Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/powerpc-utils@1.3.13-1?distro=trixie
Typedeb
Namespacedebian
Namepowerpc-utils
Version1.3.13-1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.3.13-2
Latest_non_vulnerable_version1.3.13-2
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-dqtk-n7un-4bar
vulnerability_id VCID-dqtk-n7un-4bar
summary scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8165.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8165.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-8165
reference_id
reference_type
scores
0
value 0.05318
scoring_system epss
scoring_elements 0.90211
published_at 2026-06-04T12:55:00Z
1
value 0.05318
scoring_system epss
scoring_elements 0.90226
published_at 2026-06-05T12:55:00Z
2
value 0.05318
scoring_system epss
scoring_elements 0.90225
published_at 2026-06-06T12:55:00Z
3
value 0.05318
scoring_system epss
scoring_elements 0.90223
published_at 2026-06-07T12:55:00Z
4
value 0.05318
scoring_system epss
scoring_elements 0.90222
published_at 2026-06-08T12:55:00Z
5
value 0.05318
scoring_system epss
scoring_elements 0.90237
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-8165
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1073139
reference_id 1073139
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1073139
3
reference_url https://access.redhat.com/errata/RHSA-2016:2607
reference_id RHSA-2016:2607
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2607
fixed_packages
0
url pkg:deb/debian/powerpc-utils@0?distro=trixie
purl pkg:deb/debian/powerpc-utils@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/powerpc-utils@0%3Fdistro=trixie
1
url pkg:deb/debian/powerpc-utils@1.3.8-3?distro=trixie
purl pkg:deb/debian/powerpc-utils@1.3.8-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/powerpc-utils@1.3.8-3%3Fdistro=trixie
2
url pkg:deb/debian/powerpc-utils@1.3.10-2?distro=trixie
purl pkg:deb/debian/powerpc-utils@1.3.10-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/powerpc-utils@1.3.10-2%3Fdistro=trixie
3
url pkg:deb/debian/powerpc-utils@1.3.13-1?distro=trixie
purl pkg:deb/debian/powerpc-utils@1.3.13-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/powerpc-utils@1.3.13-1%3Fdistro=trixie
4
url pkg:deb/debian/powerpc-utils@1.3.13-2?distro=trixie
purl pkg:deb/debian/powerpc-utils@1.3.13-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/powerpc-utils@1.3.13-2%3Fdistro=trixie
aliases CVE-2014-8165
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dqtk-n7un-4bar
1
url VCID-e4yb-w554-e7b1
vulnerability_id VCID-e4yb-w554-e7b1
summary snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4040.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4040.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-4040
reference_id
reference_type
scores
0
value 0.00373
scoring_system epss
scoring_elements 0.59342
published_at 2026-06-04T12:55:00Z
1
value 0.00373
scoring_system epss
scoring_elements 0.59393
published_at 2026-06-05T12:55:00Z
2
value 0.00373
scoring_system epss
scoring_elements 0.59396
published_at 2026-06-06T12:55:00Z
3
value 0.00373
scoring_system epss
scoring_elements 0.59388
published_at 2026-06-07T12:55:00Z
4
value 0.00373
scoring_system epss
scoring_elements 0.59368
published_at 2026-06-08T12:55:00Z
5
value 0.00373
scoring_system epss
scoring_elements 0.59385
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-4040
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4040
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4040
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1110520
reference_id 1110520
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1110520
4
reference_url https://access.redhat.com/errata/RHSA-2015:0384
reference_id RHSA-2015:0384
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0384
fixed_packages
0
url pkg:deb/debian/powerpc-utils@1.3.1-2?distro=trixie
purl pkg:deb/debian/powerpc-utils@1.3.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/powerpc-utils@1.3.1-2%3Fdistro=trixie
1
url pkg:deb/debian/powerpc-utils@1.3.8-3?distro=trixie
purl pkg:deb/debian/powerpc-utils@1.3.8-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/powerpc-utils@1.3.8-3%3Fdistro=trixie
2
url pkg:deb/debian/powerpc-utils@1.3.10-2?distro=trixie
purl pkg:deb/debian/powerpc-utils@1.3.10-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/powerpc-utils@1.3.10-2%3Fdistro=trixie
3
url pkg:deb/debian/powerpc-utils@1.3.13-1?distro=trixie
purl pkg:deb/debian/powerpc-utils@1.3.13-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/powerpc-utils@1.3.13-1%3Fdistro=trixie
4
url pkg:deb/debian/powerpc-utils@1.3.13-2?distro=trixie
purl pkg:deb/debian/powerpc-utils@1.3.13-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/powerpc-utils@1.3.13-2%3Fdistro=trixie
aliases CVE-2014-4040
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e4yb-w554-e7b1
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/powerpc-utils@1.3.13-1%3Fdistro=trixie