Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/icu@3.6-2etch3
Typedeb
Namespacedebian
Nameicu
Version3.6-2etch3
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version72.1-3+deb12u1
Latest_non_vulnerable_version72.1-3+deb12u1
Affected_by_vulnerabilities
0
url VCID-1937-rk84-qydq
vulnerability_id VCID-1937-rk84-qydq
summary Use-after-free vulnerability in International Components for Unicode (ICU), as used in Google Chrome before 30.0.1599.66 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2924.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2924.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-2924
reference_id
reference_type
scores
0
value 0.00672
scoring_system epss
scoring_elements 0.71785
published_at 2026-06-04T12:55:00Z
1
value 0.00672
scoring_system epss
scoring_elements 0.71824
published_at 2026-06-05T12:55:00Z
2
value 0.00672
scoring_system epss
scoring_elements 0.7183
published_at 2026-06-06T12:55:00Z
3
value 0.00672
scoring_system epss
scoring_elements 0.71807
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-2924
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0900
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0900
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2906
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2906
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2907
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2907
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2908
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2908
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2909
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2909
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2910
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2910
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2911
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2912
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2913
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2913
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2915
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2915
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2916
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2916
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2917
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2917
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2918
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2918
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2919
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2919
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2920
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2920
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2921
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2921
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2922
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2922
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2923
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2923
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2924
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2925
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2925
22
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2926
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2926
23
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2927
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2927
24
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2928
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2928
25
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1014886
reference_id 1014886
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1014886
26
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726477
reference_id 726477
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726477
27
reference_url https://security.gentoo.org/glsa/201402-14
reference_id GLSA-201402-14
reference_type
scores
url https://security.gentoo.org/glsa/201402-14
28
reference_url https://usn.ubuntu.com/1989-1/
reference_id USN-1989-1
reference_type
scores
url https://usn.ubuntu.com/1989-1/
fixed_packages
0
url pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
purl pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-excs-dj44-yfby
12
vulnerability VCID-f3kd-641n-17ch
13
vulnerability VCID-f3vg-25ur-57a4
14
vulnerability VCID-f7v8-vz82-6ucj
15
vulnerability VCID-fbng-2ww3-6bdu
16
vulnerability VCID-fmhx-7a3k-ffdx
17
vulnerability VCID-hkbb-bc99-yqdd
18
vulnerability VCID-k1bn-aprc-m3ht
19
vulnerability VCID-kauc-686u-jqeh
20
vulnerability VCID-qwzq-dmn1-j7fy
21
vulnerability VCID-rz8q-v7bh-9fe1
22
vulnerability VCID-scv7-4fwv-vyek
23
vulnerability VCID-un3w-2ee4-jbcy
24
vulnerability VCID-wpkr-mbq4-ekg5
25
vulnerability VCID-wsen-t4x7-wuhc
26
vulnerability VCID-xdhx-y4jj-xfeu
27
vulnerability VCID-yhgb-pmpp-9uc2
28
vulnerability VCID-yzqr-kpjj-akgj
29
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.8.1.1-12%252Bdeb7u3
1
url pkg:deb/debian/icu@52.1-8
purl pkg:deb/debian/icu@52.1-8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8
aliases CVE-2013-2924
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1937-rk84-qydq
1
url VCID-3hng-5n5z-7faw
vulnerability_id VCID-3hng-5n5z-7faw
summary Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4844.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4844.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4844
reference_id
reference_type
scores
0
value 0.11054
scoring_system epss
scoring_elements 0.93584
published_at 2026-06-04T12:55:00Z
1
value 0.11054
scoring_system epss
scoring_elements 0.93594
published_at 2026-06-05T12:55:00Z
2
value 0.11054
scoring_system epss
scoring_elements 0.93595
published_at 2026-06-06T12:55:00Z
3
value 0.11054
scoring_system epss
scoring_elements 0.93593
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4844
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9911
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4734
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4734
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4803
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4803
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4805
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4805
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4806
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4806
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4835
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4835
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4840
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4840
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4842
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4842
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4843
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4843
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4860
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4860
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4872
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4872
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4881
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4881
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4882
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4882
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4883
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4883
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4893
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4893
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4903
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4903
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4911
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0402
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0402
22
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0448
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0448
23
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0466
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0466
24
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0483
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0483
25
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494
26
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6293
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6293
27
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7415
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7415
28
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1273318
reference_id 1273318
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1273318
29
reference_url https://security.gentoo.org/glsa/201603-11
reference_id GLSA-201603-11
reference_type
scores
url https://security.gentoo.org/glsa/201603-11
30
reference_url https://security.gentoo.org/glsa/201603-14
reference_id GLSA-201603-14
reference_type
scores
url https://security.gentoo.org/glsa/201603-14
31
reference_url https://access.redhat.com/errata/RHSA-2015:1919
reference_id RHSA-2015:1919
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1919
32
reference_url https://access.redhat.com/errata/RHSA-2015:1920
reference_id RHSA-2015:1920
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1920
33
reference_url https://access.redhat.com/errata/RHSA-2015:1921
reference_id RHSA-2015:1921
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1921
34
reference_url https://access.redhat.com/errata/RHSA-2015:1926
reference_id RHSA-2015:1926
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1926
35
reference_url https://access.redhat.com/errata/RHSA-2015:1927
reference_id RHSA-2015:1927
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1927
36
reference_url https://access.redhat.com/errata/RHSA-2015:1928
reference_id RHSA-2015:1928
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1928
37
reference_url https://access.redhat.com/errata/RHSA-2015:2086
reference_id RHSA-2015:2086
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2086
38
reference_url https://access.redhat.com/errata/RHSA-2015:2506
reference_id RHSA-2015:2506
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2506
39
reference_url https://access.redhat.com/errata/RHSA-2015:2507
reference_id RHSA-2015:2507
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2507
40
reference_url https://access.redhat.com/errata/RHSA-2015:2508
reference_id RHSA-2015:2508
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2508
41
reference_url https://access.redhat.com/errata/RHSA-2015:2509
reference_id RHSA-2015:2509
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2509
42
reference_url https://access.redhat.com/errata/RHSA-2015:2518
reference_id RHSA-2015:2518
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2518
43
reference_url https://access.redhat.com/errata/RHSA-2016:1430
reference_id RHSA-2016:1430
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1430
44
reference_url https://usn.ubuntu.com/2784-1/
reference_id USN-2784-1
reference_type
scores
url https://usn.ubuntu.com/2784-1/
45
reference_url https://usn.ubuntu.com/2827-1/
reference_id USN-2827-1
reference_type
scores
url https://usn.ubuntu.com/2827-1/
46
reference_url https://usn.ubuntu.com/3227-1/
reference_id USN-3227-1
reference_type
scores
url https://usn.ubuntu.com/3227-1/
fixed_packages
0
url pkg:deb/debian/icu@52.1-8%2Bdeb8u7
purl pkg:deb/debian/icu@52.1-8%2Bdeb8u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8%252Bdeb8u7
1
url pkg:deb/debian/icu@57.1-6%2Bdeb9u4
purl pkg:deb/debian/icu@57.1-6%2Bdeb9u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-9ubw-4yby-v3bp
2
vulnerability VCID-f3vg-25ur-57a4
3
vulnerability VCID-f7v8-vz82-6ucj
4
vulnerability VCID-hkbb-bc99-yqdd
5
vulnerability VCID-un3w-2ee4-jbcy
6
vulnerability VCID-xdhx-y4jj-xfeu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@57.1-6%252Bdeb9u4
aliases CVE-2015-4844
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3hng-5n5z-7faw
2
url VCID-3yjj-bp6d-tkab
vulnerability_id VCID-3yjj-bp6d-tkab
summary Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font processing errors" in the International Components for Unicode (ICU) Layout Engine before 51.2.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2419.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2419.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-2419
reference_id
reference_type
scores
0
value 0.12809
scoring_system epss
scoring_elements 0.94152
published_at 2026-06-04T12:55:00Z
1
value 0.12809
scoring_system epss
scoring_elements 0.9416
published_at 2026-06-05T12:55:00Z
2
value 0.12809
scoring_system epss
scoring_elements 0.94159
published_at 2026-06-06T12:55:00Z
3
value 0.12809
scoring_system epss
scoring_elements 0.94161
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-2419
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=952656
reference_id 952656
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=952656
13
reference_url https://security.gentoo.org/glsa/201401-30
reference_id GLSA-201401-30
reference_type
scores
url https://security.gentoo.org/glsa/201401-30
14
reference_url https://security.gentoo.org/glsa/201406-32
reference_id GLSA-201406-32
reference_type
scores
url https://security.gentoo.org/glsa/201406-32
15
reference_url https://access.redhat.com/errata/RHSA-2013:0751
reference_id RHSA-2013:0751
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0751
16
reference_url https://access.redhat.com/errata/RHSA-2013:0752
reference_id RHSA-2013:0752
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0752
17
reference_url https://access.redhat.com/errata/RHSA-2013:0757
reference_id RHSA-2013:0757
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0757
18
reference_url https://access.redhat.com/errata/RHSA-2013:0758
reference_id RHSA-2013:0758
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0758
19
reference_url https://access.redhat.com/errata/RHSA-2013:0770
reference_id RHSA-2013:0770
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0770
20
reference_url https://access.redhat.com/errata/RHSA-2013:0822
reference_id RHSA-2013:0822
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0822
21
reference_url https://access.redhat.com/errata/RHSA-2013:0823
reference_id RHSA-2013:0823
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0823
22
reference_url https://access.redhat.com/errata/RHSA-2013:0855
reference_id RHSA-2013:0855
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0855
23
reference_url https://access.redhat.com/errata/RHSA-2013:1455
reference_id RHSA-2013:1455
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1455
24
reference_url https://access.redhat.com/errata/RHSA-2013:1456
reference_id RHSA-2013:1456
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1456
25
reference_url https://usn.ubuntu.com/1806-1/
reference_id USN-1806-1
reference_type
scores
url https://usn.ubuntu.com/1806-1/
26
reference_url https://usn.ubuntu.com/1819-1/
reference_id USN-1819-1
reference_type
scores
url https://usn.ubuntu.com/1819-1/
27
reference_url https://usn.ubuntu.com/2522-1/
reference_id USN-2522-1
reference_type
scores
url https://usn.ubuntu.com/2522-1/
28
reference_url https://usn.ubuntu.com/2522-3/
reference_id USN-2522-3
reference_type
scores
url https://usn.ubuntu.com/2522-3/
fixed_packages
0
url pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
purl pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-excs-dj44-yfby
12
vulnerability VCID-f3kd-641n-17ch
13
vulnerability VCID-f3vg-25ur-57a4
14
vulnerability VCID-f7v8-vz82-6ucj
15
vulnerability VCID-fbng-2ww3-6bdu
16
vulnerability VCID-fmhx-7a3k-ffdx
17
vulnerability VCID-hkbb-bc99-yqdd
18
vulnerability VCID-k1bn-aprc-m3ht
19
vulnerability VCID-kauc-686u-jqeh
20
vulnerability VCID-qwzq-dmn1-j7fy
21
vulnerability VCID-rz8q-v7bh-9fe1
22
vulnerability VCID-scv7-4fwv-vyek
23
vulnerability VCID-un3w-2ee4-jbcy
24
vulnerability VCID-wpkr-mbq4-ekg5
25
vulnerability VCID-wsen-t4x7-wuhc
26
vulnerability VCID-xdhx-y4jj-xfeu
27
vulnerability VCID-yhgb-pmpp-9uc2
28
vulnerability VCID-yzqr-kpjj-akgj
29
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.8.1.1-12%252Bdeb7u3
1
url pkg:deb/debian/icu@52.1-8
purl pkg:deb/debian/icu@52.1-8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8
aliases CVE-2013-2419
risk_score 0.2
exploitability 2.0
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3yjj-bp6d-tkab
3
url VCID-562t-my7q-fkhk
vulnerability_id VCID-562t-my7q-fkhk
