Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/115800?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/115800?format=api", "purl": "pkg:rpm/redhat/tfm-rubygem-sequel@4.20.0-6?arch=el7sat", "type": "rpm", "namespace": "redhat", "name": "tfm-rubygem-sequel", "version": "4.20.0-6", "qualifiers": { "arch": "el7sat" }, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6858?format=api", "vulnerability_id": "VCID-1mw1-384y-huc7", "summary": "Uncontrolled Resource Consumption\nAlgorithmic complexity vulnerability in the `ssl.match_hostname` function and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.", "references": [ { "reference_url": "http://bugs.python.org/issue17980", "reference_id": "", "reference_type": "", "scores": [], "url": "http://bugs.python.org/issue17980" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2099.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2099.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-2099", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.05238", "scoring_system": "epss", "scoring_elements": "0.89926", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.05238", "scoring_system": "epss", "scoring_elements": "0.89929", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.05238", "scoring_system": "epss", "scoring_elements": "0.89942", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.05238", "scoring_system": "epss", "scoring_elements": "0.89948", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.05238", "scoring_system": "epss", "scoring_elements": "0.89964", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.05238", "scoring_system": "epss", "scoring_elements": "0.8997", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.05238", "scoring_system": "epss", "scoring_elements": "0.89978", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.05238", "scoring_system": "epss", "scoring_elements": "0.89976", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.05238", "scoring_system": "epss", "scoring_elements": "0.89969", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-2099" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2099", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2099" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2099", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2099" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709066", "reference_id": "709066", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709066" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709067", "reference_id": "709067", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709067" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709068", "reference_id": "709068", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709068" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709069", "reference_id": "709069", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709069" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709070", "reference_id": "709070", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709070" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=963260", "reference_id": "963260", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=963260" }, { "reference_url": "https://security.gentoo.org/glsa/201401-04", "reference_id": "GLSA-201401-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201401-04" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1263", "reference_id": "RHSA-2014:1263", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1263" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1690", "reference_id": "RHSA-2014:1690", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1690" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0042", "reference_id": "RHSA-2015:0042", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0042" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1166", "reference_id": "RHSA-2016:1166", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1166" }, { "reference_url": "https://usn.ubuntu.com/1983-1/", "reference_id": "USN-1983-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1983-1/" }, { "reference_url": "https://usn.ubuntu.com/1984-1/", "reference_id": "USN-1984-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1984-1/" }, { "reference_url": "https://usn.ubuntu.com/1985-1/", "reference_id": "USN-1985-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1985-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2013-2099" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1mw1-384y-huc7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7140?format=api", "vulnerability_id": "VCID-3ycr-9smk-uqdc", "summary": "Potential Denial of Service Vulnerability\nCarefully crafted requests can cause a `SystemStackError` and potentially cause a denial of service attack.", "references": [ { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164173.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164173.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165180.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165180.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00040.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00040.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00043.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00043.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00044.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00044.html" }, { "reference_url": "http://openwall.com/lists/oss-security/2015/06/16/14", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2015/06/16/14" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-2290.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-2290.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3225.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3225.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3225", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.10456", "scoring_system": "epss", "scoring_elements": "0.93234", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.10456", "scoring_system": "epss", "scoring_elements": "0.93216", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.10456", "scoring_system": "epss", "scoring_elements": "0.9322", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.10456", "scoring_system": "epss", "scoring_elements": "0.93218", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.10456", "scoring_system": "epss", "scoring_elements": "0.93227", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.10456", "scoring_system": "epss", "scoring_elements": "0.93231", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.10456", "scoring_system": "epss", "scoring_elements": "0.93235", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.10456", "scoring_system": "epss", "scoring_elements": "0.93232", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.10456", "scoring_system": "epss", "scoring_elements": "0.93207", "published_at": "2026-04-01T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3225" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3225", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3225" }, { "reference_url": "https://github.com/rack/rack", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/rack/rack" }, { "reference_url": "https://github.com/rack/rack/blob/master/HISTORY.md", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/rack/rack/blob/master/HISTORY.md" }, { "reference_url": "https://github.com/rack/rack/commits/1.4.6", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/rack/rack/commits/1.4.6" }, { "reference_url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2015-3225.yml", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2015-3225.yml" }, { "reference_url": "https://groups.google.com/forum/#!topic/ruby-security-ann/gcUbICUmKMc", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://groups.google.com/forum/#!topic/ruby-security-ann/gcUbICUmKMc" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3225", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3225" }, { "reference_url": "http://www.debian.org/security/2015/dsa-3322", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.debian.org/security/2015/dsa-3322" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1232292", "reference_id": "1232292", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1232292" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=789311", "reference_id": "789311", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=789311" }, { "reference_url": "https://github.com/advisories/GHSA-rgr4-9jh5-j4j6", "reference_id": "GHSA-rgr4-9jh5-j4j6", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-rgr4-9jh5-j4j6" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:2290", "reference_id": "RHSA-2015:2290", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:2290" } ], "fixed_packages": [], "aliases": [ "CVE-2015-3225", "GHSA-rgr4-9jh5-j4j6" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3ycr-9smk-uqdc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9911?format=api", "vulnerability_id": "VCID-6xkf-evrx-pyau", "summary": "Exposure of Sensitive Information to an Unauthorized Actor\nThe (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3) proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.", "references": [ { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182414.