00742 |
| scoring_system |
epss |
| scoring_elements |
0.72988 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.00742 |
| scoring_system |
epss |
| scoring_elements |
0.72968 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.00742 |
| scoring_system |
epss |
| scoring_elements |
0.72905 |
| published_at |
2026-04-01T12:55:00Z |
|
| 8 |
| value |
0.00742 |
| scoring_system |
epss |
| scoring_elements |
0.72916 |
| published_at |
2026-04-02T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29970 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29970
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-66dg-7sm8-vbgx |
|
| 10 |
| url |
VCID-6fkp-5fzu-fydp |
| vulnerability_id |
VCID-6fkp-5fzu-fydp |
| summary |
Mozilla developers and community members Andreas Pehrson and Christian Holler reported memory safety bugs present in Thunderbird 91.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38500 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0109 |
| scoring_system |
epss |
| scoring_elements |
0.77937 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.0109 |
| scoring_system |
epss |
| scoring_elements |
0.77938 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.0149 |
| scoring_system |
epss |
| scoring_elements |
0.81001 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.0149 |
| scoring_system |
epss |
| scoring_elements |
0.80992 |
| published_at |
2026-04-01T12:55:00Z |
|
| 4 |
| value |
0.0149 |
| scoring_system |
epss |
| scoring_elements |
0.81025 |
| published_at |
2026-04-04T12:55:00Z |
|
| 5 |
| value |
0.0149 |
| scoring_system |
epss |
| scoring_elements |
0.81023 |
| published_at |
2026-04-07T12:55:00Z |
|
| 6 |
| value |
0.0149 |
| scoring_system |
epss |
| scoring_elements |
0.81051 |
| published_at |
2026-04-08T12:55:00Z |
|
| 7 |
| value |
0.0149 |
| scoring_system |
epss |
| scoring_elements |
0.81058 |
| published_at |
2026-04-09T12:55:00Z |
|
| 8 |
| value |
0.0149 |
| scoring_system |
epss |
| scoring_elements |
0.81076 |
| published_at |
2026-04-11T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38500 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
| 41 |
|
| 42 |
|
| 43 |
|
| 44 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38500
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6fkp-5fzu-fydp |
|
| 11 |
| url |
VCID-74zp-pzc4-efhm |
| vulnerability_id |
VCID-74zp-pzc4-efhm |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38495 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00548 |
| scoring_system |
epss |
| scoring_elements |
0.6789 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00548 |
| scoring_system |
epss |
| scoring_elements |
0.67902 |
| published_at |
2026-04-08T12:55:00Z |
|
| 2 |
| value |
0.00548 |
| scoring_system |
epss |
| scoring_elements |
0.67916 |
| published_at |
2026-04-09T12:55:00Z |
|
| 3 |
| value |
0.00548 |
| scoring_system |
epss |
| scoring_elements |
0.6794 |
| published_at |
2026-04-11T12:55:00Z |
|
| 4 |
| value |
0.00548 |
| scoring_system |
epss |
| scoring_elements |
0.67926 |
| published_at |
2026-04-12T12:55:00Z |
|
| 5 |
| value |
0.00548 |
| scoring_system |
epss |
| scoring_elements |
0.67828 |
| published_at |
2026-04-01T12:55:00Z |
|
| 6 |
| value |
0.00548 |
| scoring_system |
epss |
| scoring_elements |
0.67852 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00548 |
| scoring_system |
epss |
| scoring_elements |
0.67872 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38495 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38495
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-74zp-pzc4-efhm |
|
| 12 |
| url |
VCID-7fvy-7hpe-kbej |
| vulnerability_id |
VCID-7fvy-7hpe-kbej |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38492 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61061 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61081 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61094 |
| published_at |
2026-04-11T12:55:00Z |
|
| 3 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61073 |
| published_at |
2026-04-09T12:55:00Z |
|
| 4 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.60938 |
| published_at |
2026-04-01T12:55:00Z |
|
| 5 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61057 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61009 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61015 |
| published_at |
2026-04-02T12:55:00Z |
|
| 8 |
| value |
0.00406 |
| scoring_system |
epss |
| scoring_elements |
0.61044 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38492 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38492
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7fvy-7hpe-kbej |
|
| 13 |
| url |
VCID-8fu2-5gxg-ekhy |
| vulnerability_id |
VCID-8fu2-5gxg-ekhy |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox, the
worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-23961 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00632 |
| scoring_system |
epss |
| scoring_elements |
0.70325 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00632 |
| scoring_system |
epss |
| scoring_elements |
0.70294 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.00632 |
| scoring_system |
epss |
| scoring_elements |
0.7027 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.00632 |
| scoring_system |
epss |
| scoring_elements |
0.70315 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00632 |
| scoring_system |
epss |
| scoring_elements |
0.7033 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00632 |
| scoring_system |
epss |
| scoring_elements |
0.70353 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.00632 |
| scoring_system |
epss |
| scoring_elements |
0.70338 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.00632 |
| scoring_system |
epss |
| scoring_elements |
0.70264 |
| published_at |
2026-04-01T12:55:00Z |
|
| 8 |
| value |
0.00632 |
| scoring_system |
epss |
| scoring_elements |
0.70276 |
| published_at |
2026-04-02T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-23961 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-23961
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8fu2-5gxg-ekhy |
|
| 14 |
| url |
VCID-9kc8-k5kc-u7em |
| vulnerability_id |
VCID-9kc8-k5kc-u7em |
| summary |
Firefox incorrectly accepted a newline in a HTTP/3 header, interpreting it as two separate headers. This allowed for a header splitting attack against servers using HTTP/3. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29991 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00341 |
| scoring_system |
epss |
| scoring_elements |
0.56725 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00341 |
| scoring_system |
epss |
| scoring_elements |
0.56838 |
| published_at |
2026-04-13T12:55:00Z |
|
| 2 |
| value |
0.00341 |
| scoring_system |
epss |
| scoring_elements |
0.56868 |
| published_at |
2026-04-08T12:55:00Z |
|
| 3 |
| value |
0.00341 |
| scoring_system |
epss |
| scoring_elements |
0.56872 |
| published_at |
2026-04-09T12:55:00Z |
|
| 4 |
| value |
0.00341 |
| scoring_system |
epss |
| scoring_elements |
0.5688 |
| published_at |
2026-04-11T12:55:00Z |
|
| 5 |
| value |
0.00341 |
| scoring_system |
epss |
| scoring_elements |
0.5686 |
| published_at |
2026-04-12T12:55:00Z |
|
