Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/thunderbird@68.7.0-r0?arch=s390x&distroversion=v3.22&reponame=community
Typeapk
Namespacealpine
Namethunderbird
Version68.7.0-r0
Qualifiers
arch s390x
distroversion v3.22
reponame community
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version68.8.0-r0
Latest_non_vulnerable_version128.5.0-r0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-2hg5-57c1-z7gx
vulnerability_id VCID-2hg5-57c1-z7gx
summary Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6819.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6819.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-6819
reference_id
reference_type
scores
0
value 0.00363
scoring_system epss
scoring_elements 0.58716
published_at 2026-06-08T12:55:00Z
1
value 0.00363
scoring_system epss
scoring_elements 0.5873
published_at 2026-06-09T12:55:00Z
2
value 0.00363
scoring_system epss
scoring_elements 0.58733
published_at 2026-06-05T12:55:00Z
3
value 0.00363
scoring_system epss
scoring_elements 0.58738
published_at 2026-06-06T12:55:00Z
4
value 0.00363
scoring_system epss
scoring_elements 0.58686
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-6819
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6821
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6821
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6822
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6822
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6825
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6825
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1820869
reference_id 1820869
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1820869
9
reference_url https://usn.ubuntu.com/4335-1/
reference_id 4335-1
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:49:39Z/
url https://usn.ubuntu.com/4335-1/
10
reference_url https://security.archlinux.org/ASA-202004-12
reference_id ASA-202004-12
reference_type
scores
url https://security.archlinux.org/ASA-202004-12
11
reference_url https://security.archlinux.org/ASA-202004-6
reference_id ASA-202004-6
reference_type
scores
url https://security.archlinux.org/ASA-202004-6
12
reference_url https://security.archlinux.org/AVG-1125
reference_id AVG-1125
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1125
13
reference_url https://security.archlinux.org/AVG-1132
reference_id AVG-1132
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1132
14
reference_url https://security.gentoo.org/glsa/202004-07
reference_id GLSA-202004-07
reference_type
scores
url https://security.gentoo.org/glsa/202004-07
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-11
reference_id mfsa2020-11
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-11
16
reference_url https://www.mozilla.org/security/advisories/mfsa2020-11/
reference_id mfsa2020-11
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:49:39Z/
url https://www.mozilla.org/security/advisories/mfsa2020-11/
17
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-14
reference_id mfsa2020-14
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-14
18
reference_url https://www.mozilla.org/security/advisories/mfsa2020-14/
reference_id mfsa2020-14
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:49:39Z/
url https://www.mozilla.org/security/advisories/mfsa2020-14/
19
reference_url https://access.redhat.com/errata/RHSA-2020:1338
reference_id RHSA-2020:1338
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1338
20
reference_url https://access.redhat.com/errata/RHSA-2020:1339
reference_id RHSA-2020:1339
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1339
21
reference_url https://access.redhat.com/errata/RHSA-2020:1340
reference_id RHSA-2020:1340
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1340
22
reference_url https://access.redhat.com/errata/RHSA-2020:1341
reference_id RHSA-2020:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1341
23
reference_url https://access.redhat.com/errata/RHSA-2020:1488
reference_id RHSA-2020:1488
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1488
24
reference_url https://access.redhat.com/errata/RHSA-2020:1489
reference_id RHSA-2020:1489
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1489
25
reference_url https://access.redhat.com/errata/RHSA-2020:1495
reference_id RHSA-2020:1495
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1495
26
reference_url https://access.redhat.com/errata/RHSA-2020:1496
reference_id RHSA-2020:1496
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1496
27
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1620818
reference_id show_bug.cgi?id=1620818
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:49:39Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1620818
28
reference_url https://usn.ubuntu.com/4317-1/
reference_id USN-4317-1
reference_type
scores
url https://usn.ubuntu.com/4317-1/
29
reference_url https://usn.ubuntu.com/4328-1/
reference_id USN-4328-1
reference_type
scores
url https://usn.ubuntu.com/4328-1/
fixed_packages
0
url pkg:apk/alpine/thunderbird@68.7.0-r0?arch=s390x&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/thunderbird@68.7.0-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/thunderbird@68.7.0-r0%3Farch=s390x&distroversion=v3.22&reponame=community
aliases CVE-2020-6819
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2hg5-57c1-z7gx
1
url VCID-2v5h-3qba-k3gx
vulnerability_id VCID-2v5h-3qba-k3gx
summary Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6820.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6820.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-6820
reference_id
reference_type
scores
0
value 0.0313
scoring_system epss
scoring_elements 0.87115
published_at 2026-06-07T12:55:00Z
1
value 0.0313
scoring_system epss
scoring_elements 0.87111