summary The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values without ensuring that they can be represented in a 24-bit field, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted string, a related issue to CVE-2014-7923.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9654.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9654.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9654
reference_id
reference_type
scores
0
value 0.01671
scoring_system epss
scoring_elements 0.82463
published_at 2026-06-04T12:55:00Z
1
value 0.01671
scoring_system epss
scoring_elements 0.82493
published_at 2026-06-05T12:55:00Z
2
value 0.01671
scoring_system epss
scoring_elements 0.82491
published_at 2026-06-06T12:55:00Z
3
value 0.01671
scoring_system epss
scoring_elements 0.82489
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9654
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1190129
reference_id 1190129
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1190129
13
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776719
reference_id 776719
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776719
14
reference_url https://security.gentoo.org/glsa/201503-06
reference_id GLSA-201503-06
reference_type
scores
url https://security.gentoo.org/glsa/201503-06
15
reference_url https://access.redhat.com/errata/RHSA-2015:0093
reference_id RHSA-2015:0093
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0093
16
reference_url https://usn.ubuntu.com/2522-1/
reference_id USN-2522-1
reference_type
scores
url https://usn.ubuntu.com/2522-1/
fixed_packages
0
url pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
purl pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-excs-dj44-yfby
12
vulnerability VCID-f3kd-641n-17ch
13
vulnerability VCID-f3vg-25ur-57a4
14
vulnerability VCID-f7v8-vz82-6ucj
15
vulnerability VCID-fbng-2ww3-6bdu
16
vulnerability VCID-fmhx-7a3k-ffdx
17
vulnerability VCID-hkbb-bc99-yqdd
18
vulnerability VCID-k1bn-aprc-m3ht
19
vulnerability VCID-kauc-686u-jqeh
20
vulnerability VCID-qwzq-dmn1-j7fy
21
vulnerability VCID-rz8q-v7bh-9fe1
22
vulnerability VCID-scv7-4fwv-vyek
23
vulnerability VCID-un3w-2ee4-jbcy
24
vulnerability VCID-wpkr-mbq4-ekg5
25
vulnerability VCID-wsen-t4x7-wuhc
26
vulnerability VCID-xdhx-y4jj-xfeu
27
vulnerability VCID-yhgb-pmpp-9uc2
28
vulnerability VCID-yzqr-kpjj-akgj
29
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.8.1.1-12%252Bdeb7u3
1
url pkg:deb/debian/icu@52.1-8
purl pkg:deb/debian/icu@52.1-8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8
aliases CVE-2014-9654
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-562t-my7q-fkhk
4
url VCID-5er9-z3hf-z7he
vulnerability_id VCID-5er9-z3hf-z7he
summary libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4770.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4770.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2007-4770
reference_id
reference_type
scores
0
value 0.0367
scoring_system epss
scoring_elements 0.88107
published_at 2026-06-04T12:55:00Z
1
value 0.0367
scoring_system epss
scoring_elements 0.88128
published_at 2026-06-05T12:55:00Z
2
value 0.0367
scoring_system epss
scoring_elements 0.88131
published_at 2026-06-06T12:55:00Z
3
value 0.0367
scoring_system epss
scoring_elements 0.8813
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2007-4770
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4770
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4770
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=429023
reference_id 429023
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=429023
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463688
reference_id 463688
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463688
5
reference_url https://security.gentoo.org/glsa/200803-20
reference_id GLSA-200803-20
reference_type
scores
url https://security.gentoo.org/glsa/200803-20
6
reference_url https://security.gentoo.org/glsa/200805-16
reference_id GLSA-200805-16
reference_type
scores
url https://security.gentoo.org/glsa/200805-16
7
reference_url https://access.redhat.com/errata/RHSA-2008:0090
reference_id RHSA-2008:0090
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0090
8
reference_url https://usn.ubuntu.com/591-1/
reference_id USN-591-1
reference_type
scores
url https://usn.ubuntu.com/591-1/
fixed_packages
0
url pkg:deb/debian/icu@3.8.1-3%2Blenny3
purl pkg:deb/debian/icu@3.8.1-3%2Blenny3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8mt7-9hjj-fbfg
8
vulnerability VCID-8ucv-hrcz-uqau
9
vulnerability VCID-9ubw-4yby-v3bp
10
vulnerability VCID-aykx-vyhu-7yfr
11
vulnerability VCID-bkbn-dxg2-dqfk
12
vulnerability VCID-bvhc-8fge-9uez
13
vulnerability VCID-excs-dj44-yfby
14
vulnerability VCID-exg8-f6tj-k7fp
15
vulnerability VCID-f3kd-641n-17ch
16
vulnerability VCID-f3vg-25ur-57a4
17
vulnerability VCID-f7v8-vz82-6ucj
18
vulnerability VCID-fbng-2ww3-6bdu
19
vulnerability VCID-fmhx-7a3k-ffdx
20
vulnerability VCID-hkbb-bc99-yqdd
21
vulnerability VCID-k1bn-aprc-m3ht
22
vulnerability VCID-kauc-686u-jqeh
23
vulnerability VCID-qwzq-dmn1-j7fy
24
vulnerability VCID-rz8q-v7bh-9fe1
25
vulnerability VCID-scv7-4fwv-vyek
26
vulnerability VCID-trma-c9p3-uub9
27
vulnerability VCID-un3w-2ee4-jbcy
28
vulnerability VCID-wpkr-mbq4-ekg5
29
vulnerability VCID-wsen-t4x7-wuhc
30
vulnerability VCID-xdhx-y4jj-xfeu
31
vulnerability VCID-yhgb-pmpp-9uc2
32
vulnerability VCID-yzqr-kpjj-akgj
33
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@3.8.1-3%252Blenny3
aliases CVE-2007-4770
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5er9-z3hf-z7he
5
url VCID-6grx-g6uw-yybd
vulnerability_id VCID-6grx-g6uw-yybd
summary Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0494.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0494.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-0494
reference_id
reference_type
scores
0
value 0.05634
scoring_system epss
scoring_elements 0.90506
published_at 2026-06-04T12:55:00Z
1
value 0.05634
scoring_system epss
scoring_elements 0.90521
published_at 2026-06-05T12:55:00Z
2
value 0.05634
scoring_system epss
scoring_elements 0.90522
published_at 2026-06-06T12:55:00Z
3
value 0.05634
scoring_system epss
scoring_elements 0.9052
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-0494
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9911
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4734
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4734
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4803
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4803
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4805
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4805
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4806
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4806
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4835
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4835
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4842
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4842
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4843
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4843
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4860
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4860
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4872
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4872
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4881
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4881
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4882
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4882
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4883
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4883
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4893
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4893
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4903
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4903
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4911
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0402
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0402
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0448
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0448
22
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0466
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0466
23
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0483
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0483
24
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494
25
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6293
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6293
26
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7415
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7415
27
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 10
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:C/I:C/A:C
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
28
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1298906
reference_id 1298906
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1298906
29
reference_url https://security.gentoo.org/glsa/201603-14
reference_id GLSA-201603-14
reference_type
scores
url https://security.gentoo.org/glsa/201603-14
30
reference_url https://security.gentoo.org/glsa/201610-08
reference_id GLSA-201610-08
reference_type
scores
url https://security.gentoo.org/glsa/201610-08
31
reference_url https://access.redhat.com/errata/RHSA-2016:0049
reference_id RHSA-2016:0049
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0049
32
reference_url https://access.redhat.com/errata/RHSA-2016:0050
reference_id RHSA-2016:0050
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0050
33
reference_url https://access.redhat.com/errata/RHSA-2016:0053
reference_id RHSA-2016:0053
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0053
34
reference_url https://access.redhat.com/errata/RHSA-2016:0054
reference_id RHSA-2016:0054
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0054
35
reference_url https://access.redhat.com/errata/RHSA-2016:0055
reference_id RHSA-2016:0055
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0055
36
reference_url https://access.redhat.com/errata/RHSA-2016:0056
reference_id RHSA-2016:0056
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0056
37
reference_url https://access.redhat.com/errata/RHSA-2016:0057
reference_id RHSA-2016:0057
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0057
38
reference_url https://access.redhat.com/errata/RHSA-2016:0067
reference_id RHSA-2016:0067
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0067
39
reference_url https://access.redhat.com/errata/RHSA-2016:0098
reference_id RHSA-2016:0098
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0098
40
reference_url https://access.redhat.com/errata/RHSA-2016:0099
reference_id RHSA-2016:0099
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0099
41
reference_url https://access.redhat.com/errata/RHSA-2016:0100
reference_id RHSA-2016:0100
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0100
42
reference_url https://access.redhat.com/errata/RHSA-2016:0101
reference_id RHSA-2016:0101
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0101
43
reference_url https://access.redhat.com/errata/RHSA-2016:1430
reference_id RHSA-2016:1430
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1430
44
reference_url https://usn.ubuntu.com/2884-1/
reference_id USN-2884-1
reference_type
scores
url https://usn.ubuntu.com/2884-1/
45
reference_url https://usn.ubuntu.com/2885-1/
reference_id USN-2885-1
reference_type
scores
url https://usn.ubuntu.com/2885-1/
46
reference_url https://usn.ubuntu.com/3227-1/
reference_id USN-3227-1
reference_type
scores
url https://usn.ubuntu.com/3227-1/
fixed_packages
0
url pkg:deb/debian/icu@52.1-8%2Bdeb8u7
purl pkg:deb/debian/icu@52.1-8%2Bdeb8u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8%252Bdeb8u7
1
url pkg:deb/debian/icu@57.1-6%2Bdeb9u4
purl pkg:deb/debian/icu@57.1-6%2Bdeb9u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-9ubw-4yby-v3bp
2
vulnerability VCID-f3vg-25ur-57a4
3
vulnerability VCID-f7v8-vz82-6ucj
4
vulnerability VCID-hkbb-bc99-yqdd
5
vulnerability VCID-un3w-2ee4-jbcy
6
vulnerability VCID-xdhx-y4jj-xfeu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@57.1-6%252Bdeb9u4
aliases CVE-2016-0494
risk_score 2.5
exploitability 0.5
weighted_severity 5.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6grx-g6uw-yybd
6
url VCID-6q8q-9q3y-abhc
vulnerability_id VCID-6q8q-9q3y-abhc
summary International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_moveIndex32* function.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7868.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7868.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-7868
reference_id
reference_type
scores
0
value 0.0104
scoring_system epss
scoring_elements 0.77799
published_at 2026-06-07T12:55:00Z
1
value 0.0104
scoring_system epss
scoring_elements 0.77775
published_at 2026-06-04T12:55:00Z
2
value 0.0104
scoring_system epss
scoring_elements 0.77802
published_at 2026-06-05T12:55:00Z
3
value 0.0104
scoring_system epss
scoring_elements 0.77808
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-7868
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7867
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7867
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7868
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7868
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1444098
reference_id 1444098
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1444098
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860314
reference_id 860314
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860314
7
reference_url https://security.gentoo.org/glsa/201710-03
reference_id GLSA-201710-03
reference_type
scores
url https://security.gentoo.org/glsa/201710-03
8
reference_url https://usn.ubuntu.com/3274-1/
reference_id USN-3274-1
reference_type
scores
url https://usn.ubuntu.com/3274-1/
9
reference_url https://usn.ubuntu.com/3274-2/
reference_id USN-3274-2
reference_type
scores
url https://usn.ubuntu.com/3274-2/
fixed_packages
0
url pkg:deb/debian/icu@52.1-8%2Bdeb8u7
purl pkg:deb/debian/icu@52.1-8%2Bdeb8u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8%252Bdeb8u7
1
url pkg:deb/debian/icu@57.1-6%2Bdeb9u4
purl pkg:deb/debian/icu@57.1-6%2Bdeb9u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-9ubw-4yby-v3bp
2
vulnerability VCID-f3vg-25ur-57a4
3
vulnerability VCID-f7v8-vz82-6ucj
4
vulnerability VCID-hkbb-bc99-yqdd
5
vulnerability VCID-un3w-2ee4-jbcy
6
vulnerability VCID-xdhx-y4jj-xfeu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@57.1-6%252Bdeb9u4
aliases CVE-2017-7868
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6q8q-9q3y-abhc
7
url VCID-7fz2-29gm-eufm
vulnerability_id VCID-7fz2-29gm-eufm
summary An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10531.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10531.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-10531
reference_id
reference_type
scores
0
value 0.0079
scoring_system epss
scoring_elements 0.74237
published_at 2026-06-04T12:55:00Z
1
value 0.0079
scoring_system epss
scoring_elements 0.7427
published_at 2026-06-05T12:55:00Z
2
value 0.0079
scoring_system epss
scoring_elements 0.74275
published_at 2026-06-06T12:55:00Z
3
value 0.0079
scoring_system epss
scoring_elements 0.74261
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-10531
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10531
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10531
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1807349
reference_id 1807349
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1807349
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953747
reference_id 953747
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953747
6
reference_url https://security.gentoo.org/glsa/202003-15
reference_id GLSA-202003-15
reference_type
scores
url https://security.gentoo.org/glsa/202003-15
7
reference_url https://access.redhat.com/errata/RHSA-2020:0738
reference_id RHSA-2020:0738
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:0738
8
reference_url https://access.redhat.com/errata/RHSA-2020:0896
reference_id RHSA-2020:0896
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:0896
9
reference_url https://access.redhat.com/errata/RHSA-2020:0897
reference_id RHSA-2020:0897
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:0897