| 6 |
| value |
0.00341 |
| scoring_system |
epss |
| scoring_elements |
0.56819 |
| published_at |
2026-04-02T12:55:00Z |
|
| 7 |
| value |
0.00341 |
| scoring_system |
epss |
| scoring_elements |
0.5684 |
| published_at |
2026-04-04T12:55:00Z |
|
| 8 |
| value |
0.00341 |
| scoring_system |
epss |
| scoring_elements |
0.56816 |
| published_at |
2026-04-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29991 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29991
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9kc8-k5kc-u7em |
|
| 15 |
| url |
VCID-9y48-sjn7-rqeu |
| vulnerability_id |
VCID-9y48-sjn7-rqeu |
| summary |
Mozilla developers and community members Kevin Brosnan, Mihai Alexandru Michis, and Christian Holler reported memory safety bugs present in Thunderbird 91.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38501 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00505 |
| scoring_system |
epss |
| scoring_elements |
0.662 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00505 |
| scoring_system |
epss |
| scoring_elements |
0.66231 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.00673 |
| scoring_system |
epss |
| scoring_elements |
0.71341 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.00673 |
| scoring_system |
epss |
| scoring_elements |
0.71334 |
| published_at |
2026-04-01T12:55:00Z |
|
| 4 |
| value |
0.00673 |
| scoring_system |
epss |
| scoring_elements |
0.7136 |
| published_at |
2026-04-04T12:55:00Z |
|
| 5 |
| value |
0.00673 |
| scoring_system |
epss |
| scoring_elements |
0.71333 |
| published_at |
2026-04-07T12:55:00Z |
|
| 6 |
| value |
0.00673 |
| scoring_system |
epss |
| scoring_elements |
0.71374 |
| published_at |
2026-04-08T12:55:00Z |
|
| 7 |
| value |
0.00673 |
| scoring_system |
epss |
| scoring_elements |
0.71387 |
| published_at |
2026-04-09T12:55:00Z |
|
| 8 |
| value |
0.00673 |
| scoring_system |
epss |
| scoring_elements |
0.7141 |
| published_at |
2026-04-11T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38501 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38501
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9y48-sjn7-rqeu |
|
| 16 |
| url |
VCID-a659-299u-byfb |
| vulnerability_id |
VCID-a659-299u-byfb |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29986 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00587 |
| scoring_system |
epss |
| scoring_elements |
0.69102 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00587 |
| scoring_system |
epss |
| scoring_elements |
0.69131 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.00587 |
| scoring_system |
epss |
| scoring_elements |
0.69147 |
| published_at |
2026-04-11T12:55:00Z |
|
| 3 |
| value |
0.00587 |
| scoring_system |
epss |
| scoring_elements |
0.69036 |
| published_at |
2026-04-01T12:55:00Z |
|
| 4 |
| value |
0.00587 |
| scoring_system |
epss |
| scoring_elements |
0.69124 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00587 |
| scoring_system |
epss |
| scoring_elements |
0.69105 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.00587 |
| scoring_system |
epss |
| scoring_elements |
0.69055 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00587 |
| scoring_system |
epss |
| scoring_elements |
0.69075 |
| published_at |
2026-04-04T12:55:00Z |
|
| 8 |
| value |
0.00587 |
| scoring_system |
epss |
| scoring_elements |
0.69053 |
| published_at |
2026-04-02T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29986 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29986
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-a659-299u-byfb |
|
| 17 |
| url |
VCID-b2py-tgw4-hqh8 |
| vulnerability_id |
VCID-b2py-tgw4-hqh8 |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird,
the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29948 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00071 |
| scoring_system |
epss |
| scoring_elements |
0.2178 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00071 |
| scoring_system |
epss |
| scoring_elements |
0.21811 |
| published_at |
2026-04-13T12:55:00Z |
|
| 2 |
| value |
0.00071 |
| scoring_system |
epss |
| scoring_elements |
0.21897 |
| published_at |
2026-04-09T12:55:00Z |
|
| 3 |
| value |
0.00071 |
| scoring_system |
epss |
| scoring_elements |
0.21908 |
| published_at |
2026-04-11T12:55:00Z |
|
| 4 |
| value |
0.00071 |
| scoring_system |
epss |
| scoring_elements |
0.21868 |
| published_at |
2026-04-12T12:55:00Z |
|
| 5 |
| value |
0.00071 |
| scoring_system |
epss |
| scoring_elements |
0.21945 |
| published_at |
2026-04-02T12:55:00Z |
|
| 6 |
| value |
0.00071 |
| scoring_system |
epss |
| scoring_elements |
0.21998 |
| published_at |
2026-04-04T12:55:00Z |
|
| 7 |
| value |
0.00071 |
| scoring_system |
epss |
| scoring_elements |
0.21764 |
| published_at |
2026-04-07T12:55:00Z |
|
| 8 |
| value |
0.00071 |
| scoring_system |
epss |
| scoring_elements |
0.21841 |
| published_at |
2026-04-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29948 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29948
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-b2py-tgw4-hqh8 |
|
| 18 |
| url |
VCID-b8c2-qrxm-sybt |
| vulnerability_id |
VCID-b8c2-qrxm-sybt |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38508 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56284 |
| published_at |
2026-04-09T12:55:00Z |
|
| 1 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56279 |
| published_at |
2026-04-08T12:55:00Z |
|
| 2 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56294 |
| published_at |
2026-04-11T12:55:00Z |
|
| 3 |
| value |
0.00339 |
| scoring_system |
epss |
| scoring_elements |
0.56726 |
| published_at |
2026-04-12T12:55:00Z |
|
| 4 |
| value |
0.00339 |
| scoring_system |
epss |
| scoring_elements |
0.56705 |
| published_at |
2026-04-13T12:55:00Z |
|
| 5 |
| value |
0.00437 |
| scoring_system |
epss |
| scoring_elements |
0.63004 |
| published_at |
2026-04-02T12:55:00Z |
|
| 6 |
| value |
0.00437 |
| scoring_system |
epss |
| scoring_elements |
0.62945 |
| published_at |
2026-04-01T12:55:00Z |
|
| 7 |
| value |
0.00437 |
| scoring_system |
epss |
| scoring_elements |
0.63033 |
| published_at |
2026-04-04T12:55:00Z |
|
| 8 |
| value |
0.00443 |
| scoring_system |
epss |
| scoring_elements |
0.63313 |
| published_at |
2026-04-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38508 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
| 41 |
|
| 42 |
|
| 43 |
|
| 44 |
|
| 45 |
|
| 46 |
|
| 47 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38508
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-b8c2-qrxm-sybt |
|
| 19 |
| url |
VCID-b911-qnc2-x3aj |
| vulnerability_id |
VCID-b911-qnc2-x3aj |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38509 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00401 |
| scoring_system |
epss |
| scoring_elements |
0.60757 |
| published_at |
2026-04-09T12:55:00Z |
|
| 1 |
| value |
0.00401 |
| scoring_system |
epss |
| scoring_elements |
0.60742 |
| published_at |
2026-04-08T12:55:00Z |
|
| 2 |
| value |
0.00401 |
| scoring_system |
epss |
| scoring_elements |
0.60782 |
| published_at |
2026-04-11T12:55:00Z |
|
| 3 |
| value |
0.00407 |
| scoring_system |
epss |
| scoring_elements |
0.61142 |
| published_at |
