logo

Database

Security

Vulnerabilities

Real-time alerts of vulnerabilities across monitored open-source ecosystems.

Ecosystems covered

1

RPM

Total vulnerabilities tracked

231

From global vulnerability databases

Ecosystem RPMComponent thunderbird

FLAT-U2CZH (CVE-2026-22020)

Enabled default configuration In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-D1UZL (CVE-2026-64649)

Server-side request forgery (SSRF) In thunderbird

4.8

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-P5SGG (CVE-2026-64648)

Cached form fields In thunderbird

2.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-V2S44 (CVE-2026-64647)

OS Command Injection In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-AT913 (CVE-2026-64646)

Improper resource allocation In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-65WIN (CVE-2026-64645)

Server-side request forgery (SSRF) In thunderbird

4.8

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-4UD76 (CVE-2026-64644)

Improper resource allocation In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-2ZFIZ (CVE-2026-64642)

Improper authorization control for web services In thunderbird

4.8

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-PCATY (CVE-2026-64641)

Inappropriate coding practices In thunderbird

4.6

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-B9VEU (CVE-2026-16408)

Out-of-bounds read In thunderbird

5.9

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-DS387 (CVE-2026-16406)

Improper authorization control for web services In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-3TRI2 (CVE-2026-16394)

Security controls bypass or absence In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-FMXDY (CVE-2026-16392)

Lack of data validation - Type confusion In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-QM7XF (CVE-2026-16385)

Inappropriate coding practices In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-G3CKU (CVE-2026-16370)

Improper authorization control for web services In thunderbird

1.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-8O884 (CVE-2026-8959)

Security controls bypass or absence In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-X4GED (CVE-2026-44581)

Server side cross-site scripting In thunderbird

0.6

Low

Ecosystem: RPM

Component: thunderbird

FLAT-36NUL (CVE-2026-44576)

Lack of data validation In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-SOFOZ (CVE-2026-6786)

Inappropriate coding practices In thunderbird

7.1

High

Ecosystem: RPM

Component: thunderbird

FLAT-2RZWS (CVE-2026-6785)

Inappropriate coding practices In thunderbird

7.1

High

Ecosystem: RPM

Component: thunderbird

FLAT-1WQEA (CVE-2026-4711)

Out-of-bounds read In thunderbird

1.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-WQD6D (CVE-2025-3877)

Enabled default configuration In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-K04ML (CVE-2025-4092)

Inappropriate coding practices In thunderbird

6.3

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-G0B68 (CVE-2025-4089)

Server side template injection In thunderbird

4.3

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-CQSFJ (CVE-2025-4088)

Cross-site request forgery In thunderbird

0.6

Low

Ecosystem: RPM

Component: thunderbird

FLAT-GA3BQ (CVE-2025-4085)

Improper authorization control for web services In thunderbird

2.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-S90E6 (CVE-2025-4084)

OS Command Injection In thunderbird

0.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-5PB6M (CVE-2025-2817)

Excessive privileges In thunderbird

5.6

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-4RWEZ (CVE-2025-1943)

Inappropriate coding practices In thunderbird-flatpak-container

6.1

Medium

Ecosystem: RPM

Component: thunderbird-flatpak-container

FLAT-P8QU4 (CVE-2025-1018)

Spoofing In thunderbird

0.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-PN1IY (CVE-2024-11705)

Asymmetric denial of service In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-95X2U (CVE-2024-9403)

Inappropriate coding practices In thunderbird

5.2

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-75E3U (CVE-2024-7518)

Clickjacking In thunderbird

4.6

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-FBCAR (CVE-2023-25743)

Clickjacking In thunderbird

4.7

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-XLFFF (CVE-2011-3656)

Reflected cross-site scripting (XSS) In thunderbird

1.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-9YBFW (CVE-2020-15657)

External control of file name or path In thunderbird

4.0

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-I5I0E (CVE-2020-12393)

Server side template injection In thunderbird

4.0

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-EUKYT (CVE-2019-13722)

