Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/libmspack@0.11-1?distro=trixie
Typedeb
Namespacedebian
Namelibmspack
Version0.11-1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version0.11-1.1
Latest_non_vulnerable_version0.11-1.1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-1vgy-c562-9bbf
vulnerability_id VCID-1vgy-c562-9bbf
summary 
Multiple vulnerabilities have been found in cabextract and
    libmspack, the worst of which could result in a Denial of Service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18585.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18585.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-18585
reference_id
reference_type
scores
0
value 0.01307
scoring_system epss
scoring_elements 0.79726
published_at 2026-04-01T12:55:00Z
1
value 0.01307
scoring_system epss
scoring_elements 0.79733
published_at 2026-04-02T12:55:00Z
2
value 0.01307
scoring_system epss
scoring_elements 0.79755
published_at 2026-04-04T12:55:00Z
3
value 0.01307
scoring_system epss
scoring_elements 0.79741
published_at 2026-04-07T12:55:00Z
4
value 0.01307
scoring_system epss
scoring_elements 0.7977
published_at 2026-04-08T12:55:00Z
5
value 0.01307
scoring_system epss
scoring_elements 0.79776
published_at 2026-04-09T12:55:00Z
6
value 0.01307
scoring_system epss
scoring_elements 0.79798
published_at 2026-04-11T12:55:00Z
7
value 0.01307
scoring_system epss
scoring_elements 0.79782
published_at 2026-04-12T12:55:00Z
8
value 0.01307
scoring_system epss
scoring_elements 0.79775
published_at 2026-04-13T12:55:00Z
9
value 0.01307
scoring_system epss
scoring_elements 0.79802
published_at 2026-04-16T12:55:00Z
10
value 0.01307
scoring_system epss
scoring_elements 0.79803
published_at 2026-04-18T12:55:00Z
11
value 0.01307
scoring_system epss
scoring_elements 0.79807
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-18585
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18585
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18585
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1644215
reference_id 1644215
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1644215
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=911637
reference_id 911637
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=911637
5
reference_url https://security.gentoo.org/glsa/201903-20
reference_id GLSA-201903-20
reference_type
scores
url https://security.gentoo.org/glsa/201903-20
6
reference_url https://access.redhat.com/errata/RHSA-2019:2049
reference_id RHSA-2019:2049
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2049
7
reference_url https://usn.ubuntu.com/3814-1/
reference_id USN-3814-1
reference_type
scores
url https://usn.ubuntu.com/3814-1/
8
reference_url https://usn.ubuntu.com/3814-2/
reference_id USN-3814-2
reference_type
scores
url https://usn.ubuntu.com/3814-2/
9
reference_url https://usn.ubuntu.com/3814-3/
reference_id USN-3814-3
reference_type
scores
url https://usn.ubuntu.com/3814-3/
10
reference_url https://usn.ubuntu.com/7788-1/
reference_id USN-7788-1
reference_type
scores
url https://usn.ubuntu.com/7788-1/
fixed_packages
0
url pkg:deb/debian/libmspack@0.8-1?distro=trixie
purl pkg:deb/debian/libmspack@0.8-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.8-1%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2018-18585
risk_score 1.5
exploitability 0.5
weighted_severity 3.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1vgy-c562-9bbf
1
url VCID-35vw-agja-w7du
vulnerability_id VCID-35vw-agja-w7du
summary Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9556
reference_id
reference_type
scores
0
value 0.01286
scoring_system epss
scoring_elements 0.79572
published_at 2026-04-01T12:55:00Z
1
value 0.01286
scoring_system epss
scoring_elements 0.79578
published_at 2026-04-02T12:55:00Z
2
value 0.01286
scoring_system epss
scoring_elements 0.79601
published_at 2026-04-04T12:55:00Z
3
value 0.01286
scoring_system epss
scoring_elements 0.79588
published_at 2026-04-07T12:55:00Z
4
value 0.01286
scoring_system epss
scoring_elements 0.79617
published_at 2026-04-08T12:55:00Z
5
value 0.01286
scoring_system epss
scoring_elements 0.79624
published_at 2026-04-09T12:55:00Z
6
value 0.01286
scoring_system epss
scoring_elements 0.79645
published_at 2026-04-11T12:55:00Z
7
value 0.01286
scoring_system epss
scoring_elements 0.79629
published_at 2026-04-12T12:55:00Z
8
value 0.01286
scoring_system epss
scoring_elements 0.79622
published_at 2026-04-13T12:55:00Z
9
value 0.01286
scoring_system epss
scoring_elements 0.79652
published_at 2026-04-18T12:55:00Z
10
value 0.01286
scoring_system epss
scoring_elements 0.79655
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9556
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9556
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9556
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=772891
reference_id 772891
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=772891
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773041
reference_id 773041
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773041
fixed_packages
0
url pkg:deb/debian/libmspack@0.4-2?distro=trixie
purl pkg:deb/debian/libmspack@0.4-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.4-2%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2014-9556
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-35vw-agja-w7du
2
url VCID-5ke3-8apw-bqf4
vulnerability_id VCID-5ke3-8apw-bqf4
summary Multiple integer overflows in the search_chunk function in chmd.c in libmspack before 0.5 allow remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted CHM file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4468
reference_id
reference_type
scores
0
value 0.00376
scoring_system epss
scoring_elements 0.59102
published_at 2026-04-01T12:55:00Z
1
value 0.00376
scoring_system epss
scoring_elements 0.59176
published_at 2026-04-02T12:55:00Z
2
value 0.00376
scoring_system epss
scoring_elements 0.592
published_at 2026-04-04T12:55:00Z
3
value 0.00376
scoring_system epss
scoring_elements 0.59164
published_at 2026-04-07T12:55:00Z
4
value 0.00376
scoring_system epss
scoring_elements 0.59216
published_at 2026-04-08T12:55:00Z
5
value 0.00376
