Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-hgwh-tzsf-suc1
Summary
Multiple vulnerabilities have been found in Python, the worst of
    which could lead to arbitrary code execution.
Aliases
0
alias CVE-2016-0772
Fixed_packages
0
url pkg:deb/debian/python2.7@2.7.12~rc1-1?distro=bullseye
purl pkg:deb/debian/python2.7@2.7.12~rc1-1?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.12~rc1-1%3Fdistro=bullseye
1
url pkg:deb/debian/python2.7@2.7.13-2%2Bdeb9u3
purl pkg:deb/debian/python2.7@2.7.13-2%2Bdeb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1taa-a9e4-tbc5
1
vulnerability VCID-2czu-wy37-qugf
2
vulnerability VCID-2shb-2cvn-dyd2
3
vulnerability VCID-4py6-hkzp-v3d4
4
vulnerability VCID-4q79-666d-rygx
5
vulnerability VCID-4z89-3tfk-pyge
6
vulnerability VCID-57c6-hx7f-efc6
7
vulnerability VCID-7jat-6ags-qbdr
8
vulnerability VCID-9mcr-rmtb-mufj
9
vulnerability VCID-dkxn-j9dr-sqbp
10
vulnerability VCID-dv5v-71b5-budp
11
vulnerability VCID-gfzb-b7tt-fkgz
12
vulnerability VCID-gkfp-ga1r-jkag
13
vulnerability VCID-hcq4-yq9k-jygb
14
vulnerability VCID-j9s6-2y47-zbbt
15
vulnerability VCID-k18q-3e9y-ykgf
16
vulnerability VCID-ppqx-qup8-sqbz
17
vulnerability VCID-tyk4-kazt-kydj
18
vulnerability VCID-v84j-ugn9-w3c8
19
vulnerability VCID-vpwj-d49q-1uh8
20
vulnerability VCID-w6k8-js68-87g4
21
vulnerability VCID-wq7w-nrar-ykde
22
vulnerability VCID-wxhp-wayg-qbd1
23
vulnerability VCID-x7h3-nmjt-aud5
24
vulnerability VCID-xv9p-nyha-xygv
25
vulnerability VCID-yqm8-fk44-4yhk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.13-2%252Bdeb9u3
2
url pkg:deb/debian/python2.7@2.7.18-8%2Bdeb11u1?distro=bullseye
purl pkg:deb/debian/python2.7@2.7.18-8%2Bdeb11u1?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.18-8%252Bdeb11u1%3Fdistro=bullseye
3
url pkg:ebuild/dev-lang/python@2.7.12
purl pkg:ebuild/dev-lang/python@2.7.12
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.7.12
4
url pkg:ebuild/dev-lang/python@3.4.5
purl pkg:ebuild/dev-lang/python@3.4.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.4.5
Affected_packages
0
url pkg:deb/debian/python2.7@2.7.3-6%2Bdeb7u2
purl pkg:deb/debian/python2.7@2.7.3-6%2Bdeb7u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mw1-384y-huc7
1
vulnerability VCID-1taa-a9e4-tbc5
2
vulnerability VCID-2czu-wy37-qugf
3
vulnerability VCID-2shb-2cvn-dyd2
4
vulnerability VCID-3mu8-g6x3-effb
5
vulnerability VCID-4py6-hkzp-v3d4
6
vulnerability VCID-4q79-666d-rygx
7
vulnerability VCID-4z89-3tfk-pyge
8
vulnerability VCID-57c6-hx7f-efc6
9
vulnerability VCID-7jat-6ags-qbdr
10
vulnerability VCID-8aq9-8cf5-qbet
11
vulnerability VCID-8jfv-cqa8-7yb6
12
vulnerability VCID-9jj2-hsne-mbac
13
vulnerability VCID-9mcr-rmtb-mufj
14
vulnerability VCID-c97c-3177-wkhx
15
vulnerability VCID-dkxn-j9dr-sqbp
16
vulnerability VCID-dv5v-71b5-budp
17
vulnerability VCID-ez5b-fvw8-hkh3
18
vulnerability VCID-f5vu-k9rc-27fz
19
vulnerability VCID-g81p-pg7g-xfcf
20
vulnerability VCID-gfzb-b7tt-fkgz
21
vulnerability VCID-gkfp-ga1r-jkag
22
vulnerability VCID-hcq4-yq9k-jygb
23
vulnerability VCID-hgwh-tzsf-suc1
24
vulnerability VCID-j9s6-2y47-zbbt
25
vulnerability VCID-k18q-3e9y-ykgf
26
vulnerability VCID-mzd5-dwty-bqhf