10
reference_url https://access.redhat.com/errata/RHSA-2020:0901
reference_id RHSA-2020:0901
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:0901
11
reference_url https://access.redhat.com/errata/RHSA-2020:0902
reference_id RHSA-2020:0902
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:0902
12
reference_url https://access.redhat.com/errata/RHSA-2020:1293
reference_id RHSA-2020:1293
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1293
13
reference_url https://access.redhat.com/errata/RHSA-2020:1317
reference_id RHSA-2020:1317
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1317
14
reference_url https://access.redhat.com/errata/RHSA-2020:1343
reference_id RHSA-2020:1343
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1343
15
reference_url https://access.redhat.com/errata/RHSA-2020:2895
reference_id RHSA-2020:2895
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2895
16
reference_url https://access.redhat.com/errata/RHSA-2020:3084
reference_id RHSA-2020:3084
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:3084
17
reference_url https://usn.ubuntu.com/4305-1/
reference_id USN-4305-1
reference_type
scores
url https://usn.ubuntu.com/4305-1/
fixed_packages
0
url pkg:deb/debian/icu@57.1-6%2Bdeb9u4
purl pkg:deb/debian/icu@57.1-6%2Bdeb9u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-9ubw-4yby-v3bp
2
vulnerability VCID-f3vg-25ur-57a4
3
vulnerability VCID-f7v8-vz82-6ucj
4
vulnerability VCID-hkbb-bc99-yqdd
5
vulnerability VCID-un3w-2ee4-jbcy
6
vulnerability VCID-xdhx-y4jj-xfeu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@57.1-6%252Bdeb9u4
1
url pkg:deb/debian/icu@63.1-6%2Bdeb10u3
purl pkg:deb/debian/icu@63.1-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-f3vg-25ur-57a4
2
vulnerability VCID-f7v8-vz82-6ucj
3
vulnerability VCID-un3w-2ee4-jbcy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@63.1-6%252Bdeb10u3
2
url pkg:deb/debian/icu@67.1-7
purl pkg:deb/debian/icu@67.1-7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-f7v8-vz82-6ucj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@67.1-7
aliases CVE-2020-10531
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7fz2-29gm-eufm
8
url VCID-8mt7-9hjj-fbfg
vulnerability_id VCID-8mt7-9hjj-fbfg
summary International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences during Unicode conversion, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0153.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0153.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-0153
reference_id
reference_type
scores
0
value 0.11643
scoring_system epss
scoring_elements 0.93792
published_at 2026-06-04T12:55:00Z
1
value 0.11643
scoring_system epss
scoring_elements 0.93801
published_at 2026-06-06T12:55:00Z
2
value 0.11643
scoring_system epss
scoring_elements 0.938
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-0153
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0153
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0153
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=503071
reference_id 503071
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=503071
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534590
reference_id 534590
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534590
5
reference_url https://access.redhat.com/errata/RHSA-2009:1122
reference_id RHSA-2009:1122
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1122
6
reference_url https://usn.ubuntu.com/846-1/
reference_id USN-846-1
reference_type
scores
url https://usn.ubuntu.com/846-1/
fixed_packages
0
url pkg:deb/debian/icu@4.4.1-8%2Bsqueeze2
purl pkg:deb/debian/icu@4.4.1-8%2Bsqueeze2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-bvhc-8fge-9uez
12
vulnerability VCID-excs-dj44-yfby
13
vulnerability VCID-exg8-f6tj-k7fp
14
vulnerability VCID-f3kd-641n-17ch
15
vulnerability VCID-f3vg-25ur-57a4
16
vulnerability VCID-f7v8-vz82-6ucj
17
vulnerability VCID-fbng-2ww3-6bdu
18
vulnerability VCID-fmhx-7a3k-ffdx
19
vulnerability VCID-hkbb-bc99-yqdd
20
vulnerability VCID-k1bn-aprc-m3ht
21
vulnerability VCID-kauc-686u-jqeh
22
vulnerability VCID-qwzq-dmn1-j7fy
23
vulnerability VCID-rz8q-v7bh-9fe1
24
vulnerability VCID-scv7-4fwv-vyek
25
vulnerability VCID-un3w-2ee4-jbcy
26
vulnerability VCID-wpkr-mbq4-ekg5
27
vulnerability VCID-wsen-t4x7-wuhc
28
vulnerability VCID-xdhx-y4jj-xfeu
29
vulnerability VCID-yhgb-pmpp-9uc2
30
vulnerability VCID-yzqr-kpjj-akgj
31
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.4.1-8%252Bsqueeze2
aliases CVE-2009-0153
risk_score 2.8
exploitability 0.5
weighted_severity 5.5
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8mt7-9hjj-fbfg
9
url VCID-8ucv-hrcz-uqau
vulnerability_id VCID-8ucv-hrcz-uqau
summary Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2632.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2632.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2632
reference_id
reference_type
scores
0
value 0.01738
scoring_system epss
scoring_elements 0.8283
published_at 2026-06-04T12:55:00Z
1
value 0.01738
scoring_system epss
scoring_elements 0.82856
published_at 2026-06-06T12:55:00Z
2
value 0.01738
scoring_system epss
scoring_elements 0.82853
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2632
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8873
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8873
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9911
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0460
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0460
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0469
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0469
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0470
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0470
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0477
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0477
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0478
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0478
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0480
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0480
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0488
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0488
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2590
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2590
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2601
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2601
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2613
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2613
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2621
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2625
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2625
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2628
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2628
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2808
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2808
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4731
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4731
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4732
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4732
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4733
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4733
22
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4748
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4748
23
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4749
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4749
24
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760
25
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844
26
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494
27
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6293
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6293
28
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7415
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7415
29
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1242394
reference_id 1242394
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1242394
30
reference_url https://security.gentoo.org/glsa/201603-11
reference_id GLSA-201603-11
reference_type
scores
url https://security.gentoo.org/glsa/201603-11
31
reference_url https://security.gentoo.org/glsa/201603-14
reference_id GLSA-201603-14
reference_type
scores
url https://security.gentoo.org/glsa/201603-14
32
reference_url https://security.gentoo.org/glsa/201701-58
reference_id GLSA-201701-58
reference_type
scores
url https://security.gentoo.org/glsa/201701-58
33
reference_url https://access.redhat.com/errata/RHSA-2015:1228
reference_id RHSA-2015:1228
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1228
34
reference_url https://access.redhat.com/errata/RHSA-2015:1229
reference_id RHSA-2015:1229
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1229
35
reference_url https://access.redhat.com/errata/RHSA-2015:1230
reference_id RHSA-2015:1230
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1230
36
reference_url https://access.redhat.com/errata/RHSA-2015:1241
reference_id RHSA-2015:1241
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1241
37
reference_url https://access.redhat.com/errata/RHSA-2015:1242
reference_id RHSA-2015:1242
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1242
38
reference_url https://access.redhat.com/errata/RHSA-2015:1243
reference_id RHSA-2015:1243
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1243
39
reference_url https://access.redhat.com/errata/RHSA-2015:1485
reference_id RHSA-2015:1485
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1485
40
reference_url https://access.redhat.com/errata/RHSA-2015:1486
reference_id RHSA-2015:1486
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1486
41
reference_url https://access.redhat.com/errata/RHSA-2015:1488
reference_id RHSA-2015:1488
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1488
42
reference_url https://access.redhat.com/errata/RHSA-2015:1526
reference_id RHSA-2015:1526
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1526
43
reference_url https://access.redhat.com/errata/RHSA-2015:1544
reference_id RHSA-2015:1544
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1544
44
reference_url https://access.redhat.com/errata/RHSA-2015:1604
reference_id RHSA-2015:1604
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1604
45
reference_url https://usn.ubuntu.com/2696-1/
reference_id USN-2696-1
reference_type
scores
url https://usn.ubuntu.com/2696-1/
46
reference_url https://usn.ubuntu.com/2706-1/
reference_id USN-2706-1
reference_type
scores
url https://usn.ubuntu.com/2706-1/
47
reference_url https://usn.ubuntu.com/2740-1/
reference_id USN-2740-1
reference_type
scores
url https://usn.ubuntu.com/2740-1/
fixed_packages
0
url pkg:deb/debian/icu@52.1-8%2Bdeb8u7
purl pkg:deb/debian/icu@52.1-8%2Bdeb8u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8%252Bdeb8u7
1
url pkg:deb/debian/icu@57.1-6%2Bdeb9u4
purl pkg:deb/debian/icu@57.1-6%2Bdeb9u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-9ubw-4yby-v3bp
2
vulnerability VCID-f3vg-25ur-57a4
3
vulnerability VCID-f7v8-vz82-6ucj
4
vulnerability VCID-hkbb-bc99-yqdd
5
vulnerability VCID-un3w-2ee4-jbcy
6
vulnerability VCID-xdhx-y4jj-xfeu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@57.1-6%252Bdeb9u4
aliases CVE-2015-2632
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8ucv-hrcz-uqau
10
url VCID-9ubw-4yby-v3bp
vulnerability_id VCID-9ubw-4yby-v3bp
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14952.json
reference_id
reference_type
scores
0
value 4.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14952.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14952
reference_id
reference_type
scores
0
value 0.02941
scoring_system epss
scoring_elements 0.8672
published_at 2026-06-05T12:55:00Z
1
value 0.02941
scoring_system epss
scoring_elements 0.86716
published_at 2026-06-07T12:55:00Z
2
value 0.02941
scoring_system epss
scoring_elements 0.86698
published_at 2026-06-04T12:55:00Z
3
value 0.02941
scoring_system epss
scoring_elements 0.86719
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14952
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14952
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14952
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv2
scoring_elements AV:L/AC:L/Au:N/C:P/I:P/A:P
1
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1510930
reference_id 1510930
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1510930
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878840
reference_id 878840
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878840
6
reference_url https://security.archlinux.org/ASA-201711-25
reference_id ASA-201711-25
reference_type
scores
url https://security.archlinux.org/ASA-201711-25
7
reference_url https://security.archlinux.org/ASA-201711-26
reference_id ASA-201711-26
reference_type
scores
url https://security.archlinux.org/ASA-201711-26
8
reference_url https://security.archlinux.org/AVG-504
reference_id AVG-504
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-504
9
reference_url https://security.archlinux.org/AVG-507
reference_id AVG-507
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-507
10
reference_url https://usn.ubuntu.com/3458-1/
reference_id USN-3458-1
reference_type
scores
url https://usn.ubuntu.com/3458-1/
11
reference_url https://usn.ubuntu.com/3458-2/
reference_id USN-3458-2
reference_type
scores
url https://usn.ubuntu.com/3458-2/
fixed_packages
0
url pkg:deb/debian/icu@63.1-6%2Bdeb10u3
purl pkg:deb/debian/icu@63.1-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-f3vg-25ur-57a4
2
vulnerability VCID-f7v8-vz82-6ucj
3
vulnerability VCID-un3w-2ee4-jbcy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@63.1-6%252Bdeb10u3
aliases CVE-2017-14952
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9ubw-4yby-v3bp
11
url VCID-aykx-vyhu-7yfr
vulnerability_id VCID-aykx-vyhu-7yfr
summary The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not ensure that there is a '\0' character at the end of a certain temporary array, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long httpAcceptLanguage argument.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6293.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6293.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-6293
reference_id
reference_type
scores
0
value 0.01066
scoring_system epss
scoring_elements 0.78032
published_at 2026-06-04T12:55:00Z
1
value 0.01066
scoring_system epss
scoring_elements 0.7806
published_at 2026-06-05T12:55:00Z
2
value 0.01066
scoring_system epss
scoring_elements 0.78067
published_at 2026-06-06T12:55:00Z
3
value 0.01066
scoring_system epss
scoring_elements 0.78056
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-6293
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9911
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6293
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6293
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7415
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7415
8
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:N/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1360339
reference_id 1360339
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1360339
10
reference_url https://security.gentoo.org/glsa/201701-58
reference_id GLSA-201701-58
reference_type
scores
url https://security.gentoo.org/glsa/201701-58
11
reference_url https://usn.ubuntu.com/3227-1/
reference_id USN-3227-1
reference_type
scores
url https://usn.ubuntu.com/3227-1/
fixed_packages
0
url pkg:deb/debian/icu@52.1-8%2Bdeb8u7
purl pkg:deb/debian/icu@52.1-8%2Bdeb8u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8%252Bdeb8u7
1
url pkg:deb/debian/icu@57.1-6%2Bdeb9u4
purl pkg:deb/debian/icu@57.1-6%2Bdeb9u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-9ubw-4yby-v3bp
2
vulnerability VCID-f3vg-25ur-57a4
3
vulnerability VCID-f7v8-vz82-6ucj
4
vulnerability VCID-hkbb-bc99-yqdd
5
vulnerability VCID-un3w-2ee4-jbcy
6
vulnerability VCID-xdhx-y4jj-xfeu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@57.1-6%252Bdeb9u4
aliases CVE-2016-6293
risk_score 1.5
exploitability 0.5
weighted_severity 3.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-aykx-vyhu-7yfr
12
url VCID-bkbn-dxg2-dqfk
vulnerability_id VCID-bkbn-dxg2-dqfk
summary Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6591.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6585.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6585.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-6585