Improper resource allocation - Buffer overflow In thunderbird

4.9

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-9J8K0 (CVE-2019-11758)

Improper resource allocation - Buffer overflow In thunderbird

6.1

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-LJ7EO (CVE-2016-5827)

Out-of-bounds read In thunderbird

6.6

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-IF876 (CVE-2016-5826)

Out-of-bounds read In thunderbird

6.7

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-UNQU7 (CVE-2016-5825)

Out-of-bounds read In thunderbird

6.6

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-FP6K7 (CVE-2016-5823)

Improper resource allocation In thunderbird

4.6

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-7QE4A (CVE-2016-2805)

Lack of data validation In thunderbird

7.8

High

Ecosystem: RPM

Component: thunderbird

FLAT-GI48Z (CVE-2016-1930)

Lack of data validation In thunderbird

8.0

High

Ecosystem: RPM

Component: thunderbird

FLAT-IG3ID (CVE-2015-7214)

Missing subresource integrity check In thunderbird

1.2

Low

Ecosystem: RPM

Component: thunderbird

FLAT-1HLX1 (CVE-2015-7213)

Out-of-bounds read In thunderbird

8.4

High

Ecosystem: RPM

Component: thunderbird

FLAT-JTJEC (CVE-2015-7212)

Out-of-bounds read In thunderbird

8.4

High

Ecosystem: RPM

Component: thunderbird

FLAT-S3DTO (CVE-2015-7205)

Out-of-bounds read In thunderbird

6.7

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-TSIVD (CVE-2015-7198)

Improper resource allocation - Buffer overflow In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-LDUJ6 (CVE-2015-7197)

Improper authorization control for web services In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-Y2COG (CVE-2015-7189)

Race condition In thunderbird

2.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-B46RE (CVE-2015-7175)

Out-of-bounds read In thunderbird

6.7

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-OFBQ6 (CVE-2015-4522)

Out-of-bounds read In thunderbird

7.9

High

Ecosystem: RPM

Component: thunderbird

FLAT-5HT8V (CVE-2015-4521)

Inappropriate coding practices In thunderbird

4.9

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-5JSJI (CVE-2015-4519)

Server-side request forgery (SSRF) In thunderbird

0.5

Low

Ecosystem: RPM

Component: thunderbird

FLAT-FGMM7 (CVE-2015-4517)

Lack of data validation In thunderbird

7.8

High

Ecosystem: RPM

Component: thunderbird

FLAT-JWT4A (CVE-2015-4509)

Inappropriate coding practices In thunderbird

5.9

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-HK964 (CVE-2015-4488)

Out-of-bounds read In thunderbird

6.8

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-BXWDH (CVE-2015-2741)

Insecure digital certificates In thunderbird

3.8

Low

Ecosystem: RPM

Component: thunderbird

FLAT-0J2O6 (CVE-2015-2740)

Improper resource allocation - Buffer overflow In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-NJFT5 (CVE-2015-2739)

Inappropriate coding practices In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-J1EAG (CVE-2015-2736)

Out-of-bounds read In thunderbird

6.8

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-E5GVK (CVE-2015-2735)

Out-of-bounds read In thunderbird

6.7

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-C7RVC (CVE-2015-2725)

Inappropriate coding practices In thunderbird

6.7

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-U8R72 (CVE-2015-2724)

Inappropriate coding practices In thunderbird

8.0

High

Ecosystem: RPM

Component: thunderbird

FLAT-0X2J9 (CVE-2015-2710)

Out-of-bounds read In thunderbird

8.2

High

Ecosystem: RPM

Component: thunderbird

FLAT-V7HNU (CVE-2015-2708)

Inappropriate coding practices In thunderbird

7.9

High

Ecosystem: RPM

Component: thunderbird

FLAT-VW6PO (CVE-2015-0816)

XAML injection In thunderbird

5.9

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-F04YU (CVE-2015-0807)

Cross-site request forgery In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-QZYRD (CVE-2014-8639)

Session Fixation In thunderbird

1.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-Y4CNA (CVE-2014-8638)

