Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/nss@3.12.3-1?distro=trixie
Typedeb
Namespacedebian
Namenss
Version3.12.3-1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version3.12.6-1
Latest_non_vulnerable_version2:3.121-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-frwk-mbxe-jbhp
vulnerability_id VCID-frwk-mbxe-jbhp
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2404.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2404.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2404
reference_id
reference_type
scores
0
value 0.21024
scoring_system epss
scoring_elements 0.95642
published_at 2026-04-13T12:55:00Z
1
value 0.21024
scoring_system epss
scoring_elements 0.95606
published_at 2026-04-01T12:55:00Z
2
value 0.21024
scoring_system epss
scoring_elements 0.95615
published_at 2026-04-02T12:55:00Z
3
value 0.21024
scoring_system epss
scoring_elements 0.9562
published_at 2026-04-04T12:55:00Z
4
value 0.21024
scoring_system epss
scoring_elements 0.95623
published_at 2026-04-07T12:55:00Z
5
value 0.21024
scoring_system epss
scoring_elements 0.95631
published_at 2026-04-08T12:55:00Z
6
value 0.21024
scoring_system epss
scoring_elements 0.95635
published_at 2026-04-09T12:55:00Z
7
value 0.21024
scoring_system epss
scoring_elements 0.9564
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2404
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=512912
reference_id 512912
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=512912
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539934
reference_id 539934
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539934
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2404
reference_id CVE-2009-2404
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2404
5
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
6
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-43
reference_id mfsa2009-43
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-43
7
reference_url https://access.redhat.com/errata/RHSA-2009:1184
reference_id RHSA-2009:1184
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1184
8
reference_url https://access.redhat.com/errata/RHSA-2009:1185
reference_id RHSA-2009:1185
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1185
9
reference_url https://access.redhat.com/errata/RHSA-2009:1186
reference_id RHSA-2009:1186
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1186
10
reference_url https://access.redhat.com/errata/RHSA-2009:1190
reference_id RHSA-2009:1190
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1190
11
reference_url https://access.redhat.com/errata/RHSA-2009:1207
reference_id RHSA-2009:1207
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1207
12
reference_url https://usn.ubuntu.com/810-1/
reference_id USN-810-1
reference_type
scores
url https://usn.ubuntu.com/810-1/
fixed_packages
0
url pkg:deb/debian/nss@3.12.3-1?distro=trixie
purl pkg:deb/debian/nss@3.12.3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@3.12.3-1%3Fdistro=trixie
1
url pkg:deb/debian/nss@2:3.61-1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/nss@2:3.61-1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2tts-gwgd-zqcz
1
vulnerability VCID-3nrj-5r53-37ab
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@2:3.61-1%252Bdeb11u3%3Fdistro=trixie
2
url pkg:deb/debian/nss@2:3.87.1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/nss@2:3.87.1-1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2tts-gwgd-zqcz
1
vulnerability VCID-3nrj-5r53-37ab
2
vulnerability VCID-gret-hn3p-5kbk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@2:3.87.1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/nss@2:3.110-1%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/nss@2:3.110-1%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@2:3.110-1%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/nss@2:3.121-1?distro=trixie
purl pkg:deb/debian/nss@2:3.121-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@2:3.121-1%3Fdistro=trixie
aliases CVE-2009-2404
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-frwk-mbxe-jbhp
1
url VCID-fz23-zbk9-gugq
vulnerability_id VCID-fz23-zbk9-gugq
summary
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks,
    including the remote execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2409.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2409.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2409
reference_id
reference_type
scores
0
value 0.01642
scoring_system epss
scoring_elements 0.81887
published_at 2026-04-01T12:55:00Z
1
value 0.01642
scoring_system epss
scoring_elements 0.81898
published_at 2026-04-02T12:55:00Z
2
value 0.01642
scoring_system epss
scoring_elements 0.81921
published_at 2026-04-04T12:55:00Z
3
value 0.01642
scoring_system epss
scoring_elements 0.81917
published_at 2026-04-07T12:55:00Z
4
value 0.01642
scoring_system epss
scoring_elements 0.81943
published_at 2026-04-08T12:55:00Z
5
value 0.01642
scoring_system epss
scoring_elements 0.81951
published_at 2026-04-09T12:55:00Z
6
value 0.01642
scoring_system epss
scoring_elements 0.81971
published_at 2026-04-11T12:55:00Z
7
value 0.01642
scoring_system epss
scoring_elements 0.8196
published_at 2026-04-12T12:55:00Z
8
value 0.01642
scoring_system epss
scoring_elements 0.81954
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2409
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2409
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2409
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=510197
reference_id 510197
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=510197
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539895
reference_id 539895
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539895
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539899
reference_id 539899
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539899
6
reference_url https://security.gentoo.org/glsa/200911-02
reference_id GLSA-200911-02
reference_type
scores
url https://security.gentoo.org/glsa/200911-02
7
reference_url https://security.gentoo.org/glsa/200912-01
reference_id GLSA-200912-01
reference_type
scores
url https://security.gentoo.org/glsa/200912-01
8
reference_url https://access.redhat.com/errata/RHSA-2009:1184
reference_id RHSA-2009:1184
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1184
9
reference_url https://access.redhat.com/errata/RHSA-2009:1186
reference_id RHSA-2009:1186
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1186
10
reference_url https://access.redhat.com/errata/RHSA-2009:1190
reference_id RHSA-2009:1190
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1190
11
reference_url https://access.redhat.com/errata/RHSA-2009:1207
reference_id RHSA-2009:1207
