Lookup for vulnerable packages by Package URL.
| Purl | pkg:rpm/redhat/ruby193-rubygem-prototype-rails@3.2.1-1?arch=el6cf |
| Type | rpm |
| Namespace | redhat |
| Name | ruby193-rubygem-prototype-rails |
| Version | 3.2.1-1 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | true |
| Next_non_vulnerable_version | null |
| Latest_non_vulnerable_version | null |
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-66k3-q3b9-5yc5 |
| vulnerability_id |
VCID-66k3-q3b9-5yc5 |
| summary |
CFME: dangerous send method in performance.rb |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2014-3642 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00534 |
| scoring_system |
epss |
| scoring_elements |
0.67739 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00534 |
| scoring_system |
epss |
| scoring_elements |
0.67779 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00534 |
| scoring_system |
epss |
| scoring_elements |
0.67786 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00534 |
| scoring_system |
epss |
| scoring_elements |
0.67776 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00534 |
| scoring_system |
epss |
| scoring_elements |
0.67759 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00534 |
| scoring_system |
epss |
| scoring_elements |
0.67775 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2014-3642 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2014-3642
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-66k3-q3b9-5yc5 |
|
| 1 |
|
| 2 |
| url |
VCID-ega3-9wzs-muee |
| vulnerability_id |
VCID-ega3-9wzs-muee |
| summary |
interface: Ruby code injection |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2013-4172 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00558 |
| scoring_system |
epss |
| scoring_elements |
0.68573 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00558 |
| scoring_system |
epss |
| scoring_elements |
0.68614 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00558 |
| scoring_system |
epss |
| scoring_elements |
0.68622 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00558 |
| scoring_system |
epss |
| scoring_elements |
0.68615 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00558 |
| scoring_system |
epss |
| scoring_elements |
0.686 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00558 |
| scoring_system |
epss |
| scoring_elements |
0.68618 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2013-4172 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2013-4172
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ega3-9wzs-muee |
|
| 3 |
| url |
VCID-faaq-hgah-37av |
| vulnerability_id |
VCID-faaq-hgah-37av |
| summary |
Random numbers generated by contrib/pgcrypto functions may be easy for another database user to guessmore details |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2013-1900 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00566 |
| scoring_system |
epss |
| scoring_elements |
0.68821 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00566 |
| scoring_system |
epss |
| scoring_elements |
0.68861 |
| published_at |
2026-06-07T12:55:00Z |
|
| 2 |
| value |
0.00566 |
| scoring_system |
epss |
| scoring_elements |
0.68869 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00566 |
| scoring_system |
epss |
| scoring_elements |
0.68846 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00566 |
| scoring_system |
epss |
| scoring_elements |
0.68865 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2013-1900 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
|
| aliases |
CVE-2013-1900
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-faaq-hgah-37av |
|
| 4 |
| url |
VCID-kbua-zg8d-1bdy |
| vulnerability_id |
VCID-kbua-zg8d-1bdy |
| summary |
2: static secret_token.rb value |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2013-2049 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0016 |
| scoring_system |
epss |
| scoring_elements |
0.36585 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.0016 |
| scoring_system |
epss |
| scoring_elements |
0.36679 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.0016 |
| scoring_system |
epss |
| scoring_elements |
0.36687 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.0016 |
| scoring_system |
epss |
| scoring_elements |
0.36651 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.0016 |
| scoring_system |
epss |
| scoring_elements |
0.36614 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.0016 |
| scoring_system |
epss |
| scoring_elements |
0.36624 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2013-2049 |
|
| 2 |
|
|
| fixed_packages |
|
| aliases |
CVE-2013-2049
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-kbua-zg8d-1bdy |
|
| 5 |
|
| 6 |
| url |
VCID-t2tu-jx5e-5uhx |
| vulnerability_id |
VCID-t2tu-jx5e-5uhx |
| summary |
An unprivileged user can run commands that could interfere with in-progress backups.more details |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2013-1901 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00215 |
| scoring_system |
epss |
| scoring_elements |
0.44015 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00215 |
| scoring_system |
epss |
| scoring_elements |
0.44084 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00215 |
| scoring_system |
epss |
| scoring_elements |
0.44092 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00215 |
| scoring_system |
epss |
| scoring_elements |
0.44067 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00215 |
| scoring_system |
epss |
| scoring_elements |
0.44031 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00215 |
| scoring_system |
epss |
| scoring_elements |
0.44042 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2013-1901 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2013-1901
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-t2tu-jx5e-5uhx |
|
| 7 |
| url |
VCID-vb9g-cbjt-kybe |
| vulnerability_id |
VCID-vb9g-cbjt-kybe |
| summary |
CFME: default routes expose controllers and actions |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2014-0140 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00243 |
| scoring_system |
epss |
| scoring_elements |
0.47724 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00243 |
| scoring_system |
epss |
| scoring_elements |
0.47787 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00243 |
| scoring_system |
epss |
| scoring_elements |
0.47789 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00243 |
| scoring_system |
epss |
| scoring_elements |
0.47771 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00243 |
| scoring_system |
epss |
| scoring_elements |
0.47742 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00243 |
| scoring_system |
epss |
| scoring_elements |
0.47754 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2014-0140 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2014-0140
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vb9g-cbjt-kybe |
|
| 8 |
| url |
VCID-vf3m-pymd-zbam |
| vulnerability_id |
VCID-vf3m-pymd-zbam |
| summary |
CloudForms: user password stored in recoverable format |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2013-4423 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00104 |
| scoring_system |
epss |
| scoring_elements |
0.27971 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00104 |
| scoring_system |
epss |
| scoring_elements |
0.2804 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00104 |
| scoring_system |
epss |
| scoring_elements |
0.2799 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00104 |
| scoring_system |
epss |
| scoring_elements |
0.27954 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00104 |
| scoring_system |
epss |
| scoring_elements |
0.2791 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00104 |
| scoring_system |
epss |
| scoring_elements |
0.27917 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2013-4423 |
|
| 2 |
|
|
| fixed_packages |
|
| aliases |
CVE-2013-4423
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vf3m-pymd-zbam |
|
| 9 |
|
|
| Fixing_vulnerabilities |
|
| Risk_score | 1.4 |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby193-rubygem-prototype-rails@3.2.1-1%3Farch=el6cf |