Lookup for vulnerable packages by Package URL.

Purlpkg:ebuild/www-servers/lighttpd@1.4.35
Typeebuild
Namespacewww-servers
Namelighttpd
Version1.4.35
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.4.67
Latest_non_vulnerable_version1.4.67
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-dnxd-x42g-2qcu
vulnerability_id VCID-dnxd-x42g-2qcu
summary
Multiple vulnerabilities have been found in lighttpd, allowing
    remote attackers cause a Denial of Service condition or execute arbitrary
    SQL statements.
references
0
reference_url http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.31_fix_connection_header_dos.patch
reference_id
reference_type
scores
url http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.31_fix_connection_header_dos.patch
1
reference_url http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2012_01.txt
reference_id
reference_type
scores
url http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2012_01.txt
2
reference_url http://lists.opensuse.org/opensuse-updates/2012-11/msg00044.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-updates/2012-11/msg00044.html
3
reference_url http://lists.opensuse.org/opensuse-updates/2014-01/msg00051.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-updates/2014-01/msg00051.html
4
reference_url http://marc.info/?l=bugtraq&m=141576815022399&w=2
reference_id
reference_type
scores
url http://marc.info/?l=bugtraq&m=141576815022399&w=2
5
reference_url http://osvdb.org/87623
reference_id
reference_type
scores
url http://osvdb.org/87623
6
reference_url http://packetstormsecurity.org/files/118282/Simple-Lighttpd-1.4.31-Denial-Of-Service.html
reference_id
reference_type
scores
url http://packetstormsecurity.org/files/118282/Simple-Lighttpd-1.4.31-Denial-Of-Service.html
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-5533
reference_id
reference_type
scores
0
value 0.37913
scoring_system epss
scoring_elements 0.97223
published_at 2026-04-21T12:55:00Z
1
value 0.37913
scoring_system epss
scoring_elements 0.97208
published_at 2026-04-11T12:55:00Z
2
value 0.37913
scoring_system epss
scoring_elements 0.97209
published_at 2026-04-13T12:55:00Z
3
value 0.37913
scoring_system epss
scoring_elements 0.97217
published_at 2026-04-16T12:55:00Z
4
value 0.37913
scoring_system epss
scoring_elements 0.9722
published_at 2026-04-18T12:55:00Z
5
value 0.39102
scoring_system epss
scoring_elements 0.97253
published_at 2026-04-01T12:55:00Z
6
value 0.39102
scoring_system epss
scoring_elements 0.97273
published_at 2026-04-09T12:55:00Z
7
value 0.39102
scoring_system epss
scoring_elements 0.97259
published_at 2026-04-02T12:55:00Z
8
value 0.39102
scoring_system epss
scoring_elements 0.97264
published_at 2026-04-04T12:55:00Z
9
value 0.39102
scoring_system epss
scoring_elements 0.97265
published_at 2026-04-07T12:55:00Z
10
value 0.39102
scoring_system epss
scoring_elements 0.97272
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-5533
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5533
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5533
9
reference_url http://secunia.com/advisories/51268
reference_id
reference_type
scores
url http://secunia.com/advisories/51268
10
reference_url http://secunia.com/advisories/51298
reference_id
reference_type
scores
url http://secunia.com/advisories/51298
11
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/80213
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/80213
12
reference_url https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0345
reference_id
reference_type
scores
url https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0345
13
reference_url http://www.exploit-db.com/exploits/22902
reference_id
reference_type
scores
url http://www.exploit-db.com/exploits/22902
14
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2013:100
reference_id
reference_type
scores
url http://www.mandriva.com/security/advisories?name=MDVSA-2013:100
15
reference_url http://www.openwall.com/lists/oss-security/2012/11/21/1
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/11/21/1
16
reference_url http://www.securityfocus.com/bid/56619
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/56619
17
reference_url http://www.securitytracker.com/id?1027802
reference_id
