logo

Database

Security

Vulnerabilities

Real-time alerts of vulnerabilities across monitored open-source ecosystems.

Ecosystems covered

1

RPM

Total vulnerabilities tracked

240

From global vulnerability databases

Ecosystem RPMComponent thunderbird

FLAT-UAAUS (CVE-2026-103004)

Cached form fields In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-V2S44 (CVE-2026-64647)

OS Command Injection In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-YAK4T (CVE-2026-65698)

Lack of data validation - Path Traversal In thunderbird

2.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-B9VEU (CVE-2026-16408)

Out-of-bounds read In thunderbird

5.9

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-DS387 (CVE-2026-16406)

Improper authorization control for web services In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-3TRI2 (CVE-2026-16394)

Security controls bypass or absence In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-FMXDY (CVE-2026-16392)

Lack of data validation - Type confusion In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-QM7XF (CVE-2026-16385)

Insecure functionality In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-G3CKU (CVE-2026-16370)

Improper authorization control for web services In thunderbird

1.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-8O884 (CVE-2026-8959)

Security controls bypass or absence In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-E9HCB (CVE-2026-44582)

Insecure encryption algorithm In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-X4GED (CVE-2026-44581)

Server side cross-site scripting In thunderbird

0.6

Low

Ecosystem: RPM

Component: thunderbird

FLAT-LENXO (CVE-2026-44572)

Lack of data validation In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-M1D2V (CVE-2026-6759)

Out-of-bounds read In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-1WQEA (CVE-2026-4711)

Out-of-bounds read In thunderbird

1.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-87GNY (CVE-2025-66382)

Improper resource allocation In thunderbird

2.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-DU72C (CVE-2025-9182)

Asymmetric denial of service In thunderbird

2.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-6OF9Y (CVE-2025-48068)

Lack of data validation In thunderbird

0.6

Low

Ecosystem: RPM

Component: thunderbird

FLAT-WQD6D (CVE-2025-3877)

Enabled default configuration In thunderbird-flatpak

1.7

Low

Ecosystem: RPM

Component: thunderbird-flatpak

FLAT-K04ML (CVE-2025-4092)

Insecure functionality In thunderbird

6.3

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-YHNKO (CVE-2025-4090)

Sensitive information stored in logs In thunderbird

0.5

Low

Ecosystem: RPM

Component: thunderbird

FLAT-TXM2K (CVE-2025-4086)

Clickjacking In thunderbird

1.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-GA3BQ (CVE-2025-4085)

Improper authorization control for web services In thunderbird

2.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-S90E6 (CVE-2025-4084)

OS Command Injection In thunderbird

0.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-5PB6M (CVE-2025-2817)

Excessive privileges In thunderbird

5.6

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-4W8BN (CVE-2025-3032)

Improper control of interaction frequency In thunderbird

1.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-C5M7N (CVE-2025-3031)

Business information leak In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-4RWEZ (CVE-2025-1943)

Insecure functionality In thunderbird

6.1

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-ZNI8F (CVE-2025-1019)

Clickjacking In thunderbird

1.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-P8QU4 (CVE-2025-1018)

Spoofing In thunderbird-flatpak-container

0.2

Low

Ecosystem: RPM

Component: thunderbird-flatpak-container

FLAT-3SLGL (CVE-2025-0247)

Insecure functionality In thunderbird

6.3

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-2WAYQ (CVE-2024-11706)

Lack of data validation In thunderbird

0.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-PN1IY (CVE-2024-11705)

Asymmetric denial of service In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-FAP64 (CVE-2024-11701)

Clickjacking In thunderbird

0.5

Low

Ecosystem: RPM

Component: thunderbird

FLAT-95X2U (CVE-2024-9403)

Insecure functionality In thunderbird

5.2

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-FBCAR (CVE-2023-25743)

Clickjacking In thunderbird

4.7

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-E58CU (CVE-2023-23599)

OS Command Injection In thunderbird

5.8

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-JQI8B (CVE-2021-29964)

Out-of-bounds read In thunderbird

2.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-XLFFF (CVE-2011-3656)

Reflected cross-site scripting (XSS) In thunderbird

1.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-9YBFW (CVE-2020-15657)

External control of file name or path In thunderbird

4.0

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-EUKYT (CVE-2019-13722)

Improper resource allocation - Buffer overflow In thunderbird

4.9

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-LJ7EO (CVE-2016-5827)

Out-of-bounds read In thunderbird

6.6

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-IF876 (CVE-2016-5826)

Out-of-bounds read In thunderbird

6.7

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-FP6K7 (CVE-2016-5823)

Improper resource allocation In thunderbird

4.6

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-7QE4A (CVE-2016-2805)

Lack of data validation In thunderbird

7.8

High

Ecosystem: RPM

Component: thunderbird

FLAT-Q7RAM (CVE-2016-1935)

Improper resource allocation - Buffer overflow In thunderbird

8.3

High

Ecosystem: RPM

Component: thunderbird

FLAT-GI48Z (CVE-2016-1930)

Lack of data validation In thunderbird

8.0

High

Ecosystem: RPM

Component: thunderbird

FLAT-IG3ID (CVE-2015-7214)

Missing subresource integrity check In thunderbird

1.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-1HLX1 (CVE-2015-7213)

Out-of-bounds read In thunderbird

8.4

High

Ecosystem: RPM

Component: thunderbird

FLAT-HF1BJ (CVE-2015-7199)

Lack of data validation In thunderbird

2.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-TD7NU (CVE-2015-7193)

Lack of data validation In thunderbird

5.0

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-ML953 (CVE-2015-4513)

Insecure functionality In thunderbird

7.0

High

Ecosystem: RPM

Component: thunderbird

FLAT-18FDO (CVE-2015-7177)

