Lookup for vulnerable packages by Package URL.
| Purl | pkg:rpm/redhat/tfm-rubygem-excon@0.45.3-3?arch=el6sat |
| Type | rpm |
| Namespace | redhat |
| Name | tfm-rubygem-excon |
| Version | 0.45.3-3 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | true |
| Next_non_vulnerable_version | null |
| Latest_non_vulnerable_version | null |
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-172n-hbu2-6fd3 |
| vulnerability_id |
VCID-172n-hbu2-6fd3 |
| summary |
Uncontrolled Resource Consumption
Algorithmic complexity vulnerability in the `ssl.match_hostname` function and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate. |
| references |
| 0 |
|
| 1 |
|
| 2 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2013-2099 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.02979 |
| scoring_system |
epss |
| scoring_elements |
0.86778 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.02979 |
| scoring_system |
epss |
| scoring_elements |
0.868 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.02979 |
| scoring_system |
epss |
| scoring_elements |
0.86797 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.02979 |
| scoring_system |
epss |
| scoring_elements |
0.86794 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.02979 |
| scoring_system |
epss |
| scoring_elements |
0.86784 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.02979 |
| scoring_system |
epss |
| scoring_elements |
0.86796 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2013-2099 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
|
| fixed_packages |
|
| aliases |
CVE-2013-2099
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-172n-hbu2-6fd3 |
|
| 1 |
| url |
VCID-992k-gq1d-1kcf |
| vulnerability_id |
VCID-992k-gq1d-1kcf |
| summary |
qpid-cpp: anonymous access to qpidd cannot be prevented |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-0223 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.02275 |
| scoring_system |
epss |
| scoring_elements |
0.84962 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.02275 |
| scoring_system |
epss |
| scoring_elements |
0.84986 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.02275 |
| scoring_system |
epss |
| scoring_elements |
0.84991 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.02275 |
| scoring_system |
epss |
| scoring_elements |
0.84984 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.02275 |
| scoring_system |
epss |
| scoring_elements |
0.84974 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.02275 |
| scoring_system |
epss |
| scoring_elements |
0.84989 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-0223 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-0223
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-992k-gq1d-1kcf |
|
| 2 |
| url |
VCID-b3hv-v2tw-p7ca |
| vulnerability_id |
VCID-b3hv-v2tw-p7ca |
| summary |
qpid-cpp: 3 qpidd DoS issues in AMQP 0-10 protocol handling |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-0203 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.16987 |
| scoring_system |
epss |
| scoring_elements |
0.95101 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.16987 |
| scoring_system |
epss |
| scoring_elements |
0.9511 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.16987 |
| scoring_system |
epss |
| scoring_elements |
0.95112 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.16987 |
| scoring_system |
epss |
| scoring_elements |
0.95111 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.16987 |
| scoring_system |
epss |
| scoring_elements |
0.95115 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-0203 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-0203
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-b3hv-v2tw-p7ca |
|
| 3 |
| url |
VCID-dka6-3zwp-akf8 |
| vulnerability_id |
VCID-dka6-3zwp-akf8 |
| summary |
mongodb: DoS due to improper BSON validation |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-1609 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01693 |
| scoring_system |
epss |
| scoring_elements |
0.82596 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.01693 |
| scoring_system |
epss |
| scoring_elements |
0.82623 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.01693 |
| scoring_system |
epss |
| scoring_elements |
0.82622 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.01693 |
| scoring_system |
epss |
| scoring_elements |
0.8262 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.01693 |
| scoring_system |
epss |
| scoring_elements |
0.82614 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.01693 |
| scoring_system |
epss |
| scoring_elements |
0.82627 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-1609 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-1609
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dka6-3zwp-akf8 |
|
| 4 |
| url |
VCID-e974-hhh6-8bhw |
| vulnerability_id |
VCID-e974-hhh6-8bhw |
| summary |
foreman: Unprivileged user can access private bookmarks of other users |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2016-2100 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00201 |
| scoring_system |
epss |
| scoring_elements |
0.42131 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00201 |
| scoring_system |
epss |
| scoring_elements |
0.42205 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00201 |
| scoring_system |
epss |
| scoring_elements |
0.42216 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00201 |
| scoring_system |
epss |
| scoring_elements |
0.42188 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00201 |
| scoring_system |
epss |
| scoring_elements |
0.42153 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00201 |
| scoring_system |
epss |
| scoring_elements |
0.42163 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2016-2100 |
|
| 2 |
|
|
| fixed_packages |
|
| aliases |
CVE-2016-2100
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-e974-hhh6-8bhw |
|
| 5 |
|
|
| Fixing_vulnerabilities |
|
| Risk_score | 0.2 |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tfm-rubygem-excon@0.45.3-3%3Farch=el6sat |