2026-04-12T12:55:00Z |
|
| 4 |
| value |
0.00407 |
| scoring_system |
epss |
| scoring_elements |
0.61122 |
| published_at |
2026-04-13T12:55:00Z |
|
| 5 |
| value |
0.00524 |
| scoring_system |
epss |
| scoring_elements |
0.66896 |
| published_at |
2026-04-02T12:55:00Z |
|
| 6 |
| value |
0.00524 |
| scoring_system |
epss |
| scoring_elements |
0.66858 |
| published_at |
2026-04-01T12:55:00Z |
|
| 7 |
| value |
0.00524 |
| scoring_system |
epss |
| scoring_elements |
0.66922 |
| published_at |
2026-04-04T12:55:00Z |
|
| 8 |
| value |
0.00532 |
| scoring_system |
epss |
| scoring_elements |
0.67244 |
| published_at |
2026-04-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38509 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
| 41 |
|
| 42 |
|
| 43 |
|
| 44 |
|
| 45 |
|
| 46 |
|
| 47 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38509
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-b911-qnc2-x3aj |
|
| 20 |
| url |
VCID-c51s-yenc-4yab |
| vulnerability_id |
VCID-c51s-yenc-4yab |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38504 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00805 |
| scoring_system |
epss |
| scoring_elements |
0.74085 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00805 |
| scoring_system |
epss |
| scoring_elements |
0.74117 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.00805 |
| scoring_system |
epss |
| scoring_elements |
0.74091 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.01301 |
| scoring_system |
epss |
| scoring_elements |
0.79725 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.01301 |
| scoring_system |
epss |
| scoring_elements |
0.79731 |
| published_at |
2026-04-12T12:55:00Z |
|
| 5 |
| value |
0.01711 |
| scoring_system |
epss |
| scoring_elements |
0.82324 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.01711 |
| scoring_system |
epss |
| scoring_elements |
0.82351 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.01711 |
| scoring_system |
epss |
| scoring_elements |
0.82332 |
| published_at |
2026-04-09T12:55:00Z |
|
| 8 |
| value |
0.01711 |
| scoring_system |
epss |
| scoring_elements |
0.82297 |
| published_at |
2026-04-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38504 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
| 41 |
|
| 42 |
|
| 43 |
|
| 44 |
|
| 45 |
|
| 46 |
|
| 47 |
|
| 48 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38504
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-c51s-yenc-4yab |
|
| 21 |
| url |
VCID-ddem-1dt1-uff7 |
| vulnerability_id |
VCID-ddem-1dt1-uff7 |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38503 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01079 |
| scoring_system |
epss |
| scoring_elements |
0.77815 |
| published_at |
2026-04-09T12:55:00Z |
|
| 1 |
| value |
0.01079 |
| scoring_system |
epss |
| scoring_elements |
0.7781 |
| published_at |
2026-04-08T12:55:00Z |
|
| 2 |
| value |
0.01079 |
| scoring_system |
epss |
| scoring_elements |
0.77826 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.01079 |
| scoring_system |
epss |
| scoring_elements |
0.77825 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.01079 |
| scoring_system |
epss |
| scoring_elements |
0.77841 |
| published_at |
2026-04-11T12:55:00Z |
|
| 5 |
| value |
0.01405 |
| scoring_system |
epss |
| scoring_elements |
0.8041 |
| published_at |
2026-04-02T12:55:00Z |
|
| 6 |
| value |
0.01405 |
| scoring_system |
epss |
| scoring_elements |
0.80404 |
| published_at |
2026-04-01T12:55:00Z |
|
| 7 |
| value |
0.01405 |
| scoring_system |
epss |
| scoring_elements |
0.80431 |
| published_at |
2026-04-04T12:55:00Z |
|
| 8 |
| value |
0.01405 |
| scoring_system |
epss |
| scoring_elements |
0.8042 |
| published_at |
2026-04-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38503 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
| 41 |
|
| 42 |
|
| 43 |
|
| 44 |
|
| 45 |
|
| 46 |
|
| 47 |
|
| 48 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38503
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ddem-1dt1-uff7 |
|
| 22 |
| url |
VCID-dedv-96fb-vyhp |
| vulnerability_id |
VCID-dedv-96fb-vyhp |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29967 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00365 |
| scoring_system |
epss |
| scoring_elements |
0.58499 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00365 |
| scoring_system |
epss |
| scoring_elements |
0.58463 |
| published_at |
2026-04-07T12:55:00Z |
|
| 2 |
| value |
0.00365 |
| scoring_system |
epss |
| scoring_elements |
0.58515 |
| published_at |
2026-04-08T12:55:00Z |
|
| 3 |
| value |
0.00365 |
| scoring_system |
epss |
| scoring_elements |
0.58521 |
| published_at |
2026-04-09T12:55:00Z |
|
| 4 |
| value |
0.00365 |
| scoring_system |
epss |
| scoring_elements |
0.58538 |
| published_at |
2026-04-11T12:55:00Z |
|
| 5 |
| value |
0.00365 |
| scoring_system |
epss |
| scoring_elements |
0.58519 |
| published_at |
2026-04-12T12:55:00Z |
|
| 6 |
| value |
0.00365 |
| scoring_system |
epss |
| scoring_elements |
0.58386 |
| published_at |
2026-04-01T12:55:00Z |
|
| 7 |
| value |
0.00365 |
| scoring_system |
epss |
| scoring_elements |
0.58471 |
| published_at |
2026-04-02T12:55:00Z |
|
| 8 |
| value |
0.00365 |
| scoring_system |
epss |
| scoring_elements |
0.58491 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29967 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29967
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dedv-96fb-vyhp |
|
| 23 |
| url |
VCID-e38r-grgp-rfbn |
| vulnerability_id |
VCID-e38r-grgp-rfbn |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox, the
worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-23998 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.37229 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.37387 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.37215 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.37267 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.3728 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.37291 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.37257 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.37195 |
| published_at |
2026-04-01T12:55:00Z |
|
| 8 |
| value |
0.00163 |
| scoring_system |
epss |
| scoring_elements |
0.37361 |
| published_at |
2026-04-02T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-23998 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-23998
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-e38r-grgp-rfbn |
|
| 24 |
| url |
VCID-ea7p-189v-mqbq |
| vulnerability_id |
VCID-ea7p-189v-mqbq |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29969 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00396 |
| scoring_system |
epss |
| scoring_elements |
0.60286 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00396 |
| scoring_system |
epss |
| scoring_elements |
0.60408 |
| published_at |
2026-04-13T12:55:00Z |
|
| 2 |
| value |
0.00396 |
| scoring_system |
epss |
| scoring_elements |
0.60421 |
| published_at |
2026-04-09T12:55:00Z |
|
| 3 |
| value |
0.00396 |
| scoring_system |
epss |
| scoring_elements |
0.60442 |
| published_at |
2026-04-11T12:55:00Z |
|
| 4 |
| value |
0.00396 |
| scoring_system |
epss |
| scoring_elements |
0.60428 |
