Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-esps-vak5-bqcp
SummaryUnchecked JSON input can crash the servermore details
Aliases
0
alias CVE-2015-5289
Fixed_packages
0
url pkg:deb/debian/postgresql-9.4@9.4.7-0%2Bdeb8u1~bpo70%2B2
purl pkg:deb/debian/postgresql-9.4@9.4.7-0%2Bdeb8u1~bpo70%2B2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3qrq-rc38-13ep
1
vulnerability VCID-45vk-2xsq-cffk
2
vulnerability VCID-723y-bsbd-6kfd
3
vulnerability VCID-8bu8-zpfv-8bgg
4
vulnerability VCID-9b6v-1bt1-dfgy
5
vulnerability VCID-csfh-831q-rqfv
6
vulnerability VCID-d362-bmcf-3kdz
7
vulnerability VCID-qn5k-y64c-7ffc
8
vulnerability VCID-um7d-pzhb-n3c9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/postgresql-9.4@9.4.7-0%252Bdeb8u1~bpo70%252B2
1
url pkg:ebuild/dev-db/postgresql@9.1.23
purl pkg:ebuild/dev-db/postgresql@9.1.23
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-db/postgresql@9.1.23
2
url pkg:ebuild/dev-db/postgresql@9.2.18
purl pkg:ebuild/dev-db/postgresql@9.2.18
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-db/postgresql@9.2.18
3
url pkg:ebuild/dev-db/postgresql@9.3.14
purl pkg:ebuild/dev-db/postgresql@9.3.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-db/postgresql@9.3.14
4
url pkg:ebuild/dev-db/postgresql@9.4.9
purl pkg:ebuild/dev-db/postgresql@9.4.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-db/postgresql@9.4.9
5
url pkg:ebuild/dev-db/postgresql@9.5.4
purl pkg:ebuild/dev-db/postgresql@9.5.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-db/postgresql@9.5.4
6
url pkg:generic/postgresql@9.3.10
purl pkg:generic/postgresql@9.3.10
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/postgresql@9.3.10
7
url pkg:generic/postgresql@9.4.5
purl pkg:generic/postgresql@9.4.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/postgresql@9.4.5
Affected_packages
0
url pkg:deb/debian/postgresql-9.4@9.4.1-1
purl pkg:deb/debian/postgresql-9.4@9.4.1-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qap-rdxz-4uer
1
vulnerability VCID-3qrq-rc38-13ep
2
vulnerability VCID-45vk-2xsq-cffk
3
vulnerability VCID-625c-amyd-dybm
4
vulnerability VCID-723y-bsbd-6kfd
5
vulnerability VCID-8bu8-zpfv-8bgg
6
vulnerability VCID-9b6v-1bt1-dfgy
7
vulnerability VCID-csfh-831q-rqfv
8
vulnerability VCID-d362-bmcf-3kdz
9
vulnerability VCID-esps-vak5-bqcp
10
vulnerability VCID-fd5z-bj21-m3a5
11
vulnerability VCID-h58p-g575-bkg6
12
vulnerability VCID-mebz-9qb7-5bd2
13
vulnerability VCID-qn5k-y64c-7ffc
14
vulnerability VCID-t864-ytjh-nyg1
15
vulnerability VCID-um7d-pzhb-n3c9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/postgresql-9.4@9.4.1-1
1
url pkg:generic/postgresql@9.3.0
purl pkg:generic/postgresql@9.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qap-rdxz-4uer
1
vulnerability VCID-3qrq-rc38-13ep
2
vulnerability VCID-45vk-2xsq-cffk
3
vulnerability VCID-625c-amyd-dybm
4
vulnerability VCID-723y-bsbd-6kfd
5
vulnerability VCID-7xfn-1fv3-1bgv
6
vulnerability VCID-8bu8-zpfv-8bgg
7
vulnerability VCID-8cbh-gwwy-n3eq
8
vulnerability VCID-8j4f-u2tq-1qev
9
vulnerability VCID-9b6v-1bt1-dfgy
10
vulnerability VCID-a3sh-4t1e-tbh4
11
vulnerability VCID-bqag-mh3g-fqe7
12
vulnerability VCID-csfh-831q-rqfv
13
vulnerability VCID-d362-bmcf-3kdz
14
vulnerability VCID-esps-vak5-bqcp
15
vulnerability VCID-f976-dd3s-fuc8
16
vulnerability VCID-fd5z-bj21-m3a5
17
vulnerability VCID-k38h-5crc-u3hr
18
vulnerability VCID-kbgc-w2jw-auh8
19
vulnerability VCID-mebz-9qb7-5bd2
20
vulnerability VCID-nz16-gzhk-h3c1
21
vulnerability VCID-pvxg-byvu-pbec
22
vulnerability VCID-qn5k-y64c-7ffc
23
vulnerability VCID-qnt9-qr7p-wkhy
24
vulnerability VCID-raqj-ezua-skeb
25
vulnerability VCID-reab-s9cu-yudn
26
vulnerability VCID-sq2s-cvrs-7uhh
27
vulnerability VCID-t864-ytjh-nyg1
28
vulnerability VCID-w518-wkek-97ag
29
vulnerability VCID-wcsh-zz5q-qqbf
30
vulnerability VCID-z4t8-c8vc-ayhd
31
vulnerability VCID-zbj3-7xug-43f6
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/postgresql@9.3.0
2
url pkg:generic/postgresql@9.4.0
purl pkg:generic/postgresql@9.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qap-rdxz-4uer
1
vulnerability VCID-3qrq-rc38-13ep
2
vulnerability VCID-45vk-2xsq-cffk
3
vulnerability VCID-625c-amyd-dybm
4
vulnerability VCID-723y-bsbd-6kfd
5
vulnerability VCID-7xfn-1fv3-1bgv
