Lookup for vulnerable packages by Package URL.
| Purl | pkg:deb/debian/flightgear@1:2024.1.4%2Bdfsg-2?distro=trixie |
| Type | deb |
| Namespace | debian |
| Name | flightgear |
| Version | 1:2024.1.4+dfsg-2 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | null |
| Latest_non_vulnerable_version | null |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-7q3y-2xqq-xyeb |
| vulnerability_id |
VCID-7q3y-2xqq-xyeb |
| summary |
In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-13709 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00136 |
| scoring_system |
epss |
| scoring_elements |
0.33413 |
| published_at |
2026-04-18T12:55:00Z |
|
| 1 |
| value |
0.00237 |
| scoring_system |
epss |
| scoring_elements |
0.4673 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.00237 |
| scoring_system |
epss |
| scoring_elements |
0.46749 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.00237 |
| scoring_system |
epss |
| scoring_elements |
0.46697 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.00237 |
| scoring_system |
epss |
| scoring_elements |
0.46752 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.00237 |
| scoring_system |
epss |
| scoring_elements |
0.46691 |
| published_at |
2026-04-01T12:55:00Z |
|
| 6 |
| value |
0.00237 |
| scoring_system |
epss |
| scoring_elements |
0.46774 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.00237 |
| scoring_system |
epss |
| scoring_elements |
0.46746 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.00237 |
| scoring_system |
epss |
| scoring_elements |
0.46754 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.00237 |
| scoring_system |
epss |
| scoring_elements |
0.4681 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.00237 |
| scoring_system |
epss |
| scoring_elements |
0.46751 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-13709 |
|
| 1 |
|
| 2 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-13709
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7q3y-2xqq-xyeb |
|
| 1 |
| url |
VCID-8tcp-1jww-k3f3 |
| vulnerability_id |
VCID-8tcp-1jww-k3f3 |
| summary |
Multiple vulnerabilities have been found in FlightGear and SimGear
allowing remote attackers to cause Denial of Service and possibly execute
arbitrary code. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2012-2090 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0448 |
| scoring_system |
epss |
| scoring_elements |
0.89049 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.0448 |
| scoring_system |
epss |
| scoring_elements |
0.89057 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.0448 |
| scoring_system |
epss |
| scoring_elements |
0.89072 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.0448 |
| scoring_system |
epss |
| scoring_elements |
0.89075 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.0448 |
| scoring_system |
epss |
| scoring_elements |
0.89093 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.0448 |
| scoring_system |
epss |
| scoring_elements |
0.89098 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.0448 |
| scoring_system |
epss |
| scoring_elements |
0.89109 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.0448 |
| scoring_system |
epss |
| scoring_elements |
0.89105 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.0448 |
| scoring_system |
epss |
| scoring_elements |
0.89103 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.0448 |
| scoring_system |
epss |
| scoring_elements |
0.89117 |
| published_at |
2026-04-18T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2012-2090 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2012-2090
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8tcp-1jww-k3f3 |
|
| 2 |
| url |
VCID-9ewn-73tt-dbbp |
| vulnerability_id |
VCID-9ewn-73tt-dbbp |
| summary |
In FlightGear before 2017.2.1, the FGCommand interface allows overwriting any file the user has write access to, but not with arbitrary data: only with the contents of a FlightGear flightplan (XML). A resource such as a malicious third-party aircraft could exploit this to damage files belonging to the user. Both this issue and CVE-2016-9956 are directory traversal vulnerabilities in Autopilot/route_mgr.cxx - this one exists because of an incomplete fix for CVE-2016-9956. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-8921 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00588 |
| scoring_system |
epss |
| scoring_elements |
0.69074 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00588 |
| scoring_system |
epss |
| scoring_elements |
0.6909 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.00588 |
| scoring_system |
epss |
| scoring_elements |
0.69111 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.00588 |
| scoring_system |
epss |
| scoring_elements |
0.69093 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.00588 |
| scoring_system |
epss |
| scoring_elements |
0.69143 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.00588 |
| scoring_system |
epss |
| scoring_elements |
0.69162 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.00588 |
| scoring_system |
epss |
| scoring_elements |
0.69183 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.00588 |
| scoring_system |
epss |
| scoring_elements |
0.69168 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.00588 |
| scoring_system |
epss |
| scoring_elements |
0.69139 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.00588 |
| scoring_system |
epss |
| scoring_elements |
0.69179 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.00588 |
| scoring_system |