| published_at |
2026-04-12T12:55:00Z |
|
| 5 |
| value |
0.00396 |
| scoring_system |
epss |
| scoring_elements |
0.60361 |
| published_at |
2026-04-02T12:55:00Z |
|
| 6 |
| value |
0.00396 |
| scoring_system |
epss |
| scoring_elements |
0.60388 |
| published_at |
2026-04-04T12:55:00Z |
|
| 7 |
| value |
0.00396 |
| scoring_system |
epss |
| scoring_elements |
0.60356 |
| published_at |
2026-04-07T12:55:00Z |
|
| 8 |
| value |
0.00396 |
| scoring_system |
epss |
| scoring_elements |
0.60405 |
| published_at |
2026-04-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29969 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29969
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ea7p-189v-mqbq |
|
| 25 |
| url |
VCID-hhu1-cgcx-nfev |
| vulnerability_id |
VCID-hhu1-cgcx-nfev |
| summary |
During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitable crash. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38498 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00272 |
| scoring_system |
epss |
| scoring_elements |
0.50665 |
| published_at |
2026-04-11T12:55:00Z |
|
| 1 |
| value |
0.00272 |
| scoring_system |
epss |
| scoring_elements |
0.50623 |
| published_at |
2026-04-09T12:55:00Z |
|
| 2 |
| value |
0.00272 |
| scoring_system |
epss |
| scoring_elements |
0.50536 |
| published_at |
2026-04-01T12:55:00Z |
|
| 3 |
| value |
0.00272 |
| scoring_system |
epss |
| scoring_elements |
0.50626 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00272 |
| scoring_system |
epss |
| scoring_elements |
0.50572 |
| published_at |
2026-04-07T12:55:00Z |
|
| 5 |
| value |
0.00272 |
| scoring_system |
epss |
| scoring_elements |
0.50592 |
| published_at |
2026-04-02T12:55:00Z |
|
| 6 |
| value |
0.00272 |
| scoring_system |
epss |
| scoring_elements |
0.50619 |
| published_at |
2026-04-04T12:55:00Z |
|
| 7 |
| value |
0.007 |
| scoring_system |
epss |
| scoring_elements |
0.71993 |
| published_at |
2026-04-13T12:55:00Z |
|
| 8 |
| value |
0.007 |
| scoring_system |
epss |
| scoring_elements |
0.72008 |
| published_at |
2026-04-12T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38498 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38498
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-hhu1-cgcx-nfev |
|
| 26 |
| url |
VCID-jy6e-d578-nkcg |
| vulnerability_id |
VCID-jy6e-d578-nkcg |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38507 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00459 |
| scoring_system |
epss |
| scoring_elements |
0.64007 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00459 |
| scoring_system |
epss |
| scoring_elements |
0.64093 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.00459 |
| scoring_system |
epss |
| scoring_elements |
0.64065 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.00531 |
| scoring_system |
epss |
| scoring_elements |
0.67246 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00531 |
| scoring_system |
epss |
| scoring_elements |
0.67281 |
| published_at |
2026-04-12T12:55:00Z |
|
| 5 |
| value |
0.00537 |
| scoring_system |
epss |
| scoring_elements |
0.67544 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.00537 |
| scoring_system |
epss |
| scoring_elements |
0.67581 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.00537 |
| scoring_system |
epss |
| scoring_elements |
0.67559 |
| published_at |
2026-04-09T12:55:00Z |
|
| 8 |
| value |
0.00537 |
| scoring_system |
epss |
| scoring_elements |
0.67492 |
| published_at |
2026-04-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38507 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
| 41 |
|
| 42 |
|
| 43 |
|
| 44 |
|
| 45 |
|
| 46 |
|
| 47 |
|
| 48 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38507
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jy6e-d578-nkcg |
|
| 27 |
| url |
VCID-k4e4-363e-xyff |
| vulnerability_id |
VCID-k4e4-363e-xyff |
| summary |
Mozilla developers and community members Christian Holler, Valentin Gosu, and Andrew McCreight reported memory safety bugs present in Firefox 93 and Firefox ESR 91.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-43534 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00754 |
| scoring_system |
epss |
| scoring_elements |
0.73172 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00754 |
| scoring_system |
epss |
| scoring_elements |
0.73202 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.00754 |
| scoring_system |
epss |
| scoring_elements |
0.73182 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.01193 |
| scoring_system |
epss |
| scoring_elements |
0.78854 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.01193 |
| scoring_system |
epss |
| scoring_elements |
0.78864 |
| published_at |
2026-04-12T12:55:00Z |
|
| 5 |
| value |
0.0163 |
| scoring_system |
epss |
| scoring_elements |
0.8188 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.0163 |
| scoring_system |
epss |
| scoring_elements |
0.81847 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.0163 |
| scoring_system |
epss |
| scoring_elements |
0.81874 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.0163 |
| scoring_system |
epss |
| scoring_elements |
0.819 |
| published_at |
2026-04-11T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-43534 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-43534
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-k4e4-363e-xyff |
|
| 28 |
| url |
VCID-kat5-hy8e-skah |
| vulnerability_id |
VCID-kat5-hy8e-skah |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29989 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00521 |
| scoring_system |
epss |
| scoring_elements |
0.66845 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00521 |
| scoring_system |
epss |
| scoring_elements |
0.66877 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.00521 |
| scoring_system |
epss |
| scoring_elements |
0.66891 |
| published_at |
2026-04-11T12:55:00Z |
|
| 3 |
| value |
0.00521 |
| scoring_system |
epss |
| scoring_elements |
0.66773 |
| published_at |
2026-04-01T12:55:00Z |
|
| 4 |
| value |
0.00521 |
| scoring_system |
epss |
| scoring_elements |
0.66871 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00521 |
| scoring_system |
epss |
| scoring_elements |
0.66858 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.00521 |
| scoring_system |
epss |
| scoring_elements |
0.66809 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00521 |
| scoring_system |
epss |
| scoring_elements |
0.66836 |
| published_at |
2026-04-04T12:55:00Z |
|
| 8 |
| value |
0.00521 |
| scoring_system |
epss |
| scoring_elements |
0.66811 |
| published_at |
2026-04-02T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29989 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29989
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-kat5-hy8e-skah |
|
| 29 |
| url |
VCID-khsw-jwtm-8faq |
| vulnerability_id |
VCID-khsw-jwtm-8faq |
| summary |
A use-after-free could have occurred when an HTTP2 session object was released on a different thread, leading to memory corruption and a potentially exploitable crash. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-43535 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01193 |
| scoring_system |
epss |
| scoring_elements |
