Lookup for vulnerable packages by Package URL.
| Purl | pkg:rpm/redhat/libvncserver@0.9.11-17?arch=el8 |
| Type | rpm |
| Namespace | redhat |
| Name | libvncserver |
| Version | 0.9.11-17 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | true |
| Next_non_vulnerable_version | null |
| Latest_non_vulnerable_version | null |
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-7taj-t1kg-h3a9 |
| vulnerability_id |
VCID-7taj-t1kg-h3a9 |
| summary |
libvncserver: libvncserver/rfbserver.c has a divide by zero which could result in DoS |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-25708 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0071 |
| scoring_system |
epss |
| scoring_elements |
0.72252 |
| published_at |
2026-04-21T12:55:00Z |
|
| 1 |
| value |
0.0071 |
| scoring_system |
epss |
| scoring_elements |
0.72255 |
| published_at |
2026-04-16T12:55:00Z |
|
| 2 |
| value |
0.0071 |
| scoring_system |
epss |
| scoring_elements |
0.72265 |
| published_at |
2026-04-18T12:55:00Z |
|
| 3 |
| value |
0.00784 |
| scoring_system |
epss |
| scoring_elements |
0.73708 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.00784 |
| scoring_system |
epss |
| scoring_elements |
0.73743 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.00784 |
| scoring_system |
epss |
| scoring_elements |
0.73756 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.00784 |
| scoring_system |
epss |
| scoring_elements |
0.73778 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.00784 |
| scoring_system |
epss |
| scoring_elements |
0.7376 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.00784 |
| scoring_system |
epss |
| scoring_elements |
0.73751 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.00784 |
| scoring_system |
epss |
| scoring_elements |
0.73703 |
| published_at |
2026-04-01T12:55:00Z |
|
| 10 |
| value |
0.00784 |
| scoring_system |
epss |
| scoring_elements |
0.73713 |
| published_at |
2026-04-02T12:55:00Z |
|
| 11 |
| value |
0.00784 |
| scoring_system |
epss |
| scoring_elements |
0.73736 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-25708 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-25708
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7taj-t1kg-h3a9 |
|
| 1 |
| url |
VCID-h8bk-uaqv-puap |
| vulnerability_id |
VCID-h8bk-uaqv-puap |
| summary |
security update |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2018-21247 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01477 |
| scoring_system |
epss |
| scoring_elements |
0.80914 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.01477 |
| scoring_system |
epss |
| scoring_elements |
0.80923 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.01477 |
| scoring_system |
epss |
| scoring_elements |
0.80945 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.01477 |
| scoring_system |
epss |
| scoring_elements |
0.80942 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.01477 |
| scoring_system |
epss |
| scoring_elements |
0.8097 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.01477 |
| scoring_system |
epss |
| scoring_elements |
0.80977 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.01477 |
| scoring_system |
epss |
| scoring_elements |
0.80994 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.01477 |
| scoring_system |
epss |
| scoring_elements |
0.8098 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.01477 |
| scoring_system |
epss |
| scoring_elements |
0.80972 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.01477 |
| scoring_system |
epss |
| scoring_elements |
0.81009 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.01477 |
| scoring_system |
epss |
| scoring_elements |
0.8101 |
| published_at |
2026-04-18T12:55:00Z |
|
| 11 |
| value |
0.01477 |
| scoring_system |
epss |
| scoring_elements |
0.81011 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2018-21247 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
|
| fixed_packages |
|
| aliases |
CVE-2018-21247
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-h8bk-uaqv-puap |
|
| 2 |
| url |
VCID-qfyp-1xhm-13au |
| vulnerability_id |
VCID-qfyp-1xhm-13au |
| summary |
libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-14397 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.04438 |
| scoring_system |
epss |
| scoring_elements |
0.88996 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.04438 |
| scoring_system |
epss |
| scoring_elements |
0.89004 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.04438 |
| scoring_system |
epss |
| scoring_elements |
0.8902 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.04438 |
| scoring_system |
epss |
| scoring_elements |
0.89022 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.04438 |
