Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/vlc@2.2.0~rc2-2
Typedeb
Namespacedebian
Namevlc
Version2.2.0~rc2-2
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3.0.23-0+deb12u1
Latest_non_vulnerable_version3.0.23-0+deb12u1
Affected_by_vulnerabilities
0
url VCID-2cm1-sqxz-h7d2
vulnerability_id VCID-2cm1-sqxz-h7d2
summary A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-25801
reference_id
reference_type
scores
0
value 0.02324
scoring_system epss
scoring_elements 0.85106
published_at 2026-06-04T12:55:00Z
1
value 0.02324
scoring_system epss
scoring_elements 0.8513
published_at 2026-06-05T12:55:00Z
2
value 0.02324
scoring_system epss
scoring_elements 0.85135
published_at 2026-06-06T12:55:00Z
3
value 0.02324
scoring_system epss
scoring_elements 0.85129
published_at 2026-06-07T12:55:00Z
4
value 0.02324
scoring_system epss
scoring_elements 0.85119
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-25801
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804
6
reference_url https://usn.ubuntu.com/6180-1/
reference_id USN-6180-1
reference_type
scores
url https://usn.ubuntu.com/6180-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1
purl pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3maf-pscz-tqdu
1
vulnerability VCID-557y-hv8p-efhf
2
vulnerability VCID-9j7y-wej7-b7f7
3
vulnerability VCID-cw49-sn3z-tfh7
4
vulnerability VCID-e45m-7wd6-xqhg
5
vulnerability VCID-jwe9-fx8s-xbcc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.17.4-0%252Bdeb10u1
aliases CVE-2021-25801
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2cm1-sqxz-h7d2
1
url VCID-2gbt-e8k9-bfe3
vulnerability_id VCID-2gbt-e8k9-bfe3
summary arbitrary code execution
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-5439
reference_id
reference_type
scores
0
value 0.17012
scoring_system epss
scoring_elements 0.95104
published_at 2026-06-04T12:55:00Z
1
value 0.17012
scoring_system epss
scoring_elements 0.95113
published_at 2026-06-05T12:55:00Z
2
value 0.17012
scoring_system epss
scoring_elements 0.95114
published_at 2026-06-08T12:55:00Z
3
value 0.17012
scoring_system epss
scoring_elements 0.95115
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-5439
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12874
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12874
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5439
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5439
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5459
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5459
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5460
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5460
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930276
reference_id 930276
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930276
6
reference_url https://security.archlinux.org/ASA-201906-22
reference_id ASA-201906-22
reference_type
scores
url https://security.archlinux.org/ASA-201906-22
7
reference_url https://security.archlinux.org/AVG-998
reference_id AVG-998
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-998
8
reference_url https://security.gentoo.org/glsa/201908-23
reference_id GLSA-201908-23
reference_type
scores
url https://security.gentoo.org/glsa/201908-23
9
reference_url https://usn.ubuntu.com/4074-1/
reference_id USN-4074-1
reference_type
scores
url https://usn.ubuntu.com/4074-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-5439
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2gbt-e8k9-bfe3
2
url VCID-2ymu-55hb-aydp
vulnerability_id VCID-2ymu-55hb-aydp
summary multiple issues
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8311
reference_id
reference_type
scores
0
value 0.07052
scoring_system epss
scoring_elements 0.91648
published_at 2026-06-04T12:55:00Z
1
value 0.07052
scoring_system epss
scoring_elements 0.9166
published_at 2026-06-05T12:55:00Z
2
value 0.07052
scoring_system epss
scoring_elements 0.91662
published_at 2026-06-06T12:55:00Z
3
value 0.07052
scoring_system epss
scoring_elements 0.91659
published_at 2026-06-07T12:55:00Z
4
value 0.07052
scoring_system epss
scoring_elements 0.91657
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8311
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8310
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8311
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8311
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8312
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8312
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8313
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8313
5
reference_url https://security.archlinux.org/ASA-201706-1
reference_id ASA-201706-1
reference_type
scores
url https://security.archlinux.org/ASA-201706-1
6
reference_url https://security.archlinux.org/AVG-283
reference_id AVG-283
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-283
7
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/dos/44514.py
reference_id CVE-2017-8311
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/dos/44514.py
8
reference_url https://security.gentoo.org/glsa/201707-10
reference_id GLSA-201707-10
reference_type
scores
url https://security.gentoo.org/glsa/201707-10
fixed_packages
0
url pkg:deb/debian/vlc@2.2.7-1~deb8u1
purl pkg:deb/debian/vlc@2.2.7-1~deb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-3ae2-1yab-r3ep
3
vulnerability VCID-3maf-pscz-tqdu
4
vulnerability VCID-557y-hv8p-efhf
5
vulnerability VCID-5eeh-h7xt-vucx
6
vulnerability VCID-6a4e-han8-rfch
7
vulnerability VCID-6ehu-psdp-gbf1
8
vulnerability VCID-89yv-t37p-tuaq
9
vulnerability VCID-96d2-udsw-rke5
10
vulnerability VCID-9j7y-wej7-b7f7
11
vulnerability VCID-9yyg-uwfq-nqdb
12
vulnerability VCID-art7-mk68-gya1
13
vulnerability VCID-b1vz-1vqg-zff9
14
vulnerability VCID-b1we-n5jv-53dv
15
vulnerability VCID-b6xd-jq9k-cfbt
16
vulnerability VCID-bcwr-buk9-7qa2
17
vulnerability VCID-c41h-2jrt-23fz
18
vulnerability VCID-c5hg-us5r-77cq
19
vulnerability VCID-cshp-tets-gfbk
20
vulnerability VCID-cw49-sn3z-tfh7
21
vulnerability VCID-e45m-7wd6-xqhg
22
vulnerability VCID-e87f-mt58-3kfh
23
vulnerability VCID-ea1z-zanh-eyfg
24
vulnerability VCID-ec9e-yh13-yuae
25
vulnerability VCID-erhv-p6z6-4fgw
26
vulnerability VCID-fkdd-mfrw-r7gm
27
vulnerability VCID-gyxg-efc1-a3ee
28
vulnerability VCID-j5qs-dpjh-f3cs
29
vulnerability VCID-jwe9-fx8s-xbcc
30
vulnerability VCID-p74t-yceb-fyff
31
vulnerability VCID-qjfd-tzwn-jyfg
32
vulnerability VCID-r5wu-ff55-mqej
33
vulnerability VCID-ra6h-qzvf-6ygq
34
vulnerability VCID-sk6j-cy2t-a3d8
35
vulnerability VCID-vj52-2nf1-huda
36
vulnerability VCID-x78p-6scf-bydj
37
vulnerability VCID-xkhj-f8k9-nkfb
38
vulnerability VCID-xutf-mndc-8yd7
39
vulnerability VCID-y48v-wx35-83h1
40
vulnerability VCID-y5s8-jma2-qbgw
41
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.7-1~deb8u1
aliases CVE-2017-8311
risk_score 10.0
exploitability 2.0
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2ymu-55hb-aydp
3
url VCID-39m5-1raf-aqdk
vulnerability_id VCID-39m5-1raf-aqdk
summary multiple issues
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8312
reference_id
reference_type
scores
0
value 0.00338
scoring_system epss
scoring_elements 0.56837
published_at 2026-06-04T12:55:00Z
1
value 0.00338
scoring_system epss
scoring_elements 0.56888
published_at 2026-06-05T12:55:00Z
2
value 0.00338
scoring_system epss
scoring_elements 0.56896
published_at 2026-06-06T12:55:00Z
3
value 0.00338
scoring_system epss
scoring_elements 0.56884
published_at 2026-06-07T12:55:00Z
4
value 0.00338
scoring_system epss
scoring_elements 0.56869
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8312
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8310
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8311
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8311
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8312
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8312
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8313
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8313
5
reference_url https://security.archlinux.org/ASA-201706-1
reference_id ASA-201706-1
reference_type
scores
url https://security.archlinux.org/ASA-201706-1
6
reference_url https://security.archlinux.org/AVG-283
reference_id AVG-283
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-283
7
reference_url https://security.gentoo.org/glsa/201707-10
reference_id GLSA-201707-10
reference_type
scores
url https://security.gentoo.org/glsa/201707-10
fixed_packages
0
url pkg:deb/debian/vlc@2.2.7-1~deb8u1
purl pkg:deb/debian/vlc@2.2.7-1~deb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-3ae2-1yab-r3ep
3
vulnerability VCID-3maf-pscz-tqdu
4
vulnerability VCID-557y-hv8p-efhf
5
vulnerability VCID-5eeh-h7xt-vucx
6
vulnerability VCID-6a4e-han8-rfch
7
vulnerability VCID-6ehu-psdp-gbf1
8
vulnerability VCID-89yv-t37p-tuaq
9
vulnerability VCID-96d2-udsw-rke5
10
vulnerability VCID-9j7y-wej7-b7f7
11
vulnerability VCID-9yyg-uwfq-nqdb
12
vulnerability VCID-art7-mk68-gya1
13
vulnerability VCID-b1vz-1vqg-zff9
14
vulnerability VCID-b1we-n5jv-53dv
15
vulnerability VCID-b6xd-jq9k-cfbt
16
vulnerability VCID-bcwr-buk9-7qa2
17
vulnerability VCID-c41h-2jrt-23fz
18
vulnerability VCID-c5hg-us5r-77cq
19
vulnerability VCID-cshp-tets-gfbk
20
vulnerability VCID-cw49-sn3z-tfh7
21
vulnerability VCID-e45m-7wd6-xqhg
22
vulnerability VCID-e87f-mt58-3kfh
23
vulnerability VCID-ea1z-zanh-eyfg
24
vulnerability VCID-ec9e-yh13-yuae
25
vulnerability VCID-erhv-p6z6-4fgw
26
vulnerability VCID-fkdd-mfrw-r7gm
27
vulnerability VCID-gyxg-efc1-a3ee
28
vulnerability VCID-j5qs-dpjh-f3cs
29
vulnerability VCID-jwe9-fx8s-xbcc
30
vulnerability VCID-p74t-yceb-fyff
31
vulnerability VCID-qjfd-tzwn-jyfg
32
vulnerability VCID-r5wu-ff55-mqej
33
vulnerability VCID-ra6h-qzvf-6ygq
34
vulnerability VCID-sk6j-cy2t-a3d8
35
vulnerability VCID-vj52-2nf1-huda
36
vulnerability VCID-x78p-6scf-bydj
37
vulnerability VCID-xkhj-f8k9-nkfb
38
vulnerability VCID-xutf-mndc-8yd7
39
vulnerability VCID-y48v-wx35-83h1
40
vulnerability VCID-y5s8-jma2-qbgw
41
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.7-1~deb8u1
aliases CVE-2017-8312
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-39m5-1raf-aqdk
4
url VCID-3ae2-1yab-r3ep
vulnerability_id VCID-3ae2-1yab-r3ep
summary arbitrary code execution
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12874
reference_id
reference_type
scores
0
value 0.00897
scoring_system epss
scoring_elements 0.76
published_at 2026-06-04T12:55:00Z
1
value 0.00897
scoring_system epss
scoring_elements 0.76026
published_at 2026-06-06T12:55:00Z
2
value 0.00897
scoring_system epss
scoring_elements 0.76018
published_at 2026-06-07T12:55:00Z
3
value 0.00897
scoring_system epss
scoring_elements 0.76005
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12874
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12874
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12874
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5439
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5439
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5459
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5459
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5460
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5460
5
reference_url https://security.archlinux.org/ASA-201906-22
reference_id ASA-201906-22
reference_type
scores
url https://security.archlinux.org/ASA-201906-22
6
reference_url https://security.archlinux.org/AVG-998
reference_id AVG-998
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-998
7
reference_url https://security.gentoo.org/glsa/201908-23
reference_id GLSA-201908-23
reference_type
scores
url https://security.gentoo.org/glsa/201908-23
8
reference_url https://usn.ubuntu.com/4074-1/
reference_id USN-4074-1
reference_type
scores
url https://usn.ubuntu.com/4074-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-12874
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3ae2-1yab-r3ep
5
url VCID-3maf-pscz-tqdu
vulnerability_id VCID-3maf-pscz-tqdu
summary An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-41325
reference_id
reference_type
scores
0
value 0.00087
scoring_system epss
scoring_elements 0.2493
published_at 2026-06-04T12:55:00Z
1
value 0.00087
scoring_system epss
scoring_elements 0.25025
published_at 2026-06-05T12:55:00Z
2
value 0.00087
scoring_system epss
scoring_elements 0.25013
published_at 2026-06-06T12:55:00Z
3
value 0.00087
scoring_system epss
scoring_elements 0.2496
published_at 2026-06-07T12:55:00Z
4
value 0.00087
scoring_system epss
scoring_elements 0.24904
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-41325
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41325
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41325
2
reference_url https://twitter.com/0xMitsurugi
reference_id 0xMitsurugi
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-23T19:35:16Z/
url https://twitter.com/0xMitsurugi
3
reference_url https://www.debian.org/security/2022/dsa-5297
reference_id dsa-5297
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-23T19:35:16Z/
url https://www.debian.org/security/2022/dsa-5297
4
reference_url https://security.gentoo.org/glsa/202409-17
reference_id GLSA-202409-17
reference_type
scores
url https://security.gentoo.org/glsa/202409-17
5
reference_url https://www.videolan.org/security/sb-vlc3018.html
reference_id sb-vlc3018.html
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-23T19:35:16Z/
url https://www.videolan.org/security/sb-vlc3018.html
6
reference_url https://usn.ubuntu.com/6180-1/
reference_id USN-6180-1
reference_type
scores
url https://usn.ubuntu.com/6180-1/
7
reference_url https://www.synacktiv.com/sites/default/files/2022-11/vlc_vnc_int_overflow-CVE-2022-41325.pdf
reference_id vlc_vnc_int_overflow-CVE-2022-41325.pdf
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-23T19:35:16Z/
url https://www.synacktiv.com/sites/default/files/2022-11/vlc_vnc_int_overflow-CVE-2022-41325.pdf
fixed_packages
0
url pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1
purl pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-557y-hv8p-efhf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.21-0%252Bdeb11u1
aliases CVE-2022-41325
risk_score 2.8
exploitability 0.5
weighted_severity 5.5
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3maf-pscz-tqdu
6
url VCID-557y-hv8p-efhf
vulnerability_id VCID-557y-hv8p-efhf
summary mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-51602
reference_id
reference_type
scores
0
value 0.00025
scoring_system epss
scoring_elements 0.07521
published_at 2026-06-08T12:55:00Z
1
value 0.00025
scoring_system epss
scoring_elements 0.07582
published_at 2026-06-05T12:55:00Z
2
value 0.00025
scoring_system epss
scoring_elements 0.07591
published_at 2026-06-06T12:55:00Z
3
value 0.00025
scoring_system epss
scoring_elements 0.07569
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-51602
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-51602
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-51602
2
reference_url https://code.videolan.org/videolan/vlc/-/issues/29146
reference_id 29146
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-20T17:35:28Z/
url https://code.videolan.org/videolan/vlc/-/issues/29146
3
reference_url https://www.videolan.org/security/sb-vlc3022.html
reference_id sb-vlc3022.html
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-20T17:35:28Z/
url https://www.videolan.org/security/sb-vlc3022.html
fixed_packages
0
url pkg:deb/debian/vlc@3.0.23-0%2Bdeb12u1
purl pkg:deb/debian/vlc@3.0.23-0%2Bdeb12u1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.23-0%252Bdeb12u1
aliases CVE-2025-51602
risk_score 1.2
exploitability 0.5
weighted_severity 2.4
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-557y-hv8p-efhf
7
url VCID-5eeh-h7xt-vucx
vulnerability_id VCID-5eeh-h7xt-vucx
summary A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-14970
reference_id
reference_type
scores
0
value 0.00623
scoring_system epss
scoring_elements 0.70516
published_at 2026-06-04T12:55:00Z
1
value 0.00623
scoring_system epss
scoring_elements 0.70558
published_at 2026-06-05T12:55:00Z
2
value 0.00623
scoring_system epss
scoring_elements 0.70567
published_at 2026-06-06T12:55:00Z
3
value 0.00623
scoring_system epss
scoring_elements 0.70549
published_at 2026-06-07T12:55:00Z
4
value 0.00623
scoring_system epss
scoring_elements 0.70538
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-14970
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
13
reference_url https://security.gentoo.org/glsa/201909-02
reference_id GLSA-201909-02
reference_type
scores
url https://security.gentoo.org/glsa/201909-02
14
reference_url https://usn.ubuntu.com/4131-1/
reference_id USN-4131-1
reference_type
scores
url https://usn.ubuntu.com/4131-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-14970
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5eeh-h7xt-vucx
8
url VCID-6a4e-han8-rfch
vulnerability_id VCID-6a4e-han8-rfch
summary In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service attack.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-14534
reference_id
reference_type
scores
0
value 0.00344
scoring_system epss
scoring_elements 0.57258
published_at 2026-06-04T12:55:00Z
1
value 0.00344
scoring_system epss
scoring_elements 0.5731
published_at 2026-06-05T12:55:00Z
2
value 0.00344
scoring_system epss
scoring_elements 0.57318
published_at 2026-06-06T12:55:00Z
3
value 0.00344
scoring_system epss
scoring_elements 0.57306
published_at 2026-06-07T12:55:00Z
4
value 0.00344
scoring_system epss
scoring_elements 0.57293
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-14534
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
13
reference_url https://security.gentoo.org/glsa/201909-02
reference_id GLSA-201909-02
reference_type
scores
url https://security.gentoo.org/glsa/201909-02
14
reference_url https://usn.ubuntu.com/4131-1/
reference_id USN-4131-1
reference_type
scores
url https://usn.ubuntu.com/4131-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-14534
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6a4e-han8-rfch
9
url VCID-6ehu-psdp-gbf1
vulnerability_id VCID-6ehu-psdp-gbf1
summary The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-14533
reference_id
reference_type
scores
0
value 0.00307
scoring_system epss
scoring_elements 0.54237
published_at 2026-06-04T12:55:00Z
1
value 0.00307
scoring_system epss
scoring_elements 0.54293
published_at 2026-06-05T12:55:00Z
2
value 0.00307
scoring_system epss
scoring_elements 0.54302
published_at 2026-06-06T12:55:00Z
3
value 0.00307
scoring_system epss
scoring_elements 0.54291
published_at 2026-06-07T12:55:00Z
4
value 0.00307
scoring_system epss
scoring_elements 0.54268
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-14533
