Lookup for vulnerable packages by Package URL.
| Purl | pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1 |
| Type | deb |
| Namespace | debian |
| Name | vlc |
| Version | 3.0.21-0+deb11u1 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | true |
| Next_non_vulnerable_version | 3.0.23-0+deb12u1 |
| Latest_non_vulnerable_version | 3.0.23-0+deb12u1 |
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-4cqm-15gx-p7gr |
| vulnerability_id |
VCID-4cqm-15gx-p7gr |
| summary |
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-51602 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00017 |
| scoring_system |
epss |
| scoring_elements |
0.04156 |
| published_at |
2026-05-07T12:55:00Z |
|
| 1 |
| value |
0.00017 |
| scoring_system |
epss |
| scoring_elements |
0.04129 |
| published_at |
2026-04-26T12:55:00Z |
|
| 2 |
| value |
0.00017 |
| scoring_system |
epss |
| scoring_elements |
0.04164 |
| published_at |
2026-04-29T12:55:00Z |
|
| 3 |
| value |
0.00017 |
| scoring_system |
epss |
| scoring_elements |
0.04128 |
| published_at |
2026-05-05T12:55:00Z |
|
| 4 |
| value |
0.00017 |
| scoring_system |
epss |
| scoring_elements |
0.03992 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00017 |
| scoring_system |
epss |
| scoring_elements |
0.04009 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00017 |
| scoring_system |
epss |
| scoring_elements |
0.04023 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00017 |
| scoring_system |
epss |
| scoring_elements |
0.04029 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00017 |
| scoring_system |
epss |
| scoring_elements |
0.04047 |
| published_at |
2026-04-09T12:55:00Z |
|
| 9 |
| value |
0.00017 |
| scoring_system |
epss |
| scoring_elements |
0.0402 |
| published_at |
2026-04-11T12:55:00Z |
|
| 10 |
| value |
0.00017 |
| scoring_system |
epss |
| scoring_elements |
0.04005 |
| published_at |
2026-04-12T12:55:00Z |
|
| 11 |
| value |
0.00017 |
| scoring_system |
epss |
| scoring_elements |
0.03978 |
| published_at |
2026-04-13T12:55:00Z |
|
| 12 |
| value |
0.00017 |
| scoring_system |
epss |
| scoring_elements |
0.03961 |
| published_at |
2026-04-16T12:55:00Z |
|
| 13 |
| value |
0.00017 |
| scoring_system |
epss |
| scoring_elements |
0.03973 |
| published_at |
2026-04-18T12:55:00Z |
|
| 14 |
| value |
0.00017 |
| scoring_system |
epss |
| scoring_elements |
0.04098 |
| published_at |
2026-04-21T12:55:00Z |
|
| 15 |
| value |
0.00017 |
| scoring_system |
epss |
| scoring_elements |
0.04111 |
| published_at |
2026-04-24T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-51602 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-51602
|
| risk_score |
1.2 |
| exploitability |
0.5 |
| weighted_severity |
2.4 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-4cqm-15gx-p7gr |
|
|
| Fixing_vulnerabilities |
| 0 |
|
| 1 |
| url |
VCID-cq5y-qzyq-mkbm |
| vulnerability_id |
VCID-cq5y-qzyq-mkbm |
| summary |
security update |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2023-47359 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.37495 |
| published_at |
2026-04-02T12:55:00Z |
|
| 1 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.37519 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.37348 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.37399 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.37412 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.37424 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.37389 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.37362 |
| published_at |
2026-04-13T12:55:00Z |
|
| 8 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.37408 |
| published_at |
2026-04-16T12:55:00Z |
|
| 9 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.3739 |
| published_at |
2026-04-18T12:55:00Z |
|
| 10 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.37334 |
| published_at |
2026-04-21T12:55:00Z |
|
| 11 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.37113 |
| published_at |
2026-04-24T12:55:00Z |
|
| 12 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.37083 |
| published_at |
2026-04-26T12:55:00Z |
|
