GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/4528?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/4528?format=api",
    "vulnerability_id": "VCID-d2j6-2mpr-vue2",
    "summary": "arbitrary command execution",
    "aliases": [
        {
            "alias": "CVE-2017-1000083"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1868?format=api",
            "purl": "pkg:alpm/archlinux/evince@3.24.0%2B12%2Bg717df38f-1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/evince@3.24.0%252B12%252Bg717df38f-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4659?format=api",
            "purl": "pkg:deb/debian/atril@1.8.1%2Bdfsg1-4%2Bdeb8u1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/atril@1.8.1%252Bdfsg1-4%252Bdeb8u1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5131?format=api",
            "purl": "pkg:deb/debian/atril@1.16.1-2%2Bdeb9u2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/atril@1.16.1-2%252Bdeb9u2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/6182?format=api",
            "purl": "pkg:deb/debian/atril@1.20.3-1%2Bdeb10u1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/atril@1.20.3-1%252Bdeb10u1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4656?format=api",
            "purl": "pkg:deb/debian/evince@3.14.1-2%2Bdeb8u2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/evince@3.14.1-2%252Bdeb8u2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5130?format=api",
            "purl": "pkg:deb/debian/evince@3.22.1-3%2Bdeb9u2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/evince@3.22.1-3%252Bdeb9u2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/6261?format=api",
            "purl": "pkg:deb/debian/evince@3.30.2-3%2Bdeb10u1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/evince@3.30.2-3%252Bdeb10u1"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1867?format=api",
            "purl": "pkg:alpm/archlinux/evince@3.24.0%2B8%2Bga8363215-1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/evince@3.24.0%252B8%252Bga8363215-1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4657?format=api",
            "purl": "pkg:deb/debian/atril@1.8.0%2Bdfsg1-2~bpo70%2B1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/atril@1.8.0%252Bdfsg1-2~bpo70%252B1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4658?format=api",
            "purl": "pkg:deb/debian/atril@1.8.1%2Bdfsg1-4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/atril@1.8.1%252Bdfsg1-4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4659?format=api",
            "purl": "pkg:deb/debian/atril@1.8.1%2Bdfsg1-4%2Bdeb8u1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/atril@1.8.1%252Bdfsg1-4%252Bdeb8u1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5131?format=api",
            "purl": "pkg:deb/debian/atril@1.16.1-2%2Bdeb9u2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/atril@1.16.1-2%252Bdeb9u2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4650?format=api",
            "purl": "pkg:deb/debian/evince@0.1.5-2sarge1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/evince@0.1.5-2sarge1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4651?format=api",
            "purl": "pkg:deb/debian/evince@0.4.0-5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/evince@0.4.0-5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4652?format=api",
            "purl": "pkg:deb/debian/evince@2.22.2-4~lenny2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/evince@2.22.2-4~lenny2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4653?format=api",
            "purl": "pkg:deb/debian/evince@2.30.3-2%2Bsqueeze1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/evince@2.30.3-2%252Bsqueeze1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4654?format=api",
            "purl": "pkg:deb/debian/evince@3.4.0-3.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/evince@3.4.0-3.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4655?format=api",
            "purl": "pkg:deb/debian/evince@3.14.1-2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/evince@3.14.1-2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/4656?format=api",
            "purl": "pkg:deb/debian/evince@3.14.1-2%2Bdeb8u2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/evince@3.14.1-2%252Bdeb8u2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5130?format=api",
            "purl": "pkg:deb/debian/evince@3.22.1-3%2Bdeb9u2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d2j6-2mpr-vue2"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/evince@3.22.1-3%252Bdeb9u2"
        }
    ],
    "references": [
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000083",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000083"
        },
        {
            "reference_url": "https://security.archlinux.org/ASA-201707-14",
            "reference_id": "ASA-201707-14",
            "reference_type": "",
            "scores": [],
            "url": "https://security.archlinux.org/ASA-201707-14"
        },
        {
            "reference_url": "https://security.archlinux.org/AVG-348",
            "reference_id": "AVG-348",
            "reference_type": "",
            "scores": [
                {
                    "value": "Critical",
                    "scoring_system": "archlinux",
                    "scoring_elements": ""
                }
            ],
            "url": "https://security.archlinux.org/AVG-348"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "9.0 - 10.0",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d2j6-2mpr-vue2"
}