scoring_system epss
scoring_elements 0.59229
published_at 2026-04-09T12:55:00Z
6
value 0.00376
scoring_system epss
scoring_elements 0.59249
published_at 2026-04-11T12:55:00Z
7
value 0.00376
scoring_system epss
scoring_elements 0.59231
published_at 2026-04-12T12:55:00Z
8
value 0.00376
scoring_system epss
scoring_elements 0.59212
published_at 2026-04-13T12:55:00Z
9
value 0.00376
scoring_system epss
scoring_elements 0.59248
published_at 2026-04-16T12:55:00Z
10
value 0.00376
scoring_system epss
scoring_elements 0.59253
published_at 2026-04-18T12:55:00Z
11
value 0.00376
scoring_system epss
scoring_elements 0.59235
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4468
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4468
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4468
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774726
reference_id 774726
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774726
3
reference_url https://usn.ubuntu.com/7788-1/
reference_id USN-7788-1
reference_type
scores
url https://usn.ubuntu.com/7788-1/
fixed_packages
0
url pkg:deb/debian/libmspack@0.4-3?distro=trixie
purl pkg:deb/debian/libmspack@0.4-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.4-3%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2015-4468
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5ke3-8apw-bqf4
3
url VCID-6mc3-fgw8-5qby
vulnerability_id VCID-6mc3-fgw8-5qby
summary 
Multiple vulnerabilities have been found in Adobe Flash Player, the
    worst of which allows remote attackers to execute arbitrary code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4472
reference_id
reference_type
scores
0
value 0.00365
scoring_system epss
scoring_elements 0.58413
published_at 2026-04-01T12:55:00Z
1
value 0.00365
scoring_system epss
scoring_elements 0.58498
published_at 2026-04-02T12:55:00Z
2
value 0.00365
scoring_system epss
scoring_elements 0.58518
published_at 2026-04-04T12:55:00Z
3
value 0.00365
scoring_system epss
scoring_elements 0.58489
published_at 2026-04-07T12:55:00Z
4
value 0.00365
scoring_system epss
scoring_elements 0.58541
published_at 2026-04-21T12:55:00Z
5
value 0.00365
scoring_system epss
scoring_elements 0.58548
published_at 2026-04-09T12:55:00Z
6
value 0.00365
scoring_system epss
scoring_elements 0.58564
published_at 2026-04-11T12:55:00Z
7
value 0.00365
scoring_system epss
scoring_elements 0.58545
published_at 2026-04-12T12:55:00Z
8
value 0.00365
scoring_system epss
scoring_elements 0.58525
published_at 2026-04-13T12:55:00Z
9
value 0.00365
scoring_system epss
scoring_elements 0.58558
published_at 2026-04-16T12:55:00Z
10
value 0.00365
scoring_system epss
scoring_elements 0.58563
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4472
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4472
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775687
reference_id 775687
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775687
3
reference_url https://security.gentoo.org/glsa/201506-01
reference_id GLSA-201506-01
reference_type
scores
url https://security.gentoo.org/glsa/201506-01
4
reference_url https://usn.ubuntu.com/7788-1/
reference_id USN-7788-1
reference_type
scores
url https://usn.ubuntu.com/7788-1/
fixed_packages
0
url pkg:deb/debian/libmspack@0.5-1?distro=trixie
purl pkg:deb/debian/libmspack@0.5-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.5-1%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2015-4472
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6mc3-fgw8-5qby
4
url VCID-76q9-uw9b-a7fa
vulnerability_id VCID-76q9-uw9b-a7fa
summary The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted CAB archive.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9732
reference_id
reference_type
scores
0
value 0.004
scoring_system epss
scoring_elements 0.60588
published_at 2026-04-01T12:55:00Z
1
value 0.004
scoring_system epss
scoring_elements 0.60663
published_at 2026-04-02T12:55:00Z
2
value 0.004
scoring_system epss
scoring_elements 0.60692
published_at 2026-04-04T12:55:00Z
3
value 0.004
scoring_system epss
scoring_elements 0.60661
published_at 2026-04-07T12:55:00Z
4
value 0.004
scoring_system epss
scoring_elements 0.60709
published_at 2026-04-08T12:55:00Z
5
value 0.004
scoring_system epss
scoring_elements 0.60725
published_at 2026-04-09T12:55:00Z
6
value 0.004
scoring_system epss
scoring_elements 0.6075
published_at 2026-04-21T12:55:00Z
7
value 0.004
scoring_system epss
scoring_elements 0.60737
published_at 2026-04-12T12:55:00Z
8
value 0.004
scoring_system epss
scoring_elements 0.60717
published_at 2026-04-13T12:55:00Z
9
value 0.004
scoring_system epss
scoring_elements 0.60761
published_at 2026-04-16T12:55:00Z
10
value 0.004
scoring_system epss
scoring_elements 0.60765
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9732
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9732
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9732
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774665
reference_id 774665
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774665
fixed_packages
0
url pkg:deb/debian/libmspack@0.5-1?distro=trixie
purl pkg:deb/debian/libmspack@0.5-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.5-1%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2014-9732
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-76q9-uw9b-a7fa
5
url VCID-a24v-smtd-5bak
vulnerability_id VCID-a24v-smtd-5bak
summary The chmd_read_headers function in chmd.c in libmspack before 0.5 does not validate name lengths, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted CHM file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4469
reference_id
reference_type
scores
0
value 0.00376
scoring_system epss
scoring_elements 0.59102
published_at 2026-04-01T12:55:00Z
1
value 0.00376
scoring_system epss
scoring_elements 0.59176
published_at 2026-04-02T12:55:00Z
2
value 0.00376
scoring_system epss
scoring_elements 0.592
published_at 2026-04-04T12:55:00Z
3
value 0.00376
scoring_system epss
scoring_elements 0.59164
published_at 2026-04-07T12:55:00Z
4
value 0.00376
scoring_system epss
scoring_elements 0.59216
published_at 2026-04-08T12:55:00Z
5
value 0.00376
scoring_system epss
scoring_elements 0.59229