| 13 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.36996 |
| published_at |
2026-04-29T12:55:00Z |
|
| 14 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.36876 |
| published_at |
2026-05-05T12:55:00Z |
|
| 15 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.36943 |
| published_at |
2026-05-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2023-47359 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2023-47359
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-cq5y-qzyq-mkbm |
|
| 2 |
| url |
VCID-g8tx-7ssq-pqb4 |
| vulnerability_id |
VCID-g8tx-7ssq-pqb4 |
| summary |
security update |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2024-46461 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00353 |
| scoring_system |
epss |
| scoring_elements |
0.57624 |
| published_at |
2026-05-07T12:55:00Z |
|
| 1 |
| value |
0.00353 |
| scoring_system |
epss |
| scoring_elements |
0.57623 |
| published_at |
2026-04-29T12:55:00Z |
|
| 2 |
| value |
0.00353 |
| scoring_system |
epss |
| scoring_elements |
0.57579 |
| published_at |
2026-05-05T12:55:00Z |
|
| 3 |
| value |
0.00353 |
| scoring_system |
epss |
| scoring_elements |
0.57634 |
| published_at |
2026-04-02T12:55:00Z |
|
| 4 |
| value |
0.00353 |
| scoring_system |
epss |
| scoring_elements |
0.57656 |
| published_at |
2026-04-04T12:55:00Z |
|
| 5 |
| value |
0.00353 |
| scoring_system |
epss |
| scoring_elements |
0.57632 |
| published_at |
2026-04-07T12:55:00Z |
|
| 6 |
| value |
0.00353 |
| scoring_system |
epss |
| scoring_elements |
0.57686 |
| published_at |
2026-04-08T12:55:00Z |
|
| 7 |
| value |
0.00353 |
| scoring_system |
epss |
| scoring_elements |
0.57689 |
| published_at |
2026-04-09T12:55:00Z |
|
| 8 |
| value |
0.00353 |
| scoring_system |
epss |
| scoring_elements |
0.57704 |
| published_at |
2026-04-11T12:55:00Z |
|
| 9 |
| value |
0.00353 |
| scoring_system |
epss |
| scoring_elements |
0.57683 |
| published_at |
2026-04-12T12:55:00Z |
|
| 10 |
| value |
0.00353 |
| scoring_system |
epss |
| scoring_elements |
0.57663 |
| published_at |
2026-04-13T12:55:00Z |
|
| 11 |
| value |
0.00353 |
| scoring_system |
epss |
| scoring_elements |
0.57692 |
| published_at |
2026-04-16T12:55:00Z |
|
| 12 |
| value |
0.00353 |
| scoring_system |
epss |
| scoring_elements |
0.57688 |
| published_at |
2026-04-18T12:55:00Z |
|
| 13 |
| value |
0.00353 |
| scoring_system |
epss |
| scoring_elements |
0.57667 |
| published_at |
2026-04-21T12:55:00Z |
|
| 14 |
| value |
0.00353 |
| scoring_system |
epss |
| scoring_elements |
0.57625 |
| published_at |
2026-04-24T12:55:00Z |
|
| 15 |
| value |
0.00353 |
| scoring_system |
epss |
| scoring_elements |
0.57644 |
| published_at |
2026-04-26T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2024-46461 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2024-46461
|
| risk_score |
2.0 |
| exploitability |
0.5 |
| weighted_severity |
4.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-g8tx-7ssq-pqb4 |
|
| 3 |
| url |
VCID-qq2u-797n-w7h4 |
| vulnerability_id |
VCID-qq2u-797n-w7h4 |
| summary |
security update |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2023-47360 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00094 |
| scoring_system |
epss |
| scoring_elements |
0.26299 |
| published_at |
2026-04-02T12:55:00Z |
|
| 1 |
| value |
0.00094 |
| scoring_system |
epss |
| scoring_elements |
0.2634 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.00094 |
| scoring_system |
epss |
| scoring_elements |
0.26111 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.00094 |
| scoring_system |
epss |
| scoring_elements |
0.26179 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00094 |
| scoring_system |
epss |
| scoring_elements |
0.26227 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00094 |
| scoring_system |
epss |
| scoring_elements |
0.26234 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.00094 |
| scoring_system |
epss |
| scoring_elements |
0.26189 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.00094 |
| scoring_system |
epss |
| scoring_elements |
0.2613 |
| published_at |
2026-04-13T12:55:00Z |
|
| 8 |
