Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/nvi@1.81.6-23?distro=trixie
Typedeb
Namespacedebian
Namenvi
Version1.81.6-23
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.81.6-24
Latest_non_vulnerable_version1.81.6-24
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-rrcw-n2jt-sfde
vulnerability_id VCID-rrcw-n2jt-sfde
summary Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2305.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2305.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2305
reference_id
reference_type
scores
0
value 0.22421
scoring_system epss
scoring_elements 0.95937
published_at 2026-06-04T12:55:00Z
1
value 0.22421
scoring_system epss
scoring_elements 0.95942
published_at 2026-06-05T12:55:00Z
2
value 0.22421
scoring_system epss
scoring_elements 0.95945
published_at 2026-06-08T12:55:00Z
3
value 0.22421
scoring_system epss
scoring_elements 0.9595
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2305
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9705
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9705
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0231
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0232
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0232
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0273
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0273
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1352
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1352
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2305
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2305
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1191049
reference_id 1191049
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1191049
9
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778397
reference_id 778397
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778397
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778402
reference_id 778402
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778402
11
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778406
reference_id 778406
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778406
12
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778408
reference_id 778408
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778408
13
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778409
reference_id 778409
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778409
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778412
reference_id 778412
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778412
15
reference_url https://access.redhat.com/errata/RHSA-2015:1053
reference_id RHSA-2015:1053
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1053
16
reference_url https://access.redhat.com/errata/RHSA-2015:1066
reference_id RHSA-2015:1066
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1066
17
reference_url https://usn.ubuntu.com/2572-1/
reference_id USN-2572-1
reference_type
scores
url https://usn.ubuntu.com/2572-1/
18
reference_url https://usn.ubuntu.com/2594-1/
reference_id USN-2594-1
reference_type
scores
url https://usn.ubuntu.com/2594-1/
fixed_packages
0
url pkg:deb/debian/nvi@1.81.6-13?distro=trixie
purl pkg:deb/debian/nvi@1.81.6-13?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nvi@1.81.6-13%3Fdistro=trixie
1
url pkg:deb/debian/nvi@1.81.6-16?distro=trixie
purl pkg:deb/debian/nvi@1.81.6-16?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nvi@1.81.6-16%3Fdistro=trixie
2
url pkg:deb/debian/nvi@1.81.6-17?distro=trixie
purl pkg:deb/debian/nvi@1.81.6-17?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nvi@1.81.6-17%3Fdistro=trixie
3
url pkg:deb/debian/nvi@1.81.6-23?distro=trixie
purl pkg:deb/debian/nvi@1.81.6-23?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nvi@1.81.6-23%3Fdistro=trixie
4
url pkg:deb/debian/nvi@1.81.6-24?distro=trixie
purl pkg:deb/debian/nvi@1.81.6-24?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nvi@1.81.6-24%3Fdistro=trixie
aliases CVE-2015-2305
risk_score 0.1
exploitability 0.5
weighted_severity 0.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rrcw-n2jt-sfde
1
url VCID-ux5j-ch6z-kyf7
vulnerability_id VCID-ux5j-ch6z-kyf7
summary Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2001-1562
reference_id
reference_type
scores
0
value 0.00047
scoring_system epss
scoring_elements 0.14894
published_at 2026-06-04T12:55:00Z
1
value 0.00047
scoring_system epss
scoring_elements 0.14979
published_at 2026-06-05T12:55:00Z
2
value 0.00047
scoring_system epss
scoring_elements 0.14976
published_at 2026-06-06T12:55:00Z
3
value 0.00047
scoring_system epss
scoring_elements 0.14936
published_at 2026-06-07T12:55:00Z
4
value 0.00047
scoring_system epss
scoring_elements 0.14854
published_at 2026-06-08T12:55:00Z
5
value 0.00047
scoring_system epss
scoring_elements 0.14879
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2001-1562
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1562
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1562
fixed_packages
0
url pkg:deb/debian/nvi@1.79-16a.1?distro=trixie
purl pkg:deb/debian/nvi@1.79-16a.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nvi@1.79-16a.1%3Fdistro=trixie
1
url pkg:deb/debian/nvi@1.81.6-16?distro=trixie
purl pkg:deb/debian/nvi@1.81.6-16?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nvi@1.81.6-16%3Fdistro=trixie
2
url pkg:deb/debian/nvi@1.81.6-17?distro=trixie
purl pkg:deb/debian/nvi@1.81.6-17?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nvi@1.81.6-17%3Fdistro=trixie
3
url pkg:deb/debian/nvi@1.81.6-23?distro=trixie
purl pkg:deb/debian/nvi@1.81.6-23?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nvi@1.81.6-23%3Fdistro=trixie
4
url pkg:deb/debian/nvi@1.81.6-24?distro=trixie
purl pkg:deb/debian/nvi@1.81.6-24?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nvi@1.81.6-24%3Fdistro=trixie
aliases CVE-2001-1562
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ux5j-ch6z-kyf7
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/nvi@1.81.6-23%3Fdistro=trixie