6
vulnerability VCID-8bu8-zpfv-8bgg
7
vulnerability VCID-9b6v-1bt1-dfgy
8
vulnerability VCID-a3sh-4t1e-tbh4
9
vulnerability VCID-bb5j-e9vw-mbd1
10
vulnerability VCID-bqag-mh3g-fqe7
11
vulnerability VCID-csfh-831q-rqfv
12
vulnerability VCID-d362-bmcf-3kdz
13
vulnerability VCID-esps-vak5-bqcp
14
vulnerability VCID-f976-dd3s-fuc8
15
vulnerability VCID-fd5z-bj21-m3a5
16
vulnerability VCID-k38h-5crc-u3hr
17
vulnerability VCID-mebz-9qb7-5bd2
18
vulnerability VCID-qn5k-y64c-7ffc
19
vulnerability VCID-qnt9-qr7p-wkhy
20
vulnerability VCID-raqj-ezua-skeb
21
vulnerability VCID-sq2s-cvrs-7uhh
22
vulnerability VCID-t864-ytjh-nyg1
23
vulnerability VCID-um7d-pzhb-n3c9
24
vulnerability VCID-wcsh-zz5q-qqbf
25
vulnerability VCID-z4t8-c8vc-ayhd
26
vulnerability VCID-zbj3-7xug-43f6
27
vulnerability VCID-zrcc-w98g-gfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/postgresql@9.4.0
3
url pkg:rpm/redhat/postgresql@9.2.14-1?arch=ael7b_1
purl pkg:rpm/redhat/postgresql@9.2.14-1?arch=ael7b_1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-esps-vak5-bqcp
1
vulnerability VCID-fd5z-bj21-m3a5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/postgresql@9.2.14-1%3Farch=ael7b_1
4
url pkg:rpm/redhat/postgresql92-postgresql@9.2.14-1?arch=el7
purl pkg:rpm/redhat/postgresql92-postgresql@9.2.14-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-esps-vak5-bqcp
1
vulnerability VCID-fd5z-bj21-m3a5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/postgresql92-postgresql@9.2.14-1%3Farch=el7
5
url pkg:rpm/redhat/postgresql92-postgresql@9.2.14-1?arch=el6
purl pkg:rpm/redhat/postgresql92-postgresql@9.2.14-1?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-esps-vak5-bqcp
1
vulnerability VCID-fd5z-bj21-m3a5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/postgresql92-postgresql@9.2.14-1%3Farch=el6
6
url pkg:rpm/redhat/rh-postgresql94-postgresql@9.4.5-1?arch=el7
purl pkg:rpm/redhat/rh-postgresql94-postgresql@9.4.5-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-esps-vak5-bqcp
1
vulnerability VCID-fd5z-bj21-m3a5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-postgresql94-postgresql@9.4.5-1%3Farch=el7
7
url pkg:rpm/redhat/rh-postgresql94-postgresql@9.4.5-1?arch=el6
purl pkg:rpm/redhat/rh-postgresql94-postgresql@9.4.5-1?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-esps-vak5-bqcp
1
vulnerability VCID-fd5z-bj21-m3a5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-postgresql94-postgresql@9.4.5-1%3Farch=el6
References
0
reference_url http://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commit%3Bh=08fa47c4850cea32c3116665975bca219fbf2fe6
reference_id
reference_type
scores
url http://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commit%3Bh=08fa47c4850cea32c3116665975bca219fbf2fe6
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172316.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172316.html
2
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169094.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169094.html
3
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html
4
reference_url http://lists.opensuse.org/opensuse-updates/2015-11/msg00033.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-updates/2015-11/msg00033.html
5
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5289.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5289.json
6
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5289
reference_id
reference_type
scores
0
value 0.09972
scoring_system epss
scoring_elements 0.93062
published_at 2026-04-21T12:55:00Z
1
value 0.09972
scoring_system epss
scoring_elements 0.93013
published_at 2026-04-01T12:55:00Z
2
value 0.09972
scoring_system epss
scoring_elements 0.93052
published_at 2026-04-16T12:55:00Z
3
value 0.09972
scoring_system epss
scoring_elements 0.93055
published_at 2026-04-18T12:55:00Z
4
value 0.09972
scoring_system epss
scoring_elements 0.93022
published_at 2026-04-02T12:55:00Z
5
value 0.09972
scoring_system epss
scoring_elements 0.93026
published_at 2026-04-04T12:55:00Z
6
value 0.09972
scoring_system epss
scoring_elements 0.93025
published_at 2026-04-07T12:55:00Z
7
value 0.09972
scoring_system epss
scoring_elements 0.93033
published_at 2026-04-08T12:55:00Z
8
value 0.09972
scoring_system epss
scoring_elements 0.93038