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
13
reference_url https://security.gentoo.org/glsa/201909-02
reference_id GLSA-201909-02
reference_type
scores
url https://security.gentoo.org/glsa/201909-02
14
reference_url https://usn.ubuntu.com/4131-1/
reference_id USN-4131-1
reference_type
scores
url https://usn.ubuntu.com/4131-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-14533
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6ehu-psdp-gbf1
10
url VCID-89yv-t37p-tuaq
vulnerability_id VCID-89yv-t37p-tuaq
summary multiple issues
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-6079
reference_id
reference_type
scores
0
value 0.0062
scoring_system epss
scoring_elements 0.70405
published_at 2026-06-04T12:55:00Z
1
value 0.0062
scoring_system epss
scoring_elements 0.70446
published_at 2026-06-05T12:55:00Z
2
value 0.0062
scoring_system epss
scoring_elements 0.70455
published_at 2026-06-06T12:55:00Z
3
value 0.0062
scoring_system epss
scoring_elements 0.70437
published_at 2026-06-07T12:55:00Z
4
value 0.0062
scoring_system epss
scoring_elements 0.70426
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-6079
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19721
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19721
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6071
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6071
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6072
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6072
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6073
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6073
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6077
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6078
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6079
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6080
9
reference_url https://security.archlinux.org/ASA-202004-24
reference_id ASA-202004-24
reference_type
scores
url https://security.archlinux.org/ASA-202004-24
10
reference_url https://security.archlinux.org/AVG-1136
reference_id AVG-1136
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1136
11
reference_url https://security.gentoo.org/glsa/202005-10
reference_id GLSA-202005-10
reference_type
scores
url https://security.gentoo.org/glsa/202005-10
12
reference_url https://usn.ubuntu.com/7239-1/
reference_id USN-7239-1
reference_type
scores
url https://usn.ubuntu.com/7239-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2020-6079
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-89yv-t37p-tuaq
11
url VCID-96d2-udsw-rke5
vulnerability_id VCID-96d2-udsw-rke5
summary Double Free in VLC versions <= 3.0.6 leads to a crash.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-5460
reference_id
reference_type
scores
0
value 0.00914
scoring_system epss
scoring_elements 0.76264
published_at 2026-06-04T12:55:00Z
1
value 0.00914
scoring_system epss
scoring_elements 0.7629
published_at 2026-06-05T12:55:00Z
2
value 0.00914
scoring_system epss
scoring_elements 0.76292
published_at 2026-06-06T12:55:00Z
3
value 0.00914
scoring_system epss
scoring_elements 0.76286
published_at 2026-06-07T12:55:00Z
4
value 0.00914
scoring_system epss
scoring_elements 0.76275
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-5460
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12874
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12874
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5439
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5439
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5459
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5459
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5460
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5460
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-5460
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-96d2-udsw-rke5
12
url VCID-9j7y-wej7-b7f7
vulnerability_id VCID-9j7y-wej7-b7f7
summary VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer overflow which could be triggered with a maliciously crafted mms stream (heap based overflow). If successful, a malicious third party could trigger either a crash of VLC or an arbitrary code execution with the target user's privileges.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-46461
reference_id
reference_type
scores
0
value 0.00353
scoring_system epss
scoring_elements 0.5796
published_at 2026-06-05T12:55:00Z
1
value 0.00353
scoring_system epss
scoring_elements 0.57969
published_at 2026-06-06T12:55:00Z
2
value 0.00353
scoring_system epss
scoring_elements 0.57958
published_at 2026-06-07T12:55:00Z
3
value 0.00353
scoring_system epss
scoring_elements 0.57944
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-46461
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46461
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46461
2
reference_url https://www.videolan.org/security/sb-vlc3021.html
reference_id sb-vlc3021.html
reference_type
scores
0
value 8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-25T15:37:59Z/
url https://www.videolan.org/security/sb-vlc3021.html
3
reference_url https://usn.ubuntu.com/7243-1/
reference_id USN-7243-1
reference_type
scores
url https://usn.ubuntu.com/7243-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1
purl pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-557y-hv8p-efhf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.21-0%252Bdeb11u1
aliases CVE-2024-46461
risk_score 2.0
exploitability 0.5
weighted_severity 4.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9j7y-wej7-b7f7
13
url VCID-9yyg-uwfq-nqdb
vulnerability_id VCID-9yyg-uwfq-nqdb
summary A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the application.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-25804
reference_id
reference_type
scores
0
value 0.01001
scoring_system epss
scoring_elements 0.77349
published_at 2026-06-04T12:55:00Z
1
value 0.01001
scoring_system epss
scoring_elements 0.77377
published_at 2026-06-05T12:55:00Z
2
value 0.01001
scoring_system epss
scoring_elements 0.77387
published_at 2026-06-06T12:55:00Z
3
value 0.01001
scoring_system epss
scoring_elements 0.77376
published_at 2026-06-07T12:55:00Z
4
value 0.01001
scoring_system epss
scoring_elements 0.77367
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-25804
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804
6
reference_url https://usn.ubuntu.com/6180-1/
reference_id USN-6180-1
reference_type
scores
url https://usn.ubuntu.com/6180-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1
purl pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3maf-pscz-tqdu
1
vulnerability VCID-557y-hv8p-efhf
2
vulnerability VCID-9j7y-wej7-b7f7
3
vulnerability VCID-cw49-sn3z-tfh7
4
vulnerability VCID-e45m-7wd6-xqhg
5
vulnerability VCID-jwe9-fx8s-xbcc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.17.4-0%252Bdeb10u1
aliases CVE-2021-25804
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9yyg-uwfq-nqdb
14
url VCID-ar92-98jc-g3dj
vulnerability_id VCID-ar92-98jc-g3dj
summary Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-5108
reference_id
reference_type
scores
0
value 0.20819
scoring_system epss
scoring_elements 0.95721
published_at 2026-06-04T12:55:00Z
1
value 0.20819
scoring_system epss
scoring_elements 0.95726
published_at 2026-06-05T12:55:00Z
2
value 0.20819
scoring_system epss
scoring_elements 0.95731
published_at 2026-06-06T12:55:00Z
3
value 0.20819
scoring_system epss
scoring_elements 0.95732
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-5108
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5108
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5108
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=825728
reference_id 825728
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=825728
4
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/dos/41025.txt
reference_id CVE-2016-5108
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/dos/41025.txt
5
reference_url http://www.openwall.com/lists/oss-security/2016/05/27/3
reference_id CVE-2016-5108
reference_type exploit
scores
url http://www.openwall.com/lists/oss-security/2016/05/27/3
6
reference_url https://security.gentoo.org/glsa/201701-39
reference_id GLSA-201701-39
reference_type
scores
url https://security.gentoo.org/glsa/201701-39
fixed_packages
0
url pkg:deb/debian/vlc@2.2.7-1~deb8u1
purl pkg:deb/debian/vlc@2.2.7-1~deb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-3ae2-1yab-r3ep
3
vulnerability VCID-3maf-pscz-tqdu
4
vulnerability VCID-557y-hv8p-efhf
5
vulnerability VCID-5eeh-h7xt-vucx
6
vulnerability VCID-6a4e-han8-rfch
7
vulnerability VCID-6ehu-psdp-gbf1
8
vulnerability VCID-89yv-t37p-tuaq
9
vulnerability VCID-96d2-udsw-rke5
10
vulnerability VCID-9j7y-wej7-b7f7
11
vulnerability VCID-9yyg-uwfq-nqdb
12
vulnerability VCID-art7-mk68-gya1
13
vulnerability VCID-b1vz-1vqg-zff9
14
vulnerability VCID-b1we-n5jv-53dv
15
vulnerability VCID-b6xd-jq9k-cfbt
16
vulnerability VCID-bcwr-buk9-7qa2
17
vulnerability VCID-c41h-2jrt-23fz
18
vulnerability VCID-c5hg-us5r-77cq
19
vulnerability VCID-cshp-tets-gfbk
20
vulnerability VCID-cw49-sn3z-tfh7
21
vulnerability VCID-e45m-7wd6-xqhg
22
vulnerability VCID-e87f-mt58-3kfh
23
vulnerability VCID-ea1z-zanh-eyfg
24
vulnerability VCID-ec9e-yh13-yuae
25
vulnerability VCID-erhv-p6z6-4fgw
26
vulnerability VCID-fkdd-mfrw-r7gm
27
vulnerability VCID-gyxg-efc1-a3ee
28
vulnerability VCID-j5qs-dpjh-f3cs
29
vulnerability VCID-jwe9-fx8s-xbcc
30
vulnerability VCID-p74t-yceb-fyff
31
vulnerability VCID-qjfd-tzwn-jyfg
32
vulnerability VCID-r5wu-ff55-mqej
33
vulnerability VCID-ra6h-qzvf-6ygq
34
vulnerability VCID-sk6j-cy2t-a3d8
35
vulnerability VCID-vj52-2nf1-huda
36
vulnerability VCID-x78p-6scf-bydj
37
vulnerability VCID-xkhj-f8k9-nkfb
38
vulnerability VCID-xutf-mndc-8yd7
39
vulnerability VCID-y48v-wx35-83h1
40
vulnerability VCID-y5s8-jma2-qbgw
41
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.7-1~deb8u1
aliases CVE-2016-5108
risk_score 7.6
exploitability 2.0
weighted_severity 3.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ar92-98jc-g3dj
15
url VCID-art7-mk68-gya1
vulnerability_id VCID-art7-mk68-gya1
summary A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted CAF file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-14498
reference_id
reference_type
scores
0
value 0.00582
scoring_system epss
scoring_elements 0.69332
published_at 2026-06-04T12:55:00Z
1
value 0.00582
scoring_system epss
scoring_elements 0.69372
published_at 2026-06-05T12:55:00Z
2
value 0.00582
scoring_system epss
scoring_elements 0.6938
published_at 2026-06-06T12:55:00Z
3
value 0.00582
scoring_system epss
scoring_elements 0.69371
published_at 2026-06-07T12:55:00Z
4
value 0.00582
scoring_system epss
scoring_elements 0.69356
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-14498
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
13
reference_url https://security.gentoo.org/glsa/201909-02
reference_id GLSA-201909-02
reference_type
scores
url https://security.gentoo.org/glsa/201909-02
14
reference_url https://usn.ubuntu.com/4131-1/
reference_id USN-4131-1
reference_type
scores
url https://usn.ubuntu.com/4131-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-14498
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-art7-mk68-gya1
16
url VCID-b1vz-1vqg-zff9
vulnerability_id VCID-b1vz-1vqg-zff9
summary The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-14777
reference_id
reference_type
scores
0
value 0.00307
scoring_system epss
scoring_elements 0.54237
published_at 2026-06-04T12:55:00Z
1
value 0.00307
scoring_system epss
scoring_elements 0.54293
published_at 2026-06-05T12:55:00Z
2
value 0.00307
scoring_system epss
scoring_elements 0.54302
published_at 2026-06-06T12:55:00Z
3
value 0.00307
scoring_system epss
scoring_elements 0.54291
published_at 2026-06-07T12:55:00Z
4
value 0.00307
scoring_system epss
scoring_elements 0.54268
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-14777
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
13
reference_url https://security.gentoo.org/glsa/201909-02
reference_id GLSA-201909-02
reference_type
scores
url https://security.gentoo.org/glsa/201909-02
14
reference_url https://usn.ubuntu.com/4131-1/
reference_id USN-4131-1
reference_type
scores
url https://usn.ubuntu.com/4131-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-14777
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b1vz-1vqg-zff9
17
url VCID-b1we-n5jv-53dv
vulnerability_id VCID-b1we-n5jv-53dv
summary multiple issues
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-6071
reference_id
reference_type
scores
0
value 0.00467
scoring_system epss
scoring_elements 0.64797
published_at 2026-06-04T12:55:00Z
1
value 0.00467
scoring_system epss
scoring_elements 0.64839
published_at 2026-06-05T12:55:00Z
2
value 0.00467
scoring_system epss
scoring_elements 0.64849
published_at 2026-06-06T12:55:00Z
3
value 0.00467
scoring_system epss
scoring_elements 0.64838
published_at 2026-06-07T12:55:00Z
4
value 0.00467
scoring_system epss
scoring_elements 0.64827
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-6071
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19721
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19721
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6071
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6071
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6072
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6072
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6073
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6073
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6077
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6078
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6079
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6080
9
reference_url https://security.archlinux.org/ASA-202004-24
reference_id ASA-202004-24
reference_type
scores
url https://security.archlinux.org/ASA-202004-24
10
reference_url https://security.archlinux.org/AVG-1136
reference_id AVG-1136
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1136
11
reference_url https://security.gentoo.org/glsa/202005-10
reference_id GLSA-202005-10
reference_type
scores
url https://security.gentoo.org/glsa/202005-10
12
reference_url https://usn.ubuntu.com/7239-1/
reference_id USN-7239-1
reference_type
scores
url https://usn.ubuntu.com/7239-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2020-6071
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b1we-n5jv-53dv
18
url VCID-b6xd-jq9k-cfbt
vulnerability_id VCID-b6xd-jq9k-cfbt
summary A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-14535
reference_id
reference_type
scores
0
value 0.0035
scoring_system epss
scoring_elements 0.57705
published_at 2026-06-04T12:55:00Z
1
value 0.0035
scoring_system epss
scoring_elements 0.57756
published_at 2026-06-05T12:55:00Z
2
value 0.0035
scoring_system epss
scoring_elements 0.57765
published_at 2026-06-06T12:55:00Z
3
value 0.0035
scoring_system epss
scoring_elements 0.57755
published_at 2026-06-07T12:55:00Z
4
value 0.0035
scoring_system epss
scoring_elements 0.57743
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-14535
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
13
reference_url https://security.gentoo.org/glsa/201909-02
reference_id GLSA-201909-02
reference_type
scores
url https://security.gentoo.org/glsa/201909-02
14
reference_url https://usn.ubuntu.com/4131-1/
reference_id USN-4131-1
reference_type
scores
url https://usn.ubuntu.com/4131-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-14535
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b6xd-jq9k-cfbt
19
url VCID-bcwr-buk9-7qa2
vulnerability_id VCID-bcwr-buk9-7qa2
summary A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-25803
reference_id
reference_type
scores
0
value 0.00282
scoring_system epss
scoring_elements 0.51828
published_at 2026-06-04T12:55:00Z
1
value 0.00282
scoring_system epss
scoring_elements 0.51886
published_at 2026-06-05T12:55:00Z
2
value 0.00282
scoring_system epss
scoring_elements 0.51895
published_at 2026-06-06T12:55:00Z
3
value 0.00282
scoring_system epss
scoring_elements 0.51874
published_at 2026-06-07T12:55:00Z
4
value 0.00282
scoring_system epss
scoring_elements 0.51843
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-25803
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804
6
reference_url https://usn.ubuntu.com/6180-1/
reference_id USN-6180-1
reference_type
scores
url https://usn.ubuntu.com/6180-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1
purl pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3maf-pscz-tqdu
1
vulnerability VCID-557y-hv8p-efhf
2
vulnerability VCID-9j7y-wej7-b7f7
3
vulnerability VCID-cw49-sn3z-tfh7
4
vulnerability VCID-e45m-7wd6-xqhg
5
vulnerability VCID-jwe9-fx8s-xbcc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.17.4-0%252Bdeb10u1
aliases CVE-2021-25803
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bcwr-buk9-7qa2
20
url VCID-c41h-2jrt-23fz
vulnerability_id VCID-c41h-2jrt-23fz
summary The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk() cast converts a return value to an unsigned int even if that value is negative. This could result in a denial of service and/or a potential infoleak.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-19857
reference_id
reference_type
scores
0
value 0.01486
scoring_system epss
scoring_elements 0.81364
published_at 2026-06-04T12:55:00Z
1
value 0.01486
scoring_system epss
scoring_elements 0.81392
published_at 2026-06-05T12:55:00Z
2
value 0.01486
scoring_system epss
scoring_elements 0.81395
published_at 2026-06-06T12:55:00Z
3
value 0.01486
scoring_system epss
scoring_elements 0.81393
published_at 2026-06-07T12:55:00Z
4
value 0.01486
scoring_system epss
scoring_elements 0.81388
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-19857
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19857
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19857
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=915760
reference_id 915760
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=915760
3
reference_url https://usn.ubuntu.com/4074-1/
reference_id USN-4074-1
reference_type
scores
url https://usn.ubuntu.com/4074-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2018-19857
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c41h-2jrt-23fz
21
url VCID-c5hg-us5r-77cq
vulnerability_id VCID-c5hg-us5r-77cq
summary arbitrary code execution
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-11529
reference_id
reference_type
scores
0
value 0.73818
scoring_system epss
scoring_elements 0.9884
published_at 2026-06-08T12:55:00Z
1
value 0.73818
scoring_system epss
scoring_elements 0.98842
published_at 2026-06-06T12:55:00Z
2
value 0.73818
scoring_system epss
scoring_elements 0.98841