published_at 2026-04-09T12:55:00Z
6
value 0.00376
scoring_system epss
scoring_elements 0.59249
published_at 2026-04-11T12:55:00Z
7
value 0.00376
scoring_system epss
scoring_elements 0.59231
published_at 2026-04-12T12:55:00Z
8
value 0.00376
scoring_system epss
scoring_elements 0.59212
published_at 2026-04-13T12:55:00Z
9
value 0.00376
scoring_system epss
scoring_elements 0.59248
published_at 2026-04-16T12:55:00Z
10
value 0.00376
scoring_system epss
scoring_elements 0.59253
published_at 2026-04-18T12:55:00Z
11
value 0.00376
scoring_system epss
scoring_elements 0.59235
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4469
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4469
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4469
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774726
reference_id 774726
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774726
3
reference_url https://usn.ubuntu.com/7788-1/
reference_id USN-7788-1
reference_type
scores
url https://usn.ubuntu.com/7788-1/
fixed_packages
0
url pkg:deb/debian/libmspack@0.4-3?distro=trixie
purl pkg:deb/debian/libmspack@0.4-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.4-3%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2015-4469
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a24v-smtd-5bak
6
url VCID-aa1x-d19y-sqgg
vulnerability_id VCID-aa1x-d19y-sqgg
summary Off-by-one error in the inflate function in mszipd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted CAB archive.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4470
reference_id
reference_type
scores
0
value 0.00425
scoring_system epss
scoring_elements 0.62119
published_at 2026-04-01T12:55:00Z
1
value 0.00425
scoring_system epss
scoring_elements 0.6218
published_at 2026-04-02T12:55:00Z
2
value 0.00425
scoring_system epss
scoring_elements 0.6221
published_at 2026-04-04T12:55:00Z
3
value 0.00425
scoring_system epss
scoring_elements 0.62178
published_at 2026-04-07T12:55:00Z
4
value 0.00425
scoring_system epss
scoring_elements 0.62228
published_at 2026-04-08T12:55:00Z
5
value 0.00425
scoring_system epss
scoring_elements 0.62245
published_at 2026-04-09T12:55:00Z
6
value 0.00425
scoring_system epss
scoring_elements 0.62263
published_at 2026-04-11T12:55:00Z
7
value 0.00425
scoring_system epss
scoring_elements 0.62253
published_at 2026-04-12T12:55:00Z
8
value 0.00425
scoring_system epss
scoring_elements 0.62231
published_at 2026-04-13T12:55:00Z
9
value 0.00425
scoring_system epss
scoring_elements 0.62276
published_at 2026-04-16T12:55:00Z
10
value 0.00425
scoring_system epss
scoring_elements 0.62283
published_at 2026-04-18T12:55:00Z
11
value 0.00425
scoring_system epss
scoring_elements 0.62268
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4470
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4470
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4470
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775498
reference_id 775498
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775498
fixed_packages
0
url pkg:deb/debian/libmspack@0.5-1?distro=trixie
purl pkg:deb/debian/libmspack@0.5-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.5-1%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2015-4470
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-aa1x-d19y-sqgg
7
url VCID-c41b-s8eq-hffa
vulnerability_id VCID-c41b-s8eq-hffa
summary 
Multiple vulnerabilities have been found in cabextract and
    libmspack, the worst of which could result in a Denial of Service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14679.json
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14679.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14679
reference_id
reference_type
scores
0
value 0.00915
scoring_system epss
scoring_elements 0.75826
published_at 2026-04-01T12:55:00Z
1
value 0.00915
scoring_system epss
scoring_elements 0.7583
published_at 2026-04-02T12:55:00Z
2
value 0.00915
scoring_system epss
scoring_elements 0.75862
published_at 2026-04-04T12:55:00Z
3
value 0.00915
scoring_system epss
scoring_elements 0.75841
published_at 2026-04-07T12:55:00Z
4
value 0.00915
scoring_system epss
scoring_elements 0.75874
published_at 2026-04-08T12:55:00Z
5
value 0.00915
scoring_system epss
scoring_elements 0.75887
published_at 2026-04-09T12:55:00Z
6
value 0.00915
scoring_system epss
scoring_elements 0.7591
published_at 2026-04-11T12:55:00Z
7
value 0.00915
scoring_system epss
scoring_elements 0.75892
published_at 2026-04-12T12:55:00Z
8
value 0.00915
scoring_system epss
scoring_elements 0.75885
published_at 2026-04-13T12:55:00Z
9
value 0.00915
scoring_system epss
scoring_elements 0.75923
published_at 2026-04-16T12:55:00Z
10
value 0.00915
scoring_system epss
scoring_elements 0.75926
published_at 2026-04-18T12:55:00Z
11
value 0.00915
scoring_system epss
scoring_elements 0.75912
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14679
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14679
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14679
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14680
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14680
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14681
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14681
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14682
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14682
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1610890
reference_id 1610890
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1610890
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904802
reference_id 904802
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904802
9
reference_url https://security.gentoo.org/glsa/201903-20
reference_id GLSA-201903-20
reference_type
scores
url https://security.gentoo.org/glsa/201903-20
10
reference_url https://access.redhat.com/errata/RHSA-2018:3327
reference_id RHSA-2018:3327
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3327
11
reference_url https://usn.ubuntu.com/3728-1/
reference_id USN-3728-1
reference_type
scores
url https://usn.ubuntu.com/3728-1/
12
reference_url https://usn.ubuntu.com/3728-2/
reference_id USN-3728-2
reference_type
scores