27
vulnerability VCID-ppqx-qup8-sqbz
28
vulnerability VCID-tyk4-kazt-kydj
29
vulnerability VCID-ugfy-dufq-hfb2
30
vulnerability VCID-v84j-ugn9-w3c8
31
vulnerability VCID-vpwj-d49q-1uh8
32
vulnerability VCID-w6k8-js68-87g4
33
vulnerability VCID-w85n-mm5g-5yd1
34
vulnerability VCID-wq7w-nrar-ykde
35
vulnerability VCID-wxhp-wayg-qbd1
36
vulnerability VCID-x7h3-nmjt-aud5
37
vulnerability VCID-xv9p-nyha-xygv
38
vulnerability VCID-yqm8-fk44-4yhk
39
vulnerability VCID-z6kh-961g-duck
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.3-6%252Bdeb7u2
1
url pkg:deb/debian/python2.7@2.7.9-2
purl pkg:deb/debian/python2.7@2.7.9-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1taa-a9e4-tbc5
1
vulnerability VCID-2czu-wy37-qugf
2
vulnerability VCID-2shb-2cvn-dyd2
3
vulnerability VCID-3mu8-g6x3-effb
4
vulnerability VCID-4py6-hkzp-v3d4
5
vulnerability VCID-4q79-666d-rygx
6
vulnerability VCID-4z89-3tfk-pyge
7
vulnerability VCID-57c6-hx7f-efc6
8
vulnerability VCID-7jat-6ags-qbdr
9
vulnerability VCID-9mcr-rmtb-mufj
10
vulnerability VCID-c97c-3177-wkhx
11
vulnerability VCID-dkxn-j9dr-sqbp
12
vulnerability VCID-dv5v-71b5-budp
13
vulnerability VCID-gfzb-b7tt-fkgz
14
vulnerability VCID-gkfp-ga1r-jkag
15
vulnerability VCID-hcq4-yq9k-jygb
16
vulnerability VCID-hgwh-tzsf-suc1
17
vulnerability VCID-j9s6-2y47-zbbt
18
vulnerability VCID-k18q-3e9y-ykgf
19
vulnerability VCID-ppqx-qup8-sqbz
20
vulnerability VCID-tyk4-kazt-kydj
21
vulnerability VCID-ugfy-dufq-hfb2
22
vulnerability VCID-v84j-ugn9-w3c8
23
vulnerability VCID-vpwj-d49q-1uh8
24
vulnerability VCID-w6k8-js68-87g4
25
vulnerability VCID-wq7w-nrar-ykde
26
vulnerability VCID-wxhp-wayg-qbd1
27
vulnerability VCID-x7h3-nmjt-aud5
28
vulnerability VCID-xv9p-nyha-xygv
29
vulnerability VCID-yqm8-fk44-4yhk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.9-2
2
url pkg:deb/debian/python2.7@2.7.9-2%2Bdeb8u1
purl pkg:deb/debian/python2.7@2.7.9-2%2Bdeb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1taa-a9e4-tbc5
1
vulnerability VCID-2czu-wy37-qugf
2
vulnerability VCID-2shb-2cvn-dyd2
3
vulnerability VCID-3mu8-g6x3-effb
4
vulnerability VCID-4py6-hkzp-v3d4
5
vulnerability VCID-4q79-666d-rygx
6
vulnerability VCID-4z89-3tfk-pyge
7
vulnerability VCID-57c6-hx7f-efc6
8
vulnerability VCID-7jat-6ags-qbdr
9
vulnerability VCID-9mcr-rmtb-mufj
10
vulnerability VCID-c97c-3177-wkhx
11
vulnerability VCID-dkxn-j9dr-sqbp
12
vulnerability VCID-dv5v-71b5-budp
13
vulnerability VCID-gfzb-b7tt-fkgz
14
vulnerability VCID-gkfp-ga1r-jkag
15
vulnerability VCID-hcq4-yq9k-jygb
16
vulnerability VCID-hgwh-tzsf-suc1
17
vulnerability VCID-j9s6-2y47-zbbt
18
vulnerability VCID-k18q-3e9y-ykgf
19
vulnerability VCID-ppqx-qup8-sqbz
20
vulnerability VCID-tyk4-kazt-kydj
21
vulnerability VCID-ugfy-dufq-hfb2
22
vulnerability VCID-v84j-ugn9-w3c8
23
vulnerability VCID-vpwj-d49q-1uh8
24
vulnerability VCID-w6k8-js68-87g4
25
vulnerability VCID-wq7w-nrar-ykde
26
vulnerability VCID-wxhp-wayg-qbd1
27
vulnerability VCID-x7h3-nmjt-aud5
28
vulnerability VCID-xv9p-nyha-xygv
29
vulnerability VCID-yqm8-fk44-4yhk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.9-2%252Bdeb8u1
3
url pkg:rpm/redhat/python@2.6.6-66?arch=el6_8