reference_id
reference_type
scores
0
value 0.01314
scoring_system epss
scoring_elements 0.80176
published_at 2026-06-04T12:55:00Z
1
value 0.01314
scoring_system epss
scoring_elements 0.80201
published_at 2026-06-05T12:55:00Z
2
value 0.01314
scoring_system epss
scoring_elements 0.80205
published_at 2026-06-06T12:55:00Z
3
value 0.01314
scoring_system epss
scoring_elements 0.802
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-6585
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6587
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6587
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6593
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6593
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6601
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6601
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0383
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0395
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0395
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0407
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0407
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0408
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0410
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0410
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0412
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0412
22
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1183645
reference_id 1183645
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1183645
23
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776264
reference_id 776264
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776264
24
reference_url https://security.gentoo.org/glsa/201507-14
reference_id GLSA-201507-14
reference_type
scores
url https://security.gentoo.org/glsa/201507-14
25
reference_url https://security.gentoo.org/glsa/201603-14
reference_id GLSA-201603-14
reference_type
scores
url https://security.gentoo.org/glsa/201603-14
26
reference_url https://access.redhat.com/errata/RHSA-2015:0067
reference_id RHSA-2015:0067
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0067
27
reference_url https://access.redhat.com/errata/RHSA-2015:0068
reference_id RHSA-2015:0068
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0068
28
reference_url https://access.redhat.com/errata/RHSA-2015:0069
reference_id RHSA-2015:0069
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0069
29
reference_url https://access.redhat.com/errata/RHSA-2015:0079
reference_id RHSA-2015:0079
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0079
30
reference_url https://access.redhat.com/errata/RHSA-2015:0080
reference_id RHSA-2015:0080
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0080
31
reference_url https://access.redhat.com/errata/RHSA-2015:0085
reference_id RHSA-2015:0085
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0085
32
reference_url https://access.redhat.com/errata/RHSA-2015:0086
reference_id RHSA-2015:0086
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0086
33
reference_url https://access.redhat.com/errata/RHSA-2015:0133
reference_id RHSA-2015:0133
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0133
34
reference_url https://access.redhat.com/errata/RHSA-2015:0134
reference_id RHSA-2015:0134
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0134
35
reference_url https://access.redhat.com/errata/RHSA-2015:0135
reference_id RHSA-2015:0135
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0135
36
reference_url https://access.redhat.com/errata/RHSA-2015:0136
reference_id RHSA-2015:0136
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0136
37
reference_url https://access.redhat.com/errata/RHSA-2015:0263
reference_id RHSA-2015:0263
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0263
38
reference_url https://access.redhat.com/errata/RHSA-2015:0264
reference_id RHSA-2015:0264
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0264
39
reference_url https://usn.ubuntu.com/2486-1/
reference_id USN-2486-1
reference_type
scores
url https://usn.ubuntu.com/2486-1/
40
reference_url https://usn.ubuntu.com/2487-1/
reference_id USN-2487-1
reference_type
scores
url https://usn.ubuntu.com/2487-1/
41
reference_url https://usn.ubuntu.com/2522-1/
reference_id USN-2522-1
reference_type
scores
url https://usn.ubuntu.com/2522-1/
42
reference_url https://usn.ubuntu.com/2522-3/
reference_id USN-2522-3
reference_type
scores
url https://usn.ubuntu.com/2522-3/
fixed_packages
0
url pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
purl pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-excs-dj44-yfby
12
vulnerability VCID-f3kd-641n-17ch
13
vulnerability VCID-f3vg-25ur-57a4
14
vulnerability VCID-f7v8-vz82-6ucj
15
vulnerability VCID-fbng-2ww3-6bdu
16
vulnerability VCID-fmhx-7a3k-ffdx
17
vulnerability VCID-hkbb-bc99-yqdd
18
vulnerability VCID-k1bn-aprc-m3ht
19
vulnerability VCID-kauc-686u-jqeh
20
vulnerability VCID-qwzq-dmn1-j7fy
21
vulnerability VCID-rz8q-v7bh-9fe1
22
vulnerability VCID-scv7-4fwv-vyek
23
vulnerability VCID-un3w-2ee4-jbcy
24
vulnerability VCID-wpkr-mbq4-ekg5
25
vulnerability VCID-wsen-t4x7-wuhc
26
vulnerability VCID-xdhx-y4jj-xfeu
27
vulnerability VCID-yhgb-pmpp-9uc2
28
vulnerability VCID-yzqr-kpjj-akgj
29
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.8.1.1-12%252Bdeb7u3
1
url pkg:deb/debian/icu@52.1-8
purl pkg:deb/debian/icu@52.1-8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8
aliases CVE-2014-6585
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bkbn-dxg2-dqfk
13
url VCID-bvhc-8fge-9uez
vulnerability_id VCID-bvhc-8fge-9uez
summary Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0900.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0900.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-0900
reference_id
reference_type
scores
0
value 0.00934
scoring_system epss
scoring_elements 0.76529
published_at 2026-06-04T12:55:00Z
1
value 0.00934
scoring_system epss
scoring_elements 0.76558
published_at 2026-06-05T12:55:00Z
2
value 0.00934
scoring_system epss
scoring_elements 0.76564
published_at 2026-06-06T12:55:00Z
3
value 0.00934
scoring_system epss
scoring_elements 0.76553
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-0900
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0900
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0900
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2924
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702346
reference_id 702346
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702346
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=918167
reference_id 918167
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=918167
6
reference_url https://security.gentoo.org/glsa/201309-16
reference_id GLSA-201309-16
reference_type
scores
url https://security.gentoo.org/glsa/201309-16
7
reference_url https://security.gentoo.org/glsa/201402-14
reference_id GLSA-201402-14
reference_type
scores
url https://security.gentoo.org/glsa/201402-14
8
reference_url https://usn.ubuntu.com/1989-1/
reference_id USN-1989-1
reference_type
scores
url https://usn.ubuntu.com/1989-1/
fixed_packages
0
url pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
purl pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-excs-dj44-yfby
12
vulnerability VCID-f3kd-641n-17ch
13
vulnerability VCID-f3vg-25ur-57a4
14
vulnerability VCID-f7v8-vz82-6ucj
15
vulnerability VCID-fbng-2ww3-6bdu
16
vulnerability VCID-fmhx-7a3k-ffdx
17
vulnerability VCID-hkbb-bc99-yqdd
18
vulnerability VCID-k1bn-aprc-m3ht
19
vulnerability VCID-kauc-686u-jqeh
20
vulnerability VCID-qwzq-dmn1-j7fy
21
vulnerability VCID-rz8q-v7bh-9fe1
22
vulnerability VCID-scv7-4fwv-vyek
23
vulnerability VCID-un3w-2ee4-jbcy
24
vulnerability VCID-wpkr-mbq4-ekg5
25
vulnerability VCID-wsen-t4x7-wuhc
26
vulnerability VCID-xdhx-y4jj-xfeu
27
vulnerability VCID-yhgb-pmpp-9uc2
28
vulnerability VCID-yzqr-kpjj-akgj
29
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.8.1.1-12%252Bdeb7u3
aliases CVE-2013-0900
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bvhc-8fge-9uez
14
url VCID-excs-dj44-yfby
vulnerability_id VCID-excs-dj44-yfby
summary The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7926.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7926.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-7926
reference_id
reference_type
scores
0
value 0.02564
scoring_system epss
scoring_elements 0.85799
published_at 2026-06-04T12:55:00Z
1
value 0.02564
scoring_system epss
scoring_elements 0.85821
published_at 2026-06-05T12:55:00Z
2
value 0.02564
scoring_system epss
scoring_elements 0.85822
published_at 2026-06-06T12:55:00Z
3
value 0.02564
scoring_system epss
scoring_elements 0.85819
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-7926
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1185205
reference_id 1185205
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1185205
13
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776265
reference_id 776265
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776265
14
reference_url https://security.gentoo.org/glsa/201502-13
reference_id GLSA-201502-13
reference_type
scores
url https://security.gentoo.org/glsa/201502-13
15
reference_url https://security.gentoo.org/glsa/201503-06
reference_id GLSA-201503-06
reference_type
scores
url https://security.gentoo.org/glsa/201503-06
16
reference_url https://access.redhat.com/errata/RHSA-2015:0093
reference_id RHSA-2015:0093
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0093
17
reference_url https://usn.ubuntu.com/2476-1/
reference_id USN-2476-1
reference_type
scores
url https://usn.ubuntu.com/2476-1/
18
reference_url https://usn.ubuntu.com/2522-1/
reference_id USN-2522-1
reference_type
scores
url https://usn.ubuntu.com/2522-1/
fixed_packages
0
url pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
purl pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-excs-dj44-yfby
12
vulnerability VCID-f3kd-641n-17ch
13
vulnerability VCID-f3vg-25ur-57a4
14
vulnerability VCID-f7v8-vz82-6ucj
15
vulnerability VCID-fbng-2ww3-6bdu
16
vulnerability VCID-fmhx-7a3k-ffdx
17
vulnerability VCID-hkbb-bc99-yqdd
18
vulnerability VCID-k1bn-aprc-m3ht
19
vulnerability VCID-kauc-686u-jqeh
20
vulnerability VCID-qwzq-dmn1-j7fy
21
vulnerability VCID-rz8q-v7bh-9fe1
22
vulnerability VCID-scv7-4fwv-vyek
23
vulnerability VCID-un3w-2ee4-jbcy
24
vulnerability VCID-wpkr-mbq4-ekg5
25
vulnerability VCID-wsen-t4x7-wuhc
26
vulnerability VCID-xdhx-y4jj-xfeu
27
vulnerability VCID-yhgb-pmpp-9uc2
28
vulnerability VCID-yzqr-kpjj-akgj
29
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.8.1.1-12%252Bdeb7u3
1
url pkg:deb/debian/icu@52.1-8
purl pkg:deb/debian/icu@52.1-8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8
aliases CVE-2014-7926
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-excs-dj44-yfby
15
url VCID-exg8-f6tj-k7fp
vulnerability_id VCID-exg8-f6tj-k7fp
summary Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows remote attackers to execute arbitrary code via a crafted locale ID that is not properly handled during variant canonicalization.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4599.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4599.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-4599
reference_id
reference_type
scores
0
value 0.24107
scoring_system epss
scoring_elements 0.96166
published_at 2026-06-04T12:55:00Z
1
value 0.24107
scoring_system epss
scoring_elements 0.96171
published_at 2026-06-05T12:55:00Z
2
value 0.24107
scoring_system epss
scoring_elements 0.96174
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-4599
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4599
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4599
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654883
reference_id 654883
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654883
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=765812
reference_id 765812
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=765812
5
reference_url https://security.gentoo.org/glsa/201209-07
reference_id GLSA-201209-07
reference_type
scores
url https://security.gentoo.org/glsa/201209-07
6
reference_url https://access.redhat.com/errata/RHSA-2011:1815
reference_id RHSA-2011:1815
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1815
7
reference_url https://usn.ubuntu.com/1348-1/
reference_id USN-1348-1
reference_type
scores
url https://usn.ubuntu.com/1348-1/
fixed_packages
0
url pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
purl pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-excs-dj44-yfby
12
vulnerability VCID-f3kd-641n-17ch
13
vulnerability VCID-f3vg-25ur-57a4
14
vulnerability VCID-f7v8-vz82-6ucj
15
vulnerability VCID-fbng-2ww3-6bdu
16
vulnerability VCID-fmhx-7a3k-ffdx
17
vulnerability VCID-hkbb-bc99-yqdd
18
vulnerability VCID-k1bn-aprc-m3ht
19
vulnerability VCID-kauc-686u-jqeh
20
vulnerability VCID-qwzq-dmn1-j7fy
21
vulnerability VCID-rz8q-v7bh-9fe1
22
vulnerability VCID-scv7-4fwv-vyek
23
vulnerability VCID-un3w-2ee4-jbcy
24
vulnerability VCID-wpkr-mbq4-ekg5
25
vulnerability VCID-wsen-t4x7-wuhc
26
vulnerability VCID-xdhx-y4jj-xfeu
27
vulnerability VCID-yhgb-pmpp-9uc2
28
vulnerability VCID-yzqr-kpjj-akgj
29
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.8.1.1-12%252Bdeb7u3
aliases CVE-2011-4599
risk_score 0.1
exploitability 0.5
weighted_severity 0.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-exg8-f6tj-k7fp
16
url VCID-f3kd-641n-17ch
vulnerability_id VCID-f3kd-641n-17ch
summary Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4760.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4760.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4760
reference_id
reference_type
scores
0
value 0.09686
scoring_system epss
scoring_elements 0.93063
published_at 2026-06-04T12:55:00Z
1
value 0.09686
scoring_system epss
scoring_elements 0.93074
published_at 2026-06-05T12:55:00Z
2
value 0.09686
scoring_system epss
scoring_elements 0.93072
published_at 2026-06-06T12:55:00Z
3
value 0.09686
scoring_system epss
scoring_elements 0.93069
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4760
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8146
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8147
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8147
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8873
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8873
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0460
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0460
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0469
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0469
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0470
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0470
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0477
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0477
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0478
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0478
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0480
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0480
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0488
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0488
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2590
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2590
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2601
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2601
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2613
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2613
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2621
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2625
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2625
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2628
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2628
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2808
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2808
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4731
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4731
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4732
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4732
22
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4733
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4733
23
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4748