Cross-site request forgery In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-FUWHR (CVE-2014-1593)

Improper resource allocation - Buffer overflow In thunderbird

8.2

High

Ecosystem: RPM

Component: thunderbird

FLAT-70ZL9 (CVE-2014-1587)

Inappropriate coding practices In thunderbird

7.1

High

Ecosystem: RPM

Component: thunderbird

FLAT-NEAJN (CVE-2014-1576)

Out-of-bounds read In thunderbird

7.0

High

Ecosystem: RPM

Component: thunderbird

FLAT-PRY8T (CVE-2014-1567)

Inappropriate coding practices In thunderbird

8.4

High

Ecosystem: RPM

Component: thunderbird

FLAT-7ZKMF (CVE-2014-1562)

Lack of data validation In thunderbird

6.9

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-6NLTC (CVE-2014-1557)

Remote File Inclusion In thunderbird

9.0

Critical

Ecosystem: RPM

Component: thunderbird

FLAT-G1T5L (CVE-2014-1538)

Inappropriate coding practices In thunderbird

8.3

High

Ecosystem: RPM

Component: thunderbird

FLAT-TAD00 (CVE-2014-1531)

Inappropriate coding practices In thunderbird

6.6

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-BNC1I (CVE-2014-1523)

Out-of-bounds read In thunderbird

7.8

High

Ecosystem: RPM

Component: thunderbird

FLAT-1INTV (CVE-2014-1518)

Inappropriate coding practices In thunderbird

6.7

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-H96XW (CVE-2014-1513)

Improper resource allocation - Buffer overflow In thunderbird

4.2

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-8FJO6 (CVE-2014-1512)

Improper resource allocation In thunderbird

6.1

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-MFD38 (CVE-2014-1510)

Server side template injection In thunderbird

9.0

Critical

Ecosystem: RPM

Component: thunderbird

FLAT-8NYF4 (CVE-2014-1508)

Out-of-bounds read In thunderbird

4.9

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-X1DLB (CVE-2014-1505)

Sensitive information sent insecurely In thunderbird

2.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-FUK4V (CVE-2014-1497)

Out-of-bounds read In thunderbird

6.8

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-2FJI5 (CVE-2014-2018)

Reflected cross-site scripting (XSS) In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-TI8LP (CVE-2013-6674)

Reflected cross-site scripting (XSS) In thunderbird

0.6

Low

Ecosystem: RPM

Component: thunderbird

FLAT-1Z87M (CVE-2014-1486)

Inappropriate coding practices In thunderbird

9.1

Critical

Ecosystem: RPM

Component: thunderbird

FLAT-FK14Q (CVE-2014-1482)

Out-of-bounds read In thunderbird

8.0

High

Ecosystem: RPM

Component: thunderbird

FLAT-16NTS (CVE-2014-1479)

Improper authorization control for web services In thunderbird

2.7

Low

Ecosystem: RPM

Component: thunderbird

FLAT-IV21D (CVE-2014-1477)

Inappropriate coding practices In thunderbird

6.8

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-O7ZDA (CVE-2013-6671)

Lack of data validation In thunderbird

6.7

Medium

Ecosystem: RPM

Component: thunderbird

FLAT-KTZTL (CVE-2013-5614)

Security controls bypass or absence In thunderbird

1.3

Low

Ecosystem: RPM

Component: thunderbird

FLAT-25PZ1 (CVE-2013-5613)

Inappropriate coding practices In thunderbird

8.4

High

Ecosystem: RPM

Component: thunderbird

FLAT-VAXHT (CVE-2013-5604)

Inappropriate coding practices In thunderbird

8.2

High

Ecosystem: RPM

Component: thunderbird

FLAT-9ICI8 (CVE-2013-5602)

Inappropriate coding practices In thunderbird

7.0

High

Ecosystem: RPM

Component: thunderbird

FLAT-GLBWJ (CVE-2013-5600)

Remote command execution In thunderbird

9.1

Critical

Ecosystem: RPM

Component: thunderbird