reference_type
scores
url http://www.securitytracker.com/id?1027802
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lighttpd:lighttpd:1.4.31:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lighttpd:lighttpd:1.4.31:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lighttpd:lighttpd:1.4.31:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lighttpd:lighttpd:1.4.32:*:*:*:*:*:*:*
reference_id cpe:2.3:a:lighttpd:lighttpd:1.4.32:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:lighttpd:lighttpd:1.4.32:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-5533
reference_id CVE-2012-5533
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:N/A:P
url https://nvd.nist.gov/vuln/detail/CVE-2012-5533
21
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/22902.sh
reference_id CVE-2012-5533;OSVDB-87623
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/22902.sh
22
reference_url https://security.gentoo.org/glsa/201406-10
reference_id GLSA-201406-10
reference_type
scores
url https://security.gentoo.org/glsa/201406-10
fixed_packages
0
url pkg:ebuild/www-servers/lighttpd@1.4.35
purl pkg:ebuild/www-servers/lighttpd@1.4.35
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/lighttpd@1.4.35
aliases CVE-2012-5533
risk_score 9.0
exploitability 2.0
weighted_severity 4.5
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dnxd-x42g-2qcu
1
url VCID-ebx8-yzbr-57ew
vulnerability_id VCID-ebx8-yzbr-57ew
summary
Multiple vulnerabilities have been found in lighttpd, allowing
    remote attackers cause a Denial of Service condition or execute arbitrary
    SQL statements.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-4508
reference_id
reference_type
scores
0
value 0.00834
scoring_system epss
scoring_elements 0.74639
published_at 2026-04-21T12:55:00Z
1
value 0.00834
scoring_system epss
scoring_elements 0.74632
published_at 2026-04-11T12:55:00Z
2
value 0.00834
scoring_system epss
scoring_elements 0.74612
published_at 2026-04-12T12:55:00Z
3
value 0.00834
scoring_system epss
scoring_elements 0.74603
published_at 2026-04-13T12:55:00Z
4
value 0.00834
scoring_system epss
scoring_elements 0.7464
published_at 2026-04-16T12:55:00Z
5
value 0.00834
scoring_system epss
scoring_elements 0.74648
published_at 2026-04-18T12:55:00Z
6
value 0.02907
scoring_system epss
scoring_elements 0.86299
published_at 2026-04-01T12:55:00Z
7
value 0.02907
scoring_system epss
scoring_elements 0.8631
published_at 2026-04-02T12:55:00Z
8
value 0.02907
scoring_system epss
scoring_elements 0.86328
published_at 2026-04-04T12:55:00Z
9
value 0.02907
scoring_system epss
scoring_elements 0.86329
published_at 2026-04-07T12:55:00Z
10
value 0.02907
scoring_system epss
scoring_elements 0.86347
published_at 2026-04-08T12:55:00Z
11
value 0.02907
scoring_system epss
scoring_elements 0.86357
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-4508
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4508
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4508
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4559
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4559
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4560
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4560
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729453
reference_id 729453
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729453
5
reference_url https://security.gentoo.org/glsa/201406-10
reference_id GLSA-201406-10
reference_type
scores
url https://security.gentoo.org/glsa/201406-10
fixed_packages
0
url pkg:ebuild/www-servers/lighttpd@1.4.35
purl pkg:ebuild/www-servers/lighttpd@1.4.35
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/lighttpd@1.4.35
aliases CVE-2013-4508
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ebx8-yzbr-57ew
2
url VCID-eetd-2zwu-fud5
vulnerability_id VCID-eetd-2zwu-fud5
summary
Multiple vulnerabilities have been found in lighttpd, allowing
    remote attackers cause a Denial of Service condition or execute arbitrary
    SQL statements.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-4362
reference_id
reference_type
scores
0
value 0.03641
scoring_system epss
scoring_elements 0.87797
published_at 2026-04-01T12:55:00Z
1
value 0.03641
scoring_system epss
scoring_elements 0.87808