url https://usn.ubuntu.com/3728-2/
13
reference_url https://usn.ubuntu.com/3728-3/
reference_id USN-3728-3
reference_type
scores
url https://usn.ubuntu.com/3728-3/
14
reference_url https://usn.ubuntu.com/3789-2/
reference_id USN-3789-2
reference_type
scores
url https://usn.ubuntu.com/3789-2/
15
reference_url https://usn.ubuntu.com/7788-1/
reference_id USN-7788-1
reference_type
scores
url https://usn.ubuntu.com/7788-1/
fixed_packages
0
url pkg:deb/debian/libmspack@0.7-1?distro=trixie
purl pkg:deb/debian/libmspack@0.7-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.7-1%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2018-14679
risk_score 1.8
exploitability 0.5
weighted_severity 3.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c41b-s8eq-hffa
8
url VCID-c7nv-pcz1-8fcg
vulnerability_id VCID-c7nv-pcz1-8fcg
summary 
Multiple vulnerabilities have been found in cabextract and
    libmspack, the worst of which could result in a Denial of Service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14680.json
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14680.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14680
reference_id
reference_type
scores
0
value 0.02922
scoring_system epss
scoring_elements 0.86332
published_at 2026-04-01T12:55:00Z
1
value 0.02922
scoring_system epss
scoring_elements 0.86342
published_at 2026-04-02T12:55:00Z
2
value 0.02922
scoring_system epss
scoring_elements 0.86361
published_at 2026-04-04T12:55:00Z
3
value 0.02922
scoring_system epss
scoring_elements 0.86362
published_at 2026-04-07T12:55:00Z
4
value 0.02922
scoring_system epss
scoring_elements 0.8638
published_at 2026-04-08T12:55:00Z
5
value 0.02922
scoring_system epss
scoring_elements 0.8639
published_at 2026-04-09T12:55:00Z
6
value 0.02922
scoring_system epss
scoring_elements 0.86404
published_at 2026-04-11T12:55:00Z
7
value 0.02922
scoring_system epss
scoring_elements 0.86402
published_at 2026-04-12T12:55:00Z
8
value 0.02922
scoring_system epss
scoring_elements 0.86397
published_at 2026-04-13T12:55:00Z
9
value 0.02922
scoring_system epss
scoring_elements 0.86414
published_at 2026-04-16T12:55:00Z
10
value 0.02922
scoring_system epss
scoring_elements 0.86418
published_at 2026-04-18T12:55:00Z
11
value 0.02922
scoring_system epss
scoring_elements 0.86412
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14680
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14679
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14679
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14680
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14680
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14681
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14681
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14682
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14682
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1610934
reference_id 1610934
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1610934
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904801
reference_id 904801
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904801
9
reference_url https://security.gentoo.org/glsa/201903-20
reference_id GLSA-201903-20
reference_type
scores
url https://security.gentoo.org/glsa/201903-20
10
reference_url https://access.redhat.com/errata/RHSA-2018:3327
reference_id RHSA-2018:3327
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3327
11
reference_url https://usn.ubuntu.com/3728-1/
reference_id USN-3728-1
reference_type
scores
url https://usn.ubuntu.com/3728-1/
12
reference_url https://usn.ubuntu.com/3728-2/
reference_id USN-3728-2
reference_type
scores
url https://usn.ubuntu.com/3728-2/
13
reference_url https://usn.ubuntu.com/3728-3/
reference_id USN-3728-3
reference_type
scores
url https://usn.ubuntu.com/3728-3/
14
reference_url https://usn.ubuntu.com/3789-2/
reference_id USN-3789-2
reference_type
scores
url https://usn.ubuntu.com/3789-2/
15
reference_url https://usn.ubuntu.com/7788-1/
reference_id USN-7788-1
reference_type
scores
url https://usn.ubuntu.com/7788-1/
fixed_packages
0
url pkg:deb/debian/libmspack@0.7-1?distro=trixie
purl pkg:deb/debian/libmspack@0.7-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.7-1%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2018-14680
risk_score 1.8
exploitability 0.5
weighted_severity 3.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c7nv-pcz1-8fcg
9
url VCID-gc7q-6qf2-73dw
vulnerability_id VCID-gc7q-6qf2-73dw
summary 
Multiple vulnerabilities have been found in cabextract and
    libmspack, the worst of which could result in a Denial of Service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18584.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18584.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-18584
reference_id
reference_type
scores
0
value 0.06374
scoring_system epss
scoring_elements 0.9096
published_at 2026-04-01T12:55:00Z
1
value 0.06374
scoring_system epss
scoring_elements 0.90965
published_at 2026-04-02T12:55:00Z
2
value 0.06374
scoring_system epss
scoring_elements 0.90974
published_at 2026-04-04T12:55:00Z
3
value 0.06374
scoring_system epss
scoring_elements 0.90985
published_at 2026-04-07T12:55:00Z
4
value 0.06374
scoring_system epss
scoring_elements 0.90996
published_at 2026-04-08T12:55:00Z
5
value 0.06374
scoring_system epss
scoring_elements 0.91001
published_at 2026-04-09T12:55:00Z
6
value 0.06374
scoring_system epss
scoring_elements 0.9101
published_at 2026-04-12T12:55:00Z
7
value 0.06374
scoring_system epss
scoring_elements 0.91009
published_at 2026-04-13T12:55:00Z
8
value 0.06374
scoring_system epss
scoring_elements 0.91034
published_at 2026-04-21T12:55:00Z
9
value 0.06374
scoring_system epss
scoring_elements 0.91032
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-18584
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18584
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18584
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1644214
reference_id 1644214
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1644214
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=911640
reference_id 911640
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=911640
