[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2019-11715":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":44,"aliases":45,"duplicate_of":9,"upstream":46,"downstream":47,"duplicates":120,"related":121,"reserved_at":9,"published_at":144,"modified_at":145,"state":146,"summary":147,"references_raw":156,"kevs":218,"epss":219,"epss_history":222,"metrics":483,"affected":494},"CVE-2019-11715","Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and lead to XSS hazards on web sites in certain circumstances. This vulnerability affects Firefox ESR \u003C 60.8, Firefox \u003C 68, and Thunderbird \u003C 60.8.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-79","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","weakness","Stable","Base","High",[20,24,28,32,36,40],{"id":21,"name":22,"techniques":23},"CAPEC-209","XSS Using MIME Type Mismatch",[],{"id":25,"name":26,"techniques":27},"CAPEC-588","DOM-Based XSS",[],{"id":29,"name":30,"techniques":31},"CAPEC-591","Reflected XSS",[],{"id":33,"name":34,"techniques":35},"CAPEC-592","Stored XSS",[],{"id":37,"name":38,"techniques":39},"CAPEC-63","Cross-Site Scripting (XSS)",[],{"id":41,"name":42,"techniques":43},"CAPEC-85","AJAX Footprinting",[],[],[],[],[48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118],{"_key":49},"RHSA-2019:1763",{"_key":51},"RHSA-2019:1764",{"_key":53},"RHSA-2019:1765",{"_key":55},"RHSA-2019:1775",{"_key":57},"RHSA-2019:1777",{"_key":59},"RHSA-2019:1799",{"_key":61},"OPENSUSE-SU-2024:10601-1",{"_key":63},"SUSE-SU-2019:14124-1",{"_key":65},"SUSE-SU-2019:14246-1",{"_key":67},"SUSE-SU-2019:1861-1",{"_key":69},"SUSE-SU-2019:1861-2",{"_key":71},"SUSE-SU-2019:1861-3",{"_key":73},"SUSE-SU-2019:1869-1",{"_key":75},"SUSE-SU-2019:1960-1",{"_key":77},"SUSE-SU-2019:2515-1",{"_key":79},"SUSE-SU-2019:2620-1",{"_key":81},"OPENSUSE-SU-2019:1990-1",{"_key":83},"OPENSUSE-SU-2019:1782-1",{"_key":85},"OPENSUSE-SU-2019:1811-1",{"_key":87},"OPENSUSE-SU-2019:1813-1",{"_key":89},"OPENSUSE-SU-2019:2248-1",{"_key":91},"OPENSUSE-SU-2019:2249-1",{"_key":93},"OPENSUSE-SU-2024:10600-1",{"_key":95},"OPENSUSE-SU-2024:14572-1",{"_key":97},"DLA-1869-1",{"_key":99},"DLA-1870-1",{"_key":101},"DSA-4479-1",{"_key":103},"DSA-4482-1",{"_key":105},"MGASA-2019-0211",{"_key":107},"MGASA-2019-0212",{"_key":109},"MGASA-2019-0213",{"_key":111},"MGASA-2019-0272",{"_key":113},"UBUNTU-CVE-2019-11715",{"_key":115},"USN-4054-1",{"_key":117},"USN-4064-1",{"_key":119},"DEBIAN-CVE-2019-11715",[],[122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143],{"_key":61},{"_key":107},{"_key":63},{"_key":65},{"_key":67},{"_key":69},{"_key":71},{"_key":73},{"_key":75},{"_key":77},{"_key":79},{"_key":81},{"_key":83},{"_key":85},{"_key":87},{"_key":89},{"_key":91},{"_key":93},{"_key":95},{"_key":105},{"_key":109},{"_key":111},"2019-07-23T13:18:29.000Z","2024-08-04T23:03:32.562Z","Modified",{"cisa_kev":148,"cisa_ransomware":148,"cisa_vendor":9,"epss_severity":149,"epss_score":150,"severity":151,"severity_score":152,"severity_version":153,"severity_source":154,"severity_vector":155,"severity_status":146},false,"low",0.00619,"medium",6.1,"v3.0","nvd","CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",[157,164,168,172,178,183,187,193,197,202,206,210,214],{"url":158,"sources":159,"tags":161},"https://www.mozilla.org/security/advisories/mfsa2019-21/",[160,154],"cve.org",[162,163],"X Refsource MISC","Vendor Advisory",{"url":165,"sources":166,"tags":167},"https://www.mozilla.org/security/advisories/mfsa2019-22/",[160,154],[162,163],{"url":169,"sources":170,"tags":171},"https://www.mozilla.org/security/advisories/mfsa2019-23/",[160,154],[162,163],{"url":173,"sources":174,"tags":175},"https://bugzilla.mozilla.org/show_bug.cgi?id=1555523",[160,154],[162,176,177,163],"Issue Tracking","Permissions Required",{"url":179,"sources":180,"tags":181},"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html",[160,154],[163,182],"X Refsource SUSE",{"url":184,"sources":185,"tags":186},"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html",[160,154],[163,182],{"url":188,"sources":189,"tags":190},"https://lists.debian.org/debian-lts-announce/2019/08/msg00001.html",[160,154],[191,192],"Mailing List","X Refsource