Lookup for vulnerable packages by Package URL.
| Purl | pkg:deb/debian/cairo@1.8.10-6 |
| Type | deb |
| Namespace | debian |
| Name | cairo |
| Version | 1.8.10-6 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | true |
| Next_non_vulnerable_version | 1.18.4-1 |
| Latest_non_vulnerable_version | 1.18.4-1 |
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-8bnq-c161-2yaq |
| vulnerability_id |
VCID-8bnq-c161-2yaq |
| summary |
cairo: Invalid free in cairo_ft_apply_variations() resulting in a denial of service |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2018-19876 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00303 |
| scoring_system |
epss |
| scoring_elements |
0.53506 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00303 |
| scoring_system |
epss |
| scoring_elements |
0.53611 |
| published_at |
2026-04-21T12:55:00Z |
|
| 2 |
| value |
0.00303 |
| scoring_system |
epss |
| scoring_elements |
0.53622 |
| published_at |
2026-04-16T12:55:00Z |
|
| 3 |
| value |
0.00303 |
| scoring_system |
epss |
| scoring_elements |
0.53627 |
| published_at |
2026-04-18T12:55:00Z |
|
| 4 |
| value |
0.00303 |
| scoring_system |
epss |
| scoring_elements |
0.53529 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00303 |
| scoring_system |
epss |
| scoring_elements |
0.53555 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00303 |
| scoring_system |
epss |
| scoring_elements |
0.53524 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00303 |
| scoring_system |
epss |
| scoring_elements |
0.53574 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00303 |
| scoring_system |
epss |
| scoring_elements |
0.5357 |
| published_at |
2026-04-09T12:55:00Z |
|
| 9 |
| value |
0.00303 |
| scoring_system |
epss |
| scoring_elements |
0.5362 |
| published_at |
2026-04-11T12:55:00Z |
|
| 10 |
| value |
0.00303 |
| scoring_system |
epss |
| scoring_elements |
0.53602 |
| published_at |
2026-04-12T12:55:00Z |
|
| 11 |
| value |
0.00303 |
| scoring_system |
epss |
| scoring_elements |
0.53585 |
| published_at |
2026-04-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2018-19876 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2018-19876
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8bnq-c161-2yaq |
|
| 1 |
| url |
VCID-cadj-unsk-rubv |
| vulnerability_id |
VCID-cadj-unsk-rubv |
| summary |
Multiple vulnerabilities were found in Cairo, the worst of which
could cause a Denial of Service condition. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2016-9082 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0041 |
| scoring_system |
epss |
| scoring_elements |
0.61383 |
| published_at |
2026-04-21T12:55:00Z |
|
| 1 |
| value |
0.0041 |
| scoring_system |
epss |
| scoring_elements |
0.61234 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.0041 |
| scoring_system |
epss |
| scoring_elements |
0.61314 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.0041 |
| scoring_system |
epss |
| scoring_elements |
0.61343 |
| published_at |
2026-04-04T12:55:00Z |
|
| 4 |
| value |
0.0041 |
| scoring_system |
epss |
| scoring_elements |
0.6131 |
| published_at |
2026-04-07T12:55:00Z |
|
| 5 |
| value |
0.0041 |
| scoring_system |
epss |
| scoring_elements |
0.61358 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.0041 |
| scoring_system |
epss |
| scoring_elements |
0.61373 |
| published_at |
2026-04-09T12:55:00Z |
|
| 7 |
| value |
0.0041 |
| scoring_system |
epss |
| scoring_elements |
0.61394 |
| published_at |
2026-04-11T12:55:00Z |
|
| 8 |
| value |
0.0041 |
| scoring_system |
epss |
| scoring_elements |
0.61379 |
| published_at |
2026-04-12T12:55:00Z |
|
| 9 |
| value |
0.0041 |
| scoring_system |
epss |
| scoring_elements |
0.6136 |
| published_at |
2026-04-13T12:55:00Z |
|
| 10 |
| value |
0.0041 |
| scoring_system |
epss |
| scoring_elements |
0.61399 |
| published_at |
2026-04-16T12:55:00Z |
|
| 11 |
| value |
0.0041 |
| scoring_system |