epss |
| scoring_elements |
0.69187 |
| published_at |
2026-04-18T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-8921 |
|
| 1 |
|
| 2 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-8921
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9ewn-73tt-dbbp |
|
| 3 |
| url |
VCID-f7c9-mtg5-73d2 |
| vulnerability_id |
VCID-f7c9-mtg5-73d2 |
| summary |
An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0781 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00042 |
| scoring_system |
epss |
| scoring_elements |
0.12512 |
| published_at |
2026-04-18T12:55:00Z |
|
| 1 |
| value |
0.00042 |
| scoring_system |
epss |
| scoring_elements |
0.12718 |
| published_at |
2026-04-09T12:55:00Z |
|
| 2 |
| value |
0.00042 |
| scoring_system |
epss |
| scoring_elements |
0.12685 |
| published_at |
2026-04-11T12:55:00Z |
|
| 3 |
| value |
0.00042 |
| scoring_system |
epss |
| scoring_elements |
0.12644 |
| published_at |
2026-04-12T12:55:00Z |
|
| 4 |
| value |
0.00042 |
| scoring_system |
epss |
| scoring_elements |
0.126 |
| published_at |
2026-04-13T12:55:00Z |
|
| 5 |
| value |
0.00042 |
| scoring_system |
epss |
| scoring_elements |
0.12504 |
| published_at |
2026-04-16T12:55:00Z |
|
| 6 |
| value |
0.00042 |
| scoring_system |
epss |
| scoring_elements |
0.12733 |
| published_at |
2026-04-02T12:55:00Z |
|
| 7 |
| value |
0.00042 |
| scoring_system |
epss |
| scoring_elements |
0.12778 |
| published_at |
2026-04-04T12:55:00Z |
|
| 8 |
| value |
0.00042 |
| scoring_system |
epss |
| scoring_elements |
0.12586 |
| published_at |
2026-04-07T12:55:00Z |
|
| 9 |
| value |
0.00042 |
| scoring_system |
epss |
| scoring_elements |
0.12664 |
| published_at |
2026-04-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0781 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-0781
|
| risk_score |
3.0 |
| exploitability |
0.5 |
| weighted_severity |
6.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-f7c9-mtg5-73d2 |
|
| 4 |
| url |
VCID-jvuk-8u9v-wyfy |
| vulnerability_id |
VCID-jvuk-8u9v-wyfy |
| summary |
security update |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2016-9956 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01886 |
| scoring_system |
epss |
| scoring_elements |
0.83101 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.01886 |
| scoring_system |
epss |
| scoring_elements |
0.83118 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.01886 |
| scoring_system |
epss |
| scoring_elements |
0.83131 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.01886 |
| scoring_system |
epss |
| scoring_elements |
0.83129 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.01886 |
| scoring_system |
epss |
| scoring_elements |
0.83154 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.01886 |
| scoring_system |
epss |
| scoring_elements |
0.83162 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.01886 |
| scoring_system |
epss |
| scoring_elements |
0.83178 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.01886 |
| scoring_system |
epss |
| scoring_elements |
0.83171 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.01886 |
| scoring_system |
epss |
| scoring_elements |
0.83167 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.01886 |
| scoring_system |
epss |
| scoring_elements |
0.83204 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.01886 |
| scoring_system |
epss |
| scoring_elements |
0.83205 |
| published_at |
2026-04-18T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2016-9956 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2016-9956
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jvuk-8u9v-wyfy |
|
| 5 |
| url |
VCID-sgqz-rav3-fufm |
| vulnerability_id |
VCID-sgqz-rav3-fufm |
| summary |
Multiple vulnerabilities have been found in FlightGear and SimGear
allowing remote attackers to cause Denial of Service and possibly execute
arbitrary code. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2012-2091 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.07557 |
| scoring_system |
epss |
| scoring_elements |
0.91789 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.07557 |
| scoring_system |
epss |
| scoring_elements |
0.91797 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.07557 |
| scoring_system |
epss |
| scoring_elements |
0.91803 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.07557 |
| scoring_system |
epss |
| scoring_elements |
0.91811 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.07557 |
| scoring_system |
epss |
| scoring_elements |
0.91824 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.07557 |
| scoring_system |
epss |
| scoring_elements |
0.91831 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.07557 |
| scoring_system |
epss |
| scoring_elements |
0.91834 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.07557 |
| scoring_system |
epss |
| scoring_elements |
0.91836 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.07557 |
| scoring_system |
epss |
| scoring_elements |
0.91832 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.07557 |
| scoring_system |
epss |
| scoring_elements |
0.91852 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.07557 |
| scoring_system |
epss |
| scoring_elements |
0.91849 |
| published_at |
2026-04-18T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2012-2091 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2012-2091
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sgqz-rav3-fufm |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:deb/debian/flightgear@1:2024.1.4%252Bdfsg-2%3Fdistro=trixie |