MLIST",{"url":194,"sources":195,"tags":196},"https://lists.debian.org/debian-lts-announce/2019/08/msg00002.html",[160,154],[191,192],{"url":198,"sources":199,"tags":200},"https://security.gentoo.org/glsa/201908-12",[160,154],[163,201],"X Refsource GENTOO",{"url":203,"sources":204,"tags":205},"https://security.gentoo.org/glsa/201908-20",[160,154],[163,201],{"url":207,"sources":208,"tags":209},"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html",[160,154],[163,182],{"url":211,"sources":212,"tags":213},"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html",[160,154],[163,182],{"url":215,"sources":216,"tags":217},"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html",[160,154],[163,182],[],{"date":220,"score":150,"percentile":221},"2026-06-04",0.70362,[223,227,230,233,235,237,240,243,246,249,252,255,259,262,265,269,272,274,277,280,283,286,289,292,294,297,300,303,306,309,312,315,318,321,324,327,330,333,336,339,342,345,348,351,354,357,360,363,366,368,370,373,376,379,382,385,388,390,393,396,399,402,404,407,409,412,415,418,420,422,425,428,431,434,437,440,443,446,448,451,454,457,460,463,466,468,471,474,477,480],{"date":224,"score":225,"percentile":226},"2025-11-04",0.00769,0.72702,{"date":228,"score":225,"percentile":229},"2025-11-05",0.72687,{"date":231,"score":225,"percentile":232},"2025-11-06",0.72685,{"date":234,"score":225,"percentile":226},"2025-11-07",{"date":236,"score":225,"percentile":226},"2025-11-08",{"date":238,"score":225,"percentile":239},"2025-11-09",0.72695,{"date":241,"score":225,"percentile":242},"2025-11-10",0.72686,{"date":244,"score":225,"percentile":245},"2025-11-11",0.72691,{"date":247,"score":225,"percentile":248},"2025-11-12",0.72709,{"date":250,"score":225,"percentile":251},"2025-11-13",0.72714,{"date":253,"score":225,"percentile":254},"2025-11-14",0.72721,{"date":256,"score":257,"percentile":258},"2025-11-15",0.00646,0.69915,{"date":260,"score":257,"percentile":261},"2025-11-16",0.69912,{"date":263,"score":257,"percentile":264},"2025-11-17",0.6991,{"date":266,"score":267,"percentile":268},"2025-11-18",0.00587,0.66555,{"date":270,"score":267,"percentile":271},"2025-11-19",0.66561,{"date":273,"score":267,"percentile":268},"2025-11-20",{"date":275,"score":257,"percentile":276},"2025-11-21",0.69927,{"date":278,"score":257,"percentile":279},"2025-11-22",0.6992,{"date":281,"score":257,"percentile":282},"2025-11-23",0.69905,{"date":284,"score":257,"percentile":285},"2025-11-24",0.69897,{"date":287,"score":257,"percentile":288},"2025-11-25",0.69898,{"date":290,"score":257,"percentile":291},"2025-11-26",0.69904,{"date":293,"score":257,"percentile":291},"2025-11-27",{"date":295,"score":257,"percentile":296},"2025-11-28",0.69894,{"date":298,"score":257,"percentile":299},"2025-11-29",0.69881,{"date":301,"score":257,"percentile":302},"2025-11-30",0.69876,{"date":304,"score":257,"percentile":305},"2025-12-01",0.7002,{"date":307,"score":257,"percentile":308},"2025-12-02",0.70029,{"date":310,"score":257,"percentile":311},"2025-12-03",0.70025,{"date":313,"score":257,"percentile":314},"2025-12-04",0.6987,{"date":316,"score":257,"percentile":317},"2025-12-05",0.69885,{"date":319,"score":257,"percentile":320},"2025-12-06",0.69891,{"date":322,"score":257,"percentile":323},"2025-12-07",0.69889,{"date":325,"score":257,"percentile":326},"2025-12-08",0.69893,{"date":328,"score":257,"percentile":329},"2025-12-09",0.69925,{"date":331,"score":257,"percentile":332},"2025-12-10",0.69967,{"date":334,"score":257,"percentile":335},"2025-12-11",0.6999,{"date":337,"score":257,"percentile":338},"2025-12-12",0.70016,{"date":340,"score":257,"percentile":341},"2025-12-13",0.70018,{"date":343,"score":257,"percentile":344},"2025-12-14",0.70021,{"date":346,"score":257,"percentile":347},"2025-12-15",0.70017,{"date":349,"score":257,"percentile":350},"2025-12-16",0.70023,{"date":352,"score":257,"percentile":353},"2025-12-17",0.70038,{"date":355,"score":257,"percentile":356},"2025-12-18",0.70067,{"date":358,"score":257,"percentile":359},"2025-12-19",0.70084,{"date":361,"score":257,"percentile":362},"2025-12-20",0.70081,{"date":364,"score":257,"percentile":365},"2025-12-21",0.70071,{"date":367,"score":257,"percentile":356},"2025-12-22",{"date":369,"score":257,"percentile":356},"2025-12-23",{"date":371,"score":257,"percentile":372},"2025-12-24",0.70076,{"date":374,