Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/samba@4.11.2-r0?arch=riscv64&distroversion=v3.21&reponame=main
Typeapk
Namespacealpine
Namesamba
Version4.11.2-r0
Qualifiers
arch riscv64
distroversion v3.21
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version4.11.3-r0
Latest_non_vulnerable_version4.18.9-r0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-bykg-wucu-duay
vulnerability_id VCID-bykg-wucu-duay
summary A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller can be configured to use a custom script to check for password complexity. This configuration can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak passwords being set for samba users, making it vulnerable to dictionary attacks.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14833.json
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14833.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-14833
reference_id
reference_type
scores
0
value 0.01267
scoring_system epss
scoring_elements 0.79803
published_at 2026-06-04T12:55:00Z
1
value 0.01267
scoring_system epss
scoring_elements 0.79818
published_at 2026-06-08T12:55:00Z
2
value 0.01267
scoring_system epss
scoring_elements 0.79834
published_at 2026-06-06T12:55:00Z
3
value 0.01267
scoring_system epss
scoring_elements 0.79829
published_at 2026-06-07T12:55:00Z
4
value 0.01267
scoring_system epss
scoring_elements 0.79828
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-14833
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14833
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14833
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1764126
reference_id 1764126
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1764126
5
reference_url https://security.archlinux.org/ASA-201911-6
reference_id ASA-201911-6
reference_type
scores
url https://security.archlinux.org/ASA-201911-6
6
reference_url https://security.archlinux.org/AVG-1057
reference_id AVG-1057
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1057
7
reference_url https://usn.ubuntu.com/4167-1/
reference_id USN-4167-1
reference_type
scores
url https://usn.ubuntu.com/4167-1/
fixed_packages
0
url pkg:apk/alpine/samba@4.11.2-r0?arch=riscv64&distroversion=v3.21&reponame=main
purl pkg:apk/alpine/samba@4.11.2-r0?arch=riscv64&distroversion=v3.21&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.11.2-r0%3Farch=riscv64&distroversion=v3.21&reponame=main
aliases CVE-2019-14833
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bykg-wucu-duay
1
url VCID-gg9p-kzw8-23bq
vulnerability_id VCID-gg9p-kzw8-23bq
summary A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this vulnerability to create files outside of the current working directory using the privileges of the client user.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10218.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10218.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-10218
reference_id
reference_type
scores
0
value 0.04508
scoring_system epss
scoring_elements 0.89345
published_at 2026-06-06T12:55:00Z
1
value 0.04508
scoring_system epss
scoring_elements 0.89344
published_at 2026-06-08T12:55:00Z
2
value 0.04508
scoring_system epss
scoring_elements 0.89325
published_at 2026-06-04T12:55:00Z
3
value 0.04508
scoring_system epss
scoring_elements 0.89343
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-10218
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10218
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10218
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1763137
reference_id 1763137
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1763137
5
reference_url https://security.archlinux.org/ASA-201911-6
reference_id ASA-201911-6
reference_type
scores
url https://security.archlinux.org/ASA-201911-6
6
reference_url https://security.archlinux.org/AVG-1057
reference_id AVG-1057
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1057
7
reference_url https://access.redhat.com/errata/RHSA-2020:0943
reference_id RHSA-2020:0943
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:0943
8
reference_url https://access.redhat.com/errata/RHSA-2020:1084
reference_id RHSA-2020:1084
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1084
9
reference_url https://access.redhat.com/errata/RHSA-2020:1878
reference_id RHSA-2020:1878
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1878
10
reference_url https://usn.ubuntu.com/4167-1/
reference_id USN-4167-1
reference_type
scores
url https://usn.ubuntu.com/4167-1/
11
reference_url https://usn.ubuntu.com/4167-2/
reference_id USN-4167-2
reference_type
scores
url https://usn.ubuntu.com/4167-2/
fixed_packages
0
url pkg:apk/alpine/samba@4.11.2-r0?arch=riscv64&distroversion=v3.21&reponame=main
purl pkg:apk/alpine/samba@4.11.2-r0?arch=riscv64&distroversion=v3.21&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.11.2-r0%3Farch=riscv64&distroversion=v3.21&reponame=main
aliases CVE-2019-10218
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gg9p-kzw8-23bq
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.11.2-r0%3Farch=riscv64&distroversion=v3.21&reponame=main