| value |
0.00094 |
| scoring_system |
epss |
| scoring_elements |
0.26135 |
| published_at |
2026-04-16T12:55:00Z |
|
| 9 |
| value |
0.00094 |
| scoring_system |
epss |
| scoring_elements |
0.26112 |
| published_at |
2026-04-18T12:55:00Z |
|
| 10 |
| value |
0.00094 |
| scoring_system |
epss |
| scoring_elements |
0.26075 |
| published_at |
2026-04-21T12:55:00Z |
|
| 11 |
| value |
0.00094 |
| scoring_system |
epss |
| scoring_elements |
0.26014 |
| published_at |
2026-04-24T12:55:00Z |
|
| 12 |
| value |
0.00094 |
| scoring_system |
epss |
| scoring_elements |
0.2601 |
| published_at |
2026-04-26T12:55:00Z |
|
| 13 |
| value |
0.00094 |
| scoring_system |
epss |
| scoring_elements |
0.25961 |
| published_at |
2026-04-29T12:55:00Z |
|
| 14 |
| value |
0.00094 |
| scoring_system |
epss |
| scoring_elements |
0.25853 |
| published_at |
2026-05-05T12:55:00Z |
|
| 15 |
| value |
0.00094 |
| scoring_system |
epss |
| scoring_elements |
0.25913 |
| published_at |
2026-05-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2023-47360 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2023-47360
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qq2u-797n-w7h4 |
|
| 4 |
| url |
VCID-zep1-wtjy-gya6 |
| vulnerability_id |
VCID-zep1-wtjy-gya6 |
| summary |
Multiple vulnerabilities have been discovered in VLC, the worst of which could result in arbitrary code execution. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-41325 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00076 |
| scoring_system |
epss |
| scoring_elements |
0.23012 |
| published_at |
2026-04-04T12:55:00Z |
|
| 1 |
| value |
0.00076 |
| scoring_system |
epss |
| scoring_elements |
0.22968 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.00076 |
| scoring_system |
epss |
| scoring_elements |
0.22804 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.00077 |
| scoring_system |
epss |
| scoring_elements |
0.2268 |
| published_at |
2026-05-07T12:55:00Z |
|
| 4 |
| value |
0.00077 |
| scoring_system |
epss |
| scoring_elements |
0.22703 |
| published_at |
2026-04-26T12:55:00Z |
|
| 5 |
| value |
0.00077 |
| scoring_system |
epss |
| scoring_elements |
0.22699 |
| published_at |
2026-04-29T12:55:00Z |
|
| 6 |
| value |
0.00077 |
| scoring_system |
epss |
| scoring_elements |
0.22597 |
| published_at |
2026-05-05T12:55:00Z |
|
| 7 |
| value |
0.00081 |
| scoring_system |
epss |
| scoring_elements |
0.23921 |
| published_at |
2026-04-18T12:55:00Z |
|
| 8 |
| value |
0.00081 |
| scoring_system |
epss |
| scoring_elements |
0.23932 |
| published_at |
2026-04-16T12:55:00Z |
|
| 9 |
| value |
0.00081 |
| scoring_system |
epss |
| scoring_elements |
0.23903 |
| published_at |
2026-04-21T12:55:00Z |
|
| 10 |
| value |
0.00081 |
| scoring_system |
epss |
| scoring_elements |
0.23776 |
| published_at |
2026-04-24T12:55:00Z |
|
| 11 |
| value |
0.00081 |
| scoring_system |
epss |
| scoring_elements |
0.2396 |
| published_at |
2026-04-08T12:55:00Z |
|
| 12 |
| value |
0.00081 |
| scoring_system |
epss |
| scoring_elements |
0.24006 |
| published_at |
2026-04-09T12:55:00Z |
|
| 13 |
| value |
0.00081 |
| scoring_system |
epss |
| scoring_elements |
0.24022 |
| published_at |
2026-04-11T12:55:00Z |
|
| 14 |
| value |
0.00081 |
| scoring_system |
epss |
| scoring_elements |
0.23979 |
| published_at |
2026-04-12T12:55:00Z |
|
| 15 |
| value |
0.00081 |
| scoring_system |
epss |
| scoring_elements |
0.23923 |
| published_at |
2026-04-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-41325 |
|
| 1 |
|
| 2 |
| reference_url |
https://twitter.com/0xMitsurugi |
| reference_id |
0xMitsurugi |
| reference_type |
|
| scores |
| 0 |
| value |
7.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
Track* |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-23T19:35:16Z/ |
|
|
| url |
https://twitter.com/0xMitsurugi |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-41325
|
| risk_score |
2.8 |
| exploitability |
0.5 |
| weighted_severity |
5.5 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zep1-wtjy-gya6 |
|
|
| Risk_score | 1.2 |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.21-0%252Bdeb11u1 |