Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/105189?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/105189?format=api", "purl": "pkg:rpm/redhat/libreoffice@1:5.3.6.1-24?arch=el7", "type": "rpm", "namespace": "redhat", "name": "libreoffice", "version": "1:5.3.6.1-24", "qualifiers": { "arch": "el7" }, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/79727?format=api", "vulnerability_id": "VCID-3kcp-zzcm-kfc9", "summary": "security update", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00040.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00040.html" }, { "reference_url": "http://packetstormsecurity.com/files/156474/Open-Xchange-App-Suite-Documents-Server-Side-Request-Forgery.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://packetstormsecurity.com/files/156474/Open-Xchange-App-Suite-Documents-Server-Side-Request-Forgery.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9853.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9853.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9853", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52485", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52654", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52586", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.5255", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52576", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52531", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52558", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52524", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52577", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.5257", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52621", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52605", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.5259", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52629", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52637", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52622", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52573", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52583", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52547", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52488", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52541", "published_at": "2026-05-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9853" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9850", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9850" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9851", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9851" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9852", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9852" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9853", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9853" }, { "reference_url": "http://seclists.org/fulldisclosure/2020/Feb/23", "reference_id": "", "reference_type": "", "scores": [], "url": "http://seclists.org/fulldisclosure/2020/Feb/23" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://lists.apache.org/thread.html/19c917f7c8a0d8f62142046fabfe3e2c7d6091ef1f92b99c6e79e24e%40%3Ccommits.openoffice.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/19c917f7c8a0d8f62142046fabfe3e2c7d6091ef1f92b99c6e79e24e%40%3Ccommits.openoffice.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/27339e8a9a1e9bb47fbdb939b338256d0356250a1974aaf4d774f683%40%3Ccommits.openoffice.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/27339e8a9a1e9bb47fbdb939b338256d0356250a1974aaf4d774f683%40%3Ccommits.openoffice.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/306a374361891eb17c6cffc99c3d7be1d3152a99c839d4231edc1631%40%3Ccommits.openoffice.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/306a374361891eb17c6cffc99c3d7be1d3152a99c839d4231edc1631%40%3Ccommits.openoffice.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/3a5570ca5cd14ad08e24684c71cfeff3a507f108fe3cf30ba4f58226%40%3Ccommits.openoffice.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/3a5570ca5cd14ad08e24684c71cfeff3a507f108fe3cf30ba4f58226%40%3Ccommits.openoffice.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/4ae0e6e52600f408d943ded079d314733ce188b04b04471464f89c4f%40%3Ccommits.openoffice.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/4ae0e6e52600f408d943ded079d314733ce188b04b04471464f89c4f%40%3Ccommits.openoffice.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/70da9481dca267405e1d79e53942264765ef3f55c9a563c3737e3926%40%3Ccommits.openoffice.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/70da9481dca267405e1d79e53942264765ef3f55c9a563c3737e3926%40%3Ccommits.openoffice.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/7394e6b5f78a878bd0c44e9bc9adf90b8cdf49e9adc0f287145aba9b%40%3Ccommits.openoffice.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/7394e6b5f78a878bd0c44e9bc9adf90b8cdf49e9adc0f287145aba9b%40%3Ccommits.openoffice.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/9dc85d9937ad7f101047c53f78c00e8ceb135eaeff7dcf4724b46f2c%40%3Ccommits.openoffice.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/9dc85d9937ad7f101047c53f78c00e8ceb135eaeff7dcf4724b46f2c%40%3Ccommits.openoffice.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/a5231ad45b030b54828c7b0b62a7e7d4b48481c7cb83ff628e07fa43%40%3Ccommits.openoffice.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/a5231ad45b030b54828c7b0b62a7e7d4b48481c7cb83ff628e07fa43%40%3Ccommits.openoffice.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/a540d1b6f9a7ebb206adba02839f654a6ee63a7b0976f559a847e49a%40%3Ccommits.openoffice.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/a540d1b6f9a7ebb206adba02839f654a6ee63a7b0976f559a847e49a%40%3Ccommits.openoffice.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/ca216900abd846f0220fe18b95f9f787bdbe0e87fa4eee822073cd69%40%3Ccommits.openoffice.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/ca216900abd846f0220fe18b95f9f787bdbe0e87fa4eee822073cd69%40%3Ccommits.openoffice.apache.org%3E" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00005.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00005.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQGBRSD73KTDZ2MPAOL7FBWO3SQVYE5B/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQGBRSD73KTDZ2MPAOL7FBWO3SQVYE5B/" }, { "reference_url": "https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9853/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9853/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1797466", "reference_id": "1797466", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1797466" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9853", "reference_id": "CVE-2019-9853", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:P/I:P/A:P" }, { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9853" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1151", "reference_id": "RHSA-2020:1151", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1151" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1598", "reference_id": "RHSA-2020:1598", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1598" } ], "fixed_packages": [], "aliases": [ "CVE-2019-9853" ], "risk_score": 3.5, "exploitability": "0.5", "weighted_severity": "7.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3kcp-zzcm-kfc9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/79728?format=api", "vulnerability_id": "VCID-5rdw-edhu-qbhf", "summary": "security update", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00055.