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-11529
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11529
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11529
2
reference_url https://security.archlinux.org/AVG-755
reference_id AVG-755
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-755
3
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/45626.rb
reference_id CVE-2018-11529
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/45626.rb
4
reference_url https://raw.githubusercontent.com/rapid7/metasploit-framework/fb689da24c9de2ccda6707c6cfe0d053a4844dfd/modules/exploits/windows/fileformat/vlc_mkv.rb
reference_id CVE-2018-11529
reference_type exploit
scores
url https://raw.githubusercontent.com/rapid7/metasploit-framework/fb689da24c9de2ccda6707c6cfe0d053a4844dfd/modules/exploits/windows/fileformat/vlc_mkv.rb
5
reference_url https://usn.ubuntu.com/USN-4805-1/
reference_id USN-USN-4805-1
reference_type
scores
url https://usn.ubuntu.com/USN-4805-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2018-11529
risk_score 10.0
exploitability 2.0
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c5hg-us5r-77cq
22
url VCID-cshp-tets-gfbk
vulnerability_id VCID-cshp-tets-gfbk
summary multiple issues
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-6073
reference_id
reference_type
scores
0
value 0.00549
scoring_system epss
scoring_elements 0.6831
published_at 2026-06-04T12:55:00Z
1
value 0.00549
scoring_system epss
scoring_elements 0.68352
published_at 2026-06-05T12:55:00Z
2
value 0.00549
scoring_system epss
scoring_elements 0.68359
published_at 2026-06-06T12:55:00Z
3
value 0.00549
scoring_system epss
scoring_elements 0.68351
published_at 2026-06-07T12:55:00Z
4
value 0.00549
scoring_system epss
scoring_elements 0.68336
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-6073
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19721
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19721
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6071
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6071
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6072
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6072
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6073
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6073
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6077
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6078
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6079
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6080
9
reference_url https://security.archlinux.org/ASA-202004-24
reference_id ASA-202004-24
reference_type
scores
url https://security.archlinux.org/ASA-202004-24
10
reference_url https://security.archlinux.org/AVG-1136
reference_id AVG-1136
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1136
11
reference_url https://security.gentoo.org/glsa/202005-10
reference_id GLSA-202005-10
reference_type
scores
url https://security.gentoo.org/glsa/202005-10
12
reference_url https://usn.ubuntu.com/7239-1/
reference_id USN-7239-1
reference_type
scores
url https://usn.ubuntu.com/7239-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2020-6073
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cshp-tets-gfbk
23
url VCID-cw49-sn3z-tfh7
vulnerability_id VCID-cw49-sn3z-tfh7
summary Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-47360
reference_id
reference_type
scores
0
value 0.00094
scoring_system epss
scoring_elements 0.26128
published_at 2026-06-08T12:55:00Z
1
value 0.00094
scoring_system epss
scoring_elements 0.2623
published_at 2026-06-06T12:55:00Z
2
value 0.00094
scoring_system epss
scoring_elements 0.26184
published_at 2026-06-07T12:55:00Z
3
value 0.00094
scoring_system epss
scoring_elements 0.26237
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-47360
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47359
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47359
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47360
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47360
3
reference_url https://0xariana.github.io/blog/real_bugs/vlc/mms
reference_id mms
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-03T15:43:13Z/
url https://0xariana.github.io/blog/real_bugs/vlc/mms
4
reference_url https://lists.debian.org/debian-lts-announce/2023/11/msg00034.html
reference_id msg00034.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-03T15:43:13Z/
url https://lists.debian.org/debian-lts-announce/2023/11/msg00034.html
5
reference_url https://usn.ubuntu.com/6783-1/
reference_id USN-6783-1
reference_type
scores
url https://usn.ubuntu.com/6783-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1
purl pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-557y-hv8p-efhf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.21-0%252Bdeb11u1
aliases CVE-2023-47360
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cw49-sn3z-tfh7
24
url VCID-e45m-7wd6-xqhg
vulnerability_id VCID-e45m-7wd6-xqhg
summary Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-47359
reference_id
reference_type
scores
0
value 0.00164
scoring_system epss
scoring_elements 0.37208
published_at 2026-06-05T12:55:00Z
1
value 0.00164
scoring_system epss
scoring_elements 0.37215
published_at 2026-06-06T12:55:00Z
2
value 0.00164
scoring_system epss
scoring_elements 0.37183
published_at 2026-06-07T12:55:00Z
3
value 0.00164
scoring_system epss
scoring_elements 0.37144
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-47359
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47359
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47359
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47360
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47360
3
reference_url https://0xariana.github.io/blog/real_bugs/vlc/mms
reference_id mms
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2023-12-07T14:49:06Z/
url https://0xariana.github.io/blog/real_bugs/vlc/mms
4
reference_url https://lists.debian.org/debian-lts-announce/2023/11/msg00034.html
reference_id msg00034.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2023-12-07T14:49:06Z/
url https://lists.debian.org/debian-lts-announce/2023/11/msg00034.html
5
reference_url https://usn.ubuntu.com/6783-1/
reference_id USN-6783-1
reference_type
scores
url https://usn.ubuntu.com/6783-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1
purl pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-557y-hv8p-efhf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.21-0%252Bdeb11u1
aliases CVE-2023-47359
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e45m-7wd6-xqhg
25
url VCID-e87f-mt58-3kfh
vulnerability_id VCID-e87f-mt58-3kfh
summary The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted .swf file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-11516
reference_id
reference_type
scores
0
value 0.00601
scoring_system epss
scoring_elements 0.69865
published_at 2026-06-04T12:55:00Z
1
value 0.00601
scoring_system epss
scoring_elements 0.69904
published_at 2026-06-05T12:55:00Z
2
value 0.00601
scoring_system epss
scoring_elements 0.69913
published_at 2026-06-06T12:55:00Z
3
value 0.00601
scoring_system epss
scoring_elements 0.69903
published_at 2026-06-07T12:55:00Z
4
value 0.00601
scoring_system epss
scoring_elements 0.69892
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-11516
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11516
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11516
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2018-11516
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e87f-mt58-3kfh
26
url VCID-ea1z-zanh-eyfg
vulnerability_id VCID-ea1z-zanh-eyfg
summary lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-13962
reference_id
reference_type
scores
0
value 0.03227
scoring_system epss
scoring_elements 0.87301
published_at 2026-06-04T12:55:00Z
1
value 0.03227
scoring_system epss
scoring_elements 0.87323
published_at 2026-06-05T12:55:00Z
2
value 0.03227
scoring_system epss
scoring_elements 0.8732
published_at 2026-06-06T12:55:00Z
3
value 0.03227
scoring_system epss
scoring_elements 0.87317
published_at 2026-06-07T12:55:00Z
4
value 0.03227
scoring_system epss
scoring_elements 0.87314
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-13962
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
13
reference_url https://security.gentoo.org/glsa/201909-02
reference_id GLSA-201909-02
reference_type
scores
url https://security.gentoo.org/glsa/201909-02
14
reference_url https://usn.ubuntu.com/4131-1/
reference_id USN-4131-1
reference_type
scores
url https://usn.ubuntu.com/4131-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-13962
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ea1z-zanh-eyfg
27
url VCID-ec9e-yh13-yuae
vulnerability_id VCID-ec9e-yh13-yuae
summary The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-14437
reference_id
reference_type
scores
0
value 0.00571
scoring_system epss
scoring_elements 0.69007
published_at 2026-06-04T12:55:00Z
1
value 0.00571
scoring_system epss
scoring_elements 0.69047
published_at 2026-06-05T12:55:00Z
2
value 0.00571
scoring_system epss
scoring_elements 0.69056
published_at 2026-06-06T12:55:00Z
3
value 0.00571
scoring_system epss
scoring_elements 0.6905
published_at 2026-06-07T12:55:00Z
4
value 0.00571
scoring_system epss
scoring_elements 0.69034
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-14437
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
13
reference_url https://security.gentoo.org/glsa/201909-02
reference_id GLSA-201909-02
reference_type
scores
url https://security.gentoo.org/glsa/201909-02
14
reference_url https://usn.ubuntu.com/4131-1/
reference_id USN-4131-1
reference_type
scores
url https://usn.ubuntu.com/4131-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-14437
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ec9e-yh13-yuae
28
url VCID-erhv-p6z6-4fgw
vulnerability_id VCID-erhv-p6z6-4fgw
summary A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-14776
reference_id
reference_type
scores
0
value 0.00417
scoring_system epss
scoring_elements 0.62083
published_at 2026-06-04T12:55:00Z
1
value 0.00417
scoring_system epss
scoring_elements 0.62131
published_at 2026-06-05T12:55:00Z
2
value 0.00417
scoring_system epss
scoring_elements 0.62139
published_at 2026-06-06T12:55:00Z
3
value 0.00417
scoring_system epss
scoring_elements 0.62127
published_at 2026-06-07T12:55:00Z
4
value 0.00417
scoring_system epss
scoring_elements 0.62112
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-14776
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
13
reference_url https://security.gentoo.org/glsa/201909-02
reference_id GLSA-201909-02
reference_type
scores
url https://security.gentoo.org/glsa/201909-02
14
reference_url https://usn.ubuntu.com/4131-1/
reference_id USN-4131-1
reference_type
scores
url https://usn.ubuntu.com/4131-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-14776
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-erhv-p6z6-4fgw
29
url VCID-eufn-wq9m-rua5
vulnerability_id VCID-eufn-wq9m-rua5
summary Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8313
reference_id
reference_type
scores
0
value 0.00338
scoring_system epss
scoring_elements 0.56858
published_at 2026-06-04T12:55:00Z
1
value 0.00338
scoring_system epss
scoring_elements 0.56909
published_at 2026-06-05T12:55:00Z
2
value 0.00338
scoring_system epss
scoring_elements 0.56917
published_at 2026-06-06T12:55:00Z
3
value 0.00338
scoring_system epss
scoring_elements 0.56905
published_at 2026-06-07T12:55:00Z
4
value 0.00338
scoring_system epss
scoring_elements 0.5689
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8313
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8310
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8311
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8311
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8312
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8312
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8313
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8313
5
reference_url https://security.gentoo.org/glsa/201707-10
reference_id GLSA-201707-10
reference_type
scores
url https://security.gentoo.org/glsa/201707-10
fixed_packages
0
url pkg:deb/debian/vlc@2.2.7-1~deb8u1
purl pkg:deb/debian/vlc@2.2.7-1~deb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-3ae2-1yab-r3ep
3
vulnerability VCID-3maf-pscz-tqdu
4
vulnerability VCID-557y-hv8p-efhf
5
vulnerability VCID-5eeh-h7xt-vucx
6
vulnerability VCID-6a4e-han8-rfch
7
vulnerability VCID-6ehu-psdp-gbf1
8
vulnerability VCID-89yv-t37p-tuaq
9
vulnerability VCID-96d2-udsw-rke5
10
vulnerability VCID-9j7y-wej7-b7f7
11
vulnerability VCID-9yyg-uwfq-nqdb
12
vulnerability VCID-art7-mk68-gya1
13
vulnerability VCID-b1vz-1vqg-zff9
14
vulnerability VCID-b1we-n5jv-53dv
15
vulnerability VCID-b6xd-jq9k-cfbt
16
vulnerability VCID-bcwr-buk9-7qa2
17
vulnerability VCID-c41h-2jrt-23fz
18
vulnerability VCID-c5hg-us5r-77cq
19
vulnerability VCID-cshp-tets-gfbk
20
vulnerability VCID-cw49-sn3z-tfh7
21
vulnerability VCID-e45m-7wd6-xqhg
22
vulnerability VCID-e87f-mt58-3kfh
23
vulnerability VCID-ea1z-zanh-eyfg
24
vulnerability VCID-ec9e-yh13-yuae
25
vulnerability VCID-erhv-p6z6-4fgw
26
vulnerability VCID-fkdd-mfrw-r7gm
27
vulnerability VCID-gyxg-efc1-a3ee
28
vulnerability VCID-j5qs-dpjh-f3cs
29
vulnerability VCID-jwe9-fx8s-xbcc
30
vulnerability VCID-p74t-yceb-fyff
31
vulnerability VCID-qjfd-tzwn-jyfg
32
vulnerability VCID-r5wu-ff55-mqej
33
vulnerability VCID-ra6h-qzvf-6ygq
34
vulnerability VCID-sk6j-cy2t-a3d8
35
vulnerability VCID-vj52-2nf1-huda
36
vulnerability VCID-x78p-6scf-bydj
37
vulnerability VCID-xkhj-f8k9-nkfb
38
vulnerability VCID-xutf-mndc-8yd7
39
vulnerability VCID-y48v-wx35-83h1
40
vulnerability VCID-y5s8-jma2-qbgw
41
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.7-1~deb8u1
aliases CVE-2017-8313
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eufn-wq9m-rua5
30
url VCID-fkdd-mfrw-r7gm
vulnerability_id VCID-fkdd-mfrw-r7gm
summary multiple issues
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-6080
reference_id
reference_type
scores
0
value 0.00311
scoring_system epss
scoring_elements 0.54548
published_at 2026-06-04T12:55:00Z
1
value 0.00311
scoring_system epss
scoring_elements 0.54606
published_at 2026-06-05T12:55:00Z
2
value 0.00311
scoring_system epss
scoring_elements 0.54615
published_at 2026-06-06T12:55:00Z
3
value 0.00311
scoring_system epss
scoring_elements 0.54608
published_at 2026-06-07T12:55:00Z
4
value 0.00311
scoring_system epss
scoring_elements 0.54587
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-6080
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19721
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19721
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6071
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6071
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6072
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6072
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6073
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6073
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6077
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6078
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6079
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6080
9
reference_url https://security.archlinux.org/ASA-202004-24
reference_id ASA-202004-24
reference_type
scores
url https://security.archlinux.org/ASA-202004-24
10
reference_url https://security.archlinux.org/AVG-1136
reference_id AVG-1136
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1136
11
reference_url https://security.gentoo.org/glsa/202005-10
reference_id GLSA-202005-10
reference_type
scores
url https://security.gentoo.org/glsa/202005-10
12
reference_url https://usn.ubuntu.com/7239-1/
reference_id USN-7239-1
reference_type
scores
url https://usn.ubuntu.com/7239-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2020-6080
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fkdd-mfrw-r7gm
31
url VCID-gyxg-efc1-a3ee
vulnerability_id VCID-gyxg-efc1-a3ee
summary In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in the MP4 demux module leading to a invalid free, because the type of a box may be changed between a read operation and a free operation.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-17670
reference_id
reference_type
scores
0
value 0.01254
scoring_system epss
scoring_elements 0.79699
published_at 2026-06-04T12:55:00Z
1
value 0.01254
scoring_system epss
scoring_elements 0.79725
published_at 2026-06-07T12:55:00Z
2
value 0.01254
scoring_system epss
scoring_elements 0.7973
published_at 2026-06-06T12:55:00Z
3
value 0.01254
scoring_system epss
scoring_elements 0.79714
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-17670
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17670
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17670
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2017-17670
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gyxg-efc1-a3ee
32
url VCID-j5qs-dpjh-f3cs
vulnerability_id VCID-j5qs-dpjh-f3cs
summary arbitrary code execution
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-10699
reference_id
reference_type
scores
0
value 0.00675
scoring_system epss
scoring_elements 0.71872
published_at 2026-06-04T12:55:00Z
1
value 0.00675
scoring_system epss
scoring_elements 0.71911
published_at 2026-06-05T12:55:00Z
2
value 0.00675
scoring_system epss
scoring_elements 0.71918
published_at 2026-06-06T12:55:00Z
3
value 0.00675
scoring_system epss
scoring_elements 0.71897
published_at 2026-06-07T12:55:00Z
4
value 0.00675
scoring_system epss
scoring_elements 0.71882
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-10699
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10699
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10699
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9300
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9300
3
reference_url https://security.archlinux.org/ASA-201712-4
reference_id ASA-201712-4
reference_type
scores
url https://security.archlinux.org/ASA-201712-4
4
reference_url https://security.archlinux.org/AVG-533
reference_id AVG-533
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-533
5
reference_url https://usn.ubuntu.com/USN-4805-1/
reference_id USN-USN-4805-1
reference_type
scores
url https://usn.ubuntu.com/USN-4805-1/
fixed_packages
0
url pkg:deb/debian/vlc@2.2.7-1~deb8u1
purl pkg:deb/debian/vlc@2.2.7-1~deb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-3ae2-1yab-r3ep
3
vulnerability VCID-3maf-pscz-tqdu
4
vulnerability VCID-557y-hv8p-efhf
5
vulnerability VCID-5eeh-h7xt-vucx
6
vulnerability VCID-6a4e-han8-rfch
7
vulnerability VCID-6ehu-psdp-gbf1
8
vulnerability VCID-89yv-t37p-tuaq
9
vulnerability VCID-96d2-udsw-rke5
10