published_at 2026-04-09T12:55:00Z
9
value 0.09972
scoring_system epss
scoring_elements 0.93043
published_at 2026-04-11T12:55:00Z
10
value 0.09972
scoring_system epss
scoring_elements 0.9304
published_at 2026-04-12T12:55:00Z
11
value 0.09972
scoring_system epss
scoring_elements 0.93042
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5289
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5288
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5288
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5289
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5289
9
reference_url https://www.postgresql.org/about/news/2015-10-08-security-update-release-1615/
reference_id
reference_type
scores
url https://www.postgresql.org/about/news/2015-10-08-security-update-release-1615/
10
reference_url https://www.postgresql.org/support/security/CVE-2015-5289/
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements ['AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H']
url https://www.postgresql.org/support/security/CVE-2015-5289/
11
reference_url http://www.debian.org/security/2015/dsa-3374
reference_id
reference_type
scores
url http://www.debian.org/security/2015/dsa-3374
12
reference_url http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
reference_id
reference_type
scores
url http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
13
reference_url http://www.postgresql.org/about/news/1615/
reference_id
reference_type
scores
url http://www.postgresql.org/about/news/1615/
14
reference_url http://www.postgresql.org/docs/9.3/static/release-9-3-10.html
reference_id
reference_type
scores
url http://www.postgresql.org/docs/9.3/static/release-9-3-10.html
15
reference_url http://www.postgresql.org/docs/9.4/static/release-9-4-5.html
reference_id
reference_type
scores
url http://www.postgresql.org/docs/9.4/static/release-9-4-5.html
16
reference_url http://www.securityfocus.com/bid/77048
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/77048
17
reference_url http://www.securitytracker.com/id/1033775
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1033775
18
reference_url http://www.ubuntu.com/usn/USN-2772-1
reference_id
reference_type
scores
url http://www.ubuntu.com/usn/USN-2772-1
19
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1270312
reference_id 1270312
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1270312
20
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
21
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
22
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
23
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
24
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
25
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
26
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-5289
reference_id CVE-2015-5289
reference_type
scores
0
value 6.4
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:P
url https://nvd.nist.gov/vuln/detail/CVE-2015-5289
27
reference_url https://security.gentoo.org/glsa/201701-33
reference_id GLSA-201701-33
reference_type
scores
url https://security.gentoo.org/glsa/201701-33
28
reference_url https://access.redhat.com/errata/RHSA-2015:2077
reference_id RHSA-2015:2077
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2077
29
reference_url https://access.redhat.com/errata/RHSA-2015:2078
reference_id RHSA-2015:2078
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2078
30
reference_url https://access.redhat.com/errata/RHSA-2015:2083
reference_id RHSA-2015:2083
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2083
31
reference_url https://usn.ubuntu.com/2772-1/
reference_id USN-2772-1
reference_type
scores
url https://usn.ubuntu.com/2772-1/
Weaknesses
0
cwe_id 131
name Incorrect Calculation of Buffer Size
description The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.
1
cwe_id 674
name Uncontrolled Recursion
description The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
2
cwe_id 119
name Improper Restriction of Operations within the Bounds of a Memory Buffer
description The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
Exploits
Severity_range_score5.9 - 6.4
Exploitability0.5
Weighted_severity5.8
Risk_score2.9
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-esps-vak5-bqcp