Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/xen@4.9.3-r1?arch=armhf&distroversion=v3.7&reponame=main
Typeapk
Namespacealpine
Namexen
Version4.9.3-r1
Qualifiers
arch armhf
distroversion v3.7
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version4.9.4-r1
Latest_non_vulnerable_version4.9.4-r1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-6b1e-39na-b7gf
vulnerability_id VCID-6b1e-39na-b7gf
summary guest use of HLE constructs may lock up host
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19967.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19967.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-19967
reference_id
reference_type
scores
0
value 0.00072
scoring_system epss
scoring_elements 0.21875
published_at 2026-04-01T12:55:00Z
1
value 0.00072
scoring_system epss
scoring_elements 0.22037
published_at 2026-04-02T12:55:00Z
2
value 0.00072
scoring_system epss
scoring_elements 0.22089
published_at 2026-04-04T12:55:00Z
3
value 0.00072
scoring_system epss
scoring_elements 0.21854
published_at 2026-04-07T12:55:00Z
4
value 0.00072
scoring_system epss
scoring_elements 0.21929
published_at 2026-04-08T12:55:00Z
5
value 0.00072
scoring_system epss
scoring_elements 0.21985
published_at 2026-04-09T12:55:00Z
6
value 0.00072
scoring_system epss
scoring_elements 0.21997
published_at 2026-04-11T12:55:00Z
7
value 0.00072
scoring_system epss
scoring_elements 0.21957
published_at 2026-04-12T12:55:00Z
8
value 0.00072
scoring_system epss
scoring_elements 0.219
published_at 2026-04-13T12:55:00Z
9
value 0.00072
scoring_system epss
scoring_elements 0.21901
published_at 2026-04-16T12:55:00Z
10
value 0.00072
scoring_system epss
scoring_elements 0.21907
published_at 2026-04-18T12:55:00Z
11
value 0.00072
scoring_system epss
scoring_elements 0.21868
published_at 2026-04-21T12:55:00Z
12
value 0.00072
scoring_system epss
scoring_elements 0.21721
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-19967
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19961
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19961
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19962
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19965
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19965
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19966
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19966
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19967
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19967
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1660493
reference_id 1660493
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1660493
9
reference_url https://xenbits.xen.org/xsa/advisory-282.html
reference_id XSA-282
reference_type
scores
url https://xenbits.xen.org/xsa/advisory-282.html
fixed_packages
0
url pkg:apk/alpine/xen@4.9.3-r1?arch=armhf&distroversion=v3.7&reponame=main
purl pkg:apk/alpine/xen@4.9.3-r1?arch=armhf&distroversion=v3.7&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.9.3-r1%3Farch=armhf&distroversion=v3.7&reponame=main
aliases CVE-2018-19967, XSA-282
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6b1e-39na-b7gf
1
url VCID-an7r-pjrv-pyde
vulnerability_id VCID-an7r-pjrv-pyde
summary Fix for XSA-240 conflicts with shadow paging
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19966.json
reference_id
reference_type
scores
0
value 5.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19966.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-19966
reference_id
reference_type
scores
0
value 0.00123
scoring_system epss
scoring_elements 0.31523
published_at 2026-04-07T12:55:00Z
1
value 0.00123
scoring_system epss
scoring_elements 0.3166
published_at 2026-04-02T12:55:00Z
2
value 0.00123
scoring_system epss
scoring_elements 0.31705
published_at 2026-04-04T12:55:00Z
3
value 0.00123
scoring_system epss
scoring_elements 0.31575
published_at 2026-04-08T12:55:00Z
4
value 0.00123
scoring_system epss
scoring_elements 0.31605
published_at 2026-04-09T12:55:00Z
5
value 0.00123
scoring_system epss
scoring_elements 0.3161
published_at 2026-04-11T12:55:00Z
6
value 0.00123
scoring_system epss
scoring_elements 0.31567
published_at 2026-04-12T12:55:00Z
7
value 0.00123
scoring_system epss
scoring_elements 0.3153
published_at 2026-04-13T12:55:00Z
8
value 0.00123
scoring_system epss
scoring_elements 0.31564
published_at 2026-04-16T12:55:00Z
9
value 0.00123
scoring_system epss
scoring_elements 0.31541
published_at 2026-04-18T12:55:00Z
10
value 0.00123
scoring_system epss
scoring_elements 0.31509
published_at 2026-04-21T12:55:00Z
11
value 0.00123
scoring_system epss
scoring_elements 0.31335
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-19966
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19961