vulnerability VCID-9j7y-wej7-b7f7
11
vulnerability VCID-9yyg-uwfq-nqdb
12
vulnerability VCID-art7-mk68-gya1
13
vulnerability VCID-b1vz-1vqg-zff9
14
vulnerability VCID-b1we-n5jv-53dv
15
vulnerability VCID-b6xd-jq9k-cfbt
16
vulnerability VCID-bcwr-buk9-7qa2
17
vulnerability VCID-c41h-2jrt-23fz
18
vulnerability VCID-c5hg-us5r-77cq
19
vulnerability VCID-cshp-tets-gfbk
20
vulnerability VCID-cw49-sn3z-tfh7
21
vulnerability VCID-e45m-7wd6-xqhg
22
vulnerability VCID-e87f-mt58-3kfh
23
vulnerability VCID-ea1z-zanh-eyfg
24
vulnerability VCID-ec9e-yh13-yuae
25
vulnerability VCID-erhv-p6z6-4fgw
26
vulnerability VCID-fkdd-mfrw-r7gm
27
vulnerability VCID-gyxg-efc1-a3ee
28
vulnerability VCID-j5qs-dpjh-f3cs
29
vulnerability VCID-jwe9-fx8s-xbcc
30
vulnerability VCID-p74t-yceb-fyff
31
vulnerability VCID-qjfd-tzwn-jyfg
32
vulnerability VCID-r5wu-ff55-mqej
33
vulnerability VCID-ra6h-qzvf-6ygq
34
vulnerability VCID-sk6j-cy2t-a3d8
35
vulnerability VCID-vj52-2nf1-huda
36
vulnerability VCID-x78p-6scf-bydj
37
vulnerability VCID-xkhj-f8k9-nkfb
38
vulnerability VCID-xutf-mndc-8yd7
39
vulnerability VCID-y48v-wx35-83h1
40
vulnerability VCID-y5s8-jma2-qbgw
41
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.7-1~deb8u1
1
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2017-10699
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j5qs-dpjh-f3cs
33
url VCID-jwe9-fx8s-xbcc
vulnerability_id VCID-jwe9-fx8s-xbcc
summary security update
references
fixed_packages
0
url pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1
purl pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3maf-pscz-tqdu
1
vulnerability VCID-557y-hv8p-efhf
2
vulnerability VCID-9j7y-wej7-b7f7
3
vulnerability VCID-cw49-sn3z-tfh7
4
vulnerability VCID-e45m-7wd6-xqhg
5
vulnerability VCID-jwe9-fx8s-xbcc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.17.4-0%252Bdeb10u1
1
url pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1
purl pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-557y-hv8p-efhf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.21-0%252Bdeb11u1
aliases DSA-5165-1 vlc
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jwe9-fx8s-xbcc
34
url VCID-k8aa-1nb6-f3c3
vulnerability_id VCID-k8aa-1nb6-f3c3
summary plugins\audio_filter\libmpgatofixed32_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (invalid read and application crash) or possibly have unspecified other impact via a crafted file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9301
reference_id
reference_type
scores
0
value 0.00421
scoring_system epss
scoring_elements 0.62319
published_at 2026-06-04T12:55:00Z
1
value 0.00421
scoring_system epss
scoring_elements 0.62365
published_at 2026-06-05T12:55:00Z
2
value 0.00421
scoring_system epss
scoring_elements 0.62372
published_at 2026-06-06T12:55:00Z
3
value 0.00421
scoring_system epss
scoring_elements 0.62361
published_at 2026-06-07T12:55:00Z
4
value 0.00421
scoring_system epss
scoring_elements 0.62346
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9301
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9301
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9301
fixed_packages
0
url pkg:deb/debian/vlc@2.2.7-1~deb8u1
purl pkg:deb/debian/vlc@2.2.7-1~deb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-3ae2-1yab-r3ep
3
vulnerability VCID-3maf-pscz-tqdu
4
vulnerability VCID-557y-hv8p-efhf
5
vulnerability VCID-5eeh-h7xt-vucx
6
vulnerability VCID-6a4e-han8-rfch
7
vulnerability VCID-6ehu-psdp-gbf1
8
vulnerability VCID-89yv-t37p-tuaq
9
vulnerability VCID-96d2-udsw-rke5
10
vulnerability VCID-9j7y-wej7-b7f7
11
vulnerability VCID-9yyg-uwfq-nqdb
12
vulnerability VCID-art7-mk68-gya1
13
vulnerability VCID-b1vz-1vqg-zff9
14
vulnerability VCID-b1we-n5jv-53dv
15
vulnerability VCID-b6xd-jq9k-cfbt
16
vulnerability VCID-bcwr-buk9-7qa2
17
vulnerability VCID-c41h-2jrt-23fz
18
vulnerability VCID-c5hg-us5r-77cq
19
vulnerability VCID-cshp-tets-gfbk
20
vulnerability VCID-cw49-sn3z-tfh7
21
vulnerability VCID-e45m-7wd6-xqhg
22
vulnerability VCID-e87f-mt58-3kfh
23
vulnerability VCID-ea1z-zanh-eyfg
24
vulnerability VCID-ec9e-yh13-yuae
25
vulnerability VCID-erhv-p6z6-4fgw
26
vulnerability VCID-fkdd-mfrw-r7gm
27
vulnerability VCID-gyxg-efc1-a3ee
28
vulnerability VCID-j5qs-dpjh-f3cs
29
vulnerability VCID-jwe9-fx8s-xbcc
30
vulnerability VCID-p74t-yceb-fyff
31
vulnerability VCID-qjfd-tzwn-jyfg
32
vulnerability VCID-r5wu-ff55-mqej
33
vulnerability VCID-ra6h-qzvf-6ygq
34
vulnerability VCID-sk6j-cy2t-a3d8
35
vulnerability VCID-vj52-2nf1-huda
36
vulnerability VCID-x78p-6scf-bydj
37
vulnerability VCID-xkhj-f8k9-nkfb
38
vulnerability VCID-xutf-mndc-8yd7
39
vulnerability VCID-y48v-wx35-83h1
40
vulnerability VCID-y5s8-jma2-qbgw
41
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.7-1~deb8u1
aliases CVE-2017-9301
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k8aa-1nb6-f3c3
35
url VCID-murd-k9xt-6bdk
vulnerability_id VCID-murd-k9xt-6bdk
summary multiple issues
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8310
reference_id
reference_type
scores
0
value 0.00183
scoring_system epss
scoring_elements 0.39763
published_at 2026-06-04T12:55:00Z
1
value 0.00183
scoring_system epss
scoring_elements 0.39849
published_at 2026-06-05T12:55:00Z
2
value 0.00183
scoring_system epss
scoring_elements 0.39853
published_at 2026-06-06T12:55:00Z
3
value 0.00183
scoring_system epss
scoring_elements 0.39826
published_at 2026-06-07T12:55:00Z
4
value 0.00183
scoring_system epss
scoring_elements 0.398
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8310
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8310
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8311
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8311
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8312
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8312
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8313
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8313
5
reference_url https://security.archlinux.org/ASA-201706-1
reference_id ASA-201706-1
reference_type
scores
url https://security.archlinux.org/ASA-201706-1
6
reference_url https://security.archlinux.org/AVG-283
reference_id AVG-283
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-283
7
reference_url https://security.gentoo.org/glsa/201707-10
reference_id GLSA-201707-10
reference_type
scores
url https://security.gentoo.org/glsa/201707-10
fixed_packages
0
url pkg:deb/debian/vlc@2.2.7-1~deb8u1
purl pkg:deb/debian/vlc@2.2.7-1~deb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-3ae2-1yab-r3ep
3
vulnerability VCID-3maf-pscz-tqdu
4
vulnerability VCID-557y-hv8p-efhf
5
vulnerability VCID-5eeh-h7xt-vucx
6
vulnerability VCID-6a4e-han8-rfch
7
vulnerability VCID-6ehu-psdp-gbf1
8
vulnerability VCID-89yv-t37p-tuaq
9
vulnerability VCID-96d2-udsw-rke5
10
vulnerability VCID-9j7y-wej7-b7f7
11
vulnerability VCID-9yyg-uwfq-nqdb
12
vulnerability VCID-art7-mk68-gya1
13
vulnerability VCID-b1vz-1vqg-zff9
14
vulnerability VCID-b1we-n5jv-53dv
15
vulnerability VCID-b6xd-jq9k-cfbt
16
vulnerability VCID-bcwr-buk9-7qa2
17
vulnerability VCID-c41h-2jrt-23fz
18
vulnerability VCID-c5hg-us5r-77cq
19
vulnerability VCID-cshp-tets-gfbk
20
vulnerability VCID-cw49-sn3z-tfh7
21
vulnerability VCID-e45m-7wd6-xqhg
22
vulnerability VCID-e87f-mt58-3kfh
23
vulnerability VCID-ea1z-zanh-eyfg
24
vulnerability VCID-ec9e-yh13-yuae
25
vulnerability VCID-erhv-p6z6-4fgw
26
vulnerability VCID-fkdd-mfrw-r7gm
27
vulnerability VCID-gyxg-efc1-a3ee
28
vulnerability VCID-j5qs-dpjh-f3cs
29
vulnerability VCID-jwe9-fx8s-xbcc
30
vulnerability VCID-p74t-yceb-fyff
31
vulnerability VCID-qjfd-tzwn-jyfg
32
vulnerability VCID-r5wu-ff55-mqej
33
vulnerability VCID-ra6h-qzvf-6ygq
34
vulnerability VCID-sk6j-cy2t-a3d8
35
vulnerability VCID-vj52-2nf1-huda
36
vulnerability VCID-x78p-6scf-bydj
37
vulnerability VCID-xkhj-f8k9-nkfb
38
vulnerability VCID-xutf-mndc-8yd7
39
vulnerability VCID-y48v-wx35-83h1
40
vulnerability VCID-y5s8-jma2-qbgw
41
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.7-1~deb8u1
aliases CVE-2017-8310
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-murd-k9xt-6bdk
36
url VCID-n3qa-tcg2-7fa9
vulnerability_id VCID-n3qa-tcg2-7fa9
summary VideoLAN VLC media player 2.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted 3GP file, which triggers the freeing of arbitrary pointers.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5949
reference_id
reference_type
scores
0
value 0.07445
scoring_system epss
scoring_elements 0.91896
published_at 2026-06-04T12:55:00Z
1
value 0.07445
scoring_system epss
scoring_elements 0.91908
published_at 2026-06-05T12:55:00Z
2
value 0.07445
scoring_system epss
scoring_elements 0.91909
published_at 2026-06-06T12:55:00Z
3
value 0.07445
scoring_system epss
scoring_elements 0.91907
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5949
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5949
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5949
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=796255
reference_id 796255
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=796255
3
reference_url https://security.gentoo.org/glsa/201603-08
reference_id GLSA-201603-08
reference_type
scores
url https://security.gentoo.org/glsa/201603-08
fixed_packages
0
url pkg:deb/debian/vlc@2.2.7-1~deb8u1
purl pkg:deb/debian/vlc@2.2.7-1~deb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-3ae2-1yab-r3ep
3
vulnerability VCID-3maf-pscz-tqdu
4
vulnerability VCID-557y-hv8p-efhf
5
vulnerability VCID-5eeh-h7xt-vucx
6
vulnerability VCID-6a4e-han8-rfch
7
vulnerability VCID-6ehu-psdp-gbf1
8
vulnerability VCID-89yv-t37p-tuaq
9
vulnerability VCID-96d2-udsw-rke5
10
vulnerability VCID-9j7y-wej7-b7f7
11
vulnerability VCID-9yyg-uwfq-nqdb
12
vulnerability VCID-art7-mk68-gya1
13
vulnerability VCID-b1vz-1vqg-zff9
14
vulnerability VCID-b1we-n5jv-53dv
15
vulnerability VCID-b6xd-jq9k-cfbt
16
vulnerability VCID-bcwr-buk9-7qa2
17
vulnerability VCID-c41h-2jrt-23fz
18
vulnerability VCID-c5hg-us5r-77cq
19
vulnerability VCID-cshp-tets-gfbk
20
vulnerability VCID-cw49-sn3z-tfh7
21
vulnerability VCID-e45m-7wd6-xqhg
22
vulnerability VCID-e87f-mt58-3kfh
23
vulnerability VCID-ea1z-zanh-eyfg
24
vulnerability VCID-ec9e-yh13-yuae
25
vulnerability VCID-erhv-p6z6-4fgw
26
vulnerability VCID-fkdd-mfrw-r7gm
27
vulnerability VCID-gyxg-efc1-a3ee
28
vulnerability VCID-j5qs-dpjh-f3cs
29
vulnerability VCID-jwe9-fx8s-xbcc
30
vulnerability VCID-p74t-yceb-fyff
31
vulnerability VCID-qjfd-tzwn-jyfg
32
vulnerability VCID-r5wu-ff55-mqej
33
vulnerability VCID-ra6h-qzvf-6ygq
34
vulnerability VCID-sk6j-cy2t-a3d8
35
vulnerability VCID-vj52-2nf1-huda
36
vulnerability VCID-x78p-6scf-bydj
37
vulnerability VCID-xkhj-f8k9-nkfb
38
vulnerability VCID-xutf-mndc-8yd7
39
vulnerability VCID-y48v-wx35-83h1
40
vulnerability VCID-y5s8-jma2-qbgw
41
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.7-1~deb8u1
aliases CVE-2015-5949
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n3qa-tcg2-7fa9
37
url VCID-p74t-yceb-fyff
vulnerability_id VCID-p74t-yceb-fyff
summary An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and crash) or possibly have unspecified other impact via a crafted .mp4 file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-13602
reference_id
reference_type
scores
0
value 0.00316
scoring_system epss
scoring_elements 0.55001
published_at 2026-06-04T12:55:00Z
1
value 0.00316
scoring_system epss
scoring_elements 0.55059
published_at 2026-06-05T12:55:00Z
2
value 0.00316
scoring_system epss
scoring_elements 0.55067
published_at 2026-06-06T12:55:00Z
3
value 0.00316
scoring_system epss
scoring_elements 0.55057
published_at 2026-06-07T12:55:00Z
4
value 0.00316
scoring_system epss
scoring_elements 0.5504
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-13602
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=932131
reference_id 932131
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=932131
15
reference_url https://security.gentoo.org/glsa/201909-02
reference_id GLSA-201909-02
reference_type
scores
url https://security.gentoo.org/glsa/201909-02
16
reference_url https://usn.ubuntu.com/4074-1/
reference_id USN-4074-1
reference_type
scores
url https://usn.ubuntu.com/4074-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-13602
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p74t-yceb-fyff
38
url VCID-qjfd-tzwn-jyfg
vulnerability_id VCID-qjfd-tzwn-jyfg
summary multiple issues
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-6072
reference_id
reference_type
scores
0
value 0.0112
scoring_system epss
scoring_elements 0.78577
published_at 2026-06-04T12:55:00Z
1
value 0.0112
scoring_system epss
scoring_elements 0.78605
published_at 2026-06-05T12:55:00Z
2
value 0.0112
scoring_system epss
scoring_elements 0.78612
published_at 2026-06-06T12:55:00Z
3
value 0.0112
scoring_system epss
scoring_elements 0.78603
published_at 2026-06-07T12:55:00Z
4
value 0.0112
scoring_system epss
scoring_elements 0.78591
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-6072
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19721
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19721
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6071
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6071
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6072
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6072
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6073
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6073
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6077
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6078
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6079
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6080
9
reference_url https://security.archlinux.org/ASA-202004-24
reference_id ASA-202004-24
reference_type
scores
url https://security.archlinux.org/ASA-202004-24
10
reference_url https://security.archlinux.org/AVG-1136
reference_id AVG-1136
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1136
11
reference_url https://security.gentoo.org/glsa/202005-10
reference_id GLSA-202005-10
reference_type
scores
url https://security.gentoo.org/glsa/202005-10
12
reference_url https://usn.ubuntu.com/7239-1/
reference_id USN-7239-1
reference_type
scores
url https://usn.ubuntu.com/7239-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2020-6072
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qjfd-tzwn-jyfg
39
url VCID-r5wu-ff55-mqej
vulnerability_id VCID-r5wu-ff55-mqej
summary A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-26664
reference_id
reference_type
scores
0
value 0.00296
scoring_system epss
scoring_elements 0.53215
published_at 2026-06-04T12:55:00Z
1
value 0.00296
scoring_system epss
scoring_elements 0.53276
published_at 2026-06-05T12:55:00Z
2
value 0.00296
scoring_system epss
scoring_elements 0.53284
published_at 2026-06-06T12:55:00Z
3
value 0.00296
scoring_system epss
scoring_elements 0.53268
published_at 2026-06-07T12:55:00Z
4
value 0.00296
scoring_system epss
scoring_elements 0.53242
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-26664
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979676
reference_id 979676
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979676
7
reference_url https://security.archlinux.org/ASA-202101-35
reference_id ASA-202101-35
reference_type
scores
url https://security.archlinux.org/ASA-202101-35
8
reference_url https://security.archlinux.org/AVG-1423
reference_id AVG-1423
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1423
9
reference_url https://security.gentoo.org/glsa/202101-37
reference_id GLSA-202101-37
reference_type
scores
url https://security.gentoo.org/glsa/202101-37
fixed_packages
0
url pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1
purl pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3maf-pscz-tqdu
1
vulnerability VCID-557y-hv8p-efhf
2
vulnerability VCID-9j7y-wej7-b7f7
3
vulnerability VCID-cw49-sn3z-tfh7
4
vulnerability VCID-e45m-7wd6-xqhg
5
vulnerability VCID-jwe9-fx8s-xbcc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.17.4-0%252Bdeb10u1
aliases CVE-2020-26664
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r5wu-ff55-mqej
40
url VCID-ra6h-qzvf-6ygq
vulnerability_id VCID-ra6h-qzvf-6ygq
summary An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-5459
reference_id
reference_type
scores
0
value 0.01185
scoring_system epss
scoring_elements 0.79127
published_at 2026-06-04T12:55:00Z
1
value 0.01185
scoring_system epss
scoring_elements 0.79153
published_at 2026-06-05T12:55:00Z
2
value 0.01185
scoring_system epss
scoring_elements 0.79159
published_at 2026-06-06T12:55:00Z
3
value 0.01185
scoring_system epss
scoring_elements 0.7915
published_at 2026-06-07T12:55:00Z
4
value 0.01185
scoring_system epss
scoring_elements 0.79139
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-5459
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12874
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12874
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5439
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5439
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5459
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5459
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5460
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5460
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-5459
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ra6h-qzvf-6ygq
41
url VCID-sk6j-cy2t-a3d8
vulnerability_id VCID-sk6j-cy2t-a3d8
summary A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer over-read via a crafted .ogg file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-14438
reference_id
reference_type
scores
0
value 0.0051
scoring_system epss
scoring_elements 0.66732
published_at 2026-06-04T12:55:00Z
1
value 0.0051
scoring_system epss
scoring_elements 0.66773
published_at 2026-06-05T12:55:00Z
2
value 0.0051
scoring_system epss
scoring_elements 0.66781
published_at 2026-06-06T12:55:00Z
3
value 0.0051
scoring_system epss
scoring_elements 0.66766
published_at 2026-06-07T12:55:00Z
4
value 0.0051
scoring_system epss
scoring_elements 0.66751
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-14438
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
13
reference_url https://security.gentoo.org/glsa/201909-02
reference_id GLSA-201909-02
reference_type
scores
url https://security.gentoo.org/glsa/201909-02
14
reference_url https://usn.ubuntu.com/4131-1/
reference_id USN-4131-1
reference_type
scores
url https://usn.ubuntu.com/4131-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-14438
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sk6j-cy2t-a3d8
42
url VCID-ubrv-zj1d-7bft
vulnerability_id VCID-ubrv-zj1d-7bft
summary Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service (crash) via a crafted wav file, related to "seek across EOF."