5
reference_url https://security.gentoo.org/glsa/201903-20
reference_id GLSA-201903-20
reference_type
scores
url https://security.gentoo.org/glsa/201903-20
6
reference_url https://access.redhat.com/errata/RHSA-2019:2049
reference_id RHSA-2019:2049
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2049
7
reference_url https://usn.ubuntu.com/3814-1/
reference_id USN-3814-1
reference_type
scores
url https://usn.ubuntu.com/3814-1/
8
reference_url https://usn.ubuntu.com/3814-2/
reference_id USN-3814-2
reference_type
scores
url https://usn.ubuntu.com/3814-2/
9
reference_url https://usn.ubuntu.com/3814-3/
reference_id USN-3814-3
reference_type
scores
url https://usn.ubuntu.com/3814-3/
fixed_packages
0
url pkg:deb/debian/libmspack@0.8-1?distro=trixie
purl pkg:deb/debian/libmspack@0.8-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.8-1%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2018-18584
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gc7q-6qf2-73dw
10
url VCID-geh5-ajgf-33gu
vulnerability_id VCID-geh5-ajgf-33gu
summary libmspack: buffer overflow in function chmd_read_headers()
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010305.json
reference_id
reference_type
scores
0
value 2.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010305.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-1010305
reference_id
reference_type
scores
0
value 0.00338
scoring_system epss
scoring_elements 0.56518
published_at 2026-04-01T12:55:00Z
1
value 0.00338
scoring_system epss
scoring_elements 0.56615
published_at 2026-04-07T12:55:00Z
2
value 0.00338
scoring_system epss
scoring_elements 0.56636
published_at 2026-04-04T12:55:00Z
3
value 0.00338
scoring_system epss
scoring_elements 0.56666
published_at 2026-04-16T12:55:00Z
4
value 0.00338
scoring_system epss
scoring_elements 0.56671
published_at 2026-04-09T12:55:00Z
5
value 0.00338
scoring_system epss
scoring_elements 0.5668
published_at 2026-04-11T12:55:00Z
6
value 0.00338
scoring_system epss
scoring_elements 0.56655
published_at 2026-04-12T12:55:00Z
7
value 0.00338
scoring_system epss
scoring_elements 0.56634
published_at 2026-04-13T12:55:00Z
8
value 0.00338
scoring_system epss
scoring_elements 0.56665
published_at 2026-04-18T12:55:00Z
9
value 0.00338
scoring_system epss
scoring_elements 0.56637
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-1010305
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010305
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010305
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1730568
reference_id 1730568
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1730568
5
reference_url https://access.redhat.com/errata/RHSA-2020:1686
reference_id RHSA-2020:1686
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1686
6
reference_url https://access.redhat.com/errata/RHSA-2020:3848
reference_id RHSA-2020:3848
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:3848
7
reference_url https://usn.ubuntu.com/4066-1/
reference_id USN-4066-1
reference_type
scores
url https://usn.ubuntu.com/4066-1/
8
reference_url https://usn.ubuntu.com/4066-2/
reference_id USN-4066-2
reference_type
scores
url https://usn.ubuntu.com/4066-2/
9
reference_url https://usn.ubuntu.com/7788-1/
reference_id USN-7788-1
reference_type
scores
url https://usn.ubuntu.com/7788-1/
fixed_packages
0
url pkg:deb/debian/libmspack@0.10.1-1?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-1%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2019-1010305
risk_score 1.1
exploitability 0.5
weighted_severity 2.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-geh5-ajgf-33gu
11
url VCID-guz8-mfzu-uuc9
vulnerability_id VCID-guz8-mfzu-uuc9
summary 
Multiple vulnerabilities have been found in ClamAV, the worst of
    which may allow remote attackers to execute arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6419.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6419.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-6419
reference_id
reference_type
scores
0
value 0.02123
scoring_system epss
scoring_elements 0.84079
published_at 2026-04-01T12:55:00Z
1
value 0.02123
scoring_system epss
scoring_elements 0.84111
published_at 2026-04-07T12:55:00Z
2
value 0.02123
scoring_system epss
scoring_elements 0.84092
published_at 2026-04-02T12:55:00Z
3
value 0.02123
scoring_system epss
scoring_elements 0.8411
published_at 2026-04-04T12:55:00Z
4
value 0.02123
scoring_system epss
scoring_elements 0.84134
published_at 2026-04-08T12:55:00Z
5
value 0.02123
scoring_system epss
scoring_elements 0.8414
published_at 2026-04-09T12:55:00Z
6
value 0.02123
scoring_system epss
scoring_elements 0.84158
published_at 2026-04-11T12:55:00Z
7
value 0.02123
scoring_system epss
scoring_elements 0.84152
published_at 2026-04-12T12:55:00Z
8
value 0.02272
scoring_system epss
scoring_elements 0.84676
published_at 2026-04-18T12:55:00Z
9
value 0.02272
scoring_system epss
scoring_elements 0.84677
published_at 2026-04-21T12:55:00Z
10
value 0.02462
scoring_system epss
scoring_elements 0.85266
published_at 2026-04-16T12:55:00Z
11
value 0.02462
scoring_system epss
scoring_elements 0.85246
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-6419
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11423
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11423
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6419
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1483909
reference_id 1483909
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1483909
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871263
reference_id 871263
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871263
7
reference_url https://security.archlinux.org/ASA-201802-9
reference_id ASA-201802-9
reference_type
scores
url https://security.archlinux.org/ASA-201802-9
8
reference_url https://security.archlinux.org/ASA-201803-14
reference_id ASA-201803-14
reference_type
scores
url https://security.archlinux.org/ASA-201803-14
9
reference_url https://security.archlinux.org/AVG-602
reference_id AVG-602
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-602
10
reference_url https://security.archlinux.org/AVG-603
reference_id AVG-603