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4748
24
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4749
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4749
25
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760
26
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1242447
reference_id 1242447
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1242447
27
reference_url https://security.gentoo.org/glsa/201603-11
reference_id GLSA-201603-11
reference_type
scores
url https://security.gentoo.org/glsa/201603-11
28
reference_url https://security.gentoo.org/glsa/201603-14
reference_id GLSA-201603-14
reference_type
scores
url https://security.gentoo.org/glsa/201603-14
29
reference_url https://access.redhat.com/errata/RHSA-2015:1228
reference_id RHSA-2015:1228
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1228
30
reference_url https://access.redhat.com/errata/RHSA-2015:1229
reference_id RHSA-2015:1229
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1229
31
reference_url https://access.redhat.com/errata/RHSA-2015:1230
reference_id RHSA-2015:1230
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1230
32
reference_url https://access.redhat.com/errata/RHSA-2015:1241
reference_id RHSA-2015:1241
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1241
33
reference_url https://access.redhat.com/errata/RHSA-2015:1242
reference_id RHSA-2015:1242
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1242
34
reference_url https://access.redhat.com/errata/RHSA-2015:1243
reference_id RHSA-2015:1243
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1243
35
reference_url https://access.redhat.com/errata/RHSA-2015:1485
reference_id RHSA-2015:1485
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1485
36
reference_url https://access.redhat.com/errata/RHSA-2015:1486
reference_id RHSA-2015:1486
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1486
37
reference_url https://access.redhat.com/errata/RHSA-2015:1488
reference_id RHSA-2015:1488
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1488
38
reference_url https://access.redhat.com/errata/RHSA-2015:1526
reference_id RHSA-2015:1526
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1526
39
reference_url https://access.redhat.com/errata/RHSA-2015:1544
reference_id RHSA-2015:1544
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1544
40
reference_url https://access.redhat.com/errata/RHSA-2015:1604
reference_id RHSA-2015:1604
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1604
41
reference_url https://usn.ubuntu.com/2696-1/
reference_id USN-2696-1
reference_type
scores
url https://usn.ubuntu.com/2696-1/
42
reference_url https://usn.ubuntu.com/2706-1/
reference_id USN-2706-1
reference_type
scores
url https://usn.ubuntu.com/2706-1/
43
reference_url https://usn.ubuntu.com/2740-1/
reference_id USN-2740-1
reference_type
scores
url https://usn.ubuntu.com/2740-1/
fixed_packages
0
url pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
purl pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-excs-dj44-yfby
12
vulnerability VCID-f3kd-641n-17ch
13
vulnerability VCID-f3vg-25ur-57a4
14
vulnerability VCID-f7v8-vz82-6ucj
15
vulnerability VCID-fbng-2ww3-6bdu
16
vulnerability VCID-fmhx-7a3k-ffdx
17
vulnerability VCID-hkbb-bc99-yqdd
18
vulnerability VCID-k1bn-aprc-m3ht
19
vulnerability VCID-kauc-686u-jqeh
20
vulnerability VCID-qwzq-dmn1-j7fy
21
vulnerability VCID-rz8q-v7bh-9fe1
22
vulnerability VCID-scv7-4fwv-vyek
23
vulnerability VCID-un3w-2ee4-jbcy
24
vulnerability VCID-wpkr-mbq4-ekg5
25
vulnerability VCID-wsen-t4x7-wuhc
26
vulnerability VCID-xdhx-y4jj-xfeu
27
vulnerability VCID-yhgb-pmpp-9uc2
28
vulnerability VCID-yzqr-kpjj-akgj
29
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.8.1.1-12%252Bdeb7u3
1
url pkg:deb/debian/icu@52.1-8%2Bdeb8u7
purl pkg:deb/debian/icu@52.1-8%2Bdeb8u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8%252Bdeb8u7
2
url pkg:deb/debian/icu@57.1-6%2Bdeb9u4
purl pkg:deb/debian/icu@57.1-6%2Bdeb9u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-9ubw-4yby-v3bp
2
vulnerability VCID-f3vg-25ur-57a4
3
vulnerability VCID-f7v8-vz82-6ucj
4
vulnerability VCID-hkbb-bc99-yqdd
5
vulnerability VCID-un3w-2ee4-jbcy
6
vulnerability VCID-xdhx-y4jj-xfeu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@57.1-6%252Bdeb9u4
aliases CVE-2015-4760
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f3kd-641n-17ch
17
url VCID-f3vg-25ur-57a4
vulnerability_id VCID-f3vg-25ur-57a4
summary multiple issues
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-30535
reference_id
reference_type
scores
0
value 0.00483
scoring_system epss
scoring_elements 0.65578
published_at 2026-06-04T12:55:00Z
1
value 0.00483
scoring_system epss
scoring_elements 0.65631
published_at 2026-06-05T12:55:00Z
2
value 0.00483
scoring_system epss
scoring_elements 0.65642
published_at 2026-06-06T12:55:00Z
3
value 0.00483
scoring_system epss
scoring_elements 0.6563
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-30535
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30535
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990079
reference_id 990079
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990079
3
reference_url https://security.archlinux.org/ASA-202106-2
reference_id ASA-202106-2
reference_type
scores
url https://security.archlinux.org/ASA-202106-2
4
reference_url https://security.archlinux.org/AVG-1990
reference_id AVG-1990
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1990
5
reference_url https://security.archlinux.org/AVG-1991
reference_id AVG-1991
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1991
6
reference_url https://usn.ubuntu.com/5156-1/
reference_id USN-5156-1
reference_type
scores
url https://usn.ubuntu.com/5156-1/
fixed_packages
0
url pkg:deb/debian/icu@67.1-7
purl pkg:deb/debian/icu@67.1-7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-f7v8-vz82-6ucj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@67.1-7
aliases CVE-2021-30535
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f3vg-25ur-57a4
18
url VCID-f7v8-vz82-6ucj
vulnerability_id VCID-f7v8-vz82-6ucj
summary A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-5222.json
reference_id
reference_type
scores
0
value 7.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-5222.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-5222
reference_id
reference_type
scores
0
value 0.00033
scoring_system epss
scoring_elements 0.10239
published_at 2026-06-07T12:55:00Z
1
value 0.00033
scoring_system epss
scoring_elements 0.1026
published_at 2026-06-05T12:55:00Z
2
value 0.00033
scoring_system epss
scoring_elements 0.10281
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-5222
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5222
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5222
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1106684
reference_id 1106684
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1106684
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2368600
reference_id 2368600
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-28T13:49:29Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2368600
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream
reference_id cpe:/a:redhat:enterprise_linux:9::appstream
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4
reference_id cpe:/a:redhat:openshift:4
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:9.0::appstream
reference_id cpe:/a:redhat:rhel_e4s:9.0::appstream
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:9.0::appstream
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:9.2::appstream
reference_id cpe:/a:redhat:rhel_e4s:9.2::appstream
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:9.2::appstream
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_eus:9.4::appstream
reference_id cpe:/a:redhat:rhel_eus:9.4::appstream
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_eus:9.4::appstream
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10.0
reference_id cpe:/o:redhat:enterprise_linux:10.0
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10.0
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6
reference_id cpe:/o:redhat:enterprise_linux:6
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7
reference_id cpe:/o:redhat:enterprise_linux:7
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8
reference_id cpe:/o:redhat:enterprise_linux:8
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos
reference_id cpe:/o:redhat:enterprise_linux:9::baseos
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:9.0::baseos
reference_id cpe:/o:redhat:rhel_e4s:9.0::baseos
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:9.0::baseos
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:9.2::baseos
reference_id cpe:/o:redhat:rhel_e4s:9.2::baseos
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:9.2::baseos
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus:9.4::baseos
reference_id cpe:/o:redhat:rhel_eus:9.4::baseos
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus:9.4::baseos
19
reference_url https://access.redhat.com/security/cve/CVE-2025-5222
reference_id CVE-2025-5222
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-28T13:49:29Z/
url https://access.redhat.com/security/cve/CVE-2025-5222
20
reference_url https://unicode-org.atlassian.net/jira/software/c/projects/ICU/issues/ICU-22957
reference_id ICU-22957
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-28T13:49:29Z/
url https://unicode-org.atlassian.net/jira/software/c/projects/ICU/issues/ICU-22957
21
reference_url https://access.redhat.com/errata/RHSA-2025:11888
reference_id RHSA-2025:11888
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-28T13:49:29Z/
url https://access.redhat.com/errata/RHSA-2025:11888
22
reference_url https://access.redhat.com/errata/RHSA-2025:12083
reference_id RHSA-2025:12083
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-28T13:49:29Z/
url https://access.redhat.com/errata/RHSA-2025:12083
23
reference_url https://access.redhat.com/errata/RHSA-2025:12331
reference_id RHSA-2025:12331
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-28T13:49:29Z/
url https://access.redhat.com/errata/RHSA-2025:12331
24
reference_url https://access.redhat.com/errata/RHSA-2025:12332
reference_id RHSA-2025:12332
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-28T13:49:29Z/
url https://access.redhat.com/errata/RHSA-2025:12332
25
reference_url https://access.redhat.com/errata/RHSA-2025:12333
reference_id RHSA-2025:12333
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-28T13:49:29Z/
url https://access.redhat.com/errata/RHSA-2025:12333
fixed_packages
0
url pkg:deb/debian/icu@72.1-3%2Bdeb12u1
purl pkg:deb/debian/icu@72.1-3%2Bdeb12u1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@72.1-3%252Bdeb12u1
aliases CVE-2025-5222
risk_score 3.1
exploitability 0.5
weighted_severity 6.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f7v8-vz82-6ucj
19
url VCID-fbng-2ww3-6bdu
vulnerability_id VCID-fbng-2ww3-6bdu
summary The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted character sequence.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7940.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7940.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-7940
reference_id
reference_type
scores
0
value 0.02423
scoring_system epss
scoring_elements 0.85412
published_at 2026-06-04T12:55:00Z
1
value 0.02423
scoring_system epss
scoring_elements 0.85435
published_at 2026-06-07T12:55:00Z
2
value 0.02423
scoring_system epss
scoring_elements 0.8544
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-7940
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1185220
reference_id 1185220
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1185220
13
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776265
reference_id 776265
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776265
14
reference_url https://security.gentoo.org/glsa/201502-13
reference_id GLSA-201502-13
reference_type
scores
url https://security.gentoo.org/glsa/201502-13
15
reference_url https://security.gentoo.org/glsa/201503-06
reference_id GLSA-201503-06
reference_type
scores
url https://security.gentoo.org/glsa/201503-06
16
reference_url https://access.redhat.com/errata/RHSA-2015:0093
reference_id RHSA-2015:0093
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0093
17
reference_url https://usn.ubuntu.com/2476-1/
reference_id USN-2476-1
reference_type
scores
url https://usn.ubuntu.com/2476-1/
18
reference_url https://usn.ubuntu.com/2522-1/
reference_id USN-2522-1
reference_type
scores
url https://usn.ubuntu.com/2522-1/
fixed_packages
0
url pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
purl pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-excs-dj44-yfby
12
vulnerability VCID-f3kd-641n-17ch
13
vulnerability VCID-f3vg-25ur-57a4
14
vulnerability VCID-f7v8-vz82-6ucj
15
vulnerability VCID-fbng-2ww3-6bdu
16
vulnerability VCID-fmhx-7a3k-ffdx
17
vulnerability VCID-hkbb-bc99-yqdd
18
vulnerability VCID-k1bn-aprc-m3ht
19
vulnerability VCID-kauc-686u-jqeh
20
vulnerability VCID-qwzq-dmn1-j7fy
21
vulnerability VCID-rz8q-v7bh-9fe1
22
vulnerability VCID-scv7-4fwv-vyek
23
vulnerability VCID-un3w-2ee4-jbcy
24
vulnerability VCID-wpkr-mbq4-ekg5
25
vulnerability VCID-wsen-t4x7-wuhc
26
vulnerability VCID-xdhx-y4jj-xfeu
27
vulnerability VCID-yhgb-pmpp-9uc2
28
vulnerability VCID-yzqr-kpjj-akgj
29
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.8.1.1-12%252Bdeb7u3
1
url pkg:deb/debian/icu@52.1-8
purl pkg:deb/debian/icu@52.1-8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8
aliases CVE-2014-7940
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fbng-2ww3-6bdu
20
url VCID-fmhx-7a3k-ffdx
vulnerability_id VCID-fmhx-7a3k-ffdx
summary Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode (ICU) before 54.1 for C/C++ allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted uloc_getDisplayName call.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9911.json
reference_id
reference_type
scores
0
value 8.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9911.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9911
reference_id
reference_type
scores
0
value 0.01804
scoring_system epss
scoring_elements 0.83153
published_at 2026-06-04T12:55:00Z
1
value 0.01804
scoring_system epss
scoring_elements 0.83178
published_at 2026-06-05T12:55:00Z
2
value 0.01804
scoring_system epss
scoring_elements 0.83179
published_at 2026-06-06T12:55:00Z
3
value 0.01804
scoring_system epss
scoring_elements 0.83175
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9911
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9911
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6293
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6293
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7415
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7415
8
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1383569
reference_id 1383569
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1383569
10
reference_url https://usn.ubuntu.com/3227-1/
reference_id USN-3227-1
reference_type
scores
url https://usn.ubuntu.com/3227-1/
fixed_packages
0
url pkg:deb/debian/icu@52.1-8%2Bdeb8u7
purl pkg:deb/debian/icu@52.1-8%2Bdeb8u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8%252Bdeb8u7
1
url pkg:deb/debian/icu@57.1-6%2Bdeb9u4
purl pkg:deb/debian/icu@57.1-6%2Bdeb9u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-9ubw-4yby-v3bp
2
vulnerability VCID-f3vg-25ur-57a4
3
vulnerability VCID-f7v8-vz82-6ucj
4
vulnerability VCID-hkbb-bc99-yqdd
5
vulnerability VCID-un3w-2ee4-jbcy
6
vulnerability VCID-xdhx-y4jj-xfeu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@57.1-6%252Bdeb9u4
aliases CVE-2014-9911
risk_score 3.8
exploitability 0.5
weighted_severity 7.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fmhx-7a3k-ffdx
21
url VCID-hkbb-bc99-yqdd
vulnerability_id VCID-hkbb-bc99-yqdd
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15422.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15422.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-15422
reference_id
reference_type
scores
0
value 0.02598
scoring_system epss
scoring_elements 0.85888
published_at 2026-06-04T12:55:00Z
1
value 0.02598
scoring_system epss
scoring_elements 0.85909
published_at 2026-06-07T12:55:00Z
2
value 0.02598
scoring_system epss
scoring_elements 0.85912
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-15422
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15422