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-3941
reference_id
reference_type
scores
0
value 0.00307
scoring_system epss
scoring_elements 0.54178
published_at 2026-06-04T12:55:00Z
1
value 0.00307
scoring_system epss
scoring_elements 0.54234
published_at 2026-06-05T12:55:00Z
2
value 0.00307
scoring_system epss
scoring_elements 0.54243
published_at 2026-06-06T12:55:00Z
3
value 0.00307
scoring_system epss
scoring_elements 0.54233
published_at 2026-06-07T12:55:00Z
4
value 0.00307
scoring_system epss
scoring_elements 0.5421
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-3941
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3941
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3941
fixed_packages
0
url pkg:deb/debian/vlc@2.2.7-1~deb8u1
purl pkg:deb/debian/vlc@2.2.7-1~deb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-3ae2-1yab-r3ep
3
vulnerability VCID-3maf-pscz-tqdu
4
vulnerability VCID-557y-hv8p-efhf
5
vulnerability VCID-5eeh-h7xt-vucx
6
vulnerability VCID-6a4e-han8-rfch
7
vulnerability VCID-6ehu-psdp-gbf1
8
vulnerability VCID-89yv-t37p-tuaq
9
vulnerability VCID-96d2-udsw-rke5
10
vulnerability VCID-9j7y-wej7-b7f7
11
vulnerability VCID-9yyg-uwfq-nqdb
12
vulnerability VCID-art7-mk68-gya1
13
vulnerability VCID-b1vz-1vqg-zff9
14
vulnerability VCID-b1we-n5jv-53dv
15
vulnerability VCID-b6xd-jq9k-cfbt
16
vulnerability VCID-bcwr-buk9-7qa2
17
vulnerability VCID-c41h-2jrt-23fz
18
vulnerability VCID-c5hg-us5r-77cq
19
vulnerability VCID-cshp-tets-gfbk
20
vulnerability VCID-cw49-sn3z-tfh7
21
vulnerability VCID-e45m-7wd6-xqhg
22
vulnerability VCID-e87f-mt58-3kfh
23
vulnerability VCID-ea1z-zanh-eyfg
24
vulnerability VCID-ec9e-yh13-yuae
25
vulnerability VCID-erhv-p6z6-4fgw
26
vulnerability VCID-fkdd-mfrw-r7gm
27
vulnerability VCID-gyxg-efc1-a3ee
28
vulnerability VCID-j5qs-dpjh-f3cs
29
vulnerability VCID-jwe9-fx8s-xbcc
30
vulnerability VCID-p74t-yceb-fyff
31
vulnerability VCID-qjfd-tzwn-jyfg
32
vulnerability VCID-r5wu-ff55-mqej
33
vulnerability VCID-ra6h-qzvf-6ygq
34
vulnerability VCID-sk6j-cy2t-a3d8
35
vulnerability VCID-vj52-2nf1-huda
36
vulnerability VCID-x78p-6scf-bydj
37
vulnerability VCID-xkhj-f8k9-nkfb
38
vulnerability VCID-xutf-mndc-8yd7
39
vulnerability VCID-y48v-wx35-83h1
40
vulnerability VCID-y5s8-jma2-qbgw
41
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.7-1~deb8u1
aliases CVE-2016-3941
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ubrv-zj1d-7bft
43
url VCID-vj52-2nf1-huda
vulnerability_id VCID-vj52-2nf1-huda
summary An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted image file. NOTE: this may be related to the SDL_Image product.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-19721
reference_id
reference_type
scores
0
value 0.01303
scoring_system epss
scoring_elements 0.80098
published_at 2026-06-04T12:55:00Z
1
value 0.01303
scoring_system epss
scoring_elements 0.80123
published_at 2026-06-07T12:55:00Z
2
value 0.01303
scoring_system epss
scoring_elements 0.80128
published_at 2026-06-06T12:55:00Z
3
value 0.01303
scoring_system epss
scoring_elements 0.80115
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-19721
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19721
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19721
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6071
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6071
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6072
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6072
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6073
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6073
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6077
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6078
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6079
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6080
9
reference_url https://security.archlinux.org/AVG-1145
reference_id AVG-1145
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1145
10
reference_url https://security.gentoo.org/glsa/202005-11
reference_id GLSA-202005-11
reference_type
scores
url https://security.gentoo.org/glsa/202005-11
11
reference_url https://usn.ubuntu.com/6180-1/
reference_id USN-6180-1
reference_type
scores
url https://usn.ubuntu.com/6180-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-19721
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vj52-2nf1-huda
44
url VCID-x78p-6scf-bydj
vulnerability_id VCID-x78p-6scf-bydj
summary multiple issues
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-6078
reference_id
reference_type
scores
0
value 0.00549
scoring_system epss
scoring_elements 0.6831
published_at 2026-06-04T12:55:00Z
1
value 0.00549
scoring_system epss
scoring_elements 0.68352
published_at 2026-06-05T12:55:00Z
2
value 0.00549
scoring_system epss
scoring_elements 0.68359
published_at 2026-06-06T12:55:00Z
3
value 0.00549
scoring_system epss
scoring_elements 0.68351
published_at 2026-06-07T12:55:00Z
4
value 0.00549
scoring_system epss
scoring_elements 0.68336
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-6078
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19721
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19721
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6071
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6071
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6072
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6072
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6073
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6073
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6077
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6078
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6079
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6080
9
reference_url https://security.archlinux.org/ASA-202004-24
reference_id ASA-202004-24
reference_type
scores
url https://security.archlinux.org/ASA-202004-24
10
reference_url https://security.archlinux.org/AVG-1136
reference_id AVG-1136
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1136
11
reference_url https://security.gentoo.org/glsa/202005-10
reference_id GLSA-202005-10
reference_type
scores
url https://security.gentoo.org/glsa/202005-10
12
reference_url https://usn.ubuntu.com/7239-1/
reference_id USN-7239-1
reference_type
scores
url https://usn.ubuntu.com/7239-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2020-6078
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x78p-6scf-bydj
45
url VCID-xkhj-f8k9-nkfb
vulnerability_id VCID-xkhj-f8k9-nkfb
summary The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-14778
reference_id
reference_type
scores
0
value 0.00307
scoring_system epss
scoring_elements 0.54237
published_at 2026-06-04T12:55:00Z
1
value 0.00307
scoring_system epss
scoring_elements 0.54293
published_at 2026-06-05T12:55:00Z
2
value 0.00307
scoring_system epss
scoring_elements 0.54302
published_at 2026-06-06T12:55:00Z
3
value 0.00307
scoring_system epss
scoring_elements 0.54291
published_at 2026-06-07T12:55:00Z
4
value 0.00307
scoring_system epss
scoring_elements 0.54268
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-14778
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13602
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13962
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14437
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14438
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14498
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14533
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14534
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14535
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14776
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14777
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14778
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14970
13
reference_url https://security.gentoo.org/glsa/201909-02
reference_id GLSA-201909-02
reference_type
scores
url https://security.gentoo.org/glsa/201909-02
14
reference_url https://usn.ubuntu.com/4131-1/
reference_id USN-4131-1
reference_type
scores
url https://usn.ubuntu.com/4131-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2019-14778
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xkhj-f8k9-nkfb
46
url VCID-xutf-mndc-8yd7
vulnerability_id VCID-xutf-mndc-8yd7
summary multiple issues
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-6077
reference_id
reference_type
scores
0
value 0.00537
scoring_system epss
scoring_elements 0.67867
published_at 2026-06-04T12:55:00Z
1
value 0.00537
scoring_system epss
scoring_elements 0.67907
published_at 2026-06-05T12:55:00Z
2
value 0.00537
scoring_system epss
scoring_elements 0.67914
published_at 2026-06-06T12:55:00Z
3
value 0.00537
scoring_system epss
scoring_elements 0.67903
published_at 2026-06-07T12:55:00Z
4
value 0.00537
scoring_system epss
scoring_elements 0.6789
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-6077
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19721
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19721
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6071
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6071
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6072
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6072
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6073
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6073
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6077
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6078
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6079
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6080
9
reference_url https://security.archlinux.org/ASA-202004-24
reference_id ASA-202004-24
reference_type
scores
url https://security.archlinux.org/ASA-202004-24
10
reference_url https://security.archlinux.org/AVG-1136
reference_id AVG-1136
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1136
11
reference_url https://security.gentoo.org/glsa/202005-10
reference_id GLSA-202005-10
reference_type
scores
url https://security.gentoo.org/glsa/202005-10
12
reference_url https://usn.ubuntu.com/7239-1/
reference_id USN-7239-1
reference_type
scores
url https://usn.ubuntu.com/7239-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2020-6077
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xutf-mndc-8yd7
47
url VCID-y48v-wx35-83h1
vulnerability_id VCID-y48v-wx35-83h1
summary A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11 for macOS/iOS allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted H.264 Annex-B video (.avi for example) file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-13428
reference_id
reference_type
scores
0
value 0.07483
scoring_system epss
scoring_elements 0.91921
published_at 2026-06-04T12:55:00Z
1
value 0.07483
scoring_system epss
scoring_elements 0.91934
published_at 2026-06-05T12:55:00Z
2
value 0.07483
scoring_system epss
scoring_elements 0.91935
published_at 2026-06-06T12:55:00Z
3
value 0.07483
scoring_system epss
scoring_elements 0.91933
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-13428
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13428
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13428
2
reference_url https://usn.ubuntu.com/6180-1/
reference_id USN-6180-1
reference_type
scores
url https://usn.ubuntu.com/6180-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
1
url pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1
purl pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3maf-pscz-tqdu
1
vulnerability VCID-557y-hv8p-efhf
2
vulnerability VCID-9j7y-wej7-b7f7
3
vulnerability VCID-cw49-sn3z-tfh7
4
vulnerability VCID-e45m-7wd6-xqhg
5
vulnerability VCID-jwe9-fx8s-xbcc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.17.4-0%252Bdeb10u1
aliases CVE-2020-13428
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y48v-wx35-83h1
48
url VCID-y5s8-jma2-qbgw
vulnerability_id VCID-y5s8-jma2-qbgw
summary A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-25802
reference_id
reference_type
scores
0
value 0.00282
scoring_system epss
scoring_elements 0.51828
published_at 2026-06-04T12:55:00Z
1
value 0.00282
scoring_system epss
scoring_elements 0.51886
published_at 2026-06-05T12:55:00Z
2
value 0.00282
scoring_system epss
scoring_elements 0.51895
published_at 2026-06-06T12:55:00Z
3
value 0.00282
scoring_system epss
scoring_elements 0.51874
published_at 2026-06-07T12:55:00Z
4
value 0.00282
scoring_system epss
scoring_elements 0.51843
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-25802
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26664
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25801
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25802
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25803
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25804
6
reference_url https://usn.ubuntu.com/6180-1/
reference_id USN-6180-1
reference_type
scores
url https://usn.ubuntu.com/6180-1/
fixed_packages
0
url pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1
purl pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3maf-pscz-tqdu
1
vulnerability VCID-557y-hv8p-efhf
2
vulnerability VCID-9j7y-wej7-b7f7
3
vulnerability VCID-cw49-sn3z-tfh7
4
vulnerability VCID-e45m-7wd6-xqhg
5
vulnerability VCID-jwe9-fx8s-xbcc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.17.4-0%252Bdeb10u1
aliases CVE-2021-25802
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y5s8-jma2-qbgw
49
url VCID-y83r-eq34-ykbc
vulnerability_id VCID-y83r-eq34-ykbc
summary arbitrary code execution
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9300
reference_id
reference_type
scores
0
value 0.00339
scoring_system epss
scoring_elements 0.56897
published_at 2026-06-04T12:55:00Z
1
value 0.00339
scoring_system epss
scoring_elements 0.56948
published_at 2026-06-05T12:55:00Z
2
value 0.00339
scoring_system epss
scoring_elements 0.56956
published_at 2026-06-06T12:55:00Z
3
value 0.00339
scoring_system epss
scoring_elements 0.56944
published_at 2026-06-07T12:55:00Z
4
value 0.00339
scoring_system epss
scoring_elements 0.56929
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9300
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10699
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10699
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9300
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9300
