Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/xen@4.7.1-r1?arch=aarch64&distroversion=v3.6&reponame=main
Typeapk
Namespacealpine
Namexen
Version4.7.1-r1
Qualifiers
arch aarch64
distroversion v3.6
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version4.7.1-r3
Latest_non_vulnerable_version4.8.5-r0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-15uu-ys63-47h4
vulnerability_id VCID-15uu-ys63-47h4
summary x86 task switch to VM86 mode mis-handled
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-9382
reference_id
reference_type
scores
0
value 0.00124
scoring_system epss
scoring_elements 0.31208
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-9382
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv2
scoring_elements AV:L/AC:M/Au:S/C:C/I:C/A:C
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845664
reference_id 845664
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845664
3
reference_url https://security.gentoo.org/glsa/201612-56
reference_id GLSA-201612-56
reference_type
scores
url https://security.gentoo.org/glsa/201612-56
4
reference_url https://xenbits.xen.org/xsa/advisory-192.html
reference_id XSA-192
reference_type
scores
url https://xenbits.xen.org/xsa/advisory-192.html
fixed_packages
0
url pkg:apk/alpine/xen@4.7.1-r1?arch=aarch64&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/xen@4.7.1-r1?arch=aarch64&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.7.1-r1%3Farch=aarch64&distroversion=v3.6&reponame=main
aliases CVE-2016-9382, XSA-192
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-15uu-ys63-47h4
1
url VCID-3h26-kwn4-tue5
vulnerability_id VCID-3h26-kwn4-tue5
summary delimiter injection vulnerabilities in pygrub
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-9380
reference_id
reference_type
scores
0
value 0.00093
scoring_system epss
scoring_elements 0.25987
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-9380
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv2
scoring_elements AV:L/AC:M/Au:S/C:C/I:C/A:C
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845670
reference_id 845670
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845670
3
reference_url https://security.gentoo.org/glsa/201612-56
reference_id GLSA-201612-56
reference_type
scores
url https://security.gentoo.org/glsa/201612-56
4
reference_url https://xenbits.xen.org/xsa/advisory-198.html
reference_id XSA-198
reference_type
scores
url https://xenbits.xen.org/xsa/advisory-198.html
fixed_packages
0
url pkg:apk/alpine/xen@4.7.1-r1?arch=aarch64&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/xen@4.7.1-r1?arch=aarch64&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.7.1-r1%3Farch=aarch64&distroversion=v3.6&reponame=main
aliases CVE-2016-9380, XSA-198
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3h26-kwn4-tue5
2
url VCID-84bv-ah5b-xyhd
vulnerability_id VCID-84bv-ah5b-xyhd
summary x86 segment base write emulation lacking canonical address checks
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-9385
reference_id
reference_type
scores
0
value 0.00104
scoring_system epss
scoring_elements 0.28095
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-9385
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv2
scoring_elements AV:L/AC:M/Au:S/C:N/I:N/A:C
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845665
reference_id 845665
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845665
3
reference_url https://security.gentoo.org/glsa/201612-56
reference_id GLSA-201612-56
reference_type
scores
url https://security.gentoo.org/glsa/201612-56
4
reference_url https://xenbits.xen.org/xsa/advisory-193.html
reference_id XSA-193
reference_type
scores
url https://xenbits.xen.org/xsa/advisory-193.html
fixed_packages
0
url pkg:apk/alpine/xen@4.7.1-r1?arch=aarch64&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/xen@4.7.1-r1?arch=aarch64&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.7.1-r1%3Farch=aarch64&distroversion=v3.6&reponame=main
aliases CVE-2016-9385, XSA-193
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-84bv-ah5b-xyhd
3
url VCID-9fbk-8r1x-d3ab
vulnerability_id VCID-9fbk-8r1x-d3ab
summary qemu incautious about shared ring processing
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-9381
reference_id
reference_type
scores
0
value 0.00105
scoring_system epss
scoring_elements 0.28161
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-9381
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6
scoring_system cvssv2
scoring_elements AV:L/AC:H/Au:S/C:C/I:C/A:C
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://security.gentoo.org/glsa/201612-56
reference_id GLSA-201612-56
reference_type
scores
url https://security.gentoo.org/glsa/201612-56
3
reference_url https://usn.ubuntu.com/3261-1/
reference_id USN-3261-1
reference_type
scores
url https://usn.ubuntu.com/3261-1/
4
reference_url https://xenbits.xen.org/xsa/advisory-197.html
reference_id XSA-197
reference_type
scores
url https://xenbits.xen.org/xsa/advisory-197.html
fixed_packages
0
url pkg:apk/alpine/xen@4.7.1-r1?arch=aarch64&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/xen@4.7.1-r1?arch=aarch64&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.7.1-r1%3Farch=aarch64&distroversion=v3.6&reponame=main
aliases CVE-2016-9381, XSA-197
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9fbk-8r1x-d3ab
4
url VCID-cvxv-4m5v-9ya5
vulnerability_id VCID-cvxv-4m5v-9ya5
summary x86 64-bit bit test instruction emulation broken
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-9383
reference_id
reference_type
scores
0
value 0.00135
scoring_system epss
scoring_elements 0.33071
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-9383
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv2
scoring_elements AV:L/AC:M/Au:S/C:C/I:C/A:C
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845668
reference_id 845668
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845668
3
reference_url https://security.gentoo.org/glsa/201612-56
reference_id GLSA-201612-56
reference_type
scores
url https://security.gentoo.org/glsa/201612-56
4
reference_url https://xenbits.xen.org/xsa/advisory-195.html
reference_id XSA-195
reference_type
scores
url https://xenbits.xen.org/xsa/advisory-195.html
fixed_packages
0
url pkg:apk/alpine/xen@4.7.1-r1?arch=aarch64&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/xen@4.7.1-r1?arch=aarch64&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.7.1-r1%3Farch=aarch64&distroversion=v3.6&reponame=main
aliases CVE-2016-9383, XSA-195
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cvxv-4m5v-9ya5
5
url VCID-j2gz-yr55-sydv
vulnerability_id VCID-j2gz-yr55-sydv
summary x86 null segments not always treated as unusable
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-9386
reference_id
reference_type
scores
0
value 0.001
scoring_system epss
scoring_elements 0.27383
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-9386
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv2
scoring_elements AV:L/AC:M/Au:S/C:C/I:C/A:C
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845663
reference_id 845663
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845663
3
reference_url https://security.gentoo.org/glsa/201612-56
reference_id GLSA-201612-56
reference_type
scores
url https://security.gentoo.org/glsa/201612-56
4
reference_url https://xenbits.xen.org/xsa/advisory-191.html
reference_id XSA-191
reference_type
scores
url https://xenbits.xen.org/xsa/advisory-191.html
fixed_packages
0
url pkg:apk/alpine/xen@4.7.1-r1?arch=aarch64&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/xen@4.7.1-r1?arch=aarch64&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.7.1-r1%3Farch=aarch64&distroversion=v3.6&reponame=main
aliases CVE-2016-9386, XSA-191
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j2gz-yr55-sydv
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.7.1-r1%3Farch=aarch64&distroversion=v3.6&reponame=main