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182414.html" }, { "reference_url": "http://packetstormsecurity.com/files/136403/Apache-Qpid-Proton-0.12.0-SSL-Failure.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/136403/Apache-Qpid-Proton-0.12.0-SSL-Failure.html" }, { "reference_url": "http://qpid.apache.org/releases/qpid-proton-0.12.1/release-notes.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://qpid.apache.org/releases/qpid-proton-0.12.1/release-notes.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2166.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2166.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2166", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00271", "scoring_system": "epss", "scoring_elements": "0.50599", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00271", "scoring_system": "epss", "scoring_elements": "0.50504", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00271", "scoring_system": "epss", "scoring_elements": "0.5056", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00271", "scoring_system": "epss", "scoring_elements": "0.50588", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00271", "scoring_system": "epss", "scoring_elements": "0.50541", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00271", "scoring_system": "epss", "scoring_elements": "0.50596", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00271", "scoring_system": "epss", "scoring_elements": "0.50593", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00271", "scoring_system": "epss", "scoring_elements": "0.50635", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00271", "scoring_system": "epss", "scoring_elements": "0.50613", "published_at": "2026-04-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2166" }, { "reference_url": "https://git-wip-us.apache.org/repos/asf?p=qpid-proton.git%3Bh=a058585", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git-wip-us.apache.org/repos/asf?p=qpid-proton.git%3Bh=a058585" }, { "reference_url": "https://git-wip-us.apache.org/repos/asf?p=qpid-proton.git;h=a058585", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git-wip-us.apache.org/repos/asf?p=qpid-proton.git;h=a058585" }, { "reference_url": "https://issues.apache.org/jira/browse/PROTON-1157", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://issues.apache.org/jira/browse/PROTON-1157" }, { "reference_url": "https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d@%3Ccommits.qpid.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d@%3Ccommits.qpid.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d%40%3Ccommits.qpid.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d%40%3Ccommits.qpid.apache.org%3E" }, { "reference_url": "http://www.securityfocus.com/archive/1/537864/100/0/threaded", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/archive/1/537864/100/0/threaded" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1320842", "reference_id": "1320842", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1320842" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:qpid_proton:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:qpid_proton:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:qpid_proton:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2166", "reference_id": "CVE-2016-2166", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:P/I:P/A:N" }, { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" }, { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2166" }, { "reference_url": "https://github.com/advisories/GHSA-f5cf-f7px-xpmh", "reference_id": "GHSA-f5cf-f7px-xpmh", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-f5cf-f7px-xpmh" } ], "fixed_packages": [], "aliases": [ "CVE-2016-2166", "GHSA-f5cf-f7px-xpmh" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6xkf-evrx-pyau" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/85949?format=api", "vulnerability_id": "VCID-77c9-jb1m-6qe2", "summary": "qpid-cpp: 3 qpidd DoS issues in AMQP 0-10 protocol handling", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0203.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0203.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0203", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.16987", "scoring_system": "epss", "scoring_elements": "0.94946", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.16987", "scoring_system": "epss", "scoring_elements": "0.94955", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.16987", "scoring_system": "epss", "scoring_elements": "0.94957", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.16987", "scoring_system": "epss", "scoring_elements": "0.94959", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.16987", "scoring_system": "epss", "scoring_elements": "0.94968", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.16987", "scoring_system": "epss", "scoring_elements": "0.94972", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.16987", "scoring_system": "epss", "scoring_elements": "0.94976", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.16987", "scoring_system": "epss", "scoring_elements": "0.94978", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.16987", "scoring_system": "epss", "scoring_elements": "0.94981", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0203" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181721", "reference_id": "1181721", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181721" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0660", "reference_id": "RHSA-2015:0660", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0660" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0661", "reference_id": "RHSA-2015:0661", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0661" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0662", "reference_id": "RHSA-2015:0662", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0662" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0707", "reference_id": "RHSA-2015:0707", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0707" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0708", "reference_id": "RHSA-2015:0708", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0708" } ], "fixed_packages": [], "aliases": [ "CVE-2015-0203" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-77c9-jb1m-6qe2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/85870?format=api", "vulnerability_id": "VCID-9gb8-xvrc-aqgb", "summary": "qpid-cpp: anonymous access to qpidd cannot be prevented", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0223.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0223.