Lookup for vulnerable packages by Package URL.
| Purl | pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86@6.0.21 |
| Type | nuget |
| Namespace | |
| Name | Microsoft.NETCore.App.Runtime.win-x86 |
| Version | 6.0.21 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | true |
| Next_non_vulnerable_version | null |
| Latest_non_vulnerable_version | null |
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-9mhp-3mjq-4fcb |
| vulnerability_id |
VCID-9mhp-3mjq-4fcb |
| summary |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Visual Studio Remote Code Execution Vulnerability |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2023-36793 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01715 |
| scoring_system |
epss |
| scoring_elements |
0.82328 |
| published_at |
2026-04-04T12:55:00Z |
|
| 1 |
| value |
0.01715 |
| scoring_system |
epss |
| scoring_elements |
0.8231 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.01903 |
| scoring_system |
epss |
| scoring_elements |
0.83279 |
| published_at |
2026-04-16T12:55:00Z |
|
| 3 |
| value |
0.01903 |
| scoring_system |
epss |
| scoring_elements |
0.83243 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.01903 |
| scoring_system |
epss |
| scoring_elements |
0.83248 |
| published_at |
2026-04-12T12:55:00Z |
|
| 5 |
| value |
0.01903 |
| scoring_system |
epss |
| scoring_elements |
0.83254 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.01903 |
| scoring_system |
epss |
| scoring_elements |
0.83238 |
| published_at |
2026-04-09T12:55:00Z |
|
| 7 |
| value |
0.01903 |
| scoring_system |
epss |
| scoring_elements |
0.83206 |
| published_at |
2026-04-07T12:55:00Z |
|
| 8 |
| value |
0.01903 |
| scoring_system |
epss |
| scoring_elements |
0.83282 |
| published_at |
2026-04-21T12:55:00Z |
|
| 9 |
| value |
0.01903 |
| scoring_system |
epss |
| scoring_elements |
0.83281 |
| published_at |
2026-04-18T12:55:00Z |
|
| 10 |
| value |
0.01903 |
| scoring_system |
epss |
| scoring_elements |
0.83231 |
| published_at |
2026-04-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2023-36793 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2023-36793, GHSA-g4p8-g7mq-wpx4
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9mhp-3mjq-4fcb |
|
| 1 |
| url |
VCID-bcjc-kgvg-n3h7 |
| vulnerability_id |
VCID-bcjc-kgvg-n3h7 |
| summary |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Visual Studio Remote Code Execution Vulnerability |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2023-36796 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01117 |
| scoring_system |
epss |
| scoring_elements |
0.78182 |
| published_at |
2026-04-04T12:55:00Z |
|
| 1 |
| value |
0.01117 |
| scoring_system |
epss |
| scoring_elements |
0.78153 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.0124 |
| scoring_system |
epss |
| scoring_elements |
0.79263 |
| published_at |
2026-04-21T12:55:00Z |
|
| 3 |
| value |
0.0124 |
| scoring_system |
epss |
| scoring_elements |
0.79208 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.0124 |
| scoring_system |
epss |
| scoring_elements |
0.79233 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.0124 |
| scoring_system |
epss |
| scoring_elements |
0.79241 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.0124 |
| scoring_system |
epss |
| scoring_elements |
0.79265 |
| published_at |
2026-04-16T12:55:00Z |
|
| 7 |
| value |
0.0124 |
| scoring_system |
epss |
| scoring_elements |
0.7925 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.0124 |
| scoring_system |
epss |
| scoring_elements |
0.79238 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.0124 |
| scoring_system |
epss |
| scoring_elements |
0.79262 |
| published_at |
2026-04-18T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2023-36796 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2023-36796, GHSA-h7jm-g87p-5935
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-bcjc-kgvg-n3h7 |
|
| 2 |
| url |
VCID-k2ee-5pum-4qhz |
| vulnerability_id |
VCID-k2ee-5pum-4qhz |
| summary |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Visual Studio Remote Code Execution Vulnerability |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2023-36794 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0111 |
| scoring_system |
epss |
| scoring_elements |
0.78089 |
| published_at |
2026-04-02T12:55:00Z |
|
| 1 |
| value |
0.0111 |
| scoring_system |
epss |
| scoring_elements |
0.78119 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.01232 |
| scoring_system |
epss |
| scoring_elements |
0.79186 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.01232 |
| scoring_system |
epss |
| scoring_elements |
0.79201 |
| published_at |
2026-04-11T12:55:00Z |
|
| 4 |
| value |
0.01232 |
| scoring_system |
epss |
| scoring_elements |
0.79177 |
| published_at |
2026-04-13T12:55:00Z |
|
| 5 |
| value |
0.01232 |
| scoring_system |
epss |
| scoring_elements |
0.79169 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.01232 |
| scoring_system |
epss |
| scoring_elements |
0.79145 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.01232 |
| scoring_system |
epss |
| scoring_elements |
0.792 |
| published_at |
2026-04-21T12:55:00Z |
|
| 8 |
| value |
0.01232 |
| scoring_system |
epss |
| scoring_elements |
0.79203 |
| published_at |
2026-04-16T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2023-36794 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2023-36794, GHSA-38fq-h5hc-gwv8
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-k2ee-5pum-4qhz |
|
| 3 |
| url |
VCID-y2uu-7weq-puhy |
| vulnerability_id |
VCID-y2uu-7weq-puhy |
| summary |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Visual Studio Remote Code Execution Vulnerability |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2023-36792 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01439 |
| scoring_system |
epss |
| scoring_elements |
0.80664 |
| published_at |
2026-04-02T12:55:00Z |
|
| 1 |
| value |
0.01439 |
| scoring_system |
epss |
| scoring_elements |
0.80685 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.01598 |
| scoring_system |
epss |
| scoring_elements |
0.81681 |
| published_at |
2026-04-13T12:55:00Z |
|
| 3 |
| value |
0.01598 |
| scoring_system |
epss |
| scoring_elements |
0.81687 |
| published_at |
2026-04-12T12:55:00Z |
|
| 4 |
| value |
0.01598 |
| scoring_system |
epss |
| scoring_elements |
0.817 |
| published_at |
2026-04-11T12:55:00Z |
|
| 5 |
| value |
0.01598 |
| scoring_system |
epss |
| scoring_elements |
0.8168 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.01598 |
| scoring_system |
epss |
| scoring_elements |
0.81676 |
| published_at |
2026-04-08T12:55:00Z |
|
| 7 |
| value |
0.01598 |
| scoring_system |
epss |
| scoring_elements |
0.81648 |
| published_at |
2026-04-07T12:55:00Z |
|
| 8 |
| value |
0.01598 |
| scoring_system |
epss |
| scoring_elements |
0.81723 |
| published_at |
2026-04-21T12:55:00Z |
|
| 9 |
| value |
0.01598 |
| scoring_system |
epss |
| scoring_elements |
0.81719 |
| published_at |
2026-04-18T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2023-36792 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2023-36792, GHSA-3qf9-qxfj-4whc
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-y2uu-7weq-puhy |
|
|
| Fixing_vulnerabilities |
|
| Risk_score | 4.0 |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86@6.0.21 |