3
reference_url https://security.archlinux.org/ASA-201712-4
reference_id ASA-201712-4
reference_type
scores
url https://security.archlinux.org/ASA-201712-4
4
reference_url https://security.archlinux.org/AVG-533
reference_id AVG-533
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-533
fixed_packages
0
url pkg:deb/debian/vlc@2.2.7-1~deb8u1
purl pkg:deb/debian/vlc@2.2.7-1~deb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-3ae2-1yab-r3ep
3
vulnerability VCID-3maf-pscz-tqdu
4
vulnerability VCID-557y-hv8p-efhf
5
vulnerability VCID-5eeh-h7xt-vucx
6
vulnerability VCID-6a4e-han8-rfch
7
vulnerability VCID-6ehu-psdp-gbf1
8
vulnerability VCID-89yv-t37p-tuaq
9
vulnerability VCID-96d2-udsw-rke5
10
vulnerability VCID-9j7y-wej7-b7f7
11
vulnerability VCID-9yyg-uwfq-nqdb
12
vulnerability VCID-art7-mk68-gya1
13
vulnerability VCID-b1vz-1vqg-zff9
14
vulnerability VCID-b1we-n5jv-53dv
15
vulnerability VCID-b6xd-jq9k-cfbt
16
vulnerability VCID-bcwr-buk9-7qa2
17
vulnerability VCID-c41h-2jrt-23fz
18
vulnerability VCID-c5hg-us5r-77cq
19
vulnerability VCID-cshp-tets-gfbk
20
vulnerability VCID-cw49-sn3z-tfh7
21
vulnerability VCID-e45m-7wd6-xqhg
22
vulnerability VCID-e87f-mt58-3kfh
23
vulnerability VCID-ea1z-zanh-eyfg
24
vulnerability VCID-ec9e-yh13-yuae
25
vulnerability VCID-erhv-p6z6-4fgw
26
vulnerability VCID-fkdd-mfrw-r7gm
27
vulnerability VCID-gyxg-efc1-a3ee
28
vulnerability VCID-j5qs-dpjh-f3cs
29
vulnerability VCID-jwe9-fx8s-xbcc
30
vulnerability VCID-p74t-yceb-fyff
31
vulnerability VCID-qjfd-tzwn-jyfg
32
vulnerability VCID-r5wu-ff55-mqej
33
vulnerability VCID-ra6h-qzvf-6ygq
34
vulnerability VCID-sk6j-cy2t-a3d8
35
vulnerability VCID-vj52-2nf1-huda
36
vulnerability VCID-x78p-6scf-bydj
37
vulnerability VCID-xkhj-f8k9-nkfb
38
vulnerability VCID-xutf-mndc-8yd7
39
vulnerability VCID-y48v-wx35-83h1
40
vulnerability VCID-y5s8-jma2-qbgw
41
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.7-1~deb8u1
1
url pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
purl pkg:deb/debian/vlc@3.0.11-0%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-3maf-pscz-tqdu
2
vulnerability VCID-557y-hv8p-efhf
3
vulnerability VCID-9j7y-wej7-b7f7
4
vulnerability VCID-9yyg-uwfq-nqdb
5
vulnerability VCID-bcwr-buk9-7qa2
6
vulnerability VCID-cw49-sn3z-tfh7
7
vulnerability VCID-e45m-7wd6-xqhg
8
vulnerability VCID-jwe9-fx8s-xbcc
9
vulnerability VCID-r5wu-ff55-mqej
10
vulnerability VCID-y48v-wx35-83h1
11
vulnerability VCID-y5s8-jma2-qbgw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.11-0%252Bdeb9u1
aliases CVE-2017-9300
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y83r-eq34-ykbc
Fixing_vulnerabilities
0
url VCID-2spt-pwjf-17bu
vulnerability_id VCID-2spt-pwjf-17bu
summary The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large box size.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9627
reference_id
reference_type
scores
0
value 0.00338
scoring_system epss
scoring_elements 0.56883
published_at 2026-06-04T12:55:00Z
1
value 0.00338
scoring_system epss
scoring_elements 0.56934
published_at 2026-06-05T12:55:00Z
2
value 0.00338
scoring_system epss
scoring_elements 0.56941
published_at 2026-06-06T12:55:00Z
3
value 0.00338
scoring_system epss
scoring_elements 0.56929
published_at 2026-06-07T12:55:00Z
4
value 0.00338
scoring_system epss
scoring_elements 0.56915
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9627
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9626
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9626
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9627
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9627
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9628
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9628
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9629
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9629
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9630
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9630
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775866
reference_id 775866
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775866
7
reference_url https://security.gentoo.org/glsa/201603-08
reference_id GLSA-201603-08
reference_type
scores
url https://security.gentoo.org/glsa/201603-08
fixed_packages
0
url pkg:deb/debian/vlc@2.0.3-5%2Bdeb7u2
purl pkg:deb/debian/vlc@2.0.3-5%2Bdeb7u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-2spt-pwjf-17bu
3
vulnerability VCID-2ymu-55hb-aydp
4
vulnerability VCID-39m5-1raf-aqdk
5
vulnerability VCID-3ae2-1yab-r3ep
6
vulnerability VCID-3maf-pscz-tqdu
7
vulnerability VCID-557y-hv8p-efhf
8
vulnerability VCID-5cy8-2w7f-c7h8
9
vulnerability VCID-5eeh-h7xt-vucx
10
vulnerability VCID-6a4e-han8-rfch
11
vulnerability VCID-6ehu-psdp-gbf1
12
vulnerability VCID-89yv-t37p-tuaq
13
vulnerability VCID-8xuy-uxfu-cuhc
14
vulnerability VCID-96d2-udsw-rke5
15
vulnerability VCID-9j2k-pmhh-wkdm
16
vulnerability VCID-9j7y-wej7-b7f7
17
vulnerability VCID-9yyg-uwfq-nqdb
18
vulnerability VCID-afg2-9tdw-eydu
19
vulnerability VCID-ar92-98jc-g3dj
20
vulnerability VCID-art7-mk68-gya1
21
vulnerability VCID-b1vz-1vqg-zff9
22
vulnerability VCID-b1we-n5jv-53dv
23
vulnerability VCID-b6xd-jq9k-cfbt
24
vulnerability VCID-bcwr-buk9-7qa2
25
vulnerability VCID-c41h-2jrt-23fz
26
vulnerability VCID-c5hg-us5r-77cq
27
vulnerability VCID-cshp-tets-gfbk
28
vulnerability VCID-cv12-qe9n-r7d4
29
vulnerability VCID-cw49-sn3z-tfh7
30
vulnerability VCID-e32y-8ns8-rycp
31
vulnerability VCID-e45m-7wd6-xqhg
32
vulnerability VCID-e87f-mt58-3kfh
33
vulnerability VCID-ea1z-zanh-eyfg
34
vulnerability VCID-ec9e-yh13-yuae
35
vulnerability VCID-erhv-p6z6-4fgw
36
vulnerability VCID-eufn-wq9m-rua5
37
vulnerability VCID-fkdd-mfrw-r7gm
38
vulnerability VCID-frqq-jvv5-ubct
39
vulnerability VCID-gyxg-efc1-a3ee
40
vulnerability VCID-hgqg-bw56-8qba
41
vulnerability VCID-hvup-7985-fyf6
42
vulnerability VCID-j5qs-dpjh-f3cs
43
vulnerability VCID-jwe9-fx8s-xbcc
44
vulnerability VCID-k8aa-1nb6-f3c3
45
vulnerability VCID-m9dm-q682-3qcd
46
vulnerability VCID-murd-k9xt-6bdk
47
vulnerability VCID-n3qa-tcg2-7fa9
48
vulnerability VCID-n9rf-vd4b-7kfr
49
vulnerability VCID-p74t-yceb-fyff
50
vulnerability VCID-p7sp-2r4k-ykca
51
vulnerability VCID-qjfd-tzwn-jyfg
52
vulnerability VCID-r5qk-fynh-dqcj
53
vulnerability VCID-r5wu-ff55-mqej
54
vulnerability VCID-ra6h-qzvf-6ygq
55
vulnerability VCID-sk6j-cy2t-a3d8
56
vulnerability VCID-ubrv-zj1d-7bft
57
vulnerability VCID-uf2q-g8wp-8fgd
58
vulnerability VCID-uy8a-4exj-93et
59
vulnerability VCID-vj52-2nf1-huda
60
vulnerability VCID-vk95-q3s4-mbef
61
vulnerability VCID-x78p-6scf-bydj
62
vulnerability VCID-xkhj-f8k9-nkfb
63
vulnerability VCID-xutf-mndc-8yd7
64
vulnerability VCID-y48v-wx35-83h1
65
vulnerability VCID-y5s8-jma2-qbgw
66
vulnerability VCID-y83r-eq34-ykbc
67
vulnerability VCID-z2g5-az73-rkb2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.0.3-5%252Bdeb7u2
1
url pkg:deb/debian/vlc@2.2.0~rc2-2
purl pkg:deb/debian/vlc@2.2.0~rc2-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-2ymu-55hb-aydp
3
vulnerability VCID-39m5-1raf-aqdk
4
vulnerability VCID-3ae2-1yab-r3ep
5
vulnerability VCID-3maf-pscz-tqdu
6
vulnerability VCID-557y-hv8p-efhf
7
vulnerability VCID-5eeh-h7xt-vucx
8
vulnerability VCID-6a4e-han8-rfch
9
vulnerability VCID-6ehu-psdp-gbf1
10
vulnerability VCID-89yv-t37p-tuaq
11
vulnerability VCID-96d2-udsw-rke5
12
vulnerability VCID-9j7y-wej7-b7f7
13
vulnerability VCID-9yyg-uwfq-nqdb
14
vulnerability VCID-ar92-98jc-g3dj
15
vulnerability VCID-art7-mk68-gya1
16
vulnerability VCID-b1vz-1vqg-zff9
17
vulnerability VCID-b1we-n5jv-53dv
18
vulnerability VCID-b6xd-jq9k-cfbt
19
vulnerability VCID-bcwr-buk9-7qa2
20
vulnerability VCID-c41h-2jrt-23fz
21
vulnerability VCID-c5hg-us5r-77cq
22
vulnerability VCID-cshp-tets-gfbk
23
vulnerability VCID-cw49-sn3z-tfh7
24
vulnerability VCID-e45m-7wd6-xqhg
25
vulnerability VCID-e87f-mt58-3kfh
26
vulnerability VCID-ea1z-zanh-eyfg
27
vulnerability VCID-ec9e-yh13-yuae
28
vulnerability VCID-erhv-p6z6-4fgw
29
vulnerability VCID-eufn-wq9m-rua5
30
vulnerability VCID-fkdd-mfrw-r7gm
31
vulnerability VCID-gyxg-efc1-a3ee
32
vulnerability VCID-j5qs-dpjh-f3cs
33
vulnerability VCID-jwe9-fx8s-xbcc
34
vulnerability VCID-k8aa-1nb6-f3c3
35
vulnerability VCID-murd-k9xt-6bdk
36
vulnerability VCID-n3qa-tcg2-7fa9
37
vulnerability VCID-p74t-yceb-fyff
38
vulnerability VCID-qjfd-tzwn-jyfg
39
vulnerability VCID-r5wu-ff55-mqej
40
vulnerability VCID-ra6h-qzvf-6ygq
41
vulnerability VCID-sk6j-cy2t-a3d8
42
vulnerability VCID-ubrv-zj1d-7bft
43
vulnerability VCID-vj52-2nf1-huda
44
vulnerability VCID-x78p-6scf-bydj
45
vulnerability VCID-xkhj-f8k9-nkfb
46
vulnerability VCID-xutf-mndc-8yd7
47
vulnerability VCID-y48v-wx35-83h1
48
vulnerability VCID-y5s8-jma2-qbgw
49
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.0~rc2-2
aliases CVE-2014-9627
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2spt-pwjf-17bu
1
url VCID-5cy8-2w7f-c7h8
vulnerability_id VCID-5cy8-2w7f-c7h8
summary Cross-site scripting (XSS) vulnerability in the httpd_HtmlError function in network/httpd.c in the web interface in VideoLAN VLC Media Player before 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the path info.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9743
reference_id
reference_type
scores
0
value 0.00256
scoring_system epss
scoring_elements 0.49148
published_at 2026-06-04T12:55:00Z
1
value 0.00256
scoring_system epss
scoring_elements 0.49209
published_at 2026-06-05T12:55:00Z
2
value 0.00256
scoring_system epss
scoring_elements 0.4922
published_at 2026-06-06T12:55:00Z
3
value 0.00256
scoring_system epss
scoring_elements 0.49204
published_at 2026-06-07T12:55:00Z
4
value 0.00256
scoring_system epss
scoring_elements 0.49174
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9743
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9743
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9743
fixed_packages
0
url pkg:deb/debian/vlc@2.2.0~rc2-2
purl pkg:deb/debian/vlc@2.2.0~rc2-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-2ymu-55hb-aydp
3
vulnerability VCID-39m5-1raf-aqdk
4
vulnerability VCID-3ae2-1yab-r3ep
5
vulnerability VCID-3maf-pscz-tqdu
6
vulnerability VCID-557y-hv8p-efhf
7
vulnerability VCID-5eeh-h7xt-vucx
8
vulnerability VCID-6a4e-han8-rfch
9
vulnerability VCID-6ehu-psdp-gbf1
10
vulnerability VCID-89yv-t37p-tuaq
11
vulnerability VCID-96d2-udsw-rke5
12
vulnerability VCID-9j7y-wej7-b7f7
13
vulnerability VCID-9yyg-uwfq-nqdb
14
vulnerability VCID-ar92-98jc-g3dj
15
vulnerability VCID-art7-mk68-gya1
16
vulnerability VCID-b1vz-1vqg-zff9
17
vulnerability VCID-b1we-n5jv-53dv
18
vulnerability VCID-b6xd-jq9k-cfbt
19
vulnerability VCID-bcwr-buk9-7qa2
20
vulnerability VCID-c41h-2jrt-23fz
21
vulnerability VCID-c5hg-us5r-77cq
22
vulnerability VCID-cshp-tets-gfbk
23
vulnerability VCID-cw49-sn3z-tfh7
24
vulnerability VCID-e45m-7wd6-xqhg
25
vulnerability VCID-e87f-mt58-3kfh
26
vulnerability VCID-ea1z-zanh-eyfg
27
vulnerability VCID-ec9e-yh13-yuae
28
vulnerability VCID-erhv-p6z6-4fgw
29
vulnerability VCID-eufn-wq9m-rua5
30
vulnerability VCID-fkdd-mfrw-r7gm
31
vulnerability VCID-gyxg-efc1-a3ee
32
vulnerability VCID-j5qs-dpjh-f3cs
33
vulnerability VCID-jwe9-fx8s-xbcc
34
vulnerability VCID-k8aa-1nb6-f3c3
35
vulnerability VCID-murd-k9xt-6bdk
36
vulnerability VCID-n3qa-tcg2-7fa9
37
vulnerability VCID-p74t-yceb-fyff
38
vulnerability VCID-qjfd-tzwn-jyfg
39
vulnerability VCID-r5wu-ff55-mqej
40
vulnerability VCID-ra6h-qzvf-6ygq
41
vulnerability VCID-sk6j-cy2t-a3d8
42
vulnerability VCID-ubrv-zj1d-7bft
43
vulnerability VCID-vj52-2nf1-huda
44
vulnerability VCID-x78p-6scf-bydj
45
vulnerability VCID-xkhj-f8k9-nkfb
46
vulnerability VCID-xutf-mndc-8yd7
47
vulnerability VCID-y48v-wx35-83h1
48
vulnerability VCID-y5s8-jma2-qbgw
49
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.0~rc2-2
aliases CVE-2014-9743
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5cy8-2w7f-c7h8
2
url VCID-hvup-7985-fyf6
vulnerability_id VCID-hvup-7985-fyf6
summary Integer underflow in the MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a box size less than 7.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9626
reference_id
reference_type
scores
0
value 0.00338
scoring_system epss
scoring_elements 0.56883
published_at 2026-06-04T12:55:00Z
1
value 0.00338
scoring_system epss
scoring_elements 0.56934
published_at 2026-06-05T12:55:00Z
2
value 0.00338
scoring_system epss
scoring_elements 0.56941
published_at 2026-06-06T12:55:00Z
3
value 0.00338
scoring_system epss
scoring_elements 0.56929
published_at 2026-06-07T12:55:00Z
4
value 0.00338
scoring_system epss
scoring_elements 0.56915
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9626
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9626
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9626
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9627
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9627
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9628
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9628
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9629
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9629
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9630
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9630
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775866
reference_id 775866
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775866
7
reference_url https://security.gentoo.org/glsa/201603-08
reference_id GLSA-201603-08
reference_type
scores
url https://security.gentoo.org/glsa/201603-08
fixed_packages
0
url pkg:deb/debian/vlc@2.0.3-5%2Bdeb7u2
purl pkg:deb/debian/vlc@2.0.3-5%2Bdeb7u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-2spt-pwjf-17bu
3
vulnerability VCID-2ymu-55hb-aydp
4
vulnerability VCID-39m5-1raf-aqdk
5
vulnerability VCID-3ae2-1yab-r3ep
6
vulnerability VCID-3maf-pscz-tqdu
7
vulnerability VCID-557y-hv8p-efhf
8
vulnerability VCID-5cy8-2w7f-c7h8
9
vulnerability VCID-5eeh-h7xt-vucx
10
vulnerability VCID-6a4e-han8-rfch
11
vulnerability VCID-6ehu-psdp-gbf1
12
vulnerability VCID-89yv-t37p-tuaq
13
vulnerability VCID-8xuy-uxfu-cuhc
14
vulnerability VCID-96d2-udsw-rke5
15
vulnerability VCID-9j2k-pmhh-wkdm
16
vulnerability VCID-9j7y-wej7-b7f7
17
vulnerability VCID-9yyg-uwfq-nqdb
18
vulnerability VCID-afg2-9tdw-eydu
19
vulnerability VCID-ar92-98jc-g3dj
20
vulnerability VCID-art7-mk68-gya1
21
vulnerability VCID-b1vz-1vqg-zff9