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0223", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02275", "scoring_system": "epss", "scoring_elements": "0.84587", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.02275", "scoring_system": "epss", "scoring_elements": "0.84601", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.02275", "scoring_system": "epss", "scoring_elements": "0.84621", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.02275", "scoring_system": "epss", "scoring_elements": "0.84623", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.02275", "scoring_system": "epss", "scoring_elements": "0.84645", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.02275", "scoring_system": "epss", "scoring_elements": "0.84651", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.02275", "scoring_system": "epss", "scoring_elements": "0.84669", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.02275", "scoring_system": "epss", "scoring_elements": "0.84664", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.02275", "scoring_system": "epss", "scoring_elements": "0.84659", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0223" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1186308", "reference_id": "1186308", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1186308" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0660", "reference_id": "RHSA-2015:0660", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0660" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0661", "reference_id": "RHSA-2015:0661", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0661" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0662", "reference_id": "RHSA-2015:0662", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0662" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0707", "reference_id": "RHSA-2015:0707", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0707" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0708", "reference_id": "RHSA-2015:0708", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0708" } ], "fixed_packages": [], "aliases": [ "CVE-2015-0223" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9gb8-xvrc-aqgb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/60423?format=api", "vulnerability_id": "VCID-fq2t-c2nv-23ce", "summary": "A vulnerability in MongoDB can lead to a Denial of Service\n condition.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1609.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1609.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1609", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01693", "scoring_system": "epss", "scoring_elements": "0.82181", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.01693", "scoring_system": "epss", "scoring_elements": "0.82195", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.01693", "scoring_system": "epss", "scoring_elements": "0.82215", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.01693", "scoring_system": "epss", "scoring_elements": "0.82211", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.01693", "scoring_system": "epss", "scoring_elements": "0.82238", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.01693", "scoring_system": "epss", "scoring_elements": "0.82245", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.01693", "scoring_system": "epss", "scoring_elements": "0.82264", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.01693", "scoring_system": "epss", "scoring_elements": "0.82257", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.01693", "scoring_system": "epss", "scoring_elements": "0.82252", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1609" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1200446", "reference_id": "1200446", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1200446" }, { "reference_url": "https://security.gentoo.org/glsa/201611-13", "reference_id": "GLSA-201611-13", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201611-13" } ], "fixed_packages": [], "aliases": [ "CVE-2015-1609" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fq2t-c2nv-23ce" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/85807?format=api", "vulnerability_id": "VCID-jfqz-9a6e-jff7", "summary": "foreman: Unprivileged user can access private bookmarks of other users", "references": [ { "reference_url": "http://projects.theforeman.org/issues/13828", "reference_id": "", "reference_type": "", "scores": [], "url": "http://projects.theforeman.org/issues/13828" }, { "reference_url": "https://access.redhat.com/errata/RHBA-2016:1500", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHBA-2016:1500" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2100.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2100.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2100", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00201", "scoring_system": "epss", "scoring_elements": "0.42242", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00201", "scoring_system": "epss", "scoring_elements": "0.4227", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00201", "scoring_system": "epss", "scoring_elements": "0.42198", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00201", "scoring_system": "epss", "scoring_elements": "0.42255", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00201", "scoring_system": "epss", "scoring_elements": "0.42284", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00201", "scoring_system": "epss", "scoring_elements": "0.42226", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00201", "scoring_system": "epss", "scoring_elements": "0.42276", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00201", "scoring_system": "epss", "scoring_elements": "0.42306", "published_at": "2026-04-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2100" }, { "reference_url": "http://theforeman.org/security.html#2016-2100", "reference_id": "", "reference_type": "", "scores": [], "url": "http://theforeman.org/security.html#2016-2100" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2016/03/31/2", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.openwall.com/lists/oss-security/2016/03/31/2" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310675", "reference_id": "1310675", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310675" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:theforeman:foreman:1.11.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:theforeman:foreman:1.11.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:theforeman:foreman:1.11.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:theforeman:foreman:1.11.0:rc1:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:theforeman:foreman:1.11.0:rc1:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:theforeman:foreman:1.11.0:rc1:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2100", "reference_id": "CVE-2016-2100", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:S/C:P/I:P/A:P" }, { "value": "5.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2100" } ], "fixed_packages": [], "aliases": [ "CVE-2016-2100" ], "risk_score": 3.0, "exploitability": "0.5", "weighted_severity": "5.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jfqz-9a6e-jff7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/55859?format=api", "vulnerability_id": "VCID-va8w-uzhc-x3bz", "summary": "security update", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6668.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6668.