0.78854 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.01193 |
| scoring_system |
epss |
| scoring_elements |
0.78864 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.0163 |
| scoring_system |
epss |
| scoring_elements |
0.8185 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.0163 |
| scoring_system |
epss |
| scoring_elements |
0.81817 |
| published_at |
2026-04-01T12:55:00Z |
|
| 4 |
| value |
0.0163 |
| scoring_system |
epss |
| scoring_elements |
0.81827 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.0163 |
| scoring_system |
epss |
| scoring_elements |
0.81874 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.0163 |
| scoring_system |
epss |
| scoring_elements |
0.8188 |
| published_at |
2026-04-09T12:55:00Z |
|
| 7 |
| value |
0.0163 |
| scoring_system |
epss |
| scoring_elements |
0.819 |
| published_at |
2026-04-11T12:55:00Z |
|
| 8 |
| value |
0.0163 |
| scoring_system |
epss |
| scoring_elements |
0.81847 |
| published_at |
2026-04-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-43535 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-43535
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-khsw-jwtm-8faq |
|
| 30 |
| url |
VCID-mkyz-6v1k-wyen |
| vulnerability_id |
VCID-mkyz-6v1k-wyen |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29987 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0031 |
| scoring_system |
epss |
| scoring_elements |
0.5421 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.0031 |
| scoring_system |
epss |
| scoring_elements |
0.54203 |
| published_at |
2026-04-08T12:55:00Z |
|
| 2 |
| value |
0.0031 |
| scoring_system |
epss |
| scoring_elements |
0.54199 |
| published_at |
2026-04-09T12:55:00Z |
|
| 3 |
| value |
0.0031 |
| scoring_system |
epss |
| scoring_elements |
0.54249 |
| published_at |
2026-04-11T12:55:00Z |
|
| 4 |
| value |
0.0031 |
| scoring_system |
epss |
| scoring_elements |
0.54231 |
| published_at |
2026-04-12T12:55:00Z |
|
| 5 |
| value |
0.0031 |
| scoring_system |
epss |
| scoring_elements |
0.54129 |
| published_at |
2026-04-01T12:55:00Z |
|
| 6 |
| value |
0.0031 |
| scoring_system |
epss |
| scoring_elements |
0.54147 |
| published_at |
2026-04-02T12:55:00Z |
|
| 7 |
| value |
0.0031 |
| scoring_system |
epss |
| scoring_elements |
0.54176 |
| published_at |
2026-04-04T12:55:00Z |
|
| 8 |
| value |
0.0031 |
| scoring_system |
epss |
| scoring_elements |
0.54151 |
| published_at |
2026-04-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29987 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29987
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mkyz-6v1k-wyen |
|
| 31 |
| url |
VCID-n4kc-y37w-qkdk |
| vulnerability_id |
VCID-n4kc-y37w-qkdk |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38506 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00297 |
| scoring_system |
epss |
| scoring_elements |
0.52992 |
| published_at |
2026-04-04T12:55:00Z |
|
| 1 |
| value |
0.00297 |
| scoring_system |
epss |
| scoring_elements |
0.52943 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.00297 |
| scoring_system |
epss |
| scoring_elements |
0.52968 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.00778 |
| scoring_system |
epss |
| scoring_elements |
0.73599 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.00778 |
| scoring_system |
epss |
| scoring_elements |
0.73634 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.00778 |
| scoring_system |
epss |
| scoring_elements |
0.73647 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.00778 |
| scoring_system |
epss |
| scoring_elements |
0.7367 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.0087 |
| scoring_system |
epss |
| scoring_elements |
0.75185 |
| published_at |
2026-04-13T12:55:00Z |
|
| 8 |
| value |
0.0087 |
| scoring_system |
epss |
| scoring_elements |
0.75197 |
| published_at |
2026-04-12T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38506 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
| 41 |
|
| 42 |
|
| 43 |
|
| 44 |
|
| 45 |
|
| 46 |
|
| 47 |
|
| 48 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38506
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-n4kc-y37w-qkdk |
|
| 32 |
| url |
VCID-q5ch-b97k-k3hp |
| vulnerability_id |
VCID-q5ch-b97k-k3hp |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29982 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00383 |
| scoring_system |
epss |
| scoring_elements |
0.59621 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00383 |
| scoring_system |
epss |
| scoring_elements |
0.59625 |
| published_at |
2026-04-08T12:55:00Z |
|
| 2 |
| value |
0.00383 |
| scoring_system |
epss |
| scoring_elements |
0.59638 |
| published_at |
2026-04-09T12:55:00Z |
|
| 3 |
| value |
0.00383 |
| scoring_system |
epss |
| scoring_elements |
0.59658 |
| published_at |
2026-04-11T12:55:00Z |
|
| 4 |
| value |
0.00383 |
| scoring_system |
epss |
| scoring_elements |
0.5964 |
| published_at |
2026-04-12T12:55:00Z |
|
| 5 |
| value |
0.00383 |
| scoring_system |
epss |
| scoring_elements |
0.59506 |
| published_at |
2026-04-01T12:55:00Z |
|
| 6 |
| value |
0.00383 |
| scoring_system |
epss |
| scoring_elements |
0.5958 |
| published_at |
2026-04-02T12:55:00Z |
|
| 7 |
| value |
0.00383 |
| scoring_system |
epss |
| scoring_elements |
0.59605 |
| published_at |
2026-04-04T12:55:00Z |
|
| 8 |
| value |
0.00383 |
| scoring_system |
epss |
| scoring_elements |
0.59574 |
| published_at |
2026-04-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29982 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29982
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-q5ch-b97k-k3hp |
|
| 33 |
| url |
VCID-q77k-hc9g-9fhm |
| vulnerability_id |
VCID-q77k-hc9g-9fhm |
| summary |
The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop the service. This could be used to prevent the browser update service from operating (if an attacker spammed the 'Stop' command); but also exposed attack surface in the maintenance service.*Note: This issue only affected Windows operating systems older than Win 10 build 1709. Other operating systems are unaffected.* |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29951 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00531 |
| scoring_system |
epss |
| scoring_elements |
0.67271 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00531 |
| scoring_system |
epss |
| scoring_elements |
0.67236 |
| published_at |
2026-04-07T12:55:00Z |
|
| 2 |
| value |
0.00531 |
| scoring_system |
epss |
| scoring_elements |
0.67287 |
| published_at |
2026-04-08T12:55:00Z |
|
| 3 |
| value |
0.00531 |
| scoring_system |
epss |
| scoring_elements |
0.673 |
| published_at |
2026-04-09T12:55:00Z |
|
| 4 |
| value |
0.00531 |
| scoring_system |
epss |
| scoring_elements |
0.6732 |
| published_at |
2026-04-11T12:55:00Z |
|
| 5 |
| value |
0.00531 |
| scoring_system |
epss |
| scoring_elements |
0.67307 |
| published_at |
2026-04-12T12:55:00Z |
|
| 6 |
| value |
0.00531 |
| scoring_system |
epss |
| scoring_elements |
0.67198 |
| published_at |
2026-04-01T12:55:00Z |
|
| 7 |
| value |
0.00531 |
| scoring_system |
epss |
| scoring_elements |
0.67235 |
| published_at |
2026-04-02T12:55:00Z |
|
| 8 |
| value |
0.00531 |
| scoring_system |
epss |
| scoring_elements |
