Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/176980?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/176980?format=api", "purl": "pkg:rpm/redhat/firefox@24.6.0-1?arch=el5_10", "type": "rpm", "namespace": "redhat", "name": "firefox", "version": "24.6.0-1", "qualifiers": { "arch": "el5_10" }, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2777?format=api", "vulnerability_id": "VCID-7x61-g9sn-zqev", "summary": "Security researcher Abhishek Arya (Inferno) of the Google\nChrome Security Team discovered a number of use-after-free and out of bounds read \nissues using the Address Sanitizer tool. These issues are potentially exploitable, \nallowing for remote code execution. \nIn general this flaw cannot be exploited through email in the\nThunderbird and Seamonky products because scripting is disabled, but is \npotentially a risk in browser or browser-like contexts.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1538.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1538.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-1538", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02681", "scoring_system": "epss", "scoring_elements": "0.8612", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-1538" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107421", "reference_id": "1107421", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107421" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1538", "reference_id": "CVE-2014-1538", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1538" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2014-49", "reference_id": "mfsa2014-49", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2014-49" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0741", "reference_id": "RHSA-2014:0741", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0741" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0742", "reference_id": "RHSA-2014:0742", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0742" } ], "fixed_packages": [], "aliases": [ "CVE-2014-1538" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7x61-g9sn-zqev" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2722?format=api", "vulnerability_id": "VCID-dwm9-tv86-7bab", "summary": "Mozilla developers and community identified and fixed several\nmemory safety bugs in the browser engine used in Firefox and other Mozilla-based\nproducts. Some of these bugs showed evidence of memory corruption under certain\ncircumstances, and we presume that with enough effort at least some of these\ncould be exploited to run arbitrary code.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1533.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1533.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-1533", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03197", "scoring_system": "epss", "scoring_elements": "0.8723", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-1533" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107399", "reference_id": "1107399", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107399" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1533", "reference_id": "CVE-2014-1533", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1533" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2014-48", "reference_id": "mfsa2014-48", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2014-48" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0741", "reference_id": "RHSA-2014:0741", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0741" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0742", "reference_id": "RHSA-2014:0742", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0742" } ], "fixed_packages": [], "aliases": [ "CVE-2014-1533" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dwm9-tv86-7bab" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2700?format=api", "vulnerability_id": "VCID-gn7z-yhsg-77a6", "summary": "Security researcher Nils used the Address Sanitizer to\ndiscover a use-after-free problem with the SMIL Animation Controller when\ninteracting with and rendering improperly formed web content. This causes a\npotentially exploitable crash. \nIn general this flaw cannot be exploited through email in the\nThunderbird and Seamonky products because scripting is disabled, but is \npotentially a risk in browser or browser-like contexts.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1541.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1541.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-1541", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01963", "scoring_system": "epss", "scoring_elements": "0.83842", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-1541" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107424", "reference_id": "1107424", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107424" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1541", "reference_id": "CVE-2014-1541", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1541" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2014-52", "reference_id": "mfsa2014-52", "reference_type": "", "scores": [ { "value": "critical", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2014-52" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0741", "reference_id": "RHSA-2014:0741", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0741" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0742", "reference_id": "RHSA-2014:0742", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0742" } ], "fixed_packages": [], "aliases": [ "CVE-2014-1541" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gn7z-yhsg-77a6" } ], "fixing_vulnerabilities": [], "risk_score": "4.5", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@24.6.0-1%3Farch=el5_10" }