published_at 2026-06-08T12:55:00Z
2
value 0.0313
scoring_system epss
scoring_elements 0.87122
published_at 2026-06-09T12:55:00Z
3
value 0.0313
scoring_system epss
scoring_elements 0.8712
published_at 2026-06-06T12:55:00Z
4
value 0.0313
scoring_system epss
scoring_elements 0.871
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-6820
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6821
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6821
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6822
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6822
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6825
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6825
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1820878
reference_id 1820878
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1820878
9
reference_url https://usn.ubuntu.com/4335-1/
reference_id 4335-1
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:49:16Z/
url https://usn.ubuntu.com/4335-1/
10
reference_url https://security.archlinux.org/ASA-202004-12
reference_id ASA-202004-12
reference_type
scores
url https://security.archlinux.org/ASA-202004-12
11
reference_url https://security.archlinux.org/ASA-202004-6
reference_id ASA-202004-6
reference_type
scores
url https://security.archlinux.org/ASA-202004-6
12
reference_url https://security.archlinux.org/AVG-1125
reference_id AVG-1125
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1125
13
reference_url https://security.archlinux.org/AVG-1132
reference_id AVG-1132
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1132
14
reference_url https://security.gentoo.org/glsa/202004-07
reference_id GLSA-202004-07
reference_type
scores
url https://security.gentoo.org/glsa/202004-07
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-11
reference_id mfsa2020-11
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-11
16
reference_url https://www.mozilla.org/security/advisories/mfsa2020-11/
reference_id mfsa2020-11
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:49:16Z/
url https://www.mozilla.org/security/advisories/mfsa2020-11/
17
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-14
reference_id mfsa2020-14
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-14
18
reference_url https://www.mozilla.org/security/advisories/mfsa2020-14/
reference_id mfsa2020-14
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:49:16Z/
url https://www.mozilla.org/security/advisories/mfsa2020-14/
19
reference_url https://access.redhat.com/errata/RHSA-2020:1338
reference_id RHSA-2020:1338
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1338
20
reference_url https://access.redhat.com/errata/RHSA-2020:1339
reference_id RHSA-2020:1339
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1339
21
reference_url https://access.redhat.com/errata/RHSA-2020:1340
reference_id RHSA-2020:1340
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1340
22
reference_url https://access.redhat.com/errata/RHSA-2020:1341
reference_id RHSA-2020:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1341
23
reference_url https://access.redhat.com/errata/RHSA-2020:1488
reference_id RHSA-2020:1488
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1488
24
reference_url https://access.redhat.com/errata/RHSA-2020:1489
reference_id RHSA-2020:1489
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1489
25
reference_url https://access.redhat.com/errata/RHSA-2020:1495
reference_id RHSA-2020:1495
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1495
26
reference_url https://access.redhat.com/errata/RHSA-2020:1496
reference_id RHSA-2020:1496
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1496
27
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1626728
reference_id show_bug.cgi?id=1626728
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-07T12:49:16Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1626728
28
reference_url https://usn.ubuntu.com/4317-1/
reference_id USN-4317-1
reference_type
scores
url https://usn.ubuntu.com/4317-1/
29
reference_url https://usn.ubuntu.com/4328-1/
reference_id USN-4328-1
reference_type
scores
url https://usn.ubuntu.com/4328-1/
fixed_packages
0
url pkg:apk/alpine/thunderbird@68.7.0-r0?arch=s390x&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/thunderbird@68.7.0-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/thunderbird@68.7.0-r0%3Farch=s390x&distroversion=v3.22&reponame=community
aliases CVE-2020-6820
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2v5h-3qba-k3gx
2
url VCID-hkv8-5j39-e7gx
vulnerability_id VCID-hkv8-5j39-e7gx
summary Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6825.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6825.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-6825
reference_id
reference_type
scores
0
value 0.00696
scoring_system epss
scoring_elements 0.7235
published_at 2026-06-09T12:55:00Z
1
value 0.00696
scoring_system epss
scoring_elements 0.72325
published_at 2026-06-08T12:55:00Z
2
value 0.00696
scoring_system epss
scoring_elements 0.72353
published_at 2026-06-05T12:55:00Z
3
value 0.00696
scoring_system epss
scoring_elements 0.72311
published_at 2026-06-04T12:55:00Z
4
value 0.00696
scoring_system epss
scoring_elements 0.72359
published_at 2026-06-06T12:55:00Z
5
value 0.00696
scoring_system epss
scoring_elements 0.72339
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-6825
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6821
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6821
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6822
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6822
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6825
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6825
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1821682