0.67259 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29951 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29951
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-q77k-hc9g-9fhm |
|
| 34 |
| url |
VCID-qq5h-5k45-rycm |
| vulnerability_id |
VCID-qq5h-5k45-rycm |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox, the
worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-23995 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01035 |
| scoring_system |
epss |
| scoring_elements |
0.7738 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.01035 |
| scoring_system |
epss |
| scoring_elements |
0.77357 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.01035 |
| scoring_system |
epss |
| scoring_elements |
0.77337 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.01035 |
| scoring_system |
epss |
| scoring_elements |
0.77368 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.01035 |
| scoring_system |
epss |
| scoring_elements |
0.77377 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.01035 |
| scoring_system |
epss |
| scoring_elements |
0.77404 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.01035 |
| scoring_system |
epss |
| scoring_elements |
0.77383 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.01035 |
| scoring_system |
epss |
| scoring_elements |
0.77322 |
| published_at |
2026-04-01T12:55:00Z |
|
| 8 |
| value |
0.01035 |
| scoring_system |
epss |
| scoring_elements |
0.77328 |
| published_at |
2026-04-02T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-23995 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-23995
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qq5h-5k45-rycm |
|
| 35 |
| url |
VCID-qv8f-9y37-bbdk |
| vulnerability_id |
VCID-qv8f-9y37-bbdk |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29985 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.61371 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.6139 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.61405 |
| published_at |
2026-04-11T12:55:00Z |
|
| 3 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.61244 |
| published_at |
2026-04-01T12:55:00Z |
|
| 4 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.61384 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.61369 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.61322 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.61353 |
| published_at |
2026-04-04T12:55:00Z |
|
| 8 |
| value |
0.00411 |
| scoring_system |
epss |
| scoring_elements |
0.61324 |
| published_at |
2026-04-02T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29985 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29985
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qv8f-9y37-bbdk |
|
| 36 |
| url |
VCID-t769-2t1u-57b6 |
| vulnerability_id |
VCID-t769-2t1u-57b6 |
| summary |
Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to the clipboard to the cloud, and make it available on other computers in certain scenarios. Applications that wish to prevent copied data from being recorded in Cloud History must use specific clipboard formats; and Firefox before versions 94 and ESR 91.3 did not implement them. This could have caused sensitive data to be recorded to a user's Microsoft account.*This bug only affects Firefox for Windows 10+ with Cloud Clipboard enabled. Other operating systems are unaffected.* |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38505 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00354 |
| scoring_system |
epss |
| scoring_elements |
0.57727 |
| published_at |
2026-04-07T12:55:00Z |
|
| 1 |
| value |
0.00354 |
| scoring_system |
epss |
| scoring_elements |
0.57778 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.00354 |
| scoring_system |
epss |
| scoring_elements |
0.57782 |
| published_at |
2026-04-08T12:55:00Z |
|
| 3 |
| value |
0.00354 |
| scoring_system |
epss |
| scoring_elements |
0.57757 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00354 |
| scoring_system |
epss |
| scoring_elements |
0.578 |
| published_at |
2026-04-11T12:55:00Z |
|
| 5 |
| value |
0.00354 |
| scoring_system |
epss |
| scoring_elements |
0.57784 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.00444 |
| scoring_system |
epss |
| scoring_elements |
0.6336 |
| published_at |
2026-04-02T12:55:00Z |
|
| 7 |
| value |
0.00444 |
| scoring_system |
epss |
| scoring_elements |
0.633 |
| published_at |
2026-04-01T12:55:00Z |
|
| 8 |
| value |
0.00444 |
| scoring_system |
epss |
| scoring_elements |
0.63387 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38505 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38505
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-t769-2t1u-57b6 |
|
| 37 |
| url |
VCID-teh4-fmg6-53ab |
| vulnerability_id |
VCID-teh4-fmg6-53ab |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-30547 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.02527 |
| scoring_system |
epss |
| scoring_elements |
0.85431 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.02527 |
| scoring_system |
epss |
| scoring_elements |
0.85435 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.02527 |
| scoring_system |
epss |
| scoring_elements |
0.85358 |
| published_at |
2026-04-01T12:55:00Z |
|
| 3 |
| value |
0.02527 |
| scoring_system |
epss |
| scoring_elements |
0.85436 |
| published_at |
2026-04-11T12:55:00Z |
|
| 4 |
| value |
0.02527 |
| scoring_system |
epss |
| scoring_elements |
0.85422 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.02527 |
| scoring_system |
epss |
| scoring_elements |
0.85413 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.02527 |
| scoring_system |
epss |
| scoring_elements |
0.85392 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.02527 |
| scoring_system |
epss |
| scoring_elements |
0.8537 |
| published_at |
2026-04-02T12:55:00Z |
|
| 8 |
| value |
0.02527 |
| scoring_system |
epss |
| scoring_elements |
0.85389 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-30547 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-30547
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-teh4-fmg6-53ab |
|
| 38 |
| url |
VCID-tjtk-gghp-1kdf |
| vulnerability_id |
VCID-tjtk-gghp-1kdf |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox, the
worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-23999 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00152 |
| scoring_system |
epss |
| scoring_elements |
0.35897 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00152 |
| scoring_system |
epss |
| scoring_elements |
0.36049 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.00152 |
| scoring_system |
epss |
| scoring_elements |
0.3588 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.00152 |
| scoring_system |
epss |
| scoring_elements |
0.35931 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00152 |
| scoring_system |
epss |
| scoring_elements |
0.35954 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00152 |
| scoring_system |
epss |
| scoring_elements |
0.3596 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.00152 |
| scoring_system |
epss |
| scoring_elements |
0.35921 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.00152 |
| scoring_system |
epss |
| scoring_elements |
0.35828 |
| published_at |