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15422
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1523136
reference_id 1523136
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1523136
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892766
reference_id 892766
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892766
6
reference_url https://security.archlinux.org/ASA-201712-5
reference_id ASA-201712-5
reference_type
scores
url https://security.archlinux.org/ASA-201712-5
7
reference_url https://security.archlinux.org/AVG-544
reference_id AVG-544
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-544
8
reference_url https://access.redhat.com/errata/RHSA-2017:3401
reference_id RHSA-2017:3401
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3401
9
reference_url https://usn.ubuntu.com/3610-1/
reference_id USN-3610-1
reference_type
scores
url https://usn.ubuntu.com/3610-1/
fixed_packages
0
url pkg:deb/debian/icu@52.1-8%2Bdeb8u7
purl pkg:deb/debian/icu@52.1-8%2Bdeb8u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8%252Bdeb8u7
1
url pkg:deb/debian/icu@57.1-6%2Bdeb9u4
purl pkg:deb/debian/icu@57.1-6%2Bdeb9u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-9ubw-4yby-v3bp
2
vulnerability VCID-f3vg-25ur-57a4
3
vulnerability VCID-f7v8-vz82-6ucj
4
vulnerability VCID-hkbb-bc99-yqdd
5
vulnerability VCID-un3w-2ee4-jbcy
6
vulnerability VCID-xdhx-y4jj-xfeu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@57.1-6%252Bdeb9u4
2
url pkg:deb/debian/icu@63.1-6%2Bdeb10u3
purl pkg:deb/debian/icu@63.1-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-f3vg-25ur-57a4
2
vulnerability VCID-f7v8-vz82-6ucj
3
vulnerability VCID-un3w-2ee4-jbcy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@63.1-6%252Bdeb10u3
aliases CVE-2017-15422
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hkbb-bc99-yqdd
22
url VCID-k1bn-aprc-m3ht
vulnerability_id VCID-k1bn-aprc-m3ht
summary The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in Google Chrome before 44.0.2403.89, mishandles converter names with initial x- substrings, which allows remote attackers to cause a denial of service (read of uninitialized memory) or possibly have unspecified other impact via a crafted file.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1270.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1270.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-1270
reference_id
reference_type
scores
0
value 0.01188
scoring_system epss
scoring_elements 0.79153
published_at 2026-06-04T12:55:00Z
1
value 0.01188
scoring_system epss
scoring_elements 0.79179
published_at 2026-06-05T12:55:00Z
2
value 0.01188
scoring_system epss
scoring_elements 0.79185
published_at 2026-06-06T12:55:00Z
3
value 0.01188
scoring_system epss
scoring_elements 0.79176
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-1270
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1266
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1266
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1267
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1267
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1268
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1268
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1269
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1269
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1270
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1270
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1271
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1271
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1272
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1272
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1273
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1273
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1274
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1274
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1276
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1276
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1277
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1277
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1278
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1278
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1279
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1279
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1280
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1280
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1281
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1281
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1282
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1282
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1283
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1283
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1284
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1285
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1286
22
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1287
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1287
23
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1288
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1288
24
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1289
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1289
25
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1245574
reference_id 1245574
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1245574
26
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=798647
reference_id 798647
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=798647
27
reference_url https://security.gentoo.org/glsa/201603-09
reference_id GLSA-201603-09
reference_type
scores
url https://security.gentoo.org/glsa/201603-09
28
reference_url https://access.redhat.com/errata/RHSA-2015:1499
reference_id RHSA-2015:1499
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1499
29
reference_url https://usn.ubuntu.com/2677-1/
reference_id USN-2677-1
reference_type
scores
url https://usn.ubuntu.com/2677-1/
30
reference_url https://usn.ubuntu.com/2740-1/
reference_id USN-2740-1
reference_type
scores
url https://usn.ubuntu.com/2740-1/
fixed_packages
0
url pkg:deb/debian/icu@52.1-8%2Bdeb8u7
purl pkg:deb/debian/icu@52.1-8%2Bdeb8u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8%252Bdeb8u7
1
url pkg:deb/debian/icu@57.1-6%2Bdeb9u4
purl pkg:deb/debian/icu@57.1-6%2Bdeb9u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-9ubw-4yby-v3bp
2
vulnerability VCID-f3vg-25ur-57a4
3
vulnerability VCID-f7v8-vz82-6ucj
4
vulnerability VCID-hkbb-bc99-yqdd
5
vulnerability VCID-un3w-2ee4-jbcy
6
vulnerability VCID-xdhx-y4jj-xfeu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@57.1-6%252Bdeb9u4
aliases CVE-2015-1270
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k1bn-aprc-m3ht
23
url VCID-kauc-686u-jqeh
vulnerability_id VCID-kauc-686u-jqeh
summary Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "handling of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2383.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2383.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-2383
reference_id
reference_type
scores
0
value 0.0562
scoring_system epss
scoring_elements 0.90497
published_at 2026-06-04T12:55:00Z
1
value 0.0562
scoring_system epss
scoring_elements 0.90511
published_at 2026-06-05T12:55:00Z
2
value 0.0562
scoring_system epss
scoring_elements 0.90512
published_at 2026-06-06T12:55:00Z
3
value 0.0562
scoring_system epss
scoring_elements 0.90509
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-2383
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=952708
reference_id 952708
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=952708
13
reference_url https://security.gentoo.org/glsa/201401-30
reference_id GLSA-201401-30
reference_type
scores
url https://security.gentoo.org/glsa/201401-30
14
reference_url https://security.gentoo.org/glsa/201406-32
reference_id GLSA-201406-32
reference_type
scores
url https://security.gentoo.org/glsa/201406-32
15
reference_url https://access.redhat.com/errata/RHSA-2013:0751
reference_id RHSA-2013:0751
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0751
16
reference_url https://access.redhat.com/errata/RHSA-2013:0752
reference_id RHSA-2013:0752
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0752
17
reference_url https://access.redhat.com/errata/RHSA-2013:0757
reference_id RHSA-2013:0757
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0757
18
reference_url https://access.redhat.com/errata/RHSA-2013:0758
reference_id RHSA-2013:0758
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0758
19
reference_url https://access.redhat.com/errata/RHSA-2013:0770
reference_id RHSA-2013:0770
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0770
20
reference_url https://access.redhat.com/errata/RHSA-2013:0822
reference_id RHSA-2013:0822
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0822
21
reference_url https://access.redhat.com/errata/RHSA-2013:0823
reference_id RHSA-2013:0823
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0823
22
reference_url https://access.redhat.com/errata/RHSA-2013:0855
reference_id RHSA-2013:0855
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0855
23
reference_url https://access.redhat.com/errata/RHSA-2013:1455
reference_id RHSA-2013:1455
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1455
24
reference_url https://access.redhat.com/errata/RHSA-2013:1456
reference_id RHSA-2013:1456
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1456
25
reference_url https://usn.ubuntu.com/1806-1/
reference_id USN-1806-1
reference_type
scores
url https://usn.ubuntu.com/1806-1/
26
reference_url https://usn.ubuntu.com/1819-1/
reference_id USN-1819-1
reference_type
scores
url https://usn.ubuntu.com/1819-1/
27
reference_url https://usn.ubuntu.com/2522-1/
reference_id USN-2522-1
reference_type
scores
url https://usn.ubuntu.com/2522-1/
28
reference_url https://usn.ubuntu.com/2522-3/
reference_id USN-2522-3
reference_type
scores
url https://usn.ubuntu.com/2522-3/
fixed_packages
0
url pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
purl pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-excs-dj44-yfby
12
vulnerability VCID-f3kd-641n-17ch
13
vulnerability VCID-f3vg-25ur-57a4
14
vulnerability VCID-f7v8-vz82-6ucj
15
vulnerability VCID-fbng-2ww3-6bdu
16
vulnerability VCID-fmhx-7a3k-ffdx
17
vulnerability VCID-hkbb-bc99-yqdd
18
vulnerability VCID-k1bn-aprc-m3ht
19
vulnerability VCID-kauc-686u-jqeh
20
vulnerability VCID-qwzq-dmn1-j7fy
21
vulnerability VCID-rz8q-v7bh-9fe1
22
vulnerability VCID-scv7-4fwv-vyek
23
vulnerability VCID-un3w-2ee4-jbcy
24
vulnerability VCID-wpkr-mbq4-ekg5
25
vulnerability VCID-wsen-t4x7-wuhc
26
vulnerability VCID-xdhx-y4jj-xfeu
27
vulnerability VCID-yhgb-pmpp-9uc2
28
vulnerability VCID-yzqr-kpjj-akgj
29
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.8.1.1-12%252Bdeb7u3
1
url pkg:deb/debian/icu@52.1-8
purl pkg:deb/debian/icu@52.1-8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8
aliases CVE-2013-2383
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kauc-686u-jqeh
24
url VCID-pmfb-6z51-bfh9
vulnerability_id VCID-pmfb-6z51-bfh9
summary Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlier allows context-dependent attackers to cause a denial of service (memory consumption) and possibly have unspecified other impact via a regular expression that writes a large amount of data to the backtracking stack. NOTE: some of these details are obtained from third party information.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4771.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4771.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2007-4771
reference_id
reference_type
scores
0
value 0.02332
scoring_system epss
scoring_elements 0.85134
published_at 2026-06-04T12:55:00Z
1
value 0.02332
scoring_system epss
scoring_elements 0.85159
published_at 2026-06-05T12:55:00Z
2
value 0.02332
scoring_system epss
scoring_elements 0.85163
published_at 2026-06-06T12:55:00Z
3
value 0.02332
scoring_system epss
scoring_elements 0.85158
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2007-4771
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4771
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4771
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=429025
reference_id 429025
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=429025
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463688
reference_id 463688
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463688
5
reference_url https://security.gentoo.org/glsa/200803-20
reference_id GLSA-200803-20
reference_type
scores
url https://security.gentoo.org/glsa/200803-20
6
reference_url https://security.gentoo.org/glsa/200805-16
reference_id GLSA-200805-16
reference_type
scores
url https://security.gentoo.org/glsa/200805-16
7
reference_url https://access.redhat.com/errata/RHSA-2008:0090
reference_id RHSA-2008:0090
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0090
8
reference_url https://usn.ubuntu.com/591-1/
reference_id USN-591-1
reference_type
scores
url https://usn.ubuntu.com/591-1/
fixed_packages
0
url pkg:deb/debian/icu@3.8.1-3%2Blenny3
purl pkg:deb/debian/icu@3.8.1-3%2Blenny3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8mt7-9hjj-fbfg
8
vulnerability VCID-8ucv-hrcz-uqau
9
vulnerability VCID-9ubw-4yby-v3bp
10
vulnerability VCID-aykx-vyhu-7yfr
11
vulnerability VCID-bkbn-dxg2-dqfk
12
vulnerability VCID-bvhc-8fge-9uez
13
vulnerability VCID-excs-dj44-yfby
14
vulnerability VCID-exg8-f6tj-k7fp
15
vulnerability VCID-f3kd-641n-17ch
16
vulnerability VCID-f3vg-25ur-57a4
17
vulnerability VCID-f7v8-vz82-6ucj
18
vulnerability VCID-fbng-2ww3-6bdu
19
vulnerability VCID-fmhx-7a3k-ffdx
20
vulnerability VCID-hkbb-bc99-yqdd
21
vulnerability VCID-k1bn-aprc-m3ht
22
vulnerability VCID-kauc-686u-jqeh
23
vulnerability VCID-qwzq-dmn1-j7fy
24
vulnerability VCID-rz8q-v7bh-9fe1
25
vulnerability VCID-scv7-4fwv-vyek
26
vulnerability VCID-trma-c9p3-uub9
27
vulnerability VCID-un3w-2ee4-jbcy
28
vulnerability VCID-wpkr-mbq4-ekg5
29
vulnerability VCID-wsen-t4x7-wuhc
30
vulnerability VCID-xdhx-y4jj-xfeu
31
vulnerability VCID-yhgb-pmpp-9uc2
32
vulnerability VCID-yzqr-kpjj-akgj
33
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@3.8.1-3%252Blenny3
aliases CVE-2007-4771
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pmfb-6z51-bfh9
25
url VCID-qwzq-dmn1-j7fy
vulnerability_id VCID-qwzq-dmn1-j7fy
summary The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8147.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8147.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-8147
reference_id
reference_type
scores
0
value 0.41904
scoring_system epss
scoring_elements 0.97501
published_at 2026-06-04T12:55:00Z
1
value 0.41904
scoring_system epss
scoring_elements 0.97507
published_at 2026-06-05T12:55:00Z
2
value 0.41904
scoring_system epss
scoring_elements 0.97508
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-8147
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8146
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8147
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8147
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1176200
reference_id 1176200
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1176200
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784773
reference_id 784773
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784773
7
reference_url https://security.gentoo.org/glsa/201507-04
reference_id GLSA-201507-04
reference_type
scores
url https://security.gentoo.org/glsa/201507-04
8
reference_url https://usn.ubuntu.com/2605-1/
reference_id USN-2605-1
reference_type
scores
url https://usn.ubuntu.com/2605-1/
fixed_packages
0
url pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
purl pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-excs-dj44-yfby
12
vulnerability VCID-f3kd-641n-17ch
13
vulnerability VCID-f3vg-25ur-57a4
14
vulnerability VCID-f7v8-vz82-6ucj
15
vulnerability VCID-fbng-2ww3-6bdu
16
vulnerability VCID-fmhx-7a3k-ffdx
17
vulnerability VCID-hkbb-bc99-yqdd
18
vulnerability VCID-k1bn-aprc-m3ht
19
vulnerability VCID-kauc-686u-jqeh
20
vulnerability VCID-qwzq-dmn1-j7fy
21
vulnerability VCID-rz8q-v7bh-9fe1
22
vulnerability VCID-scv7-4fwv-vyek
23
vulnerability VCID-un3w-2ee4-jbcy
24
vulnerability VCID-wpkr-mbq4-ekg5
25
vulnerability VCID-wsen-t4x7-wuhc
26
vulnerability VCID-xdhx-y4jj-xfeu