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19961
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19962
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19965
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19965
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19966
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19966
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19967
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19967
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1652235
reference_id 1652235
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1652235
9
reference_url https://xenbits.xen.org/xsa/advisory-280.html
reference_id XSA-280
reference_type
scores
url https://xenbits.xen.org/xsa/advisory-280.html
fixed_packages
0
url pkg:apk/alpine/xen@4.9.3-r1?arch=armhf&distroversion=v3.7&reponame=main
purl pkg:apk/alpine/xen@4.9.3-r1?arch=armhf&distroversion=v3.7&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.9.3-r1%3Farch=armhf&distroversion=v3.7&reponame=main
aliases CVE-2018-19966, XSA-280
risk_score 2.3
exploitability 0.5
weighted_severity 4.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-an7r-pjrv-pyde
2
url VCID-veqg-epht-cuaz
vulnerability_id VCID-veqg-epht-cuaz
summary insufficient TLB flushing / improper large page mappings with AMD IOMMUs
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19962.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19962.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-19962
reference_id
reference_type
scores
0
value 0.00181
scoring_system epss
scoring_elements 0.39631
published_at 2026-04-01T12:55:00Z
1
value 0.00181
scoring_system epss
scoring_elements 0.3978
published_at 2026-04-02T12:55:00Z
2
value 0.00181
scoring_system epss
scoring_elements 0.39803
published_at 2026-04-04T12:55:00Z
3
value 0.00181
scoring_system epss
scoring_elements 0.39722
published_at 2026-04-07T12:55:00Z
4
value 0.00181
scoring_system epss
scoring_elements 0.39775
published_at 2026-04-08T12:55:00Z
5
value 0.00181
scoring_system epss
scoring_elements 0.3979
published_at 2026-04-09T12:55:00Z
6
value 0.00181
scoring_system epss
scoring_elements 0.39799
published_at 2026-04-11T12:55:00Z
7
value 0.00181
scoring_system epss
scoring_elements 0.39763
published_at 2026-04-12T12:55:00Z
8
value 0.00181
scoring_system epss
scoring_elements 0.39747
published_at 2026-04-13T12:55:00Z
9
value 0.00181
scoring_system epss
scoring_elements 0.39797
published_at 2026-04-16T12:55:00Z
10
value 0.00181
scoring_system epss
scoring_elements 0.39768
published_at 2026-04-18T12:55:00Z
11
value 0.00181
scoring_system epss
scoring_elements 0.39685
published_at 2026-04-21T12:55:00Z
12
value 0.00181
scoring_system epss
scoring_elements 0.39505
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-19962
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19961
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19961
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19962
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19965
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19965
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19966
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19966
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19967
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19967
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1647573
reference_id 1647573
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1647573
9
reference_url https://xenbits.xen.org/xsa/advisory-275.html
reference_id XSA-275
reference_type
scores
url https://xenbits.xen.org/xsa/advisory-275.html
fixed_packages
0
url pkg:apk/alpine/xen@4.9.3-r1?arch=armhf&distroversion=v3.7&reponame=main
purl pkg:apk/alpine/xen@4.9.3-r1?arch=armhf&distroversion=v3.7&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.9.3-r1%3Farch=armhf&distroversion=v3.7&reponame=main
aliases CVE-2018-19962, XSA-275
risk_score 3.6
exploitability 0.5
weighted_severity 7.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-veqg-epht-cuaz
3
url VCID-werg-d7s2-kfbw
vulnerability_id VCID-werg-d7s2-kfbw
summary x86: DoS from attempting to use INVPCID with a non-canonical addresses
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19965.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19965.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-19965
reference_id
reference_type
scores
0
value 0.0018
scoring_system epss
scoring_elements 0.39454
published_at 2026-04-01T12:55:00Z
1
value 0.0018
scoring_system epss
scoring_elements 0.39603
published_at 2026-04-02T12:55:00Z
2
value 0.0018
scoring_system epss
scoring_elements 0.39626
published_at 2026-04-04T12:55:00Z