22
vulnerability VCID-b1we-n5jv-53dv
23
vulnerability VCID-b6xd-jq9k-cfbt
24
vulnerability VCID-bcwr-buk9-7qa2
25
vulnerability VCID-c41h-2jrt-23fz
26
vulnerability VCID-c5hg-us5r-77cq
27
vulnerability VCID-cshp-tets-gfbk
28
vulnerability VCID-cv12-qe9n-r7d4
29
vulnerability VCID-cw49-sn3z-tfh7
30
vulnerability VCID-e32y-8ns8-rycp
31
vulnerability VCID-e45m-7wd6-xqhg
32
vulnerability VCID-e87f-mt58-3kfh
33
vulnerability VCID-ea1z-zanh-eyfg
34
vulnerability VCID-ec9e-yh13-yuae
35
vulnerability VCID-erhv-p6z6-4fgw
36
vulnerability VCID-eufn-wq9m-rua5
37
vulnerability VCID-fkdd-mfrw-r7gm
38
vulnerability VCID-frqq-jvv5-ubct
39
vulnerability VCID-gyxg-efc1-a3ee
40
vulnerability VCID-hgqg-bw56-8qba
41
vulnerability VCID-hvup-7985-fyf6
42
vulnerability VCID-j5qs-dpjh-f3cs
43
vulnerability VCID-jwe9-fx8s-xbcc
44
vulnerability VCID-k8aa-1nb6-f3c3
45
vulnerability VCID-m9dm-q682-3qcd
46
vulnerability VCID-murd-k9xt-6bdk
47
vulnerability VCID-n3qa-tcg2-7fa9
48
vulnerability VCID-n9rf-vd4b-7kfr
49
vulnerability VCID-p74t-yceb-fyff
50
vulnerability VCID-p7sp-2r4k-ykca
51
vulnerability VCID-qjfd-tzwn-jyfg
52
vulnerability VCID-r5qk-fynh-dqcj
53
vulnerability VCID-r5wu-ff55-mqej
54
vulnerability VCID-ra6h-qzvf-6ygq
55
vulnerability VCID-sk6j-cy2t-a3d8
56
vulnerability VCID-ubrv-zj1d-7bft
57
vulnerability VCID-uf2q-g8wp-8fgd
58
vulnerability VCID-uy8a-4exj-93et
59
vulnerability VCID-vj52-2nf1-huda
60
vulnerability VCID-vk95-q3s4-mbef
61
vulnerability VCID-x78p-6scf-bydj
62
vulnerability VCID-xkhj-f8k9-nkfb
63
vulnerability VCID-xutf-mndc-8yd7
64
vulnerability VCID-y48v-wx35-83h1
65
vulnerability VCID-y5s8-jma2-qbgw
66
vulnerability VCID-y83r-eq34-ykbc
67
vulnerability VCID-z2g5-az73-rkb2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.0.3-5%252Bdeb7u2
1
url pkg:deb/debian/vlc@2.2.0~rc2-2
purl pkg:deb/debian/vlc@2.2.0~rc2-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-2ymu-55hb-aydp
3
vulnerability VCID-39m5-1raf-aqdk
4
vulnerability VCID-3ae2-1yab-r3ep
5
vulnerability VCID-3maf-pscz-tqdu
6
vulnerability VCID-557y-hv8p-efhf
7
vulnerability VCID-5eeh-h7xt-vucx
8
vulnerability VCID-6a4e-han8-rfch
9
vulnerability VCID-6ehu-psdp-gbf1
10
vulnerability VCID-89yv-t37p-tuaq
11
vulnerability VCID-96d2-udsw-rke5
12
vulnerability VCID-9j7y-wej7-b7f7
13
vulnerability VCID-9yyg-uwfq-nqdb
14
vulnerability VCID-ar92-98jc-g3dj
15
vulnerability VCID-art7-mk68-gya1
16
vulnerability VCID-b1vz-1vqg-zff9
17
vulnerability VCID-b1we-n5jv-53dv
18
vulnerability VCID-b6xd-jq9k-cfbt
19
vulnerability VCID-bcwr-buk9-7qa2
20
vulnerability VCID-c41h-2jrt-23fz
21
vulnerability VCID-c5hg-us5r-77cq
22
vulnerability VCID-cshp-tets-gfbk
23
vulnerability VCID-cw49-sn3z-tfh7
24
vulnerability VCID-e45m-7wd6-xqhg
25
vulnerability VCID-e87f-mt58-3kfh
26
vulnerability VCID-ea1z-zanh-eyfg
27
vulnerability VCID-ec9e-yh13-yuae
28
vulnerability VCID-erhv-p6z6-4fgw
29
vulnerability VCID-eufn-wq9m-rua5
30
vulnerability VCID-fkdd-mfrw-r7gm
31
vulnerability VCID-gyxg-efc1-a3ee
32
vulnerability VCID-j5qs-dpjh-f3cs
33
vulnerability VCID-jwe9-fx8s-xbcc
34
vulnerability VCID-k8aa-1nb6-f3c3
35
vulnerability VCID-murd-k9xt-6bdk
36
vulnerability VCID-n3qa-tcg2-7fa9
37
vulnerability VCID-p74t-yceb-fyff
38
vulnerability VCID-qjfd-tzwn-jyfg
39
vulnerability VCID-r5wu-ff55-mqej
40
vulnerability VCID-ra6h-qzvf-6ygq
41
vulnerability VCID-sk6j-cy2t-a3d8
42
vulnerability VCID-ubrv-zj1d-7bft
43
vulnerability VCID-vj52-2nf1-huda
44
vulnerability VCID-x78p-6scf-bydj
45
vulnerability VCID-xkhj-f8k9-nkfb
46
vulnerability VCID-xutf-mndc-8yd7
47
vulnerability VCID-y48v-wx35-83h1
48
vulnerability VCID-y5s8-jma2-qbgw
49
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.0~rc2-2
aliases CVE-2014-9626
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hvup-7985-fyf6
3
url VCID-m9dm-q682-3qcd
vulnerability_id VCID-m9dm-q682-3qcd
summary VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-7340
reference_id
reference_type
scores
0
value 0.00443
scoring_system epss
scoring_elements 0.63648
published_at 2026-06-04T12:55:00Z
1
value 0.00443
scoring_system epss
scoring_elements 0.6369
published_at 2026-06-05T12:55:00Z
2
value 0.00443
scoring_system epss
scoring_elements 0.63697
published_at 2026-06-06T12:55:00Z
3
value 0.00443
scoring_system epss
scoring_elements 0.63689
published_at 2026-06-07T12:55:00Z
4
value 0.00443
scoring_system epss
scoring_elements 0.63678
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-7340
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7340
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7340
fixed_packages
0
url pkg:deb/debian/vlc@2.2.0~rc2-2
purl pkg:deb/debian/vlc@2.2.0~rc2-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-2ymu-55hb-aydp
3
vulnerability VCID-39m5-1raf-aqdk
4
vulnerability VCID-3ae2-1yab-r3ep
5
vulnerability VCID-3maf-pscz-tqdu
6
vulnerability VCID-557y-hv8p-efhf
7
vulnerability VCID-5eeh-h7xt-vucx
8
vulnerability VCID-6a4e-han8-rfch
9
vulnerability VCID-6ehu-psdp-gbf1
10
vulnerability VCID-89yv-t37p-tuaq
11
vulnerability VCID-96d2-udsw-rke5
12
vulnerability VCID-9j7y-wej7-b7f7
13
vulnerability VCID-9yyg-uwfq-nqdb
14
vulnerability VCID-ar92-98jc-g3dj
15
vulnerability VCID-art7-mk68-gya1
16
vulnerability VCID-b1vz-1vqg-zff9
17
vulnerability VCID-b1we-n5jv-53dv
18
vulnerability VCID-b6xd-jq9k-cfbt
19
vulnerability VCID-bcwr-buk9-7qa2
20
vulnerability VCID-c41h-2jrt-23fz
21
vulnerability VCID-c5hg-us5r-77cq
22
vulnerability VCID-cshp-tets-gfbk
23
vulnerability VCID-cw49-sn3z-tfh7
24
vulnerability VCID-e45m-7wd6-xqhg
25
vulnerability VCID-e87f-mt58-3kfh
26
vulnerability VCID-ea1z-zanh-eyfg
27
vulnerability VCID-ec9e-yh13-yuae
28
vulnerability VCID-erhv-p6z6-4fgw
29
vulnerability VCID-eufn-wq9m-rua5
30
vulnerability VCID-fkdd-mfrw-r7gm
31
vulnerability VCID-gyxg-efc1-a3ee
32
vulnerability VCID-j5qs-dpjh-f3cs
33
vulnerability VCID-jwe9-fx8s-xbcc
34
vulnerability VCID-k8aa-1nb6-f3c3
35
vulnerability VCID-murd-k9xt-6bdk
36
vulnerability VCID-n3qa-tcg2-7fa9
37
vulnerability VCID-p74t-yceb-fyff
38
vulnerability VCID-qjfd-tzwn-jyfg
39
vulnerability VCID-r5wu-ff55-mqej
40
vulnerability VCID-ra6h-qzvf-6ygq
41
vulnerability VCID-sk6j-cy2t-a3d8
42
vulnerability VCID-ubrv-zj1d-7bft
43
vulnerability VCID-vj52-2nf1-huda
44
vulnerability VCID-x78p-6scf-bydj
45
vulnerability VCID-xkhj-f8k9-nkfb
46
vulnerability VCID-xutf-mndc-8yd7
47
vulnerability VCID-y48v-wx35-83h1
48
vulnerability VCID-y5s8-jma2-qbgw
49
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.0~rc2-2
aliases CVE-2013-7340
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m9dm-q682-3qcd
4
url VCID-p7sp-2r4k-ykca
vulnerability_id VCID-p7sp-2r4k-ykca
summary The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to trigger an unintended zero-size malloc and conduct buffer overflow attacks, and consequently execute arbitrary code, via a box size of 7.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9628
reference_id
reference_type
scores
0
value 0.01634
scoring_system epss
scoring_elements 0.8225
published_at 2026-06-04T12:55:00Z
1
value 0.01634
scoring_system epss
scoring_elements 0.82279
published_at 2026-06-05T12:55:00Z
2
value 0.01634
scoring_system epss
scoring_elements 0.8228
published_at 2026-06-06T12:55:00Z
3
value 0.01634
scoring_system epss
scoring_elements 0.82281
published_at 2026-06-07T12:55:00Z
4
value 0.01634
scoring_system epss
scoring_elements 0.82274
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9628
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9626
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9626
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9627
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9627
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9628
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9628
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9629
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9629
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9630
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9630
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775866
reference_id 775866
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775866
7
reference_url https://security.gentoo.org/glsa/201603-08
reference_id GLSA-201603-08
reference_type
scores
url https://security.gentoo.org/glsa/201603-08
fixed_packages
0
url pkg:deb/debian/vlc@2.0.3-5%2Bdeb7u2
purl pkg:deb/debian/vlc@2.0.3-5%2Bdeb7u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-2spt-pwjf-17bu
3
vulnerability VCID-2ymu-55hb-aydp
4
vulnerability VCID-39m5-1raf-aqdk
5
vulnerability VCID-3ae2-1yab-r3ep
6
vulnerability VCID-3maf-pscz-tqdu
7
vulnerability VCID-557y-hv8p-efhf
8
vulnerability VCID-5cy8-2w7f-c7h8
9
vulnerability VCID-5eeh-h7xt-vucx
10
vulnerability VCID-6a4e-han8-rfch
11
vulnerability VCID-6ehu-psdp-gbf1
12
vulnerability VCID-89yv-t37p-tuaq
13
vulnerability VCID-8xuy-uxfu-cuhc
14
vulnerability VCID-96d2-udsw-rke5
15
vulnerability VCID-9j2k-pmhh-wkdm
16
vulnerability VCID-9j7y-wej7-b7f7
17
vulnerability VCID-9yyg-uwfq-nqdb
18
vulnerability VCID-afg2-9tdw-eydu
19
vulnerability VCID-ar92-98jc-g3dj
20
vulnerability VCID-art7-mk68-gya1
21
vulnerability VCID-b1vz-1vqg-zff9
22
vulnerability VCID-b1we-n5jv-53dv
23
vulnerability VCID-b6xd-jq9k-cfbt
24
vulnerability VCID-bcwr-buk9-7qa2
25
vulnerability VCID-c41h-2jrt-23fz
26
vulnerability VCID-c5hg-us5r-77cq
27
vulnerability VCID-cshp-tets-gfbk
28
vulnerability VCID-cv12-qe9n-r7d4
29
vulnerability VCID-cw49-sn3z-tfh7
30
vulnerability VCID-e32y-8ns8-rycp
31
vulnerability VCID-e45m-7wd6-xqhg
32
vulnerability VCID-e87f-mt58-3kfh
33
vulnerability VCID-ea1z-zanh-eyfg
34
vulnerability VCID-ec9e-yh13-yuae
35
vulnerability VCID-erhv-p6z6-4fgw
36
vulnerability VCID-eufn-wq9m-rua5
37
vulnerability VCID-fkdd-mfrw-r7gm
38
vulnerability VCID-frqq-jvv5-ubct
39
vulnerability VCID-gyxg-efc1-a3ee
40
vulnerability VCID-hgqg-bw56-8qba
41
vulnerability VCID-hvup-7985-fyf6
42
vulnerability VCID-j5qs-dpjh-f3cs
43
vulnerability VCID-jwe9-fx8s-xbcc
44
vulnerability VCID-k8aa-1nb6-f3c3
45
vulnerability VCID-m9dm-q682-3qcd
46
vulnerability VCID-murd-k9xt-6bdk
47
vulnerability VCID-n3qa-tcg2-7fa9
48
vulnerability VCID-n9rf-vd4b-7kfr
49
vulnerability VCID-p74t-yceb-fyff
50
vulnerability VCID-p7sp-2r4k-ykca
51
vulnerability VCID-qjfd-tzwn-jyfg
52
vulnerability VCID-r5qk-fynh-dqcj
53
vulnerability VCID-r5wu-ff55-mqej
54
vulnerability VCID-ra6h-qzvf-6ygq
55
vulnerability VCID-sk6j-cy2t-a3d8
56
vulnerability VCID-ubrv-zj1d-7bft
57
vulnerability VCID-uf2q-g8wp-8fgd
58
vulnerability VCID-uy8a-4exj-93et
59
vulnerability VCID-vj52-2nf1-huda
60
vulnerability VCID-vk95-q3s4-mbef
61
vulnerability VCID-x78p-6scf-bydj
62
vulnerability VCID-xkhj-f8k9-nkfb
63
vulnerability VCID-xutf-mndc-8yd7
64
vulnerability VCID-y48v-wx35-83h1
65
vulnerability VCID-y5s8-jma2-qbgw
66
vulnerability VCID-y83r-eq34-ykbc
67
vulnerability VCID-z2g5-az73-rkb2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.0.3-5%252Bdeb7u2
1
url pkg:deb/debian/vlc@2.2.0~rc2-2
purl pkg:deb/debian/vlc@2.2.0~rc2-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-2ymu-55hb-aydp
3
vulnerability VCID-39m5-1raf-aqdk
4
vulnerability VCID-3ae2-1yab-r3ep
5
vulnerability VCID-3maf-pscz-tqdu
6
vulnerability VCID-557y-hv8p-efhf
7
vulnerability VCID-5eeh-h7xt-vucx
8
vulnerability VCID-6a4e-han8-rfch
9
vulnerability VCID-6ehu-psdp-gbf1
10
vulnerability VCID-89yv-t37p-tuaq
11
vulnerability VCID-96d2-udsw-rke5
12
vulnerability VCID-9j7y-wej7-b7f7
13
vulnerability VCID-9yyg-uwfq-nqdb
14
vulnerability VCID-ar92-98jc-g3dj
15
vulnerability VCID-art7-mk68-gya1
16
vulnerability VCID-b1vz-1vqg-zff9
17
vulnerability VCID-b1we-n5jv-53dv
18
vulnerability VCID-b6xd-jq9k-cfbt
19
vulnerability VCID-bcwr-buk9-7qa2
20
vulnerability VCID-c41h-2jrt-23fz
21
vulnerability VCID-c5hg-us5r-77cq
22
vulnerability VCID-cshp-tets-gfbk
23
vulnerability VCID-cw49-sn3z-tfh7
24
vulnerability VCID-e45m-7wd6-xqhg
25
vulnerability VCID-e87f-mt58-3kfh
26
vulnerability VCID-ea1z-zanh-eyfg
27
vulnerability VCID-ec9e-yh13-yuae
28
vulnerability VCID-erhv-p6z6-4fgw
29
vulnerability VCID-eufn-wq9m-rua5
30
vulnerability VCID-fkdd-mfrw-r7gm
31
vulnerability VCID-gyxg-efc1-a3ee
32
vulnerability VCID-j5qs-dpjh-f3cs
33
vulnerability VCID-jwe9-fx8s-xbcc
34
vulnerability VCID-k8aa-1nb6-f3c3
35
vulnerability VCID-murd-k9xt-6bdk
36
vulnerability VCID-n3qa-tcg2-7fa9
37
vulnerability VCID-p74t-yceb-fyff
38
vulnerability VCID-qjfd-tzwn-jyfg
39
vulnerability VCID-r5wu-ff55-mqej
40
vulnerability VCID-ra6h-qzvf-6ygq
41
vulnerability VCID-sk6j-cy2t-a3d8
42
vulnerability VCID-ubrv-zj1d-7bft
43
vulnerability VCID-vj52-2nf1-huda
44
vulnerability VCID-x78p-6scf-bydj
45
vulnerability VCID-xkhj-f8k9-nkfb
46
vulnerability VCID-xutf-mndc-8yd7
47
vulnerability VCID-y48v-wx35-83h1
48
vulnerability VCID-y5s8-jma2-qbgw
49
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.0~rc2-2
aliases CVE-2014-9628
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p7sp-2r4k-ykca
5
url VCID-r5qk-fynh-dqcj
vulnerability_id VCID-r5qk-fynh-dqcj
summary VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-6440
reference_id
reference_type
scores
0
value 0.067
scoring_system epss
scoring_elements 0.91413
published_at 2026-06-04T12:55:00Z
1
value 0.067
scoring_system epss
scoring_elements 0.91427
published_at 2026-06-05T12:55:00Z
2
value 0.067
scoring_system epss
scoring_elements 0.91428
published_at 2026-06-06T12:55:00Z
3
value 0.067
scoring_system epss
scoring_elements 0.91425
published_at 2026-06-07T12:55:00Z
4
value 0.067
scoring_system epss
scoring_elements 0.91422
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-6440
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6440
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6440
2
reference_url https://security.gentoo.org/glsa/201603-08
reference_id GLSA-201603-08
reference_type
scores
url https://security.gentoo.org/glsa/201603-08
fixed_packages
0
url pkg:deb/debian/vlc@2.2.0~rc2-2
purl pkg:deb/debian/vlc@2.2.0~rc2-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-2ymu-55hb-aydp
3
vulnerability VCID-39m5-1raf-aqdk
4
vulnerability VCID-3ae2-1yab-r3ep
5
vulnerability VCID-3maf-pscz-tqdu
6
vulnerability VCID-557y-hv8p-efhf
7
vulnerability VCID-5eeh-h7xt-vucx
8
vulnerability VCID-6a4e-han8-rfch
9
vulnerability VCID-6ehu-psdp-gbf1
10
vulnerability VCID-89yv-t37p-tuaq
11
vulnerability VCID-96d2-udsw-rke5
12
vulnerability VCID-9j7y-wej7-b7f7