27
vulnerability VCID-yhgb-pmpp-9uc2
28
vulnerability VCID-yzqr-kpjj-akgj
29
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.8.1.1-12%252Bdeb7u3
1
url pkg:deb/debian/icu@52.1-8%2Bdeb8u7
purl pkg:deb/debian/icu@52.1-8%2Bdeb8u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8%252Bdeb8u7
2
url pkg:deb/debian/icu@57.1-6%2Bdeb9u4
purl pkg:deb/debian/icu@57.1-6%2Bdeb9u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-9ubw-4yby-v3bp
2
vulnerability VCID-f3vg-25ur-57a4
3
vulnerability VCID-f7v8-vz82-6ucj
4
vulnerability VCID-hkbb-bc99-yqdd
5
vulnerability VCID-un3w-2ee4-jbcy
6
vulnerability VCID-xdhx-y4jj-xfeu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@57.1-6%252Bdeb9u4
aliases CVE-2014-8147
risk_score 0.8
exploitability 2.0
weighted_severity 0.4
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qwzq-dmn1-j7fy
26
url VCID-rz8q-v7bh-9fe1
vulnerability_id VCID-rz8q-v7bh-9fe1
summary Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font layout" in the International Components for Unicode (ICU) Layout Engine before 51.2.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2384.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2384.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-2384
reference_id
reference_type
scores
0
value 0.0562
scoring_system epss
scoring_elements 0.90497
published_at 2026-06-04T12:55:00Z
1
value 0.0562
scoring_system epss
scoring_elements 0.90511
published_at 2026-06-05T12:55:00Z
2
value 0.0562
scoring_system epss
scoring_elements 0.90512
published_at 2026-06-06T12:55:00Z
3
value 0.0562
scoring_system epss
scoring_elements 0.90509
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-2384
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=952709
reference_id 952709
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=952709
13
reference_url https://security.gentoo.org/glsa/201401-30
reference_id GLSA-201401-30
reference_type
scores
url https://security.gentoo.org/glsa/201401-30
14
reference_url https://security.gentoo.org/glsa/201406-32
reference_id GLSA-201406-32
reference_type
scores
url https://security.gentoo.org/glsa/201406-32
15
reference_url https://access.redhat.com/errata/RHSA-2013:0751
reference_id RHSA-2013:0751
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0751
16
reference_url https://access.redhat.com/errata/RHSA-2013:0752
reference_id RHSA-2013:0752
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0752
17
reference_url https://access.redhat.com/errata/RHSA-2013:0757
reference_id RHSA-2013:0757
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0757
18
reference_url https://access.redhat.com/errata/RHSA-2013:0758
reference_id RHSA-2013:0758
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0758
19
reference_url https://access.redhat.com/errata/RHSA-2013:0770
reference_id RHSA-2013:0770
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0770
20
reference_url https://access.redhat.com/errata/RHSA-2013:0822
reference_id RHSA-2013:0822
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0822
21
reference_url https://access.redhat.com/errata/RHSA-2013:0823
reference_id RHSA-2013:0823
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0823
22
reference_url https://access.redhat.com/errata/RHSA-2013:0855
reference_id RHSA-2013:0855
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0855
23
reference_url https://access.redhat.com/errata/RHSA-2013:1455
reference_id RHSA-2013:1455
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1455
24
reference_url https://access.redhat.com/errata/RHSA-2013:1456
reference_id RHSA-2013:1456
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1456
25
reference_url https://usn.ubuntu.com/1806-1/
reference_id USN-1806-1
reference_type
scores
url https://usn.ubuntu.com/1806-1/
26
reference_url https://usn.ubuntu.com/1819-1/
reference_id USN-1819-1
reference_type
scores
url https://usn.ubuntu.com/1819-1/
27
reference_url https://usn.ubuntu.com/2522-1/
reference_id USN-2522-1
reference_type
scores
url https://usn.ubuntu.com/2522-1/
28
reference_url https://usn.ubuntu.com/2522-3/
reference_id USN-2522-3
reference_type
scores
url https://usn.ubuntu.com/2522-3/
fixed_packages
0
url pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
purl pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-excs-dj44-yfby
12
vulnerability VCID-f3kd-641n-17ch
13
vulnerability VCID-f3vg-25ur-57a4
14
vulnerability VCID-f7v8-vz82-6ucj
15
vulnerability VCID-fbng-2ww3-6bdu
16
vulnerability VCID-fmhx-7a3k-ffdx
17
vulnerability VCID-hkbb-bc99-yqdd
18
vulnerability VCID-k1bn-aprc-m3ht
19
vulnerability VCID-kauc-686u-jqeh
20
vulnerability VCID-qwzq-dmn1-j7fy
21
vulnerability VCID-rz8q-v7bh-9fe1
22
vulnerability VCID-scv7-4fwv-vyek
23
vulnerability VCID-un3w-2ee4-jbcy
24
vulnerability VCID-wpkr-mbq4-ekg5
25
vulnerability VCID-wsen-t4x7-wuhc
26
vulnerability VCID-xdhx-y4jj-xfeu
27
vulnerability VCID-yhgb-pmpp-9uc2
28
vulnerability VCID-yzqr-kpjj-akgj
29
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.8.1.1-12%252Bdeb7u3
1
url pkg:deb/debian/icu@52.1-8
purl pkg:deb/debian/icu@52.1-8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8
aliases CVE-2013-2384
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rz8q-v7bh-9fe1
27
url VCID-scv7-4fwv-vyek
vulnerability_id VCID-scv7-4fwv-vyek
summary Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "checking of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1569.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1569.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-1569
reference_id
reference_type
scores
0
value 0.0147
scoring_system epss
scoring_elements 0.81262
published_at 2026-06-04T12:55:00Z
1
value 0.0147
scoring_system epss
scoring_elements 0.81291
published_at 2026-06-05T12:55:00Z
2
value 0.0147
scoring_system epss
scoring_elements 0.81293
published_at 2026-06-06T12:55:00Z
3
value 0.0147
scoring_system epss
scoring_elements 0.8129
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-1569
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=952711
reference_id 952711
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=952711
13
reference_url https://security.gentoo.org/glsa/201401-30
reference_id GLSA-201401-30
reference_type
scores
url https://security.gentoo.org/glsa/201401-30
14
reference_url https://security.gentoo.org/glsa/201406-32
reference_id GLSA-201406-32
reference_type
scores
url https://security.gentoo.org/glsa/201406-32
15
reference_url https://access.redhat.com/errata/RHSA-2013:0751
reference_id RHSA-2013:0751
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0751
16
reference_url https://access.redhat.com/errata/RHSA-2013:0752
reference_id RHSA-2013:0752
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0752
17
reference_url https://access.redhat.com/errata/RHSA-2013:0757
reference_id RHSA-2013:0757
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0757
18
reference_url https://access.redhat.com/errata/RHSA-2013:0758
reference_id RHSA-2013:0758
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0758
19
reference_url https://access.redhat.com/errata/RHSA-2013:0770
reference_id RHSA-2013:0770
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0770
20
reference_url https://access.redhat.com/errata/RHSA-2013:0822
reference_id RHSA-2013:0822
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0822
21
reference_url https://access.redhat.com/errata/RHSA-2013:0823
reference_id RHSA-2013:0823
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0823
22
reference_url https://access.redhat.com/errata/RHSA-2013:0855
reference_id RHSA-2013:0855
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0855
23
reference_url https://access.redhat.com/errata/RHSA-2013:1455
reference_id RHSA-2013:1455
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1455
24
reference_url https://access.redhat.com/errata/RHSA-2013:1456
reference_id RHSA-2013:1456
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1456
25
reference_url https://usn.ubuntu.com/1806-1/
reference_id USN-1806-1
reference_type
scores
url https://usn.ubuntu.com/1806-1/
26
reference_url https://usn.ubuntu.com/1819-1/
reference_id USN-1819-1
reference_type
scores
url https://usn.ubuntu.com/1819-1/
27
reference_url https://usn.ubuntu.com/2522-1/
reference_id USN-2522-1
reference_type
scores
url https://usn.ubuntu.com/2522-1/
28
reference_url https://usn.ubuntu.com/2522-3/
reference_id USN-2522-3
reference_type
scores
url https://usn.ubuntu.com/2522-3/
fixed_packages
0
url pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
purl pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-excs-dj44-yfby
12
vulnerability VCID-f3kd-641n-17ch
13
vulnerability VCID-f3vg-25ur-57a4
14
vulnerability VCID-f7v8-vz82-6ucj
15
vulnerability VCID-fbng-2ww3-6bdu
16
vulnerability VCID-fmhx-7a3k-ffdx
17
vulnerability VCID-hkbb-bc99-yqdd
18
vulnerability VCID-k1bn-aprc-m3ht
19
vulnerability VCID-kauc-686u-jqeh
20
vulnerability VCID-qwzq-dmn1-j7fy
21
vulnerability VCID-rz8q-v7bh-9fe1
22
vulnerability VCID-scv7-4fwv-vyek
23
vulnerability VCID-un3w-2ee4-jbcy
24
vulnerability VCID-wpkr-mbq4-ekg5
25
vulnerability VCID-wsen-t4x7-wuhc
26
vulnerability VCID-xdhx-y4jj-xfeu
27
vulnerability VCID-yhgb-pmpp-9uc2
28
vulnerability VCID-yzqr-kpjj-akgj
29
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.8.1.1-12%252Bdeb7u3
1
url pkg:deb/debian/icu@52.1-8
purl pkg:deb/debian/icu@52.1-8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8
aliases CVE-2013-1569
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-scv7-4fwv-vyek
28
url VCID-trma-c9p3-uub9
vulnerability_id VCID-trma-c9p3-uub9
summary The International Components for Unicode (ICU) library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character sequences during conversion of some character encodings, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1036.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1036.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-1036
reference_id
reference_type
scores
0
value 0.02644
scoring_system epss
scoring_elements 0.8601
published_at 2026-06-04T12:55:00Z
1
value 0.02644
scoring_system epss
scoring_elements 0.86031
published_at 2026-06-05T12:55:00Z
2
value 0.02644
scoring_system epss
scoring_elements 0.86034
published_at 2026-06-06T12:55:00Z
3
value 0.02644
scoring_system epss
scoring_elements 0.8603
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-1036
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1036
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1036
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=464168
reference_id 464168
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=464168
4
reference_url https://access.redhat.com/errata/RHSA-2009:0296
reference_id RHSA-2009:0296
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:0296
5
reference_url https://usn.ubuntu.com/747-1/
reference_id USN-747-1
reference_type
scores
url https://usn.ubuntu.com/747-1/
fixed_packages
0
url pkg:deb/debian/icu@4.4.1-8%2Bsqueeze2
purl pkg:deb/debian/icu@4.4.1-8%2Bsqueeze2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-bvhc-8fge-9uez
12
vulnerability VCID-excs-dj44-yfby
13
vulnerability VCID-exg8-f6tj-k7fp
14
vulnerability VCID-f3kd-641n-17ch
15
vulnerability VCID-f3vg-25ur-57a4
16
vulnerability VCID-f7v8-vz82-6ucj
17
vulnerability VCID-fbng-2ww3-6bdu
18
vulnerability VCID-fmhx-7a3k-ffdx
19
vulnerability VCID-hkbb-bc99-yqdd
20
vulnerability VCID-k1bn-aprc-m3ht
21
vulnerability VCID-kauc-686u-jqeh
22
vulnerability VCID-qwzq-dmn1-j7fy
23
vulnerability VCID-rz8q-v7bh-9fe1
24
vulnerability VCID-scv7-4fwv-vyek
25
vulnerability VCID-un3w-2ee4-jbcy
26
vulnerability VCID-wpkr-mbq4-ekg5
27
vulnerability VCID-wsen-t4x7-wuhc
28
vulnerability VCID-xdhx-y4jj-xfeu
29
vulnerability VCID-yhgb-pmpp-9uc2
30
vulnerability VCID-yzqr-kpjj-akgj
31
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.4.1-8%252Bsqueeze2
aliases CVE-2008-1036
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-trma-c9p3-uub9
29
url VCID-un3w-2ee4-jbcy
vulnerability_id VCID-un3w-2ee4-jbcy
summary International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-21913.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-21913.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-21913
reference_id
reference_type
scores
0
value 0.001
scoring_system epss
scoring_elements 0.27295
published_at 2026-06-04T12:55:00Z
1
value 0.001
scoring_system epss
scoring_elements 0.27363
published_at 2026-06-05T12:55:00Z
2
value 0.001
scoring_system epss
scoring_elements 0.27312
published_at 2026-06-06T12:55:00Z
3
value 0.001
scoring_system epss
scoring_elements 0.27273
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-21913
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21913
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21913
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2006950
reference_id 2006950
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2006950
5
reference_url https://usn.ubuntu.com/5133-1/
reference_id USN-5133-1
reference_type
scores
url https://usn.ubuntu.com/5133-1/
fixed_packages
0
url pkg:deb/debian/icu@63.1-6%2Bdeb10u3
purl pkg:deb/debian/icu@63.1-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-f3vg-25ur-57a4
2
vulnerability VCID-f7v8-vz82-6ucj
3
vulnerability VCID-un3w-2ee4-jbcy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@63.1-6%252Bdeb10u3
1
url pkg:deb/debian/icu@67.1-7
purl pkg:deb/debian/icu@67.1-7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-f7v8-vz82-6ucj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@67.1-7
aliases CVE-2020-21913
risk_score 2.5
exploitability 0.5
weighted_severity 5.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-un3w-2ee4-jbcy
30
url VCID-wpkr-mbq4-ekg5
vulnerability_id VCID-wpkr-mbq4-ekg5
summary International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_setNativeIndex* function.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7867.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7867.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-7867
reference_id
reference_type
scores
0
value 0.0112
scoring_system epss
scoring_elements 0.78601
published_at 2026-06-07T12:55:00Z
1
value 0.0112
scoring_system epss
scoring_elements 0.78576
published_at 2026-06-04T12:55:00Z
2
value 0.0112
scoring_system epss
scoring_elements 0.78603
published_at 2026-06-05T12:55:00Z
3
value 0.0112
scoring_system epss
scoring_elements 0.78611
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-7867
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7867
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7867
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7868
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7868
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
1
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1444097
reference_id 1444097
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1444097
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860314
reference_id 860314
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860314
7
reference_url https://security.gentoo.org/glsa/201710-03
reference_id GLSA-201710-03
reference_type
scores
url https://security.gentoo.org/glsa/201710-03
8
reference_url https://usn.ubuntu.com/3274-1/
reference_id USN-3274-1
reference_type
scores
url https://usn.ubuntu.com/3274-1/
9
reference_url https://usn.ubuntu.com/3274-2/
reference_id USN-3274-2
reference_type
scores
url https://usn.ubuntu.com/3274-2/
fixed_packages
0
url pkg:deb/debian/icu@52.1-8%2Bdeb8u7
purl pkg:deb/debian/icu@52.1-8%2Bdeb8u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8%252Bdeb8u7
1
url pkg:deb/debian/icu@57.1-6%2Bdeb9u4
purl pkg:deb/debian/icu@57.1-6%2Bdeb9u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-9ubw-4yby-v3bp
2
vulnerability VCID-f3vg-25ur-57a4
3
vulnerability VCID-f7v8-vz82-6ucj
4
vulnerability VCID-hkbb-bc99-yqdd
5
vulnerability VCID-un3w-2ee4-jbcy
6
vulnerability VCID-xdhx-y4jj-xfeu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@57.1-6%252Bdeb9u4
aliases CVE-2017-7867
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wpkr-mbq4-ekg5
31
url VCID-wsen-t4x7-wuhc
vulnerability_id VCID-wsen-t4x7-wuhc
summary The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7923.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7923.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-7923
reference_id
reference_type
scores
0
value 0.02564
scoring_system epss
scoring_elements 0.85799
published_at 2026-06-04T12:55:00Z
1
value 0.02564
scoring_system epss