published_at 2026-04-02T12:55:00Z
2
value 0.03641
scoring_system epss
scoring_elements 0.87819
published_at 2026-04-04T12:55:00Z
3
value 0.03641
scoring_system epss
scoring_elements 0.87822
published_at 2026-04-07T12:55:00Z
4
value 0.03641
scoring_system epss
scoring_elements 0.87844
published_at 2026-04-08T12:55:00Z
5
value 0.03641
scoring_system epss
scoring_elements 0.87851
published_at 2026-04-09T12:55:00Z
6
value 0.03641
scoring_system epss
scoring_elements 0.87862
published_at 2026-04-11T12:55:00Z
7
value 0.04391
scoring_system epss
scoring_elements 0.88999
published_at 2026-04-12T12:55:00Z
8
value 0.04391
scoring_system epss
scoring_elements 0.88997
published_at 2026-04-13T12:55:00Z
9
value 0.04391
scoring_system epss
scoring_elements 0.8901
published_at 2026-04-16T12:55:00Z
10
value 0.04391
scoring_system epss
scoring_elements 0.89008
published_at 2026-04-18T12:55:00Z
11
value 0.04391
scoring_system epss
scoring_elements 0.89004
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-4362
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4362
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4362
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652726
reference_id 652726
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652726
3
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/18295.txt
reference_id CVE-2011-4362;OSVDB-77366
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/18295.txt
4
reference_url https://security.gentoo.org/glsa/201406-10
reference_id GLSA-201406-10
reference_type
scores
url https://security.gentoo.org/glsa/201406-10
fixed_packages
0
url pkg:ebuild/www-servers/lighttpd@1.4.35
purl pkg:ebuild/www-servers/lighttpd@1.4.35
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/lighttpd@1.4.35
aliases CVE-2011-4362
risk_score null
exploitability 2.0
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eetd-2zwu-fud5
3
url VCID-ewrp-7up7-9qf3
vulnerability_id VCID-ewrp-7up7-9qf3
summary
Multiple vulnerabilities have been found in lighttpd, allowing
    remote attackers cause a Denial of Service condition or execute arbitrary
    SQL statements.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-4560
reference_id
reference_type
scores
0
value 0.06818
scoring_system epss
scoring_elements 0.91332
published_at 2026-04-11T12:55:00Z
1
value 0.06818
scoring_system epss
scoring_elements 0.91334
published_at 2026-04-12T12:55:00Z
2
value 0.06818
scoring_system epss
scoring_elements 0.91333
published_at 2026-04-13T12:55:00Z
3
value 0.06818
scoring_system epss
scoring_elements 0.91358
published_at 2026-04-21T12:55:00Z
4
value 0.06818
scoring_system epss
scoring_elements 0.91357
published_at 2026-04-18T12:55:00Z
5
value 0.07805
scoring_system epss
scoring_elements 0.91938
published_at 2026-04-01T12:55:00Z
6
value 0.07805
scoring_system epss
scoring_elements 0.91978
published_at 2026-04-09T12:55:00Z
7
value 0.07805
scoring_system epss
scoring_elements 0.91947
published_at 2026-04-02T12:55:00Z
8
value 0.07805
scoring_system epss
scoring_elements 0.91954
published_at 2026-04-04T12:55:00Z
9
value 0.07805
scoring_system epss
scoring_elements 0.9196
published_at 2026-04-07T12:55:00Z
10
value 0.07805
scoring_system epss
scoring_elements 0.91973
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-4560
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4508
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4508
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4559
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4559
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4560
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4560
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729453
reference_id 729453
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729453
5
reference_url https://security.gentoo.org/glsa/201406-10
reference_id GLSA-201406-10
reference_type
scores
url https://security.gentoo.org/glsa/201406-10
fixed_packages
0
url pkg:ebuild/www-servers/lighttpd@1.4.35
purl pkg:ebuild/www-servers/lighttpd@1.4.35
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/lighttpd@1.4.35
aliases CVE-2013-4560
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ewrp-7up7-9qf3
4
url VCID-gt7s-kr68-5fer
vulnerability_id VCID-gt7s-kr68-5fer
summary