13
vulnerability VCID-9yyg-uwfq-nqdb
14
vulnerability VCID-ar92-98jc-g3dj
15
vulnerability VCID-art7-mk68-gya1
16
vulnerability VCID-b1vz-1vqg-zff9
17
vulnerability VCID-b1we-n5jv-53dv
18
vulnerability VCID-b6xd-jq9k-cfbt
19
vulnerability VCID-bcwr-buk9-7qa2
20
vulnerability VCID-c41h-2jrt-23fz
21
vulnerability VCID-c5hg-us5r-77cq
22
vulnerability VCID-cshp-tets-gfbk
23
vulnerability VCID-cw49-sn3z-tfh7
24
vulnerability VCID-e45m-7wd6-xqhg
25
vulnerability VCID-e87f-mt58-3kfh
26
vulnerability VCID-ea1z-zanh-eyfg
27
vulnerability VCID-ec9e-yh13-yuae
28
vulnerability VCID-erhv-p6z6-4fgw
29
vulnerability VCID-eufn-wq9m-rua5
30
vulnerability VCID-fkdd-mfrw-r7gm
31
vulnerability VCID-gyxg-efc1-a3ee
32
vulnerability VCID-j5qs-dpjh-f3cs
33
vulnerability VCID-jwe9-fx8s-xbcc
34
vulnerability VCID-k8aa-1nb6-f3c3
35
vulnerability VCID-murd-k9xt-6bdk
36
vulnerability VCID-n3qa-tcg2-7fa9
37
vulnerability VCID-p74t-yceb-fyff
38
vulnerability VCID-qjfd-tzwn-jyfg
39
vulnerability VCID-r5wu-ff55-mqej
40
vulnerability VCID-ra6h-qzvf-6ygq
41
vulnerability VCID-sk6j-cy2t-a3d8
42
vulnerability VCID-ubrv-zj1d-7bft
43
vulnerability VCID-vj52-2nf1-huda
44
vulnerability VCID-x78p-6scf-bydj
45
vulnerability VCID-xkhj-f8k9-nkfb
46
vulnerability VCID-xutf-mndc-8yd7
47
vulnerability VCID-y48v-wx35-83h1
48
vulnerability VCID-y5s8-jma2-qbgw
49
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.0~rc2-2
aliases CVE-2014-6440
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r5qk-fynh-dqcj
6
url VCID-uf2q-g8wp-8fgd
vulnerability_id VCID-uf2q-g8wp-8fgd
summary The rtp_packetize_xiph_config function in modules/stream_out/rtpfmt.c in VideoLAN VLC media player before 2.1.6 uses a stack-allocation approach with a size determined by arbitrary input data, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted length value.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9630
reference_id
reference_type
scores
0
value 0.00398
scoring_system epss
scoring_elements 0.60939
published_at 2026-06-04T12:55:00Z
1
value 0.00398
scoring_system epss
scoring_elements 0.60987
published_at 2026-06-05T12:55:00Z
2
value 0.00398
scoring_system epss
scoring_elements 0.60995
published_at 2026-06-06T12:55:00Z
3
value 0.00398
scoring_system epss
scoring_elements 0.60984
published_at 2026-06-07T12:55:00Z
4
value 0.00398
scoring_system epss
scoring_elements 0.60967
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9630
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9626
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9626
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9627
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9627
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9628
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9628
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9629
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9629
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9630
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9630
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775866
reference_id 775866
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775866
7
reference_url https://security.gentoo.org/glsa/201603-08
reference_id GLSA-201603-08
reference_type
scores
url https://security.gentoo.org/glsa/201603-08
fixed_packages
0
url pkg:deb/debian/vlc@2.0.3-5%2Bdeb7u2
purl pkg:deb/debian/vlc@2.0.3-5%2Bdeb7u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-2spt-pwjf-17bu
3
vulnerability VCID-2ymu-55hb-aydp
4
vulnerability VCID-39m5-1raf-aqdk
5
vulnerability VCID-3ae2-1yab-r3ep
6
vulnerability VCID-3maf-pscz-tqdu
7
vulnerability VCID-557y-hv8p-efhf
8
vulnerability VCID-5cy8-2w7f-c7h8
9
vulnerability VCID-5eeh-h7xt-vucx
10
vulnerability VCID-6a4e-han8-rfch
11
vulnerability VCID-6ehu-psdp-gbf1
12
vulnerability VCID-89yv-t37p-tuaq
13
vulnerability VCID-8xuy-uxfu-cuhc
14
vulnerability VCID-96d2-udsw-rke5
15
vulnerability VCID-9j2k-pmhh-wkdm
16
vulnerability VCID-9j7y-wej7-b7f7
17
vulnerability VCID-9yyg-uwfq-nqdb
18
vulnerability VCID-afg2-9tdw-eydu
19
vulnerability VCID-ar92-98jc-g3dj
20
vulnerability VCID-art7-mk68-gya1
21
vulnerability VCID-b1vz-1vqg-zff9
22
vulnerability VCID-b1we-n5jv-53dv
23
vulnerability VCID-b6xd-jq9k-cfbt
24
vulnerability VCID-bcwr-buk9-7qa2
25
vulnerability VCID-c41h-2jrt-23fz
26
vulnerability VCID-c5hg-us5r-77cq
27
vulnerability VCID-cshp-tets-gfbk
28
vulnerability VCID-cv12-qe9n-r7d4
29
vulnerability VCID-cw49-sn3z-tfh7
30
vulnerability VCID-e32y-8ns8-rycp
31
vulnerability VCID-e45m-7wd6-xqhg
32
vulnerability VCID-e87f-mt58-3kfh
33
vulnerability VCID-ea1z-zanh-eyfg
34
vulnerability VCID-ec9e-yh13-yuae
35
vulnerability VCID-erhv-p6z6-4fgw
36
vulnerability VCID-eufn-wq9m-rua5
37
vulnerability VCID-fkdd-mfrw-r7gm
38
vulnerability VCID-frqq-jvv5-ubct
39
vulnerability VCID-gyxg-efc1-a3ee
40
vulnerability VCID-hgqg-bw56-8qba
41
vulnerability VCID-hvup-7985-fyf6
42
vulnerability VCID-j5qs-dpjh-f3cs
43
vulnerability VCID-jwe9-fx8s-xbcc
44
vulnerability VCID-k8aa-1nb6-f3c3
45
vulnerability VCID-m9dm-q682-3qcd
46
vulnerability VCID-murd-k9xt-6bdk
47
vulnerability VCID-n3qa-tcg2-7fa9
48
vulnerability VCID-n9rf-vd4b-7kfr
49
vulnerability VCID-p74t-yceb-fyff
50
vulnerability VCID-p7sp-2r4k-ykca
51
vulnerability VCID-qjfd-tzwn-jyfg
52
vulnerability VCID-r5qk-fynh-dqcj
53
vulnerability VCID-r5wu-ff55-mqej
54
vulnerability VCID-ra6h-qzvf-6ygq
55
vulnerability VCID-sk6j-cy2t-a3d8
56
vulnerability VCID-ubrv-zj1d-7bft
57
vulnerability VCID-uf2q-g8wp-8fgd
58
vulnerability VCID-uy8a-4exj-93et
59
vulnerability VCID-vj52-2nf1-huda
60
vulnerability VCID-vk95-q3s4-mbef
61
vulnerability VCID-x78p-6scf-bydj
62
vulnerability VCID-xkhj-f8k9-nkfb
63
vulnerability VCID-xutf-mndc-8yd7
64
vulnerability VCID-y48v-wx35-83h1
65
vulnerability VCID-y5s8-jma2-qbgw
66
vulnerability VCID-y83r-eq34-ykbc
67
vulnerability VCID-z2g5-az73-rkb2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.0.3-5%252Bdeb7u2
1
url pkg:deb/debian/vlc@2.2.0~rc2-2
purl pkg:deb/debian/vlc@2.2.0~rc2-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-2ymu-55hb-aydp
3
vulnerability VCID-39m5-1raf-aqdk
4
vulnerability VCID-3ae2-1yab-r3ep
5
vulnerability VCID-3maf-pscz-tqdu
6
vulnerability VCID-557y-hv8p-efhf
7
vulnerability VCID-5eeh-h7xt-vucx
8
vulnerability VCID-6a4e-han8-rfch
9
vulnerability VCID-6ehu-psdp-gbf1
10
vulnerability VCID-89yv-t37p-tuaq
11
vulnerability VCID-96d2-udsw-rke5
12
vulnerability VCID-9j7y-wej7-b7f7
13
vulnerability VCID-9yyg-uwfq-nqdb
14
vulnerability VCID-ar92-98jc-g3dj
15
vulnerability VCID-art7-mk68-gya1
16
vulnerability VCID-b1vz-1vqg-zff9
17
vulnerability VCID-b1we-n5jv-53dv
18
vulnerability VCID-b6xd-jq9k-cfbt
19
vulnerability VCID-bcwr-buk9-7qa2
20
vulnerability VCID-c41h-2jrt-23fz
21
vulnerability VCID-c5hg-us5r-77cq
22
vulnerability VCID-cshp-tets-gfbk
23
vulnerability VCID-cw49-sn3z-tfh7
24
vulnerability VCID-e45m-7wd6-xqhg
25
vulnerability VCID-e87f-mt58-3kfh
26
vulnerability VCID-ea1z-zanh-eyfg
27
vulnerability VCID-ec9e-yh13-yuae
28
vulnerability VCID-erhv-p6z6-4fgw
29
vulnerability VCID-eufn-wq9m-rua5
30
vulnerability VCID-fkdd-mfrw-r7gm
31
vulnerability VCID-gyxg-efc1-a3ee
32
vulnerability VCID-j5qs-dpjh-f3cs
33
vulnerability VCID-jwe9-fx8s-xbcc
34
vulnerability VCID-k8aa-1nb6-f3c3
35
vulnerability VCID-murd-k9xt-6bdk
36
vulnerability VCID-n3qa-tcg2-7fa9
37
vulnerability VCID-p74t-yceb-fyff
38
vulnerability VCID-qjfd-tzwn-jyfg
39
vulnerability VCID-r5wu-ff55-mqej
40
vulnerability VCID-ra6h-qzvf-6ygq
41
vulnerability VCID-sk6j-cy2t-a3d8
42
vulnerability VCID-ubrv-zj1d-7bft
43
vulnerability VCID-vj52-2nf1-huda
44
vulnerability VCID-x78p-6scf-bydj
45
vulnerability VCID-xkhj-f8k9-nkfb
46
vulnerability VCID-xutf-mndc-8yd7
47
vulnerability VCID-y48v-wx35-83h1
48
vulnerability VCID-y5s8-jma2-qbgw
49
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.0~rc2-2
aliases CVE-2014-9630
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uf2q-g8wp-8fgd
7
url VCID-uy8a-4exj-93et
vulnerability_id VCID-uy8a-4exj-93et
summary Integer overflow in the Encode function in modules/codec/schroedinger.c in VideoLAN VLC media player before 2.1.6 and 2.2.x before 2.2.1 allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted length value.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9629
reference_id
reference_type
scores
0
value 0.01498
scoring_system epss
scoring_elements 0.81456
published_at 2026-06-04T12:55:00Z
1
value 0.01498
scoring_system epss
scoring_elements 0.81483
published_at 2026-06-07T12:55:00Z
2
value 0.01498
scoring_system epss
scoring_elements 0.81486
published_at 2026-06-06T12:55:00Z
3
value 0.01498
scoring_system epss
scoring_elements 0.81478
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9629
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9626
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9626
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9627
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9627
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9628
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9628
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9629
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9629
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9630
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9630
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775866
reference_id 775866
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775866
7
reference_url https://security.gentoo.org/glsa/201603-08
reference_id GLSA-201603-08
reference_type
scores
url https://security.gentoo.org/glsa/201603-08
fixed_packages
0
url pkg:deb/debian/vlc@2.0.3-5%2Bdeb7u2
purl pkg:deb/debian/vlc@2.0.3-5%2Bdeb7u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-2spt-pwjf-17bu
3
vulnerability VCID-2ymu-55hb-aydp
4
vulnerability VCID-39m5-1raf-aqdk
5
vulnerability VCID-3ae2-1yab-r3ep
6
vulnerability VCID-3maf-pscz-tqdu
7
vulnerability VCID-557y-hv8p-efhf
8
vulnerability VCID-5cy8-2w7f-c7h8
9
vulnerability VCID-5eeh-h7xt-vucx
10
vulnerability VCID-6a4e-han8-rfch
11
vulnerability VCID-6ehu-psdp-gbf1
12
vulnerability VCID-89yv-t37p-tuaq
13
vulnerability VCID-8xuy-uxfu-cuhc
14
vulnerability VCID-96d2-udsw-rke5
15
vulnerability VCID-9j2k-pmhh-wkdm
16
vulnerability VCID-9j7y-wej7-b7f7
17
vulnerability VCID-9yyg-uwfq-nqdb
18
vulnerability VCID-afg2-9tdw-eydu
19
vulnerability VCID-ar92-98jc-g3dj
20
vulnerability VCID-art7-mk68-gya1
21
vulnerability VCID-b1vz-1vqg-zff9
22
vulnerability VCID-b1we-n5jv-53dv
23
vulnerability VCID-b6xd-jq9k-cfbt
24
vulnerability VCID-bcwr-buk9-7qa2
25
vulnerability VCID-c41h-2jrt-23fz
26
vulnerability VCID-c5hg-us5r-77cq
27
vulnerability VCID-cshp-tets-gfbk
28
vulnerability VCID-cv12-qe9n-r7d4
29
vulnerability VCID-cw49-sn3z-tfh7
30
vulnerability VCID-e32y-8ns8-rycp
31
vulnerability VCID-e45m-7wd6-xqhg
32
vulnerability VCID-e87f-mt58-3kfh
33
vulnerability VCID-ea1z-zanh-eyfg
34
vulnerability VCID-ec9e-yh13-yuae
35
vulnerability VCID-erhv-p6z6-4fgw
36
vulnerability VCID-eufn-wq9m-rua5
37
vulnerability VCID-fkdd-mfrw-r7gm
38
vulnerability VCID-frqq-jvv5-ubct
39
vulnerability VCID-gyxg-efc1-a3ee
40
vulnerability VCID-hgqg-bw56-8qba
41
vulnerability VCID-hvup-7985-fyf6
42
vulnerability VCID-j5qs-dpjh-f3cs
43
vulnerability VCID-jwe9-fx8s-xbcc
44
vulnerability VCID-k8aa-1nb6-f3c3
45
vulnerability VCID-m9dm-q682-3qcd
46
vulnerability VCID-murd-k9xt-6bdk
47
vulnerability VCID-n3qa-tcg2-7fa9
48
vulnerability VCID-n9rf-vd4b-7kfr
49
vulnerability VCID-p74t-yceb-fyff
50
vulnerability VCID-p7sp-2r4k-ykca
51
vulnerability VCID-qjfd-tzwn-jyfg
52
vulnerability VCID-r5qk-fynh-dqcj
53
vulnerability VCID-r5wu-ff55-mqej
54
vulnerability VCID-ra6h-qzvf-6ygq
55
vulnerability VCID-sk6j-cy2t-a3d8
56
vulnerability VCID-ubrv-zj1d-7bft
57
vulnerability VCID-uf2q-g8wp-8fgd
58
vulnerability VCID-uy8a-4exj-93et
59
vulnerability VCID-vj52-2nf1-huda
60
vulnerability VCID-vk95-q3s4-mbef
61
vulnerability VCID-x78p-6scf-bydj
62
vulnerability VCID-xkhj-f8k9-nkfb
63
vulnerability VCID-xutf-mndc-8yd7
64
vulnerability VCID-y48v-wx35-83h1
65
vulnerability VCID-y5s8-jma2-qbgw
66
vulnerability VCID-y83r-eq34-ykbc
67
vulnerability VCID-z2g5-az73-rkb2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.0.3-5%252Bdeb7u2
1
url pkg:deb/debian/vlc@2.2.0~rc2-2
purl pkg:deb/debian/vlc@2.2.0~rc2-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cm1-sqxz-h7d2
1
vulnerability VCID-2gbt-e8k9-bfe3
2
vulnerability VCID-2ymu-55hb-aydp
3
vulnerability VCID-39m5-1raf-aqdk
4
vulnerability VCID-3ae2-1yab-r3ep
5
vulnerability VCID-3maf-pscz-tqdu
6
vulnerability VCID-557y-hv8p-efhf
7
vulnerability VCID-5eeh-h7xt-vucx
8
vulnerability VCID-6a4e-han8-rfch
9
vulnerability VCID-6ehu-psdp-gbf1
10
vulnerability VCID-89yv-t37p-tuaq
11
vulnerability VCID-96d2-udsw-rke5
12
vulnerability VCID-9j7y-wej7-b7f7
13
vulnerability VCID-9yyg-uwfq-nqdb
14
vulnerability VCID-ar92-98jc-g3dj
15
vulnerability VCID-art7-mk68-gya1
16
vulnerability VCID-b1vz-1vqg-zff9
17
vulnerability VCID-b1we-n5jv-53dv
18
vulnerability VCID-b6xd-jq9k-cfbt
19
vulnerability VCID-bcwr-buk9-7qa2
20
vulnerability VCID-c41h-2jrt-23fz
21
vulnerability VCID-c5hg-us5r-77cq
22
vulnerability VCID-cshp-tets-gfbk
23
vulnerability VCID-cw49-sn3z-tfh7
24
vulnerability VCID-e45m-7wd6-xqhg
25
vulnerability VCID-e87f-mt58-3kfh
26
vulnerability VCID-ea1z-zanh-eyfg
27
vulnerability VCID-ec9e-yh13-yuae
28
vulnerability VCID-erhv-p6z6-4fgw
29
vulnerability VCID-eufn-wq9m-rua5
30
vulnerability VCID-fkdd-mfrw-r7gm
31
vulnerability VCID-gyxg-efc1-a3ee
32
vulnerability VCID-j5qs-dpjh-f3cs
33
vulnerability VCID-jwe9-fx8s-xbcc
34
vulnerability VCID-k8aa-1nb6-f3c3
35
vulnerability VCID-murd-k9xt-6bdk
36
vulnerability VCID-n3qa-tcg2-7fa9
37
vulnerability VCID-p74t-yceb-fyff
38
vulnerability VCID-qjfd-tzwn-jyfg
39
vulnerability VCID-r5wu-ff55-mqej
40
vulnerability VCID-ra6h-qzvf-6ygq
41
vulnerability VCID-sk6j-cy2t-a3d8
42
vulnerability VCID-ubrv-zj1d-7bft
43
vulnerability VCID-vj52-2nf1-huda
44
vulnerability VCID-x78p-6scf-bydj
45
vulnerability VCID-xkhj-f8k9-nkfb
46
vulnerability VCID-xutf-mndc-8yd7
47
vulnerability VCID-y48v-wx35-83h1
48
vulnerability VCID-y5s8-jma2-qbgw
49
vulnerability VCID-y83r-eq34-ykbc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.0~rc2-2
aliases CVE-2014-9629
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uy8a-4exj-93et
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@2.2.0~rc2-2