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00055.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9854.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9854.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9854", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00671", "scoring_system": "epss", "scoring_elements": "0.7156", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.00671", "scoring_system": "epss", "scoring_elements": "0.71472", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00671", "scoring_system": "epss", "scoring_elements": "0.71508", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00671", "scoring_system": "epss", "scoring_elements": "0.71473", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00671", "scoring_system": "epss", "scoring_elements": "0.71503", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.0076", "scoring_system": "epss", "scoring_elements": "0.73286", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.0076", "scoring_system": "epss", "scoring_elements": "0.73282", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.0076", "scoring_system": "epss", "scoring_elements": "0.73318", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.0076", "scoring_system": "epss", "scoring_elements": "0.73331", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.0076", "scoring_system": "epss", "scoring_elements": "0.73355", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0076", "scoring_system": "epss", "scoring_elements": "0.73335", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.0076", "scoring_system": "epss", "scoring_elements": "0.73327", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0076", "scoring_system": "epss", "scoring_elements": "0.7337", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.0076", "scoring_system": "epss", "scoring_elements": "0.73378", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.0076", "scoring_system": "epss", "scoring_elements": "0.73371", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.0076", "scoring_system": "epss", "scoring_elements": "0.73405", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.0076", "scoring_system": "epss", "scoring_elements": "0.73418", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.0076", "scoring_system": "epss", "scoring_elements": "0.73416", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.0076", "scoring_system": "epss", "scoring_elements": "0.73412", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.0076", "scoring_system": "epss", "scoring_elements": "0.73276", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.0076", "scoring_system": "epss", "scoring_elements": "0.7331", "published_at": "2026-04-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9854" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9854", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9854" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00005.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00005.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQKKOIY2DMZCXJINOLIQXD2NWISDKK3N/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQKKOIY2DMZCXJINOLIQXD2NWISDKK3N/" }, { "reference_url": "https://seclists.org/bugtraq/2019/Sep/17", "reference_id": "", "reference_type": "", "scores": [], "url": "https://seclists.org/bugtraq/2019/Sep/17" }, { "reference_url": "https://www.debian.org/security/2019/dsa-4519", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.debian.org/security/2019/dsa-4519" }, { "reference_url": "https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9854/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9854/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1769907", "reference_id": "1769907", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1769907" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9854", "reference_id": "CVE-2019-9854", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:P/I:P/A:P" }, { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9854" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1151", "reference_id": "RHSA-2020:1151", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1151" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1598", "reference_id": "RHSA-2020:1598", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1598" }, { "reference_url": "https://usn.ubuntu.com/4138-1/", "reference_id": "USN-4138-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4138-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2019-9854" ], "risk_score": 3.5, "exploitability": "0.5", "weighted_severity": "7.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5rdw-edhu-qbhf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/79724?format=api", "vulnerability_id": "VCID-c1fx-u5yh-jucb", "summary": "security update", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9850.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9850.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9850", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.863", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86311", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86329", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.8633", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86347", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86357", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86371", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86369", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86363", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.8638", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86385", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86378", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86398", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86408", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86404", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86424", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86444", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86463", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.8646", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86473", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.02907", "scoring_system": "epss", "scoring_elements": "0.86509", "published_at": "2026-05-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9850" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9850", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9850" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9851", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9851" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9852", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9852" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9853", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9853" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1744862", "reference_id": "1744862", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1744862" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1151", "reference_id": "RHSA-2020:1151", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1151" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1598", "reference_id": "RHSA-2020:1598", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1598" }, { "reference_url": "https://usn.ubuntu.com/4102-1/", "reference_id": "USN-4102-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4102-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2019-9850" ], "risk_score": 3.5, "exploitability": "0.5", "weighted_severity": "7.