purl pkg:rpm/redhat/python@2.6.6-66?arch=el6_8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3mu8-g6x3-effb
1
vulnerability VCID-hgwh-tzsf-suc1
2
vulnerability VCID-ugfy-dufq-hfb2
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python@2.6.6-66%3Farch=el6_8
4
url pkg:rpm/redhat/python@2.7.5-38?arch=el7_2
purl pkg:rpm/redhat/python@2.7.5-38?arch=el7_2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3mu8-g6x3-effb
1
vulnerability VCID-hgwh-tzsf-suc1
2
vulnerability VCID-ugfy-dufq-hfb2
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python@2.7.5-38%3Farch=el7_2
5
url pkg:rpm/redhat/python27-python@2.7.8-16?arch=el7
purl pkg:rpm/redhat/python27-python@2.7.8-16?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3mu8-g6x3-effb
1
vulnerability VCID-hgwh-tzsf-suc1
2
vulnerability VCID-ugfy-dufq-hfb2
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python27-python@2.7.8-16%3Farch=el7
6
url pkg:rpm/redhat/python27-python@2.7.8-18?arch=el6
purl pkg:rpm/redhat/python27-python@2.7.8-18?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3mu8-g6x3-effb
1
vulnerability VCID-hgwh-tzsf-suc1
2
vulnerability VCID-ugfy-dufq-hfb2
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python27-python@2.7.8-18%3Farch=el6
7
url pkg:rpm/redhat/python33-python@3.3.2-16?arch=el7
purl pkg:rpm/redhat/python33-python@3.3.2-16?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3mu8-g6x3-effb
1
vulnerability VCID-hgwh-tzsf-suc1
2
vulnerability VCID-ugfy-dufq-hfb2
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python33-python@3.3.2-16%3Farch=el7
8
url pkg:rpm/redhat/python33-python@3.3.2-18?arch=el6
purl pkg:rpm/redhat/python33-python@3.3.2-18?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3mu8-g6x3-effb
1
vulnerability VCID-hgwh-tzsf-suc1
2
vulnerability VCID-ugfy-dufq-hfb2
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python33-python@3.3.2-18%3Farch=el6
9
url pkg:rpm/redhat/rh-python34-python@3.4.2-13?arch=el7
purl pkg:rpm/redhat/rh-python34-python@3.4.2-13?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3mu8-g6x3-effb
1
vulnerability VCID-hgwh-tzsf-suc1
2
vulnerability VCID-ugfy-dufq-hfb2
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-python34-python@3.4.2-13%3Farch=el7
10
url pkg:rpm/redhat/rh-python34-python@3.4.2-14?arch=el6
purl pkg:rpm/redhat/rh-python34-python@3.4.2-14?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3mu8-g6x3-effb
1
vulnerability VCID-hgwh-tzsf-suc1
2
vulnerability VCID-ugfy-dufq-hfb2
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-python34-python@3.4.2-14%3Farch=el6
11
url pkg:rpm/redhat/rh-python35-python@3.5.1-9?arch=el7
purl pkg:rpm/redhat/rh-python35-python@3.5.1-9?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3mu8-g6x3-effb
1
vulnerability VCID-hgwh-tzsf-suc1
2
vulnerability VCID-ugfy-dufq-hfb2
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-python35-python@3.5.1-9%3Farch=el7
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0772.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0772.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-0772
reference_id
reference_type
scores
0
value 0.05778
scoring_system epss
scoring_elements 0.90443