2026-04-01T12:55:00Z |
|
| 8 |
| value |
0.00152 |
| scoring_system |
epss |
| scoring_elements |
0.36018 |
| published_at |
2026-04-02T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-23999 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-23999
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tjtk-gghp-1kdf |
|
| 39 |
| url |
VCID-vgf2-x49m-cqde |
| vulnerability_id |
VCID-vgf2-x49m-cqde |
| summary |
If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only parts of the message are protected. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29957 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00305 |
| scoring_system |
epss |
| scoring_elements |
0.53697 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00305 |
| scoring_system |
epss |
| scoring_elements |
0.53783 |
| published_at |
2026-04-13T12:55:00Z |
|
| 2 |
| value |
0.00305 |
| scoring_system |
epss |
| scoring_elements |
0.53767 |
| published_at |
2026-04-09T12:55:00Z |
|
| 3 |
| value |
0.00305 |
| scoring_system |
epss |
| scoring_elements |
0.53815 |
| published_at |
2026-04-11T12:55:00Z |
|
| 4 |
| value |
0.00305 |
| scoring_system |
epss |
| scoring_elements |
0.53798 |
| published_at |
2026-04-12T12:55:00Z |
|
| 5 |
| value |
0.00305 |
| scoring_system |
epss |
| scoring_elements |
0.53718 |
| published_at |
2026-04-02T12:55:00Z |
|
| 6 |
| value |
0.00305 |
| scoring_system |
epss |
| scoring_elements |
0.53745 |
| published_at |
2026-04-04T12:55:00Z |
|
| 7 |
| value |
0.00305 |
| scoring_system |
epss |
| scoring_elements |
0.53717 |
| published_at |
2026-04-07T12:55:00Z |
|
| 8 |
| value |
0.00305 |
| scoring_system |
epss |
| scoring_elements |
0.5377 |
| published_at |
2026-04-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29957 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29957
|
| risk_score |
1.6 |
| exploitability |
0.5 |
| weighted_severity |
3.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vgf2-x49m-cqde |
|
| 40 |
| url |
VCID-vt2f-abwe-4ba2 |
| vulnerability_id |
VCID-vt2f-abwe-4ba2 |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox, the
worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-24002 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00457 |
| scoring_system |
epss |
| scoring_elements |
0.63909 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00457 |
| scoring_system |
epss |
| scoring_elements |
0.63918 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.00457 |
| scoring_system |
epss |
| scoring_elements |
0.63875 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.00457 |
| scoring_system |
epss |
| scoring_elements |
0.63926 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00457 |
| scoring_system |
epss |
| scoring_elements |
0.63943 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00457 |
| scoring_system |
epss |
| scoring_elements |
0.63955 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.00457 |
| scoring_system |
epss |
| scoring_elements |
0.63942 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.00457 |
| scoring_system |
epss |
| scoring_elements |
0.63832 |
| published_at |
2026-04-01T12:55:00Z |
|
| 8 |
| value |
0.00457 |
| scoring_system |
epss |
| scoring_elements |
0.63891 |
| published_at |
2026-04-02T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-24002 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-24002
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vt2f-abwe-4ba2 |
|
| 41 |
| url |
VCID-vtjf-sufh-p3h4 |
| vulnerability_id |
VCID-vtjf-sufh-p3h4 |
| summary |
crossbeam-deque Data Race before v0.7.4 and v0.8.1
### Impact
In the affected version of this crate, the result of the race condition is that one or more tasks in the worker queue can be popped twice instead of other tasks that are forgotten and never popped. If tasks are allocated on the heap, this can cause double free and a memory leak. If not, this still can cause a logical bug.
Crates using `Stealer::steal`, `Stealer::steal_batch`, or `Stealer::steal_batch_and_pop` are affected by this issue.
### Patches
This has been fixed in crossbeam-deque 0.8.1 and 0.7.4.
### Credits
This issue was reported and fixed by Maor Kleinberger.
### License
This advisory is in the public domain. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-32810 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01079 |
| scoring_system |
epss |
| scoring_elements |
0.7777 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.01079 |
| scoring_system |
epss |
| scoring_elements |
0.77847 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.01079 |
| scoring_system |
epss |
| scoring_elements |
0.7782 |
| published_at |
2026-04-09T12:55:00Z |
|
| 3 |
| value |
0.01079 |
| scoring_system |
epss |
| scoring_elements |
0.77815 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.01079 |
| scoring_system |
epss |
| scoring_elements |
0.77787 |
| published_at |
2026-04-07T12:55:00Z |
|
| 5 |
| value |
0.01079 |
| scoring_system |
epss |
| scoring_elements |
0.77804 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.01079 |
| scoring_system |
epss |
| scoring_elements |
0.77777 |
| published_at |
2026-04-02T12:55:00Z |
|
| 7 |
| value |
0.01094 |
| scoring_system |
epss |
| scoring_elements |
0.77979 |
| published_at |
2026-04-13T12:55:00Z |
|
| 8 |
| value |
0.01094 |
| scoring_system |
epss |
| scoring_elements |
0.7798 |
| published_at |
2026-04-12T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-32810 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
| 41 |
|
| 42 |
|
| 43 |
|
| 44 |
|
| 45 |
|
| 46 |
|
| 47 |
|
| 48 |
|
| 49 |
|
| 50 |
|
| 51 |
|
| 52 |
|
| 53 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-32810, GHSA-pqqp-xmhj-wgcw
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vtjf-sufh-p3h4 |
|
| 42 |
| url |
VCID-vtwu-x1vt-x3bq |
| vulnerability_id |
VCID-vtwu-x1vt-x3bq |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox, the
worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29945 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61239 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61222 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61189 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61237 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61251 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61272 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61258 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61116 |
| published_at |
2026-04-01T12:55:00Z |
|
| 8 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61194 |
| published_at |
2026-04-02T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29945 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29945
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vtwu-x1vt-x3bq |
|
| 43 |
| url |
VCID-w68x-99b7-7qgs |
| vulnerability_id |
VCID-w68x-99b7-7qgs |
| summary |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29984 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00448 |
| scoring_system |
epss |
| scoring_elements |
0.63546 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00448 |
| scoring_system |
epss |
| scoring_elements |
0.63562 |
| published_at |
2026-04-08T12:55:00Z |
|
| 2 |
| value |
0.00448 |
| scoring_system |
epss |
| scoring_elements |