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c1fx-u5yh-jucb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56784?format=api", "vulnerability_id": "VCID-k36c-4eyp-p7hq", "summary": "Multiple vulnerabilities have been found in LibreOffice, the worst\n of which could result in the arbitrary execution of code.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9848.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9848.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9848", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.86449", "scoring_system": "epss", "scoring_elements": "0.9942", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.86449", "scoring_system": "epss", "scoring_elements": "0.99415", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.86449", "scoring_system": "epss", "scoring_elements": "0.99417", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.86558", "scoring_system": "epss", "scoring_elements": "0.9941", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.86558", "scoring_system": "epss", "scoring_elements": "0.99412", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.86558", "scoring_system": "epss", "scoring_elements": "0.99413", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.86558", "scoring_system": "epss", "scoring_elements": "0.99414", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.86558", "scoring_system": "epss", "scoring_elements": "0.99416", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.86558", "scoring_system": "epss", "scoring_elements": "0.99417", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.86558", "scoring_system": "epss", "scoring_elements": "0.99418", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.86558", "scoring_system": "epss", "scoring_elements": "0.9942", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.86558", "scoring_system": "epss", "scoring_elements": "0.99419", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.86558", "scoring_system": "epss", "scoring_elements": "0.99421", "published_at": "2026-04-29T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9848" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9848", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9848" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9849", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9849" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737427", "reference_id": "1737427", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737427" }, { "reference_url": "https://security.archlinux.org/ASA-201908-9", "reference_id": "ASA-201908-9", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201908-9" }, { "reference_url": "https://security.archlinux.org/AVG-1009", "reference_id": "AVG-1009", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1009" }, { "reference_url": "https://security.archlinux.org/AVG-1010", "reference_id": "AVG-1010", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1010" }, { "reference_url": "https://security.gentoo.org/glsa/201908-13", "reference_id": "GLSA-201908-13", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201908-13" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1151", "reference_id": "RHSA-2020:1151", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1151" }, { "reference_url": "https://usn.ubuntu.com/4063-1/", "reference_id": "USN-4063-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4063-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2019-9848" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k36c-4eyp-p7hq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/79726?format=api", "vulnerability_id": "VCID-pc43-5jvh-fbe2", "summary": "security update", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9852.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9852.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9852", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28954", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.2903", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.2908", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28889", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28957", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.29", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.29003", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28959", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28909", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28933", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28863", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28744", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28633", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28563", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28405", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28462", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28484", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28406", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28427", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28501", "published_at": "2026-05-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9852" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9850", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9850" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9851", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9851" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9852", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9852" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9853", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9853" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1744868", "reference_id": "1744868", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1744868" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1151", "reference_id": "RHSA-2020:1151", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1151" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1598", "reference_id": "RHSA-2020:1598", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1598" }, { "reference_url": "https://usn.ubuntu.com/4102-1/", "reference_id": "USN-4102-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4102-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2019-9852" ], "risk_score": 3.5, "exploitability": "0.5", "weighted_severity": "7.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-pc43-5jvh-fbe2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56785?format=api", "vulnerability_id": "VCID-pkz4-5wxb-5qdc", "summary": "Multiple vulnerabilities have been found in LibreOffice, the worst\n of which could result in the arbitrary execution of code.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9849.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9849.