published_at 2026-04-01T12:55:00Z
1
value 0.05778
scoring_system epss
scoring_elements 0.90447
published_at 2026-04-02T12:55:00Z
2
value 0.05778
scoring_system epss
scoring_elements 0.90459
published_at 2026-04-04T12:55:00Z
3
value 0.05778
scoring_system epss
scoring_elements 0.90464
published_at 2026-04-07T12:55:00Z
4
value 0.05778
scoring_system epss
scoring_elements 0.90476
published_at 2026-04-08T12:55:00Z
5
value 0.05778
scoring_system epss
scoring_elements 0.90482
published_at 2026-04-09T12:55:00Z
6
value 0.05778
scoring_system epss
scoring_elements 0.9049
published_at 2026-04-12T12:55:00Z
7
value 0.05778
scoring_system epss
scoring_elements 0.90483
published_at 2026-04-13T12:55:00Z
8
value 0.05778
scoring_system epss
scoring_elements 0.905
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-0772
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0772
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0772
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1303647
reference_id 1303647
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1303647
5
reference_url https://github.com/tintinweb/pub/tree/11f6ebda59ad878377df78351f8ab580660d0024/pocs/cve-2016-0772
reference_id CVE-2016-0772
reference_type exploit
scores
url https://github.com/tintinweb/pub/tree/11f6ebda59ad878377df78351f8ab580660d0024/pocs/cve-2016-0772
6
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/local/43500.txt
reference_id CVE-2016-0772
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/local/43500.txt
7
reference_url https://security.gentoo.org/glsa/201701-18
reference_id GLSA-201701-18
reference_type
scores
url https://security.gentoo.org/glsa/201701-18
8
reference_url https://access.redhat.com/errata/RHSA-2016:1626
reference_id RHSA-2016:1626
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1626
9
reference_url https://access.redhat.com/errata/RHSA-2016:1627
reference_id RHSA-2016:1627
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1627
10
reference_url https://access.redhat.com/errata/RHSA-2016:1628
reference_id RHSA-2016:1628
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1628
11
reference_url https://access.redhat.com/errata/RHSA-2016:1629
reference_id RHSA-2016:1629
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1629
12
reference_url https://access.redhat.com/errata/RHSA-2016:1630
reference_id RHSA-2016:1630
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1630
13
reference_url https://usn.ubuntu.com/3134-1/
reference_id USN-3134-1
reference_type
scores
url https://usn.ubuntu.com/3134-1/
Weaknesses
Exploits
0
date_added 2018-01-11
description Python smtplib 2.7.11 / 3.4.4 / 3.5.1 - Man In The Middle StartTLS Stripping
required_action null
due_date null
notes null
known_ransomware_campaign_use false
source_date_published 2016-07-03
exploit_type local
platform multiple
source_date_updated 2018-01-11
data_source Exploit-DB
source_url https://github.com/tintinweb/pub/tree/11f6ebda59ad878377df78351f8ab580660d0024/pocs/cve-2016-0772
Severity_range_score4.8 - 5.8
Exploitability2.0
Weighted_severity4.3
Risk_score8.6
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-hgwh-tzsf-suc1