scoring_elements 0.85821
published_at 2026-06-05T12:55:00Z
2
value 0.02564
scoring_system epss
scoring_elements 0.85822
published_at 2026-06-06T12:55:00Z
3
value 0.02564
scoring_system epss
scoring_elements 0.85819
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-7923
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1185202
reference_id 1185202
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1185202
13
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776265
reference_id 776265
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776265
14
reference_url https://security.gentoo.org/glsa/201502-13
reference_id GLSA-201502-13
reference_type
scores
url https://security.gentoo.org/glsa/201502-13
15
reference_url https://security.gentoo.org/glsa/201503-06
reference_id GLSA-201503-06
reference_type
scores
url https://security.gentoo.org/glsa/201503-06
16
reference_url https://access.redhat.com/errata/RHSA-2015:0093
reference_id RHSA-2015:0093
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0093
17
reference_url https://usn.ubuntu.com/2476-1/
reference_id USN-2476-1
reference_type
scores
url https://usn.ubuntu.com/2476-1/
18
reference_url https://usn.ubuntu.com/2522-1/
reference_id USN-2522-1
reference_type
scores
url https://usn.ubuntu.com/2522-1/
fixed_packages
0
url pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
purl pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-excs-dj44-yfby
12
vulnerability VCID-f3kd-641n-17ch
13
vulnerability VCID-f3vg-25ur-57a4
14
vulnerability VCID-f7v8-vz82-6ucj
15
vulnerability VCID-fbng-2ww3-6bdu
16
vulnerability VCID-fmhx-7a3k-ffdx
17
vulnerability VCID-hkbb-bc99-yqdd
18
vulnerability VCID-k1bn-aprc-m3ht
19
vulnerability VCID-kauc-686u-jqeh
20
vulnerability VCID-qwzq-dmn1-j7fy
21
vulnerability VCID-rz8q-v7bh-9fe1
22
vulnerability VCID-scv7-4fwv-vyek
23
vulnerability VCID-un3w-2ee4-jbcy
24
vulnerability VCID-wpkr-mbq4-ekg5
25
vulnerability VCID-wsen-t4x7-wuhc
26
vulnerability VCID-xdhx-y4jj-xfeu
27
vulnerability VCID-yhgb-pmpp-9uc2
28
vulnerability VCID-yzqr-kpjj-akgj
29
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.8.1.1-12%252Bdeb7u3
1
url pkg:deb/debian/icu@52.1-8
purl pkg:deb/debian/icu@52.1-8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8
aliases CVE-2014-7923
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wsen-t4x7-wuhc
32
url VCID-xdhx-y4jj-xfeu
vulnerability_id VCID-xdhx-y4jj-xfeu
summary International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18928.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18928.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-18928
reference_id
reference_type
scores
0
value 0.00612
scoring_system epss
scoring_elements 0.70205
published_at 2026-06-04T12:55:00Z
1
value 0.00612
scoring_system epss
scoring_elements 0.70247
published_at 2026-06-05T12:55:00Z
2
value 0.00612
scoring_system epss
scoring_elements 0.70256
published_at 2026-06-06T12:55:00Z
3
value 0.00612
scoring_system epss
scoring_elements 0.70238
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-18928
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18928
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18928
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1646702
reference_id 1646702
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1646702
fixed_packages
0
url pkg:deb/debian/icu@63.1-6%2Bdeb10u3
purl pkg:deb/debian/icu@63.1-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-f3vg-25ur-57a4
2
vulnerability VCID-f7v8-vz82-6ucj
3
vulnerability VCID-un3w-2ee4-jbcy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@63.1-6%252Bdeb10u3
aliases CVE-2018-18928
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xdhx-y4jj-xfeu
33
url VCID-yhgb-pmpp-9uc2
vulnerability_id VCID-yhgb-pmpp-9uc2
summary Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6585.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6591.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6591.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-6591
reference_id
reference_type
scores
0
value 0.01555
scoring_system epss
scoring_elements 0.81774
published_at 2026-06-04T12:55:00Z
1
value 0.01555
scoring_system epss
scoring_elements 0.81808
published_at 2026-06-05T12:55:00Z
2
value 0.01555
scoring_system epss
scoring_elements 0.81809
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-6591
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6587
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6587
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6593
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6593
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6601
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6601
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0383
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0383
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0395
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0395
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0407
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0407
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0408
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0410
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0410
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0412
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0412
22
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1183646
reference_id 1183646
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1183646
23
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775884
reference_id 775884
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775884
24
reference_url https://security.gentoo.org/glsa/201507-14
reference_id GLSA-201507-14
reference_type
scores
url https://security.gentoo.org/glsa/201507-14
25
reference_url https://security.gentoo.org/glsa/201603-14
reference_id GLSA-201603-14
reference_type
scores
url https://security.gentoo.org/glsa/201603-14
26
reference_url https://access.redhat.com/errata/RHSA-2015:0067
reference_id RHSA-2015:0067
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0067
27
reference_url https://access.redhat.com/errata/RHSA-2015:0068
reference_id RHSA-2015:0068
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0068
28
reference_url https://access.redhat.com/errata/RHSA-2015:0069
reference_id RHSA-2015:0069
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0069
29
reference_url https://access.redhat.com/errata/RHSA-2015:0079
reference_id RHSA-2015:0079
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0079
30
reference_url https://access.redhat.com/errata/RHSA-2015:0080
reference_id RHSA-2015:0080
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0080
31
reference_url https://access.redhat.com/errata/RHSA-2015:0085
reference_id RHSA-2015:0085
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0085
32
reference_url https://access.redhat.com/errata/RHSA-2015:0086
reference_id RHSA-2015:0086
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0086
33
reference_url https://access.redhat.com/errata/RHSA-2015:0133
reference_id RHSA-2015:0133
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0133
34
reference_url https://access.redhat.com/errata/RHSA-2015:0134
reference_id RHSA-2015:0134
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0134
35
reference_url https://access.redhat.com/errata/RHSA-2015:0135
reference_id RHSA-2015:0135
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0135
36
reference_url https://access.redhat.com/errata/RHSA-2015:0136
reference_id RHSA-2015:0136
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0136
37
reference_url https://access.redhat.com/errata/RHSA-2015:0263
reference_id RHSA-2015:0263
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0263
38
reference_url https://access.redhat.com/errata/RHSA-2015:0264
reference_id RHSA-2015:0264
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0264
39
reference_url https://usn.ubuntu.com/2486-1/
reference_id USN-2486-1
reference_type
scores
url https://usn.ubuntu.com/2486-1/
40
reference_url https://usn.ubuntu.com/2487-1/
reference_id USN-2487-1
reference_type
scores
url https://usn.ubuntu.com/2487-1/
41
reference_url https://usn.ubuntu.com/2522-1/
reference_id USN-2522-1
reference_type
scores
url https://usn.ubuntu.com/2522-1/
42
reference_url https://usn.ubuntu.com/2522-3/
reference_id USN-2522-3
reference_type
scores
url https://usn.ubuntu.com/2522-3/
fixed_packages
0
url pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
purl pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-excs-dj44-yfby
12
vulnerability VCID-f3kd-641n-17ch
13
vulnerability VCID-f3vg-25ur-57a4
14
vulnerability VCID-f7v8-vz82-6ucj
15
vulnerability VCID-fbng-2ww3-6bdu
16
vulnerability VCID-fmhx-7a3k-ffdx
17
vulnerability VCID-hkbb-bc99-yqdd
18
vulnerability VCID-k1bn-aprc-m3ht
19
vulnerability VCID-kauc-686u-jqeh
20
vulnerability VCID-qwzq-dmn1-j7fy
21
vulnerability VCID-rz8q-v7bh-9fe1
22
vulnerability VCID-scv7-4fwv-vyek
23
vulnerability VCID-un3w-2ee4-jbcy
24
vulnerability VCID-wpkr-mbq4-ekg5
25
vulnerability VCID-wsen-t4x7-wuhc
26
vulnerability VCID-xdhx-y4jj-xfeu
27
vulnerability VCID-yhgb-pmpp-9uc2
28
vulnerability VCID-yzqr-kpjj-akgj
29
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.8.1.1-12%252Bdeb7u3
1
url pkg:deb/debian/icu@52.1-8
purl pkg:deb/debian/icu@52.1-8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8
aliases CVE-2014-6591
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yhgb-pmpp-9uc2
34
url VCID-yzqr-kpjj-akgj
vulnerability_id VCID-yzqr-kpjj-akgj
summary Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long locale string.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7415.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7415.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-7415
reference_id
reference_type
scores
0
value 0.01205
scoring_system epss
scoring_elements 0.7928
published_at 2026-06-04T12:55:00Z
1
value 0.01205
scoring_system epss
scoring_elements 0.79306
published_at 2026-06-05T12:55:00Z
2
value 0.01205
scoring_system epss
scoring_elements 0.79311
published_at 2026-06-06T12:55:00Z
3
value 0.01205
scoring_system epss
scoring_elements 0.79303
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-7415
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9911
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6293
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6293
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7415
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7415
8
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1377361
reference_id 1377361
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1377361
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=838694
reference_id 838694
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=838694
11
reference_url https://security.gentoo.org/glsa/201701-58
reference_id GLSA-201701-58
reference_type
scores
url https://security.gentoo.org/glsa/201701-58
12
reference_url https://usn.ubuntu.com/3227-1/
reference_id USN-3227-1
reference_type
scores
url https://usn.ubuntu.com/3227-1/
fixed_packages
0
url pkg:deb/debian/icu@52.1-8%2Bdeb8u7
purl pkg:deb/debian/icu@52.1-8%2Bdeb8u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8%252Bdeb8u7
1
url pkg:deb/debian/icu@57.1-6%2Bdeb9u4
purl pkg:deb/debian/icu@57.1-6%2Bdeb9u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-9ubw-4yby-v3bp
2
vulnerability VCID-f3vg-25ur-57a4
3
vulnerability VCID-f7v8-vz82-6ucj
4
vulnerability VCID-hkbb-bc99-yqdd
5
vulnerability VCID-un3w-2ee4-jbcy
6
vulnerability VCID-xdhx-y4jj-xfeu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@57.1-6%252Bdeb9u4
aliases CVE-2016-7415
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yzqr-kpjj-akgj
35
url VCID-zkex-ss5h-5ke5
vulnerability_id VCID-zkex-ss5h-5ke5
summary The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via crafted text.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8146.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8146.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-8146
reference_id
reference_type
scores
0
value 0.25808
scoring_system epss
scoring_elements 0.96359
published_at 2026-06-04T12:55:00Z
1
value 0.25808
scoring_system epss
scoring_elements 0.96364
published_at 2026-06-05T12:55:00Z
2
value 0.25808
scoring_system epss
scoring_elements 0.96368
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-8146
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8146
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8147
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8147
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1176197
reference_id 1176197
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1176197
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784773
reference_id 784773
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784773
7
reference_url https://github.com/pedrib/PoC/blob/a2842a650de88c582e963493d5e2711aa4a1b747/advisories/i-c-u-fail.txt
reference_id CVE-2014-8147;CVE-2014-8146
reference_type exploit
scores
url https://github.com/pedrib/PoC/blob/a2842a650de88c582e963493d5e2711aa4a1b747/advisories/i-c-u-fail.txt
8
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/local/43887.txt
reference_id CVE-2014-8147;CVE-2014-8146
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/local/43887.txt
9
reference_url https://security.gentoo.org/glsa/201507-04
reference_id GLSA-201507-04
reference_type
scores
url https://security.gentoo.org/glsa/201507-04
10
reference_url https://usn.ubuntu.com/2605-1/
reference_id USN-2605-1
reference_type
scores
url https://usn.ubuntu.com/2605-1/
fixed_packages
0
url pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
purl pkg:deb/debian/icu@4.8.1.1-12%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1937-rk84-qydq
1
vulnerability VCID-3hng-5n5z-7faw
2
vulnerability VCID-3yjj-bp6d-tkab
3
vulnerability VCID-562t-my7q-fkhk
4
vulnerability VCID-6grx-g6uw-yybd
5
vulnerability VCID-6q8q-9q3y-abhc
6
vulnerability VCID-7fz2-29gm-eufm
7
vulnerability VCID-8ucv-hrcz-uqau
8
vulnerability VCID-9ubw-4yby-v3bp
9
vulnerability VCID-aykx-vyhu-7yfr
10
vulnerability VCID-bkbn-dxg2-dqfk
11
vulnerability VCID-excs-dj44-yfby
12
vulnerability VCID-f3kd-641n-17ch
13
vulnerability VCID-f3vg-25ur-57a4
14
vulnerability VCID-f7v8-vz82-6ucj
15
vulnerability VCID-fbng-2ww3-6bdu
16
vulnerability VCID-fmhx-7a3k-ffdx
17
vulnerability VCID-hkbb-bc99-yqdd
18
vulnerability VCID-k1bn-aprc-m3ht
19
vulnerability VCID-kauc-686u-jqeh
20
vulnerability VCID-qwzq-dmn1-j7fy
21
vulnerability VCID-rz8q-v7bh-9fe1
22
vulnerability VCID-scv7-4fwv-vyek
23
vulnerability VCID-un3w-2ee4-jbcy
24
vulnerability VCID-wpkr-mbq4-ekg5
25
vulnerability VCID-wsen-t4x7-wuhc
26
vulnerability VCID-xdhx-y4jj-xfeu
27
vulnerability VCID-yhgb-pmpp-9uc2
28
vulnerability VCID-yzqr-kpjj-akgj
29
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@4.8.1.1-12%252Bdeb7u3
1
url pkg:deb/debian/icu@52.1-8%2Bdeb8u7
purl pkg:deb/debian/icu@52.1-8%2Bdeb8u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hng-5n5z-7faw
1
vulnerability VCID-6grx-g6uw-yybd
2
vulnerability VCID-6q8q-9q3y-abhc
3
vulnerability VCID-7fz2-29gm-eufm
4
vulnerability VCID-8ucv-hrcz-uqau
5
vulnerability VCID-9ubw-4yby-v3bp
6
vulnerability VCID-aykx-vyhu-7yfr
7
vulnerability VCID-f3kd-641n-17ch
8
vulnerability VCID-f3vg-25ur-57a4
9
vulnerability VCID-f7v8-vz82-6ucj
10
vulnerability VCID-fmhx-7a3k-ffdx
11
vulnerability VCID-hkbb-bc99-yqdd
12
vulnerability VCID-k1bn-aprc-m3ht
13
vulnerability VCID-qwzq-dmn1-j7fy
14
vulnerability VCID-un3w-2ee4-jbcy
15
vulnerability VCID-wpkr-mbq4-ekg5
16
vulnerability VCID-xdhx-y4jj-xfeu
17
vulnerability VCID-yzqr-kpjj-akgj
18
vulnerability VCID-zkex-ss5h-5ke5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@52.1-8%252Bdeb8u7
2
url pkg:deb/debian/icu@57.1-6%2Bdeb9u4
purl pkg:deb/debian/icu@57.1-6%2Bdeb9u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7fz2-29gm-eufm
1
vulnerability VCID-9ubw-4yby-v3bp
2
vulnerability VCID-f3vg-25ur-57a4
3
vulnerability VCID-f7v8-vz82-6ucj
4
vulnerability VCID-hkbb-bc99-yqdd
5
vulnerability VCID-un3w-2ee4-jbcy
6
vulnerability VCID-xdhx-y4jj-xfeu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@57.1-6%252Bdeb9u4
aliases CVE-2014-8146
risk_score 0.4
exploitability 2.0
weighted_severity 0.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zkex-ss5h-5ke5
Fixing_vulnerabilities
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/icu@3.6-2etch3