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-603
11
reference_url https://security.gentoo.org/glsa/201804-16
reference_id GLSA-201804-16
reference_type
scores
url https://security.gentoo.org/glsa/201804-16
12
reference_url https://usn.ubuntu.com/3393-1/
reference_id USN-3393-1
reference_type
scores
url https://usn.ubuntu.com/3393-1/
13
reference_url https://usn.ubuntu.com/3393-2/
reference_id USN-3393-2
reference_type
scores
url https://usn.ubuntu.com/3393-2/
14
reference_url https://usn.ubuntu.com/3394-1/
reference_id USN-3394-1
reference_type
scores
url https://usn.ubuntu.com/3394-1/
15
reference_url https://usn.ubuntu.com/7788-1/
reference_id USN-7788-1
reference_type
scores
url https://usn.ubuntu.com/7788-1/
fixed_packages
0
url pkg:deb/debian/libmspack@0.6-1?distro=trixie
purl pkg:deb/debian/libmspack@0.6-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.6-1%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2017-6419
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-guz8-mfzu-uuc9
12
url VCID-jah5-34m5-eygb
vulnerability_id VCID-jah5-34m5-eygb
summary The chmd_init_decomp function in chmd.c in libmspack before 0.5 does not properly validate the reset interval, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted CHM file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4467
reference_id
reference_type
scores
0
value 0.00376
scoring_system epss
scoring_elements 0.59102
published_at 2026-04-01T12:55:00Z
1
value 0.00376
scoring_system epss
scoring_elements 0.59176
published_at 2026-04-02T12:55:00Z
2
value 0.00376
scoring_system epss
scoring_elements 0.592
published_at 2026-04-04T12:55:00Z
3
value 0.00376
scoring_system epss
scoring_elements 0.59164
published_at 2026-04-07T12:55:00Z
4
value 0.00376
scoring_system epss
scoring_elements 0.59216
published_at 2026-04-08T12:55:00Z
5
value 0.00376
scoring_system epss
scoring_elements 0.59229
published_at 2026-04-09T12:55:00Z
6
value 0.00376
scoring_system epss
scoring_elements 0.59249
published_at 2026-04-11T12:55:00Z
7
value 0.00376
scoring_system epss
scoring_elements 0.59231
published_at 2026-04-12T12:55:00Z
8
value 0.00376
scoring_system epss
scoring_elements 0.59212
published_at 2026-04-13T12:55:00Z
9
value 0.00376
scoring_system epss
scoring_elements 0.59248
published_at 2026-04-16T12:55:00Z
10
value 0.00376
scoring_system epss
scoring_elements 0.59253
published_at 2026-04-18T12:55:00Z
11
value 0.00376
scoring_system epss
scoring_elements 0.59235
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4467
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4467
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4467
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774725
reference_id 774725
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774725
3
reference_url https://usn.ubuntu.com/7788-1/
reference_id USN-7788-1
reference_type
scores
url https://usn.ubuntu.com/7788-1/
fixed_packages
0
url pkg:deb/debian/libmspack@0.4-3?distro=trixie
purl pkg:deb/debian/libmspack@0.4-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.4-3%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2015-4467
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jah5-34m5-eygb
13
url VCID-km35-kh9p-xffn
vulnerability_id VCID-km35-kh9p-xffn
summary Off-by-one error in the lzxd_decompress function in lzxd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (buffer under-read and application crash) via a crafted CAB archive.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4471
reference_id
reference_type
scores
0
value 0.00584
scoring_system epss
scoring_elements 0.68946
published_at 2026-04-01T12:55:00Z
1
value 0.00584
scoring_system epss
scoring_elements 0.68964
published_at 2026-04-02T12:55:00Z
2
value 0.00584
scoring_system epss
scoring_elements 0.68984
published_at 2026-04-04T12:55:00Z
3
value 0.00584
scoring_system epss
scoring_elements 0.68963
published_at 2026-04-07T12:55:00Z
4
value 0.00584
scoring_system epss
scoring_elements 0.69013
published_at 2026-04-08T12:55:00Z
5
value 0.00584
scoring_system epss
scoring_elements 0.69033
published_at 2026-04-09T12:55:00Z
6
value 0.00584
scoring_system epss
scoring_elements 0.69055
published_at 2026-04-11T12:55:00Z
7
value 0.00584
scoring_system epss
scoring_elements 0.6904
published_at 2026-04-21T12:55:00Z
8
value 0.00584
scoring_system epss
scoring_elements 0.69011
published_at 2026-04-13T12:55:00Z
9
value 0.00584
scoring_system epss
scoring_elements 0.69051
published_at 2026-04-16T12:55:00Z
10
value 0.00584
scoring_system epss
scoring_elements 0.6906
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4471
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4471
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4471
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775499
reference_id 775499
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775499
fixed_packages
0
url pkg:deb/debian/libmspack@0.5-1?distro=trixie
purl pkg:deb/debian/libmspack@0.5-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.5-1%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2015-4471
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-km35-kh9p-xffn
14
url VCID-p2j3-wwfx-5ub5
vulnerability_id VCID-p2j3-wwfx-5ub5
summary 
Multiple vulnerabilities have been found in cabextract and
    libmspack, the worst of which could result in a Denial of Service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18586.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18586.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-18586
reference_id
reference_type
scores
0
value 0.00515
scoring_system epss
scoring_elements 0.66538
published_at 2026-04-01T12:55:00Z
1
value 0.00515
scoring_system epss
scoring_elements 0.66577
published_at 2026-04-02T12:55:00Z
2
value 0.00541
scoring_system epss
scoring_elements 0.67645
published_at 2026-04-04T12:55:00Z
3
value 0.00541
scoring_system epss
scoring_elements 0.67624
published_at 2026-04-07T12:55:00Z
4
value 0.00541
scoring_system epss
scoring_elements 0.67676
published_at 2026-04-08T12:55:00Z
5
value 0.00541
scoring_system epss
scoring_elements 0.6769
published_at 2026-04-09T12:55:00Z
6
value 0.00541
scoring_system epss