reference_id 1821682
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1821682
9
reference_url https://security.archlinux.org/ASA-202004-8
reference_id ASA-202004-8
reference_type
scores
url https://security.archlinux.org/ASA-202004-8
10
reference_url https://security.archlinux.org/AVG-1127
reference_id AVG-1127
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1127
11
reference_url https://security.gentoo.org/glsa/202004-11
reference_id GLSA-202004-11
reference_type
scores
url https://security.gentoo.org/glsa/202004-11
12
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-12
reference_id mfsa2020-12
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-12
13
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-13
reference_id mfsa2020-13
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-13
14
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-14
reference_id mfsa2020-14
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-14
15
reference_url https://access.redhat.com/errata/RHSA-2020:1404
reference_id RHSA-2020:1404
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1404
16
reference_url https://access.redhat.com/errata/RHSA-2020:1406
reference_id RHSA-2020:1406
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1406
17
reference_url https://access.redhat.com/errata/RHSA-2020:1420
reference_id RHSA-2020:1420
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1420
18
reference_url https://access.redhat.com/errata/RHSA-2020:1429
reference_id RHSA-2020:1429
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1429
19
reference_url https://access.redhat.com/errata/RHSA-2020:1488
reference_id RHSA-2020:1488
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1488
20
reference_url https://access.redhat.com/errata/RHSA-2020:1489
reference_id RHSA-2020:1489
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1489
21
reference_url https://access.redhat.com/errata/RHSA-2020:1495
reference_id RHSA-2020:1495
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1495
22
reference_url https://access.redhat.com/errata/RHSA-2020:1496
reference_id RHSA-2020:1496
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1496
23
reference_url https://usn.ubuntu.com/4323-1/
reference_id USN-4323-1
reference_type
scores
url https://usn.ubuntu.com/4323-1/
24
reference_url https://usn.ubuntu.com/4328-1/
reference_id USN-4328-1
reference_type
scores
url https://usn.ubuntu.com/4328-1/
fixed_packages
0
url pkg:apk/alpine/thunderbird@68.7.0-r0?arch=s390x&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/thunderbird@68.7.0-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/thunderbird@68.7.0-r0%3Farch=s390x&distroversion=v3.22&reponame=community
aliases CVE-2020-6825
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hkv8-5j39-e7gx
3
url VCID-ushh-jwj4-yfcj
vulnerability_id VCID-ushh-jwj4-yfcj
summary When reading from areas partially or fully outside the source resource with WebGL's copyTexSubImage method, the specification requires the returned values be zero. Previously, this memory was uninitialized, leading to potentially sensitive data disclosure.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6821.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6821.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-6821
reference_id
reference_type
scores
0
value 0.00537
scoring_system epss
scoring_elements 0.67918
published_at 2026-06-09T12:55:00Z
1
value 0.00537
scoring_system epss
scoring_elements 0.67879
published_at 2026-06-04T12:55:00Z
2
value 0.00537
scoring_system epss
scoring_elements 0.67919
published_at 2026-06-05T12:55:00Z
3
value 0.00537
scoring_system epss
scoring_elements 0.67925
published_at 2026-06-06T12:55:00Z
4
value 0.00537
scoring_system epss
scoring_elements 0.67915
published_at 2026-06-07T12:55:00Z
5
value 0.00537
scoring_system epss
scoring_elements 0.67902
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-6821
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6821
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6821
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6822
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6822
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6825
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6825
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1821674
reference_id 1821674
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1821674
9
reference_url https://security.archlinux.org/ASA-202004-12
reference_id ASA-202004-12
reference_type
scores
url https://security.archlinux.org/ASA-202004-12
10
reference_url https://security.archlinux.org/ASA-202004-8
reference_id ASA-202004-8
reference_type
scores
url https://security.archlinux.org/ASA-202004-8
11
reference_url https://security.archlinux.org/AVG-1127
reference_id AVG-1127
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1127
12
reference_url https://security.archlinux.org/AVG-1132
reference_id AVG-1132
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1132
13
reference_url https://security.gentoo.org/glsa/202004-11
reference_id GLSA-202004-11
reference_type
scores
url https://security.gentoo.org/glsa/202004-11
14
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-12
reference_id mfsa2020-12
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-12
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-13
reference_id mfsa2020-13
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-13
16
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-14
reference_id mfsa2020-14
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-14
17
reference_url https://access.redhat.com/errata/RHSA-2020:1404
reference_id RHSA-2020:1404
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1404
18
reference_url https://access.redhat.com/errata/RHSA-2020:1406
