Lookup for vulnerable packages by Package URL.
| Purl | pkg:deb/debian/gtk%2B2.0@0?distro=trixie |
| Type | deb |
| Namespace | debian |
| Name | gtk+2.0 |
| Version | 0 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 2.4.9-2 |
| Latest_non_vulnerable_version | 2.24.33-10 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-7ftr-5ebq-fkd7 |
| vulnerability_id |
VCID-7ftr-5ebq-fkd7 |
| summary |
Untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24.0 allows local users to gain privileges via a Trojan horse uxtheme.dll file in the current working directory, a different vulnerability than CVE-2010-4831. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2010-4833 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00517 |
| scoring_system |
epss |
| scoring_elements |
0.66611 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00517 |
| scoring_system |
epss |
| scoring_elements |
0.66651 |
| published_at |
2026-04-07T12:55:00Z |
|
| 2 |
| value |
0.00517 |
| scoring_system |
epss |
| scoring_elements |
0.66677 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.00517 |
| scoring_system |
epss |
| scoring_elements |
0.667 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00517 |
| scoring_system |
epss |
| scoring_elements |
0.66715 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00517 |
| scoring_system |
epss |
| scoring_elements |
0.66735 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.00517 |
| scoring_system |
epss |
| scoring_elements |
0.66722 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.00517 |
| scoring_system |
epss |
| scoring_elements |
0.66692 |
| published_at |
2026-04-13T12:55:00Z |
|
| 8 |
| value |
0.00517 |
| scoring_system |
epss |
| scoring_elements |
0.66726 |
| published_at |
2026-04-16T12:55:00Z |
|
| 9 |
| value |
0.00517 |
| scoring_system |
epss |
| scoring_elements |
0.66739 |
| published_at |
2026-04-18T12:55:00Z |
|
| 10 |
| value |
0.00517 |
| scoring_system |
epss |
| scoring_elements |
0.66724 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2010-4833 |
|
|
| fixed_packages |
|
| aliases |
CVE-2010-4833
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7ftr-5ebq-fkd7 |
|
| 1 |
| url |
VCID-bcqw-ykyp-93e6 |
| vulnerability_id |
VCID-bcqw-ykyp-93e6 |
| summary |
GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2014-1949 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00037 |
| scoring_system |
epss |
| scoring_elements |
0.11034 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00037 |
| scoring_system |
epss |
| scoring_elements |
0.11178 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.00037 |
| scoring_system |
epss |
| scoring_elements |
0.11237 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.00037 |
| scoring_system |
epss |
| scoring_elements |
0.11052 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.00037 |
| scoring_system |
epss |
| scoring_elements |
0.11131 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.00037 |
| scoring_system |
epss |
| scoring_elements |
0.11187 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.00037 |
| scoring_system |
epss |
| scoring_elements |
0.11196 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.00037 |
| scoring_system |
epss |
| scoring_elements |
0.11164 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.00037 |
| scoring_system |
epss |
| scoring_elements |
0.11138 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.00037 |
| scoring_system |
epss |
| scoring_elements |
0.11003 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.00037 |
| scoring_system |
epss |
| scoring_elements |
0.11013 |
| published_at |
2026-04-18T12:55:00Z |
|
| 11 |
| value |
0.00037 |
| scoring_system |
epss |
| scoring_elements |
0.11144 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2014-1949 |
|
| 1 |
|
| 2 |
|
|
| fixed_packages |
|
| aliases |
CVE-2014-1949
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-bcqw-ykyp-93e6 |
|
| 2 |
| url |
VCID-s2v6-rey6-jqen |
| vulnerability_id |
VCID-s2v6-rey6-jqen |
| summary |
Untrusted search path vulnerability in gdk/win32/gdkinput-win32.c in GTK+ before 2.21.8 allows local users to gain privileges via a Trojan horse Wintab32.dll file in the current working directory. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2010-4831 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00122 |
| scoring_system |
epss |
| scoring_elements |
0.31236 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00122 |
| scoring_system |
epss |
| scoring_elements |
0.31365 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.00122 |
| scoring_system |
epss |
| scoring_elements |
0.31406 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.00122 |
| scoring_system |
epss |
| scoring_elements |
0.31226 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.00122 |
| scoring_system |
epss |
| scoring_elements |
0.31278 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.00122 |
| scoring_system |
epss |
| scoring_elements |
0.31309 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.00122 |
| scoring_system |
epss |
| scoring_elements |
0.31314 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.00122 |
| scoring_system |
epss |
| scoring_elements |
0.31271 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.00122 |
| scoring_system |
epss |
| scoring_elements |
0.31228 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.00122 |
| scoring_system |
epss |
| scoring_elements |
0.31262 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.00122 |
| scoring_system |
epss |
| scoring_elements |
0.31242 |
| published_at |
2026-04-18T12:55:00Z |
|
| 11 |
| value |
0.00122 |
| scoring_system |
epss |
| scoring_elements |
0.31215 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2010-4831 |
|
|
| fixed_packages |
|
| aliases |
CVE-2010-4831
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-s2v6-rey6-jqen |
|
| 3 |
| url |
VCID-z4pw-yw4k-9qch |
| vulnerability_id |
VCID-z4pw-yw4k-9qch |
| summary |
Untrusted search path vulnerability in GTK2 in OpenSUSE 11.0 and 11.1 allows local users to execute arbitrary code via a Trojan horse GTK module in an unspecified "relative search path." |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-0848 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40719 |
| published_at |
2026-04-21T12:55:00Z |
|
| 1 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40725 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40809 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40837 |
| published_at |
2026-04-11T12:55:00Z |
|
| 4 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40762 |
| published_at |
2026-04-07T12:55:00Z |
|
| 5 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40811 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40819 |
| published_at |
2026-04-09T12:55:00Z |
|
| 7 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40803 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40784 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40828 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40798 |
| published_at |
2026-04-18T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-0848 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-0848
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-z4pw-yw4k-9qch |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:deb/debian/gtk%252B2.0@0%3Fdistro=trixie |