| scoring_system |
epss |
| scoring_elements |
0.89039 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.04438 |
| scoring_system |
epss |
| scoring_elements |
0.89045 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.04438 |
| scoring_system |
epss |
| scoring_elements |
0.89057 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.04438 |
| scoring_system |
epss |
| scoring_elements |
0.89052 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.04438 |
| scoring_system |
epss |
| scoring_elements |
0.8905 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.04438 |
| scoring_system |
epss |
| scoring_elements |
0.89064 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.04438 |
| scoring_system |
epss |
| scoring_elements |
0.89063 |
| published_at |
2026-04-18T12:55:00Z |
|
| 11 |
| value |
0.04438 |
| scoring_system |
epss |
| scoring_elements |
0.89059 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-14397 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-14397
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qfyp-1xhm-13au |
|
| 3 |
| url |
VCID-sgkq-a36z-gyfp |
| vulnerability_id |
VCID-sgkq-a36z-gyfp |
| summary |
libvncserver: buffer overflow in ConnectClientToUnixSock() |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20839 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.04081 |
| scoring_system |
epss |
| scoring_elements |
0.88505 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.04081 |
| scoring_system |
epss |
| scoring_elements |
0.88513 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.04081 |
| scoring_system |
epss |
| scoring_elements |
0.8853 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.04081 |
| scoring_system |
epss |
| scoring_elements |
0.88534 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.04081 |
| scoring_system |
epss |
| scoring_elements |
0.88553 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.04081 |
| scoring_system |
epss |
| scoring_elements |
0.88557 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.04081 |
| scoring_system |
epss |
| scoring_elements |
0.88569 |
| published_at |
2026-04-21T12:55:00Z |
|
| 7 |
| value |
0.04081 |
| scoring_system |
epss |
| scoring_elements |
0.88561 |
| published_at |
2026-04-13T12:55:00Z |
|
| 8 |
| value |
0.04081 |
| scoring_system |
epss |
| scoring_elements |
0.88575 |
| published_at |
2026-04-16T12:55:00Z |
|
| 9 |
| value |
0.04081 |
| scoring_system |
epss |
| scoring_elements |
0.88571 |
| published_at |
2026-04-18T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20839 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2019-20839
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sgkq-a36z-gyfp |
|
| 4 |
| url |
VCID-wzpf-4nu7-xyc6 |
| vulnerability_id |
VCID-wzpf-4nu7-xyc6 |
| summary |
libvncserver: libvncclient/rfbproto.c does not limit TextChat size |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-14405 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01448 |
| scoring_system |
epss |
| scoring_elements |
0.80698 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.01448 |
| scoring_system |
epss |
| scoring_elements |
0.80708 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.01448 |
| scoring_system |
epss |
| scoring_elements |
0.80729 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.01448 |
| scoring_system |
epss |
| scoring_elements |
0.80725 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.01448 |
| scoring_system |
epss |
| scoring_elements |
0.80753 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.01448 |
| scoring_system |
epss |
| scoring_elements |
0.80761 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.01448 |
| scoring_system |
epss |
| scoring_elements |
0.80778 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.01448 |
| scoring_system |
epss |
| scoring_elements |
0.80762 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.01448 |
| scoring_system |
epss |
| scoring_elements |
0.80754 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.01448 |
| scoring_system |
epss |
| scoring_elements |
0.80791 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.01448 |
| scoring_system |
epss |
| scoring_elements |
0.80792 |
| published_at |
2026-04-18T12:55:00Z |
|
| 11 |
| value |
0.01448 |
| scoring_system |
epss |
| scoring_elements |
0.80793 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-14405 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-14405
|
| risk_score |
3.0 |
| exploitability |
0.5 |
| weighted_severity |
5.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-wzpf-4nu7-xyc6 |
|
|
| Fixing_vulnerabilities |
|
| Risk_score | 3.4 |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/libvncserver@0.9.11-17%3Farch=el8 |