epss |
| scoring_elements |
0.61403 |
| published_at |
2026-04-18T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2016-9082 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2016-9082
|
| risk_score |
1.7 |
| exploitability |
0.5 |
| weighted_severity |
3.4 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-cadj-unsk-rubv |
|
| 2 |
| url |
VCID-rzf2-bp8j-27fq |
| vulnerability_id |
VCID-rzf2-bp8j-27fq |
| summary |
A buffer overflow vulnerability has been discovered in Cairo which could result in denial of service. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-35492 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00098 |
| scoring_system |
epss |
| scoring_elements |
0.26976 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00098 |
| scoring_system |
epss |
| scoring_elements |
0.26843 |
| published_at |
2026-04-18T12:55:00Z |
|
| 2 |
| value |
0.00098 |
| scoring_system |
epss |
| scoring_elements |
0.26961 |
| published_at |
2026-04-11T12:55:00Z |
|
| 3 |
| value |
0.00098 |
| scoring_system |
epss |
| scoring_elements |
0.26917 |
| published_at |
2026-04-12T12:55:00Z |
|
| 4 |
| value |
0.00098 |
| scoring_system |
epss |
| scoring_elements |
0.2686 |
| published_at |
2026-04-13T12:55:00Z |
|
| 5 |
| value |
0.00098 |
| scoring_system |
epss |
| scoring_elements |
0.26872 |
| published_at |
2026-04-16T12:55:00Z |
|
| 6 |
| value |
0.00098 |
| scoring_system |
epss |
| scoring_elements |
0.27016 |
| published_at |
2026-04-02T12:55:00Z |
|
| 7 |
| value |
0.00098 |
| scoring_system |
epss |
| scoring_elements |
0.27053 |
| published_at |
2026-04-04T12:55:00Z |
|
| 8 |
| value |
0.00098 |
| scoring_system |
epss |
| scoring_elements |
0.26911 |
| published_at |
2026-04-08T12:55:00Z |
|
| 9 |
| value |
0.00098 |
| scoring_system |
epss |
| scoring_elements |
0.26957 |
| published_at |
2026-04-09T12:55:00Z |
|
| 10 |
| value |
0.00106 |
| scoring_system |
epss |
| scoring_elements |
0.28701 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-35492 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-35492
|
| risk_score |
3.5 |
| exploitability |
0.5 |
| weighted_severity |
7.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-rzf2-bp8j-27fq |
|
| 3 |
| url |
VCID-vf5a-zwgr-pqg5 |
| vulnerability_id |
VCID-vf5a-zwgr-pqg5 |
| summary |
Multiple vulnerabilities were found in Cairo, the worst of which
could cause a Denial of Service condition. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-9814 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00358 |
| scoring_system |
epss |
| scoring_elements |
0.57913 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00358 |
| scoring_system |
epss |
| scoring_elements |
0.5805 |
| published_at |
2026-04-08T12:55:00Z |
|
| 2 |
| value |
0.00358 |
| scoring_system |
epss |
| scoring_elements |
0.58047 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00358 |
| scoring_system |
epss |
| scoring_elements |
0.58026 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00358 |
| scoring_system |
epss |
| scoring_elements |
0.58056 |
| published_at |
2026-04-18T12:55:00Z |
|
| 5 |
| value |
0.00358 |
| scoring_system |
epss |
| scoring_elements |
0.57998 |
| published_at |
2026-04-02T12:55:00Z |
|
| 6 |
| value |
0.00358 |
| scoring_system |
epss |
| scoring_elements |
0.5802 |
| published_at |
2026-04-04T12:55:00Z |
|
| 7 |
| value |
0.00358 |
| scoring_system |
epss |
| scoring_elements |
0.57995 |
| published_at |
2026-04-07T12:55:00Z |
|
| 8 |
| value |
0.00358 |
| scoring_system |
epss |
| scoring_elements |
0.58053 |
| published_at |
2026-04-09T12:55:00Z |
|
| 9 |
| value |
0.00358 |
| scoring_system |
epss |
| scoring_elements |
0.5807 |
| published_at |
2026-04-11T12:55:00Z |
|
| 10 |
| value |
0.0039 |
| scoring_system |
epss |
| scoring_elements |
0.60093 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-9814 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-9814
|
| risk_score |
