Lookup for vulnerable packages by Package URL.
| Purl | pkg:apk/alpine/qt5-qtwebengine@5.15.16-r3?arch=x86_64&distroversion=v3.19&reponame=community |
| Type | apk |
| Namespace | alpine |
| Name | qt5-qtwebengine |
| Version | 5.15.16-r3 |
| Qualifiers |
| arch |
x86_64 |
| distroversion |
v3.19 |
| reponame |
community |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 5.15.16-r4 |
| Latest_non_vulnerable_version | 5.15.16-r6 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-chnc-y1nj-7bdp |
| vulnerability_id |
VCID-chnc-y1nj-7bdp |
| summary |
Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2023-7024 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.03067 |
| scoring_system |
epss |
| scoring_elements |
0.87032 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.03067 |
| scoring_system |
epss |
| scoring_elements |
0.87082 |
| published_at |
2026-06-14T12:55:00Z |
|
| 2 |
| value |
0.03067 |
| scoring_system |
epss |
| scoring_elements |
0.87086 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.03067 |
| scoring_system |
epss |
| scoring_elements |
0.87077 |
| published_at |
2026-06-12T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2023-7024 |
|
| 1 |
|
| 2 |
| reference_url |
https://crbug.com/1513170 |
| reference_id |
1513170 |
| reference_type |
|
| scores |
| 0 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
Attend |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2023-12-23T05:01:04Z/ |
|
|
| url |
https://crbug.com/1513170 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2023-7024
|
| risk_score |
10.0 |
| exploitability |
2.0 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-chnc-y1nj-7bdp |
|
| 1 |
| url |
VCID-gvne-fnpb-4ycc |
| vulnerability_id |
VCID-gvne-fnpb-4ycc |
| summary |
Type confusion in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2024-0518 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00139 |
| scoring_system |
epss |
| scoring_elements |
0.33784 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.00139 |
| scoring_system |
epss |
| scoring_elements |
0.33963 |
| published_at |
2026-06-14T12:55:00Z |
|
| 2 |
| value |
0.00139 |
| scoring_system |
epss |
| scoring_elements |
0.33985 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.00139 |
| scoring_system |
epss |
| scoring_elements |
0.33962 |
| published_at |
2026-06-12T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2024-0518 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://crbug.com/1507412 |
| reference_id |
1507412 |
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-17T04:00:16Z/ |
|
|
| url |
https://crbug.com/1507412 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
|
| aliases |
CVE-2024-0518
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-gvne-fnpb-4ycc |
|
| 2 |
| url |
VCID-humv-qwen-5kce |
| vulnerability_id |
VCID-humv-qwen-5kce |
| summary |
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2024-0519 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00175 |
| scoring_system |
epss |
| scoring_elements |
0.38781 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.00175 |
| scoring_system |
epss |
| scoring_elements |
0.38966 |
| published_at |
2026-06-14T12:55:00Z |
|
| 2 |
| value |
0.00175 |
| scoring_system |
epss |
| scoring_elements |
0.38976 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.00175 |
| scoring_system |
epss |
| scoring_elements |
0.38953 |
| published_at |
2026-06-12T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2024-0519 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://crbug.com/1517354 |
| reference_id |
1517354 |
| reference_type |
|
| scores |
| 0 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
Attend |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2024-01-18T20:18:46Z/ |
|
|
| url |
https://crbug.com/1517354 |
|
| 5 |
| reference_url |
https://www.couchbase.com/alerts/ |
| reference_id |
alerts |
| reference_type |
|
| scores |
| 0 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
Attend |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2024-01-18T20:18:46Z/ |
|
|
| url |
https://www.couchbase.com/alerts/ |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
|
| fixed_packages |
|
| aliases |
CVE-2024-0519
|
| risk_score |
10.0 |
| exploitability |
2.0 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-humv-qwen-5kce |
|
| 3 |
| url |
VCID-mgsq-vczt-43g2 |
| vulnerability_id |
VCID-mgsq-vczt-43g2 |
| summary |
Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2024-0224 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00447 |
| scoring_system |
epss |
| scoring_elements |
0.63952 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.00447 |
| scoring_system |
epss |
| scoring_elements |
0.64065 |
| published_at |
2026-06-14T12:55:00Z |
|
| 2 |
| value |
0.00447 |
| scoring_system |
epss |
| scoring_elements |
0.64068 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.00447 |
| scoring_system |
epss |
| scoring_elements |
0.64054 |
| published_at |
2026-06-12T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2024-0224 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
| reference_url |
https://crbug.com/1505086 |
| reference_id |
1505086 |
| reference_type |
|
| scores |
| 0 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-04T16:51:02Z/ |
|
|
| url |
https://crbug.com/1505086 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
|
| fixed_packages |
|
| aliases |
CVE-2024-0224
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mgsq-vczt-43g2 |
|
| 4 |
| url |
VCID-xa9t-86az-gqhk |
| vulnerability_id |
VCID-xa9t-86az-gqhk |
| summary |
Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2024-0222 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00443 |
| scoring_system |
epss |
| scoring_elements |
0.63765 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.00443 |
| scoring_system |
epss |
| scoring_elements |
0.63879 |
| published_at |
2026-06-14T12:55:00Z |
|
| 2 |
| value |
0.00443 |
| scoring_system |
epss |
| scoring_elements |
0.6388 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.00443 |
| scoring_system |
epss |
| scoring_elements |
0.63867 |
| published_at |
2026-06-12T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2024-0222 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
| reference_url |
https://crbug.com/1501798 |
| reference_id |
1501798 |
| reference_type |
|
| scores |
| 0 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-04T16:52:28Z/ |
|
|
| url |
https://crbug.com/1501798 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
|
| fixed_packages |
|
| aliases |
CVE-2024-0222
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xa9t-86az-gqhk |
|
| 5 |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qt5-qtwebengine@5.15.16-r3%3Farch=x86_64&distroversion=v3.19&reponame=community |