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9849", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03491", "scoring_system": "epss", "scoring_elements": "0.87718", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.03491", "scoring_system": "epss", "scoring_elements": "0.87641", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.03491", "scoring_system": "epss", "scoring_elements": "0.87657", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.03491", "scoring_system": "epss", "scoring_elements": "0.87676", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.03491", "scoring_system": "epss", "scoring_elements": "0.87672", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.03491", "scoring_system": "epss", "scoring_elements": "0.87685", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.03556", "scoring_system": "epss", "scoring_elements": "0.87668", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.03556", "scoring_system": "epss", "scoring_elements": "0.8769", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.03556", "scoring_system": "epss", "scoring_elements": "0.87696", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.03556", "scoring_system": "epss", "scoring_elements": "0.87707", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.03556", "scoring_system": "epss", "scoring_elements": "0.87701", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.03556", "scoring_system": "epss", "scoring_elements": "0.87698", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.03556", "scoring_system": "epss", "scoring_elements": "0.87713", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.03556", "scoring_system": "epss", "scoring_elements": "0.8771", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.03556", "scoring_system": "epss", "scoring_elements": "0.87728", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.03556", "scoring_system": "epss", "scoring_elements": "0.87733", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.03556", "scoring_system": "epss", "scoring_elements": "0.87732", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.03556", "scoring_system": "epss", "scoring_elements": "0.87645", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.03556", "scoring_system": "epss", "scoring_elements": "0.87655", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.03556", "scoring_system": "epss", "scoring_elements": "0.87669", "published_at": "2026-04-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9849" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9848", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9848" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9849", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9849" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737421", "reference_id": "1737421", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737421" }, { "reference_url": "https://security.archlinux.org/ASA-201908-9", "reference_id": "ASA-201908-9", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201908-9" }, { "reference_url": "https://security.archlinux.org/AVG-1009", "reference_id": "AVG-1009", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1009" }, { "reference_url": "https://security.archlinux.org/AVG-1010", "reference_id": "AVG-1010", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1010" }, { "reference_url": "https://security.gentoo.org/glsa/201908-13", "reference_id": "GLSA-201908-13", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201908-13" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1151", "reference_id": "RHSA-2020:1151", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1151" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1598", "reference_id": "RHSA-2020:1598", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1598" }, { "reference_url": "https://usn.ubuntu.com/4063-1/", "reference_id": "USN-4063-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4063-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2019-9849" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-pkz4-5wxb-5qdc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/79725?format=api", "vulnerability_id": "VCID-sega-433y-v7bb", "summary": "security update", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9851.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9851.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9851", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.85784", "scoring_system": "epss", "scoring_elements": "0.99375", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.85784", "scoring_system": "epss", "scoring_elements": "0.99376", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.85784", "scoring_system": "epss", "scoring_elements": "0.99377", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.85784", "scoring_system": "epss", "scoring_elements": "0.99379", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.85784", "scoring_system": "epss", "scoring_elements": "0.9938", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.85784", "scoring_system": "epss", "scoring_elements": "0.99381", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.85784", "scoring_system": "epss", "scoring_elements": "0.99382", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.85784", "scoring_system": "epss", "scoring_elements": "0.99384", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.85784", "scoring_system": "epss", "scoring_elements": "0.99383", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.85784", "scoring_system": "epss", "scoring_elements": "0.99385", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.85784", "scoring_system": "epss", "scoring_elements": "0.99386", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.85784", "scoring_system": "epss", "scoring_elements": "0.99387", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.85784", "scoring_system": "epss", "scoring_elements": "0.99389", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.85784", "scoring_system": "epss", "scoring_elements": "0.9939", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.85784", "scoring_system": "epss", "scoring_elements": "0.99391", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.85784", "scoring_system": "epss", "scoring_elements": "0.99392", "published_at": "2026-05-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-9851" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9850", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9850" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9851", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9851" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9852", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9852" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9853", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9853" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1744866", "reference_id": "1744866", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1744866" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/47298.rb", "reference_id": "CVE-2019-9851", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/47298.rb" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1151", "reference_id": "RHSA-2020:1151", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1151" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1598", "reference_id": "RHSA-2020:1598", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1598" }, { "reference_url": "https://usn.ubuntu.com/4102-1/", "reference_id": "USN-4102-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4102-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2019-9851" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "7.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sega-433y-v7bb" } ], "fixing_vulnerabilities": [], "risk_score": "10.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/libreoffice@1:5.3.6.1-24%3Farch=el7" }