scoring_elements 0.67713
published_at 2026-04-11T12:55:00Z
7
value 0.00541
scoring_system epss
scoring_elements 0.67698
published_at 2026-04-12T12:55:00Z
8
value 0.00541
scoring_system epss
scoring_elements 0.67665
published_at 2026-04-13T12:55:00Z
9
value 0.00541
scoring_system epss
scoring_elements 0.67701
published_at 2026-04-16T12:55:00Z
10
value 0.00541
scoring_system epss
scoring_elements 0.67714
published_at 2026-04-18T12:55:00Z
11
value 0.00541
scoring_system epss
scoring_elements 0.67695
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-18586
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18586
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18586
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1644216
reference_id 1644216
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1644216
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=911639
reference_id 911639
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=911639
5
reference_url https://security.gentoo.org/glsa/201903-20
reference_id GLSA-201903-20
reference_type
scores
url https://security.gentoo.org/glsa/201903-20
fixed_packages
0
url pkg:deb/debian/libmspack@0.8-1?distro=trixie
purl pkg:deb/debian/libmspack@0.8-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.8-1%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2018-18586
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p2j3-wwfx-5ub5
15
url VCID-qjzp-uh5m-gqe4
vulnerability_id VCID-qjzp-uh5m-gqe4
summary 
Multiple vulnerabilities have been found in cabextract and
    libmspack, the worst of which could result in a Denial of Service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14682.json
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14682.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14682
reference_id
reference_type
scores
0
value 0.04428
scoring_system epss
scoring_elements 0.88984
published_at 2026-04-01T12:55:00Z
1
value 0.04428
scoring_system epss
scoring_elements 0.88992
published_at 2026-04-02T12:55:00Z
2
value 0.04428
scoring_system epss
scoring_elements 0.89008
published_at 2026-04-04T12:55:00Z
3
value 0.04428
scoring_system epss
scoring_elements 0.8901
published_at 2026-04-07T12:55:00Z
4
value 0.04428
scoring_system epss
scoring_elements 0.89028
published_at 2026-04-08T12:55:00Z
5
value 0.04428
scoring_system epss
scoring_elements 0.89034
published_at 2026-04-09T12:55:00Z
6
value 0.04428
scoring_system epss
scoring_elements 0.89045
published_at 2026-04-11T12:55:00Z
7
value 0.04428
scoring_system epss
scoring_elements 0.89041
published_at 2026-04-12T12:55:00Z
8
value 0.04428
scoring_system epss
scoring_elements 0.89039
published_at 2026-04-13T12:55:00Z
9
value 0.04428
scoring_system epss
scoring_elements 0.89052
published_at 2026-04-18T12:55:00Z
10
value 0.04428
scoring_system epss
scoring_elements 0.89047
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14682
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14679
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14679
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14680
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14680
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14681
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14681
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14682
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14682
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1610941
reference_id 1610941
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1610941
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904800
reference_id 904800
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904800
9
reference_url https://security.gentoo.org/glsa/201903-20
reference_id GLSA-201903-20
reference_type
scores
url https://security.gentoo.org/glsa/201903-20
10
reference_url https://access.redhat.com/errata/RHSA-2018:3327
reference_id RHSA-2018:3327
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3327
11
reference_url https://usn.ubuntu.com/3728-1/
reference_id USN-3728-1
reference_type
scores
url https://usn.ubuntu.com/3728-1/
12
reference_url https://usn.ubuntu.com/3728-2/
reference_id USN-3728-2
reference_type
scores
url https://usn.ubuntu.com/3728-2/
13
reference_url https://usn.ubuntu.com/3728-3/
reference_id USN-3728-3
reference_type
scores
url https://usn.ubuntu.com/3728-3/
14
reference_url https://usn.ubuntu.com/3789-2/
reference_id USN-3789-2
reference_type
scores
url https://usn.ubuntu.com/3789-2/
15
reference_url https://usn.ubuntu.com/7788-1/
reference_id USN-7788-1
reference_type
scores
url https://usn.ubuntu.com/7788-1/
fixed_packages
0
url pkg:deb/debian/libmspack@0.7-1?distro=trixie
purl pkg:deb/debian/libmspack@0.7-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.7-1%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2018-14682
risk_score 1.8
exploitability 0.5
weighted_severity 3.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qjzp-uh5m-gqe4
16
url VCID-t6hw-prdn-fue4
vulnerability_id VCID-t6hw-prdn-fue4
summary 
Multiple vulnerabilities have been found in cabextract and
    libmspack, the worst of which could result in a Denial of Service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14681.json
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14681.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14681
reference_id
reference_type
scores
0
value 0.04428
scoring_system epss
scoring_elements 0.88984
published_at 2026-04-01T12:55:00Z
1
value 0.04428
scoring_system epss
scoring_elements 0.88992
published_at 2026-04-02T12:55:00Z
2
value 0.04428
scoring_system epss
scoring_elements 0.89008
published_at 2026-04-04T12:55:00Z
3
value 0.04428
scoring_system epss
scoring_elements 0.8901
published_at 2026-04-07T12:55:00Z
4
value 0.04428
scoring_system epss
scoring_elements 0.89028
published_at 2026-04-08T12:55:00Z
5
value 0.04428
scoring_system epss
scoring_elements 0.89034
published_at 2026-04-09T12:55:00Z
6
value 0.04428
scoring_system epss
scoring_elements 0.89045
published_at 2026-04-11T12:55:00Z
7
value 0.04428
scoring_system epss
scoring_elements 0.89041
published_at 2026-04-12T12:55:00Z
8
value 0.04428
scoring_system epss