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-6668", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.1282", "scoring_system": "epss", "scoring_elements": "0.93988", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.1282", "scoring_system": "epss", "scoring_elements": "0.93998", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.1282", "scoring_system": "epss", "scoring_elements": "0.94006", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.1282", "scoring_system": "epss", "scoring_elements": "0.94009", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.1282", "scoring_system": "epss", "scoring_elements": "0.94018", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.1282", "scoring_system": "epss", "scoring_elements": "0.94022", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.1282", "scoring_system": "epss", "scoring_elements": "0.94027", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-6668" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6653", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6653" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6654", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6654" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6655", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6655" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6656", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6656" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6657", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6657" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6658", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6658" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6659", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6659" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6660", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6660" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6661", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6661" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6663", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6663" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6664", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6664" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6665", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6665" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6666", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6666" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6667", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6667" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6668", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6668" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1700", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1700" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1701", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1701" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1702", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1702" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1703", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1703" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1704", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1704" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1705", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1705" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1713", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1713" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1715", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1715" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1074737", "reference_id": "1074737", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1074737" }, { "reference_url": "https://security.gentoo.org/glsa/201403-01", "reference_id": "GLSA-201403-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201403-01" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1744", "reference_id": "RHSA-2014:1744", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1744" } ], "fixed_packages": [], "aliases": [ "CVE-2013-6668" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-va8w-uzhc-x3bz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/85866?format=api", "vulnerability_id": "VCID-vhxh-tpay-mbh3", "summary": "qpid-cpp: AMQP 0-10 protocol sequence-set maximal range DoS (incomplete CVE-2015-0203 fix)", "references": [ { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178606.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178606.html" }, { "reference_url": "http://mail-archives.apache.org/mod_mbox/www-announce/201501.mbox/%3C54C60497.5060504%40apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "http://mail-archives.apache.org/mod_mbox/www-announce/201501.mbox/%3C54C60497.5060504%40apache.org%3E" }, { "reference_url": "http://packetstormsecurity.com/files/130105/Apache-Qpid-0.30-Crash.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://packetstormsecurity.com/files/130105/Apache-Qpid-0.30-Crash.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0660.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://rhn.redhat.com/errata/RHSA-2015-0660.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0661.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://rhn.redhat.com/errata/RHSA-2015-0661.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0662.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://rhn.redhat.com/errata/RHSA-2015-0662.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0707.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://rhn.redhat.com/errata/RHSA-2015-0707.html" }, { "reference_url": "https://access.redhat.com/errata/RHBA-2016:1500", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHBA-2016:1500" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0224.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0224.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0224", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.5601", "scoring_system": "epss", "scoring_elements": "0.98102", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.5601", "scoring_system": "epss", "scoring_elements": "0.98101", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.5601", "scoring_system": "epss", "scoring_elements": "0.98083", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.5601", "scoring_system": "epss", "scoring_elements": "0.98087", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.5601", "scoring_system": "epss", "scoring_elements": "0.9809", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.5601", "scoring_system": "epss", "scoring_elements": "0.98091", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.5601", "scoring_system": "epss", "scoring_elements": "0.98095", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.5601", "scoring_system": "epss", "scoring_elements": "0.98096", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0224" }, { "reference_url": "https://issues.apache.org/jira/browse/QPID-6310", "reference_id": "", "reference_type": "", "scores": [], "url": "https://issues.apache.org/jira/browse/QPID-6310" }, { "reference_url": "http://www.securityfocus.com/archive/1/534545/100/0/threaded", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/archive/1/534545/100/0/threaded" }, { "reference_url": "http://www.securityfocus.com/bid/72317", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/72317" }, { "reference_url": "http://www.securitytracker.com/id/1031872", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id/1031872" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1186302", "reference_id": "1186302", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1186302" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:qpid:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:qpid:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:qpid:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0224", "reference_id": "CVE-2015-0224", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P" }, { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0224" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0660", "reference_id": "RHSA-2015:0660", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0660" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0661", "reference_id": "RHSA-2015:0661", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0661" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0662", "reference_id": "RHSA-2015:0662", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0662" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0707", "reference_id": "RHSA-2015:0707", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0707" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0708", "reference_id": "RHSA-2015:0708", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0708" } ], "fixed_packages": [], "aliases": [ "CVE-2015-0224" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vhxh-tpay-mbh3" } ], "fixing_vulnerabilities": [], "risk_score": "3.4", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tfm-rubygem-sequel@4.20.0-6%3Farch=el7sat" }