Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-qdtc-vxt9-2fbt
SummaryMixed content blocking of insecure (HTTP) sub-resources in a secure (HTTPS) document was not correctly applied for resources that redirect from HTTPS to HTTP, allowing content that should be blocked, such as scripts, to be loaded on a page.
Aliases
0
alias CVE-2017-7835
Fixed_packages
0
url pkg:alpm/archlinux/firefox@57.0-1
purl pkg:alpm/archlinux/firefox@57.0-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@57.0-1
Affected_packages
0
url pkg:alpm/archlinux/firefox@56.0.2-1
purl pkg:alpm/archlinux/firefox@56.0.2-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2pwv-h1am-hqbb
1
vulnerability VCID-3me6-q3c4-9uew
2
vulnerability VCID-4gwb-c8x5-tqbm
3
vulnerability VCID-53ts-p1ub-jufh
4
vulnerability VCID-5b1g-3rp1-k3fc
5
vulnerability VCID-61um-r6m7-cygn
6
vulnerability VCID-6u66-r4t3-2qar
7
vulnerability VCID-f9a9-wb1k-cygm
8
vulnerability VCID-fhwg-mggf-p3fx
9
vulnerability VCID-q9jc-5pc9-f3fq
10
vulnerability VCID-qdtc-vxt9-2fbt
11
vulnerability VCID-rtwc-5h7s-guge
12
vulnerability VCID-rz2t-u58z-eqh7
13
vulnerability VCID-t82h-zf9g-muep
14
vulnerability VCID-wty8-5znd-77hh
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@56.0.2-1
References
0
reference_url https://security.archlinux.org/ASA-201711-23
reference_id ASA-201711-23
reference_type
scores
url https://security.archlinux.org/ASA-201711-23
1
reference_url https://security.archlinux.org/AVG-494
reference_id AVG-494
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-494
2
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2017-24
reference_id mfsa2017-24
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2017-24
Weaknesses
Exploits
Severity_range_score9.0 - 10.0
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-qdtc-vxt9-2fbt