scoring_elements 0.89039
published_at 2026-04-13T12:55:00Z
9
value 0.04428
scoring_system epss
scoring_elements 0.89052
published_at 2026-04-18T12:55:00Z
10
value 0.04428
scoring_system epss
scoring_elements 0.89047
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14681
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14679
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14679
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14680
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14680
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14681
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14681
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14682
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14682
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1610896
reference_id 1610896
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1610896
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904799
reference_id 904799
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904799
9
reference_url https://security.gentoo.org/glsa/201903-20
reference_id GLSA-201903-20
reference_type
scores
url https://security.gentoo.org/glsa/201903-20
10
reference_url https://access.redhat.com/errata/RHSA-2018:3327
reference_id RHSA-2018:3327
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3327
11
reference_url https://usn.ubuntu.com/3728-1/
reference_id USN-3728-1
reference_type
scores
url https://usn.ubuntu.com/3728-1/
12
reference_url https://usn.ubuntu.com/3728-2/
reference_id USN-3728-2
reference_type
scores
url https://usn.ubuntu.com/3728-2/
13
reference_url https://usn.ubuntu.com/3728-3/
reference_id USN-3728-3
reference_type
scores
url https://usn.ubuntu.com/3728-3/
14
reference_url https://usn.ubuntu.com/3789-2/
reference_id USN-3789-2
reference_type
scores
url https://usn.ubuntu.com/3789-2/
15
reference_url https://usn.ubuntu.com/7788-1/
reference_id USN-7788-1
reference_type
scores
url https://usn.ubuntu.com/7788-1/
fixed_packages
0
url pkg:deb/debian/libmspack@0.7-1?distro=trixie
purl pkg:deb/debian/libmspack@0.7-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.7-1%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2018-14681
risk_score 2.0
exploitability 0.5
weighted_severity 4.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t6hw-prdn-fue4
17
url VCID-y5mg-rpf8-cbe7
vulnerability_id VCID-y5mg-rpf8-cbe7
summary 
Multiple vulnerabilities have been found in ClamAV, the worst of
    which may allow remote attackers to execute arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11423.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11423.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-11423
reference_id
reference_type
scores
0
value 0.02813
scoring_system epss
scoring_elements 0.86153
published_at 2026-04-21T12:55:00Z
1
value 0.02813
scoring_system epss
scoring_elements 0.86161
published_at 2026-04-18T12:55:00Z
2
value 0.03047
scoring_system epss
scoring_elements 0.86701
published_at 2026-04-16T12:55:00Z
3
value 0.03047
scoring_system epss
scoring_elements 0.86688
published_at 2026-04-13T12:55:00Z
4
value 0.03047
scoring_system epss
scoring_elements 0.86625
published_at 2026-04-01T12:55:00Z
5
value 0.03047
scoring_system epss
scoring_elements 0.86636
published_at 2026-04-02T12:55:00Z
6
value 0.03047
scoring_system epss
scoring_elements 0.86655
published_at 2026-04-07T12:55:00Z
7
value 0.03047
scoring_system epss
scoring_elements 0.86674
published_at 2026-04-08T12:55:00Z
8
value 0.03047
scoring_system epss
scoring_elements 0.86684
published_at 2026-04-09T12:55:00Z
9
value 0.03047
scoring_system epss
scoring_elements 0.86697
published_at 2026-04-11T12:55:00Z
10
value 0.03047
scoring_system epss
scoring_elements 0.86694
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-11423
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11423
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11423
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6419
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 1.7
scoring_system cvssv2
scoring_elements AV:L/AC:L/Au:S/C:N/I:N/A:P
1
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1472776
reference_id 1472776
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1472776
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868956
reference_id 868956
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868956
7
reference_url https://security.archlinux.org/ASA-201802-9
reference_id ASA-201802-9
reference_type
scores
url https://security.archlinux.org/ASA-201802-9
8
reference_url https://security.archlinux.org/ASA-201803-14
reference_id ASA-201803-14
reference_type
scores
url https://security.archlinux.org/ASA-201803-14
9
reference_url https://security.archlinux.org/AVG-602
reference_id AVG-602
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-602
10
reference_url https://security.archlinux.org/AVG-603
reference_id AVG-603
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-603
11
reference_url https://security.gentoo.org/glsa/201804-16
reference_id GLSA-201804-16
reference_type
scores
url https://security.gentoo.org/glsa/201804-16
12
reference_url https://usn.ubuntu.com/3394-1/
reference_id USN-3394-1
reference_type
scores
url https://usn.ubuntu.com/3394-1/
13
reference_url https://usn.ubuntu.com/7788-1/
reference_id USN-7788-1
reference_type
scores
url https://usn.ubuntu.com/7788-1/
fixed_packages
0
url pkg:deb/debian/libmspack@0.6-1?distro=trixie
purl pkg:deb/debian/libmspack@0.6-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.6-1%3Fdistro=trixie
1
url pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
purl pkg:deb/debian/libmspack@0.10.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.10.1-2%3Fdistro=trixie
2
url pkg:deb/debian/libmspack@0.11-1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie
3
url pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
purl pkg:deb/debian/libmspack@0.11-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1.1%3Fdistro=trixie
aliases CVE-2017-11423
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y5mg-rpf8-cbe7
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/libmspack@0.11-1%3Fdistro=trixie