3
value 0.0018
scoring_system epss
scoring_elements 0.39542
published_at 2026-04-07T12:55:00Z
4
value 0.0018
scoring_system epss
scoring_elements 0.39596
published_at 2026-04-08T12:55:00Z
5
value 0.0018
scoring_system epss
scoring_elements 0.39612
published_at 2026-04-09T12:55:00Z
6
value 0.0018
scoring_system epss
scoring_elements 0.39622
published_at 2026-04-11T12:55:00Z
7
value 0.0018
scoring_system epss
scoring_elements 0.39585
published_at 2026-04-12T12:55:00Z
8
value 0.0018
scoring_system epss
scoring_elements 0.39569
published_at 2026-04-13T12:55:00Z
9
value 0.0018
scoring_system epss
scoring_elements 0.39619
published_at 2026-04-16T12:55:00Z
10
value 0.0018
scoring_system epss
scoring_elements 0.39589
published_at 2026-04-18T12:55:00Z
11
value 0.0018
scoring_system epss
scoring_elements 0.39504
published_at 2026-04-21T12:55:00Z
12
value 0.0018
scoring_system epss
scoring_elements 0.39324
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-19965
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19961
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19961
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19962
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19965
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19965
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19966
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19966
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19967
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19967
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1647588
reference_id 1647588
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1647588
8
reference_url https://xenbits.xen.org/xsa/advisory-279.html
reference_id XSA-279
reference_type
scores
url https://xenbits.xen.org/xsa/advisory-279.html
fixed_packages
0
url pkg:apk/alpine/xen@4.9.3-r1?arch=armhf&distroversion=v3.7&reponame=main
purl pkg:apk/alpine/xen@4.9.3-r1?arch=armhf&distroversion=v3.7&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.9.3-r1%3Farch=armhf&distroversion=v3.7&reponame=main
aliases CVE-2018-19965, XSA-279
risk_score 2.6
exploitability 0.5
weighted_severity 5.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-werg-d7s2-kfbw
4
url VCID-xubx-wxc9-tfay
vulnerability_id VCID-xubx-wxc9-tfay
summary x86: Nested VT-x usable even when disabled
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18883.json
reference_id
reference_type
scores
0
value 4.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18883.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-18883
reference_id
reference_type
scores
0
value 0.00172
scoring_system epss
scoring_elements 0.38394
published_at 2026-04-01T12:55:00Z
1
value 0.00172
scoring_system epss
scoring_elements 0.38531
published_at 2026-04-02T12:55:00Z
2
value 0.00172
scoring_system epss
scoring_elements 0.38556
published_at 2026-04-04T12:55:00Z
3
value 0.00172
scoring_system epss
scoring_elements 0.38419
published_at 2026-04-07T12:55:00Z
4
value 0.00172
scoring_system epss
scoring_elements 0.38469
published_at 2026-04-08T12:55:00Z
5
value 0.00172
scoring_system epss
scoring_elements 0.38477
published_at 2026-04-16T12:55:00Z
6
value 0.00172
scoring_system epss
scoring_elements 0.38492
published_at 2026-04-11T12:55:00Z
7
value 0.00172
scoring_system epss
scoring_elements 0.38455
published_at 2026-04-12T12:55:00Z
8
value 0.00172
scoring_system epss
scoring_elements 0.38429
published_at 2026-04-13T12:55:00Z
9
value 0.00172
scoring_system epss
scoring_elements 0.38456
published_at 2026-04-18T12:55:00Z
10
value 0.00172
scoring_system epss
scoring_elements 0.38392
published_at 2026-04-21T12:55:00Z
11
value 0.00172
scoring_system epss
scoring_elements 0.38235
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-18883
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18883
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18883
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1643116
reference_id 1643116
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1643116
5
reference_url https://xenbits.xen.org/xsa/advisory-278.html
reference_id XSA-278
reference_type
scores
url https://xenbits.xen.org/xsa/advisory-278.html
fixed_packages
0
url pkg:apk/alpine/xen@4.9.3-r1?arch=armhf&distroversion=v3.7&reponame=main
purl pkg:apk/alpine/xen@4.9.3-r1?arch=armhf&distroversion=v3.7&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.9.3-r1%3Farch=armhf&distroversion=v3.7&reponame=main
aliases CVE-2018-18883, XSA-278
risk_score 2.0
exploitability 0.5
weighted_severity 4.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xubx-wxc9-tfay
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.9.3-r1%3Farch=armhf&distroversion=v3.7&reponame=main