Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:apk/alpine/cvs@1.12.12-r0?arch=armv7&distroversion=v3.11&reponame=main

Type apk

Namespace alpine

Name cvs

Version 1.12.12-r0

Qualifiers

arch	armv7
distroversion	v3.11
reponame	main

Subpath

Is_vulnerable false

Next_non_vulnerable_version null

Latest_non_vulnerable_version null

Affected_by_vulnerabilities

Fixing_vulnerabilities

url VCID-md15-esne-abbk

vulnerability_id VCID-md15-esne-abbk

summary

A heap-based buffer overflow in CVS might allow remote attackers to
    execute
    arbitrary code.

references

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0804.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0804.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2012-0804

reference_id

reference_type

scores

value	0.02507
scoring_system	epss
scoring_elements	0.85675
published_at	2026-06-11T12:55:00Z

value	0.02507
scoring_system	epss
scoring_elements	0.85726
published_at	2026-06-12T12:55:00Z

value	0.02507
scoring_system	epss
scoring_elements	0.85736
published_at	2026-06-13T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2012-0804

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0804
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0804

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=784141
reference_id	784141
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=784141

reference_url	https://security.gentoo.org/glsa/201701-44
reference_id	GLSA-201701-44
reference_type
scores
url	https://security.gentoo.org/glsa/201701-44

reference_url	https://access.redhat.com/errata/RHSA-2012:0321
reference_id	RHSA-2012:0321
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2012:0321

reference_url	https://usn.ubuntu.com/1371-1/
reference_id	USN-1371-1
reference_type
scores
url	https://usn.ubuntu.com/1371-1/

fixed_packages

url	pkg:apk/alpine/cvs@1.12.12-r0?arch=armv7&distroversion=v3.11&reponame=main
purl	pkg:apk/alpine/cvs@1.12.12-r0?arch=armv7&distroversion=v3.11&reponame=main
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cvs@1.12.12-r0%3Farch=armv7&distroversion=v3.11&reponame=main

aliases CVE-2012-0804

risk_score null

exploitability 0.5

weighted_severity 0.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-md15-esne-abbk

url VCID-ncr9-d9xr-m3dx

vulnerability_id VCID-ncr9-d9xr-m3dx

summary

references

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12836.json

reference_id

reference_type

scores

value	5.0
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12836.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2017-12836

reference_id

reference_type

scores

value	0.02504
scoring_system	epss
scoring_elements	0.85672
published_at	2026-06-11T12:55:00Z

value	0.02504
scoring_system	epss
scoring_elements	0.85723
published_at	2026-06-12T12:55:00Z

value	0.02504
scoring_system	epss
scoring_elements	0.85733
published_at	2026-06-13T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2017-12836

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12836
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12836

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	10
scoring_system	cvssv2
scoring_elements	AV:N/AC:L/Au:N/C:C/I:C/A:C

value	5
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1480800
reference_id	1480800
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1480800

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871810
reference_id	871810
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871810

reference_url	https://security.gentoo.org/glsa/201709-17
reference_id	GLSA-201709-17
reference_type
scores
url	https://security.gentoo.org/glsa/201709-17

reference_url	https://usn.ubuntu.com/3399-1/
reference_id	USN-3399-1
reference_type
scores
url	https://usn.ubuntu.com/3399-1/

fixed_packages

url	pkg:apk/alpine/cvs@1.12.12-r0?arch=armv7&distroversion=v3.11&reponame=main
purl	pkg:apk/alpine/cvs@1.12.12-r0?arch=armv7&distroversion=v3.11&reponame=main
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cvs@1.12.12-r0%3Farch=armv7&distroversion=v3.11&reponame=main

aliases CVE-2017-12836

risk_score 2.5

exploitability 0.5

weighted_severity 5.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ncr9-d9xr-m3dx

url VCID-v6xx-r6zg-2qgu

vulnerability_id VCID-v6xx-r6zg-2qgu

summary Array index error in the apply_rcs_change function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow.

references

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3846.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3846.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2010-3846

reference_id

reference_type

scores

value	0.00129
scoring_system	epss
scoring_elements	0.31857
published_at	2026-06-11T12:55:00Z

value	0.00129
scoring_system	epss
scoring_elements	0.32043
published_at	2026-06-12T12:55:00Z

value	0.00129
scoring_system	epss
scoring_elements	0.32059
published_at	2026-06-13T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2010-3846

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=642146
reference_id	642146
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=642146

reference_url	https://access.redhat.com/errata/RHSA-2010:0918
reference_id	RHSA-2010:0918
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2010:0918

fixed_packages

url	pkg:apk/alpine/cvs@1.12.12-r0?arch=armv7&distroversion=v3.11&reponame=main
purl	pkg:apk/alpine/cvs@1.12.12-r0?arch=armv7&distroversion=v3.11&reponame=main
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cvs@1.12.12-r0%3Farch=armv7&distroversion=v3.11&reponame=main

aliases CVE-2010-3846

risk_score null

exploitability 0.5

weighted_severity 0.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v6xx-r6zg-2qgu

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cvs@1.12.12-r0%3Farch=armv7&distroversion=v3.11&reponame=main

Package Instance