0.63595 |
| published_at |
2026-04-11T12:55:00Z |
|
| 3 |
| value |
0.00448 |
| scoring_system |
epss |
| scoring_elements |
0.6358 |
| published_at |
2026-04-12T12:55:00Z |
|
| 4 |
| value |
0.00673 |
| scoring_system |
epss |
| scoring_elements |
0.71357 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00673 |
| scoring_system |
epss |
| scoring_elements |
0.71349 |
| published_at |
2026-04-07T12:55:00Z |
|
| 6 |
| value |
0.00673 |
| scoring_system |
epss |
| scoring_elements |
0.71375 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29984 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29984
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-w68x-99b7-7qgs |
|
| 44 |
| url |
VCID-wzpf-nter-m3dv |
| vulnerability_id |
VCID-wzpf-nter-m3dv |
| summary |
OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk. The master password protection was inactive for those keys. Version 78.10.2 will restore the protection mechanism for newly imported keys, and will automatically protect keys that had been imported using affected Thunderbird versions. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29956 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00133 |
| scoring_system |
epss |
| scoring_elements |
0.32857 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00133 |
| scoring_system |
epss |
| scoring_elements |
0.32861 |
| published_at |
2026-04-13T12:55:00Z |
|
| 2 |
| value |
0.00133 |
| scoring_system |
epss |
| scoring_elements |
0.32921 |
| published_at |
2026-04-09T12:55:00Z |
|
| 3 |
| value |
0.00133 |
| scoring_system |
epss |
| scoring_elements |
0.32924 |
| published_at |
2026-04-11T12:55:00Z |
|
| 4 |
| value |
0.00133 |
| scoring_system |
epss |
| scoring_elements |
0.32886 |
| published_at |
2026-04-12T12:55:00Z |
|
| 5 |
| value |
0.00133 |
| scoring_system |
epss |
| scoring_elements |
0.32987 |
| published_at |
2026-04-02T12:55:00Z |
|
| 6 |
| value |
0.00133 |
| scoring_system |
epss |
| scoring_elements |
0.33022 |
| published_at |
2026-04-04T12:55:00Z |
|
| 7 |
| value |
0.00133 |
| scoring_system |
epss |
| scoring_elements |
0.32844 |
| published_at |
2026-04-07T12:55:00Z |
|
| 8 |
| value |
0.00133 |
| scoring_system |
epss |
| scoring_elements |
0.32891 |
| published_at |
2026-04-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29956 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29956
|
| risk_score |
1.9 |
| exploitability |
0.5 |
| weighted_severity |
3.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-wzpf-nter-m3dv |
|
| 45 |
| url |
VCID-x8sj-apw2-e3h6 |
| vulnerability_id |
VCID-x8sj-apw2-e3h6 |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29981 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00445 |
| scoring_system |
epss |
| scoring_elements |
0.63398 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00445 |
| scoring_system |
epss |
| scoring_elements |
0.63363 |
| published_at |
2026-04-07T12:55:00Z |
|
| 2 |
| value |
0.00445 |
| scoring_system |
epss |
| scoring_elements |
0.63415 |
| published_at |
2026-04-08T12:55:00Z |
|
| 3 |
| value |
0.00445 |
| scoring_system |
epss |
| scoring_elements |
0.63432 |
| published_at |
2026-04-09T12:55:00Z |
|
| 4 |
| value |
0.00445 |
| scoring_system |
epss |
| scoring_elements |
0.6345 |
| published_at |
2026-04-11T12:55:00Z |
|
| 5 |
| value |
0.00445 |
| scoring_system |
epss |
| scoring_elements |
0.63433 |
| published_at |
2026-04-12T12:55:00Z |
|
| 6 |
| value |
0.00445 |
| scoring_system |
epss |
| scoring_elements |
0.6331 |
| published_at |
2026-04-01T12:55:00Z |
|
| 7 |
| value |
0.00445 |
| scoring_system |
epss |
| scoring_elements |
0.6337 |
| published_at |
2026-04-02T12:55:00Z |
|
| 8 |
| value |
0.00445 |
| scoring_system |
epss |
| scoring_elements |
0.63397 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-29981 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-29981
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-x8sj-apw2-e3h6 |
|
| 46 |
| url |
VCID-yfmg-82tr-gfec |
| vulnerability_id |
VCID-yfmg-82tr-gfec |
| summary |
The executable file warning was not presented when downloading .inetloc files, which, due to a flaw in Mac OS, can run commands on a user's computer.*Note: This issue only affected Mac OS operating systems. Other operating systems are unaffected.* |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38510 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00467 |
| scoring_system |
epss |
| scoring_elements |
0.64446 |
| published_at |
2026-04-08T12:55:00Z |
|
| 1 |
| value |
0.00467 |
| scoring_system |
epss |
| scoring_elements |
0.64398 |
| published_at |
2026-04-07T12:55:00Z |
|
| 2 |
| value |
0.00467 |
| scoring_system |
epss |
| scoring_elements |
0.64474 |
| published_at |
2026-04-11T12:55:00Z |
|
| 3 |
| value |
0.00467 |
| scoring_system |
epss |
| scoring_elements |
0.64433 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00467 |
| scoring_system |
epss |
| scoring_elements |
0.64462 |
| published_at |
2026-04-12T12:55:00Z |
|
| 5 |
| value |
0.0047 |
| scoring_system |
epss |
| scoring_elements |
0.64535 |
| published_at |
2026-04-02T12:55:00Z |
|
| 6 |
| value |
0.0047 |
| scoring_system |
epss |
| scoring_elements |
0.64482 |
| published_at |
2026-04-01T12:55:00Z |
|
| 7 |
| value |
0.0047 |
| scoring_system |
epss |
| scoring_elements |
0.64564 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38510 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38510
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-yfmg-82tr-gfec |
|
| 47 |
| url |
VCID-zwz9-pt55-t3c6 |
| vulnerability_id |
VCID-zwz9-pt55-t3c6 |
| summary |
Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgrade attack to intercept transmitted messages, or could take control of the authenticated session to execute SMTP commands chosen by the MITM. If an unprotected authentication method was configured, the MITM could obtain the authentication credentials, too. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38502 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00461 |
| scoring_system |
epss |
| scoring_elements |
0.64057 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00461 |
| scoring_system |
epss |
| scoring_elements |
0.6414 |
| published_at |
2026-04-13T12:55:00Z |
|
| 2 |
| value |
0.00461 |
| scoring_system |
epss |
| scoring_elements |
0.64179 |
| published_at |
2026-04-11T12:55:00Z |
|
| 3 |
| value |
0.00461 |
| scoring_system |
epss |
| scoring_elements |
0.64168 |
| published_at |
2026-04-12T12:55:00Z |
|
| 4 |
| value |
0.00461 |
| scoring_system |
epss |
| scoring_elements |
0.64114 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00461 |
| scoring_system |
epss |
| scoring_elements |
0.64141 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00461 |
| scoring_system |
epss |
| scoring_elements |
0.641 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00461 |
| scoring_system |
epss |
| scoring_elements |
0.64151 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00461 |
| scoring_system |
epss |
| scoring_elements |
0.64167 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-38502 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-38502
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zwz9-pt55-t3c6 |
|