Insecure functionality In thunderbird

6.8

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-5HT8V (CVE-2015-4521)

Insecure functionality In thunderbird

4.9

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-5JSJI (CVE-2015-4519)

Server-side request forgery (SSRF) In thunderbird

0.5

Low

Ecosystem: RPM

Component: thunderbird

FLAT-FGMM7 (CVE-2015-4517)

Lack of data validation In thunderbird

7.8

High

Ecosystem: RPM

Component: thunderbird

FLAT-JWT4A (CVE-2015-4509)

Insecure functionality In thunderbird

5.9

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-YY0HV (CVE-2015-4489)

Insecure functionality In thunderbird

4.5

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-9K27J (CVE-2015-4487)

Out-of-bounds read In thunderbird

4.9

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-0J2O6 (CVE-2015-2740)

Improper resource allocation - Buffer overflow In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-HJ7BO (CVE-2015-2738)

Insecure functionality In thunderbird

1.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-CXA3X (CVE-2015-2737)

Insecure functionality In thunderbird

2.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-J1EAG (CVE-2015-2736)

Out-of-bounds read In thunderbird

6.8

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-E5GVK (CVE-2015-2735)

Out-of-bounds read In thunderbird

6.7

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-6A5UY (CVE-2015-2734)

Insecure functionality In thunderbird

2.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-CRZBU (CVE-2015-2731)

Insecure functionality In thunderbird

8.1

High

Ecosystem: RPM

Component: thunderbird

FLAT-V7HNU (CVE-2015-2708)

Insecure functionality In thunderbird

7.9

High

Ecosystem: RPM

Component: thunderbird

FLAT-VW6PO (CVE-2015-0816)

XAML injection In thunderbird

5.9

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-NPXGH (CVE-2015-0813)

Insecure functionality In thunderbird

8.3

High

Ecosystem: RPM

Component: thunderbird

FLAT-SRXAH (CVE-2015-0801)

Improper authorization control for web services In thunderbird

8.9

High

Ecosystem: RPM

Component: thunderbird

FLAT-91B62 (CVE-2015-0836)

Insecure functionality In thunderbird

4.6

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-Y4CNA (CVE-2014-8638)

Cross-site request forgery In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-IDKGW (CVE-2014-8634)

Insecure functionality In thunderbird

6.9

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-5I6AA (CVE-2014-1590)

Lack of data validation In thunderbird

6.6

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-70ZL9 (CVE-2014-1587)

Insecure functionality In thunderbird

7.1

High

Ecosystem: RPM

Component: thunderbird

FLAT-WQS8M (CVE-2014-1585)

Improper authorization control for web services In thunderbird

2.4

Low

Ecosystem: RPM

Component: thunderbird

FLAT-BGE82 (CVE-2014-1581)

Insecure functionality In thunderbird

8.2

High

Ecosystem: RPM

Component: thunderbird

FLAT-7ZKMF (CVE-2014-1562)

Lack of data validation In thunderbird

6.9

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-ANSZW (CVE-2014-1555)

Race condition In thunderbird

8.9

High

Ecosystem: RPM

Component: thunderbird

FLAT-WKG2C (CVE-2014-1532)

Insecure functionality In thunderbird

6.8

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-19F3H (CVE-2014-1530)

Reflected cross-site scripting (XSS) In thunderbird

1.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-QAZT7 (CVE-2014-1529)

Improper authorization control for web services In thunderbird

2.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-TXNVC (CVE-2014-1524)

Lack of data validation In thunderbird

9.1

Critical

Ecosystem: RPM

Component: thunderbird

FLAT-BNC1I (CVE-2014-1523)

Out-of-bounds read In thunderbird

7.8

High

Ecosystem: RPM

Component: thunderbird

FLAT-1INTV (CVE-2014-1518)

Insecure functionality In thunderbird

6.7

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-GBLHG (CVE-2014-1514)

Improper resource allocation - Buffer overflow In thunderbird

6.6

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-8FJO6 (CVE-2014-1512)

Improper resource allocation In thunderbird

6.1

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-BVJ7A (CVE-2014-1511)

Cross-site request forgery In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-8NYF4 (CVE-2014-1508)

Out-of-bounds read In thunderbird

4.9

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-JGJDO (CVE-2014-1493)

Insecure functionality In thunderbird

7.0

High

Ecosystem: RPM

Component: thunderbird

FLAT-2FJI5 (CVE-2014-2018)

Reflected cross-site scripting (XSS) In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-TI8LP (CVE-2013-6674)

Reflected cross-site scripting (XSS) In thunderbird

0.6

Low

Ecosystem: RPM

Component: thunderbird

FLAT-1Z87M (CVE-2014-1486)

Insecure functionality In thunderbird

9.1

Critical

Ecosystem: RPM

Component: thunderbird

FLAT-16NTS (CVE-2014-1479)

Improper authorization control for web services In thunderbird

2.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-IV21D (CVE-2014-1477)

Insecure functionality In thunderbird

6.8

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-O7ZDA (CVE-2013-6671)

Lack of data validation In thunderbird

6.7

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-ERDM1 (CVE-2013-5618)

Insecure functionality In thunderbird

8.1

High

Ecosystem: RPM

Component: thunderbird

FLAT-LGZNP (CVE-2013-5616)

Insecure functionality In thunderbird

8.3

High

Ecosystem: RPM

Component: thunderbird

FLAT-25PZ1 (CVE-2013-5613)

Insecure functionality In thunderbird

8.4

High

Ecosystem: RPM

Component: thunderbird

FLAT-T22W4 (CVE-2013-5612)

Reflected cross-site scripting (XSS) In thunderbird

0.6

Low

Ecosystem: RPM

Component: thunderbird