reference_id RHSA-2020:1406
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1406
19
reference_url https://access.redhat.com/errata/RHSA-2020:1420
reference_id RHSA-2020:1420
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1420
20
reference_url https://access.redhat.com/errata/RHSA-2020:1429
reference_id RHSA-2020:1429
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1429
21
reference_url https://access.redhat.com/errata/RHSA-2020:1488
reference_id RHSA-2020:1488
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1488
22
reference_url https://access.redhat.com/errata/RHSA-2020:1489
reference_id RHSA-2020:1489
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1489
23
reference_url https://access.redhat.com/errata/RHSA-2020:1495
reference_id RHSA-2020:1495
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1495
24
reference_url https://access.redhat.com/errata/RHSA-2020:1496
reference_id RHSA-2020:1496
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1496
25
reference_url https://usn.ubuntu.com/4323-1/
reference_id USN-4323-1
reference_type
scores
url https://usn.ubuntu.com/4323-1/
26
reference_url https://usn.ubuntu.com/4328-1/
reference_id USN-4328-1
reference_type
scores
url https://usn.ubuntu.com/4328-1/
fixed_packages
0
url pkg:apk/alpine/thunderbird@68.7.0-r0?arch=s390x&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/thunderbird@68.7.0-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/thunderbird@68.7.0-r0%3Farch=s390x&distroversion=v3.22&reponame=community
aliases CVE-2020-6821
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ushh-jwj4-yfcj
4
url VCID-xz2e-xc8d-b7d2
vulnerability_id VCID-xz2e-xc8d-b7d2
summary On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in GMPDecodeData. It is possible that with enough effort this could have been exploited to run arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6822.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6822.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-6822
reference_id
reference_type
scores
0
value 0.00812
scoring_system epss
scoring_elements 0.74642
published_at 2026-06-09T12:55:00Z
1
value 0.00812
scoring_system epss
scoring_elements 0.74617
published_at 2026-06-08T12:55:00Z
2
value 0.00812
scoring_system epss
scoring_elements 0.74646
published_at 2026-06-06T12:55:00Z
3
value 0.00812
scoring_system epss
scoring_elements 0.74609
published_at 2026-06-04T12:55:00Z
4
value 0.00812
scoring_system epss
scoring_elements 0.74634
published_at 2026-06-07T12:55:00Z
5
value 0.00812
scoring_system epss
scoring_elements 0.7464
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-6822
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6819
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6820
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6821
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6821
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6822
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6822
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6825
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6825
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1821676
reference_id 1821676
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1821676
9
reference_url https://security.gentoo.org/glsa/202004-11
reference_id GLSA-202004-11
reference_type
scores
url https://security.gentoo.org/glsa/202004-11
10
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-12
reference_id mfsa2020-12
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-12
11
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-13
reference_id mfsa2020-13
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-13
12
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2020-14
reference_id mfsa2020-14
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2020-14
13
reference_url https://access.redhat.com/errata/RHSA-2020:1404
reference_id RHSA-2020:1404
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1404
14
reference_url https://access.redhat.com/errata/RHSA-2020:1406
reference_id RHSA-2020:1406
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1406
15
reference_url https://access.redhat.com/errata/RHSA-2020:1420
reference_id RHSA-2020:1420
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1420
16
reference_url https://access.redhat.com/errata/RHSA-2020:1429
reference_id RHSA-2020:1429
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1429
17
reference_url https://access.redhat.com/errata/RHSA-2020:1488
reference_id RHSA-2020:1488
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1488
18
reference_url https://access.redhat.com/errata/RHSA-2020:1489
reference_id RHSA-2020:1489
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1489
19
reference_url https://access.redhat.com/errata/RHSA-2020:1495
reference_id RHSA-2020:1495
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1495
20
reference_url https://access.redhat.com/errata/RHSA-2020:1496
reference_id RHSA-2020:1496
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1496
21
reference_url https://usn.ubuntu.com/4323-1/
reference_id USN-4323-1
reference_type
scores
url https://usn.ubuntu.com/4323-1/
22
reference_url https://usn.ubuntu.com/4328-1/
reference_id USN-4328-1
reference_type
scores
url https://usn.ubuntu.com/4328-1/
fixed_packages
0
url pkg:apk/alpine/thunderbird@68.7.0-r0?arch=s390x&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/thunderbird@68.7.0-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/thunderbird@68.7.0-r0%3Farch=s390x&distroversion=v3.22&reponame=community
aliases CVE-2020-6822
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xz2e-xc8d-b7d2
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/thunderbird@68.7.0-r0%3Farch=s390x&distroversion=v3.22&reponame=community