"score":257,"percentile":375},"2025-12-25",0.70101,{"date":377,"score":257,"percentile":378},"2025-12-26",0.701,{"date":380,"score":257,"percentile":381},"2025-12-27",0.70132,{"date":383,"score":257,"percentile":384},"2025-12-28",0.70073,{"date":386,"score":257,"percentile":387},"2025-12-29",0.70069,{"date":389,"score":257,"percentile":362},"2025-12-30",{"date":391,"score":257,"percentile":392},"2025-12-31",0.70102,{"date":394,"score":257,"percentile":395},"2026-01-01",0.70258,{"date":397,"score":257,"percentile":398},"2026-01-02",0.70252,{"date":400,"score":257,"percentile":401},"2026-01-03",0.70253,{"date":403,"score":257,"percentile":392},"2026-01-04",{"date":405,"score":257,"percentile":406},"2026-01-05",0.70094,{"date":408,"score":257,"percentile":378},"2026-01-06",{"date":410,"score":257,"percentile":411},"2026-01-07",0.70115,{"date":413,"score":257,"percentile":414},"2026-01-08",0.7013,{"date":416,"score":257,"percentile":417},"2026-01-09",0.70136,{"date":419,"score":257,"percentile":417},"2026-01-10",{"date":421,"score":257,"percentile":414},"2026-01-11",{"date":423,"score":257,"percentile":424},"2026-01-12",0.70124,{"date":426,"score":257,"percentile":427},"2026-01-13",0.70122,{"date":429,"score":257,"percentile":430},"2026-01-14",0.7015,{"date":432,"score":257,"percentile":433},"2026-01-15",0.70156,{"date":435,"score":257,"percentile":436},"2026-01-16",0.70175,{"date":438,"score":257,"percentile":439},"2026-01-17",0.70167,{"date":441,"score":257,"percentile":442},"2026-01-18",0.70147,{"date":444,"score":257,"percentile":445},"2026-01-19",0.70139,{"date":447,"score":257,"percentile":442},"2026-01-20",{"date":449,"score":257,"percentile":450},"2026-01-21",0.70151,{"date":452,"score":257,"percentile":453},"2026-01-22",0.70163,{"date":455,"score":257,"percentile":456},"2026-01-23",0.70194,{"date":458,"score":257,"percentile":459},"2026-01-24",0.70199,{"date":461,"score":257,"percentile":462},"2026-01-25",0.7017,{"date":464,"score":257,"percentile":465},"2026-01-26",0.70165,{"date":467,"score":257,"percentile":439},"2026-01-27",{"date":469,"score":257,"percentile":470},"2026-01-28",0.70182,{"date":472,"score":257,"percentile":473},"2026-01-29",0.70181,{"date":475,"score":257,"percentile":476},"2026-01-30",0.7019,{"date":478,"score":257,"percentile":479},"2026-01-31",0.70196,{"date":481,"score":257,"percentile":482},"2026-02-01",0.70329,[484],{"source":154,"cvss_v2_0":485,"cvss_v3_0":490,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":486,"baseSeverity":9,"vectorString":487,"impactScore":488,"exploitabilityScore":489},4.3,"AV:N/AC:M/Au:N/C:N/I:P/A:N",2.9,8.6,{"baseScore":152,"baseSeverity":491,"vectorString":155,"impactScore":492,"exploitabilityScore":493},"MEDIUM",4.5,7.2,[495,514,521],{"ecosystem":9,"name":496,"vendor":497,"product":496,"cpe_part":498,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":499},"firefox","mozilla","a",[500,506,509],{"version":501,"is_range":502,"range_type":503,"version_start":9,"version_start_type":9,"version_end":504,"version_end_type":505,"fixed_in":9},"lt60.8.0",true,"cpe","60.8.0","excluding",{"version":507,"is_range":502,"range_type":503,"version_start":9,"version_start_type":9,"version_end":508,"version_end_type":505,"fixed_in":9},"lt68.0","68.0",{"version":510,"is_range":502,"range_type":160,"version_start":511,"version_start_type":512,"version_end":513,"version_end_type":505,"fixed_in":9},">= unspecified, \u003C 68","unspecified","including","68",{"ecosystem":9,"name":515,"vendor":497,"product":516,"cpe_part":498,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":517},"firefox esr","firefox_esr",[518],{"version":519,"is_range":502,"range_type":160,"version_start":511,"version_start_type":512,"version_end":520,"version_end_type":505,"fixed_in":9},">= unspecified, \u003C 60.8","60.8",{"ecosystem":9,"name":522,"vendor":497,"product":523,"cpe_part":498,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":524},"Thunderbird","thunderbird",[525,526],{"version":501,"is_range":502,"range_type":503,"version_start":9,"version_start_type":9,"version_end":504,"version_end_type":505,"fixed_in":9},{"version":519,"is_range":502,"range_type":160,"version_start":511,"version_start_type":512,"version_end":520,"version_end_type":505,"fixed_in":9}]