1.5 |
| exploitability |
0.5 |
| weighted_severity |
3.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vf5a-zwgr-pqg5 |
|
| 4 |
| url |
VCID-w7a8-e349-bfdx |
| vulnerability_id |
VCID-w7a8-e349-bfdx |
| summary |
cairo: out of bounds read in fill_xrgb32_lerp_opaque_spans |
| references |
| 0 |
|
| 1 |
|
| 2 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2016-3190 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00701 |
| scoring_system |
epss |
| scoring_elements |
0.72045 |
| published_at |
2026-04-21T12:55:00Z |
|
| 1 |
| value |
0.00701 |
| scoring_system |
epss |
| scoring_elements |
0.72052 |
| published_at |
2026-04-16T12:55:00Z |
|
| 2 |
| value |
0.00701 |
| scoring_system |
epss |
| scoring_elements |
0.7206 |
| published_at |
2026-04-18T12:55:00Z |
|
| 3 |
| value |
0.00701 |
| scoring_system |
epss |
| scoring_elements |
0.71964 |
| published_at |
2026-04-01T12:55:00Z |
|
| 4 |
| value |
0.00701 |
| scoring_system |
epss |
| scoring_elements |
0.71972 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00701 |
| scoring_system |
epss |
| scoring_elements |
0.71992 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00701 |
| scoring_system |
epss |
| scoring_elements |
0.71967 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00701 |
| scoring_system |
epss |
| scoring_elements |
0.72006 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00701 |
| scoring_system |
epss |
| scoring_elements |
0.72018 |
| published_at |
2026-04-09T12:55:00Z |
|
| 9 |
| value |
0.00701 |
| scoring_system |
epss |
| scoring_elements |
0.72042 |
| published_at |
2026-04-11T12:55:00Z |
|
| 10 |
| value |
0.00701 |
| scoring_system |
epss |
| scoring_elements |
0.72026 |
| published_at |
2026-04-12T12:55:00Z |
|
| 11 |
| value |
0.00701 |
| scoring_system |
epss |
| scoring_elements |
0.72011 |
| published_at |
2026-04-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2016-3190 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
|
| fixed_packages |
|
| aliases |
CVE-2016-3190
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-w7a8-e349-bfdx |
|
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-s8zd-7rpb-ukct |
| vulnerability_id |
VCID-s8zd-7rpb-ukct |
| summary |
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-2044 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.05951 |
| scoring_system |
epss |
| scoring_elements |
0.90599 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.05951 |
| scoring_system |
epss |
| scoring_elements |
0.90603 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.05951 |
| scoring_system |
epss |
| scoring_elements |
0.90613 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.05951 |
| scoring_system |
epss |
| scoring_elements |
0.90621 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.05951 |
| scoring_system |
epss |
| scoring_elements |
0.90632 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.05951 |
| scoring_system |
epss |
| scoring_elements |
0.90638 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.05951 |
| scoring_system |
epss |
| scoring_elements |
0.90647 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.05951 |
| scoring_system |
epss |
| scoring_elements |
0.90642 |
| published_at |
2026-04-13T12:55:00Z |
|
| 8 |
| value |
0.05951 |
| scoring_system |
epss |
| scoring_elements |
0.90661 |
| published_at |
2026-04-16T12:55:00Z |
|
| 9 |
| value |
0.05951 |
| scoring_system |
epss |
| scoring_elements |
0.90659 |
| published_at |
2026-04-18T12:55:00Z |
|
| 10 |
| value |
0.05951 |
| scoring_system |
epss |
| scoring_elements |
0.90656 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-2044 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-2044
|
| risk_score |
0.2 |
| exploitability |
2.0 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-s8zd-7rpb-ukct |
|
|
| Risk_score | 4.5 |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:deb/debian/cairo@1.8.10-6 |