Multiple vulnerabilities have been found in lighttpd, allowing
    remote attackers cause a Denial of Service condition or execute arbitrary
    SQL statements.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-2323
reference_id
reference_type
scores
0
value 0.90366
scoring_system epss
scoring_elements 0.99606
published_at 2026-04-21T12:55:00Z
1
value 0.91037
scoring_system epss
scoring_elements 0.99638
published_at 2026-04-11T12:55:00Z
2
value 0.91037
scoring_system epss
scoring_elements 0.99639
published_at 2026-04-13T12:55:00Z
3
value 0.91037
scoring_system epss
scoring_elements 0.9964
published_at 2026-04-16T12:55:00Z
4
value 0.91037
scoring_system epss
scoring_elements 0.99641
published_at 2026-04-18T12:55:00Z
5
value 0.9178
scoring_system epss
scoring_elements 0.99685
published_at 2026-04-04T12:55:00Z
6
value 0.9178
scoring_system epss
scoring_elements 0.99686
published_at 2026-04-07T12:55:00Z
7
value 0.9178
scoring_system epss
scoring_elements 0.99687
published_at 2026-04-09T12:55:00Z
8
value 0.9178
scoring_system epss
scoring_elements 0.99683
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-2323
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2323
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2323
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2324
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2324
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741493
reference_id 741493
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741493
4
reference_url https://security.gentoo.org/glsa/201406-10
reference_id GLSA-201406-10
reference_type
scores
url https://security.gentoo.org/glsa/201406-10
fixed_packages
0
url pkg:ebuild/www-servers/lighttpd@1.4.35
purl pkg:ebuild/www-servers/lighttpd@1.4.35
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/lighttpd@1.4.35
aliases CVE-2014-2323
risk_score 1.6
exploitability 2.0
weighted_severity 0.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gt7s-kr68-5fer
5
url VCID-rz5g-r2e9-9kgw
vulnerability_id VCID-rz5g-r2e9-9kgw
summary
Multiple vulnerabilities have been found in lighttpd, allowing
    remote attackers cause a Denial of Service condition or execute arbitrary
    SQL statements.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-4559
reference_id
reference_type
scores
0
value 0.09523
scoring_system epss
scoring_elements 0.92842
published_at 2026-04-13T12:55:00Z
1
value 0.09523
scoring_system epss
scoring_elements 0.92852
published_at 2026-04-16T12:55:00Z
2
value 0.09523
scoring_system epss
scoring_elements 0.92853
published_at 2026-04-18T12:55:00Z
3
value 0.09523
scoring_system epss
scoring_elements 0.92858
published_at 2026-04-21T12:55:00Z
4
value 0.13983
scoring_system epss
scoring_elements 0.94323
published_at 2026-04-08T12:55:00Z
5
value 0.13983
scoring_system epss
scoring_elements 0.94292
published_at 2026-04-01T12:55:00Z
6
value 0.13983
scoring_system epss
scoring_elements 0.94327
published_at 2026-04-09T12:55:00Z
7
value 0.13983
scoring_system epss
scoring_elements 0.94301
published_at 2026-04-02T12:55:00Z
8
value 0.13983
scoring_system epss
scoring_elements 0.94312
published_at 2026-04-04T12:55:00Z
9
value 0.13983
scoring_system epss
scoring_elements 0.94314
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-4559
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4508
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4508
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4559
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4559
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4560
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4560
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729453
reference_id 729453
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729453
5
reference_url https://security.gentoo.org/glsa/201406-10
reference_id GLSA-201406-10
reference_type
scores
url https://security.gentoo.org/glsa/201406-10
fixed_packages
0
url pkg:ebuild/www-servers/lighttpd@1.4.35
purl pkg:ebuild/www-servers/lighttpd@1.4.35
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/lighttpd@1.4.35
aliases CVE-2013-4559
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rz5g-r2e9-9kgw
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/lighttpd@1.4.35