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1207
12
reference_url https://access.redhat.com/errata/RHSA-2009:1432
reference_id RHSA-2009:1432
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1432
13
reference_url https://access.redhat.com/errata/RHSA-2009:1560
reference_id RHSA-2009:1560
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1560
14
reference_url https://access.redhat.com/errata/RHSA-2009:1571
reference_id RHSA-2009:1571
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1571
15
reference_url https://access.redhat.com/errata/RHSA-2009:1584
reference_id RHSA-2009:1584
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1584
16
reference_url https://access.redhat.com/errata/RHSA-2009:1662
reference_id RHSA-2009:1662
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1662
17
reference_url https://access.redhat.com/errata/RHSA-2010:0054
reference_id RHSA-2010:0054
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0054
18
reference_url https://usn.ubuntu.com/809-1/
reference_id USN-809-1
reference_type
scores
url https://usn.ubuntu.com/809-1/
19
reference_url https://usn.ubuntu.com/810-1/
reference_id USN-810-1
reference_type
scores
url https://usn.ubuntu.com/810-1/
20
reference_url https://usn.ubuntu.com/830-1/
reference_id USN-830-1
reference_type
scores
url https://usn.ubuntu.com/830-1/
21
reference_url https://usn.ubuntu.com/859-1/
reference_id USN-859-1
reference_type
scores
url https://usn.ubuntu.com/859-1/
fixed_packages
0
url pkg:deb/debian/nss@3.12.3-1?distro=trixie
purl pkg:deb/debian/nss@3.12.3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@3.12.3-1%3Fdistro=trixie
1
url pkg:deb/debian/nss@2:3.61-1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/nss@2:3.61-1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2tts-gwgd-zqcz
1
vulnerability VCID-3nrj-5r53-37ab
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@2:3.61-1%252Bdeb11u3%3Fdistro=trixie
2
url pkg:deb/debian/nss@2:3.87.1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/nss@2:3.87.1-1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2tts-gwgd-zqcz
1
vulnerability VCID-3nrj-5r53-37ab
2
vulnerability VCID-gret-hn3p-5kbk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@2:3.87.1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/nss@2:3.110-1%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/nss@2:3.110-1%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@2:3.110-1%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/nss@2:3.121-1?distro=trixie
purl pkg:deb/debian/nss@2:3.121-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@2:3.121-1%3Fdistro=trixie
aliases CVE-2009-2409
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fz23-zbk9-gugq
2
url VCID-uytp-sf6j-xyf6
vulnerability_id VCID-uytp-sf6j-xyf6
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2408.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2408.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2408
reference_id
reference_type
scores
0
value 0.02503
scoring_system epss
scoring_elements 0.85346
published_at 2026-04-13T12:55:00Z
1
value 0.02503
scoring_system epss
scoring_elements 0.85274
published_at 2026-04-01T12:55:00Z
2
value 0.02503
scoring_system epss
scoring_elements 0.85286
published_at 2026-04-02T12:55:00Z
3
value 0.02503
scoring_system epss
scoring_elements 0.85305
published_at 2026-04-04T12:55:00Z
4
value 0.02503
scoring_system epss
scoring_elements 0.85307
published_at 2026-04-07T12:55:00Z
5
value 0.02503
scoring_system epss
scoring_elements 0.85329
published_at 2026-04-08T12:55:00Z
6
value 0.02503
scoring_system epss
scoring_elements 0.85337
published_at 2026-04-09T12:55:00Z
7
value 0.02503
scoring_system epss
scoring_elements 0.85351
published_at 2026-04-11T12:55:00Z
8
value 0.02503
scoring_system epss
scoring_elements 0.85349
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2408
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=510251
reference_id 510251
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=510251
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539934
reference_id 539934
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539934
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2408
reference_id CVE-2009-2408
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2408
5
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
6
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-42
reference_id mfsa2009-42
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-42
7
reference_url https://access.redhat.com/errata/RHSA-2009:1184
reference_id RHSA-2009:1184
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1184
8
reference_url https://access.redhat.com/errata/RHSA-2009:1186
reference_id RHSA-2009:1186
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1186
9
reference_url https://access.redhat.com/errata/RHSA-2009:1190
reference_id RHSA-2009:1190
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1190
10
reference_url https://access.redhat.com/errata/RHSA-2009:1207
reference_id RHSA-2009:1207
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1207
11
reference_url https://access.redhat.com/errata/RHSA-2009:1432
reference_id RHSA-2009:1432
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1432
12
reference_url https://usn.ubuntu.com/810-1/
reference_id USN-810-1
reference_type
scores
url https://usn.ubuntu.com/810-1/
fixed_packages
0
url pkg:deb/debian/nss@3.12.3-1?distro=trixie
purl pkg:deb/debian/nss@3.12.3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@3.12.3-1%3Fdistro=trixie
1
url pkg:deb/debian/nss@2:3.61-1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/nss@2:3.61-1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2tts-gwgd-zqcz
1
vulnerability VCID-3nrj-5r53-37ab
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@2:3.61-1%252Bdeb11u3%3Fdistro=trixie
2
url pkg:deb/debian/nss@2:3.87.1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/nss@2:3.87.1-1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2tts-gwgd-zqcz
1
vulnerability VCID-3nrj-5r53-37ab
2
vulnerability VCID-gret-hn3p-5kbk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@2:3.87.1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/nss@2:3.110-1%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/nss@2:3.110-1%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@2:3.110-1%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/nss@2:3.121-1?distro=trixie
purl pkg:deb/debian/nss@2:3.121-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@2:3.121-1%3Fdistro=trixie
aliases CVE-2009-2408
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uytp-sf6j-xyf6
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@3.12.3-1%3Fdistro=trixie