Lookup for vulnerable packages by Package URL.

Purlpkg:alpm/archlinux/linux@5.9.7.arch1-1
Typealpm
Namespacearchlinux
Namelinux
Version5.9.7.arch1-1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version5.9.11.arch1-1
Latest_non_vulnerable_version6.19.12-1
Affected_by_vulnerabilities
0
url VCID-hdbd-y3cp-17aw
vulnerability_id VCID-hdbd-y3cp-17aw
summary Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8694.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8694.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8694
reference_id
reference_type
scores
0
value 0.00806
scoring_system epss
scoring_elements 0.74543
published_at 2026-06-06T12:55:00Z
1
value 0.00806
scoring_system epss
scoring_elements 0.74505
published_at 2026-06-04T12:55:00Z
2
value 0.00806
scoring_system epss
scoring_elements 0.74537
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8694
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8694
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8694
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1828580
reference_id 1828580
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1828580
5
reference_url https://security.archlinux.org/ASA-202011-10
reference_id ASA-202011-10
reference_type
scores
url https://security.archlinux.org/ASA-202011-10
6
reference_url https://security.archlinux.org/AVG-1269
reference_id AVG-1269
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1269
7
reference_url https://security.archlinux.org/AVG-1273
reference_id AVG-1273
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1273
8
reference_url https://security.archlinux.org/AVG-1274
reference_id AVG-1274
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1274
9
reference_url https://security.archlinux.org/AVG-1275
reference_id AVG-1275
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1275
10
reference_url https://usn.ubuntu.com/4626-1/
reference_id USN-4626-1
reference_type
scores
url https://usn.ubuntu.com/4626-1/
11
reference_url https://usn.ubuntu.com/4627-1/
reference_id USN-4627-1
reference_type
scores
url https://usn.ubuntu.com/4627-1/
fixed_packages
0
url pkg:alpm/archlinux/linux@5.9.8.arch1-1
purl pkg:alpm/archlinux/linux@5.9.8.arch1-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2bau-t3q4-2fdn
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/linux@5.9.8.arch1-1
aliases CVE-2020-8694
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hdbd-y3cp-17aw
1
url VCID-uq2t-erng-jbag
vulnerability_id VCID-uq2t-erng-jbag
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16119.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16119.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-16119
reference_id
reference_type
scores
0
value 0.00087
scoring_system epss
scoring_elements 0.25081
published_at 2026-06-06T12:55:00Z
1
value 0.00087
scoring_system epss
scoring_elements 0.24997
published_at 2026-06-04T12:55:00Z
2
value 0.00087
scoring_system epss
scoring_elements 0.25093
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-16119
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16119
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16119
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3702
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3702
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3653
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3653
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3656
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3656
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3679
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3679
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3732
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3732
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3739
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3739
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3743
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3743
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3753
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3753
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37576
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38160
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38160
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38166
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38166
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38199
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38199
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40490
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40490
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41073
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41073
17
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
18
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1886374
reference_id 1886374
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1886374
19
reference_url https://security.archlinux.org/AVG-1244
reference_id AVG-1244
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1244
20
reference_url https://security.archlinux.org/AVG-1245
reference_id AVG-1245
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1245
21
reference_url https://security.archlinux.org/AVG-1246
reference_id AVG-1246
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1246
22
reference_url https://security.archlinux.org/AVG-1247
reference_id AVG-1247
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1247
23
reference_url https://usn.ubuntu.com/4576-1/
reference_id USN-4576-1
reference_type
scores
url https://usn.ubuntu.com/4576-1/
24
reference_url https://usn.ubuntu.com/4577-1/
reference_id USN-4577-1
reference_type
scores
url https://usn.ubuntu.com/4577-1/
25
reference_url https://usn.ubuntu.com/4578-1/
reference_id USN-4578-1
reference_type
scores
url https://usn.ubuntu.com/4578-1/
26
reference_url https://usn.ubuntu.com/4579-1/
reference_id USN-4579-1
reference_type
scores
url https://usn.ubuntu.com/4579-1/
27
reference_url https://usn.ubuntu.com/4580-1/
reference_id USN-4580-1
reference_type
scores
url https://usn.ubuntu.com/4580-1/
fixed_packages
0
url pkg:alpm/archlinux/linux@5.10.2.arch1-1
purl pkg:alpm/archlinux/linux@5.10.2.arch1-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/linux@5.10.2.arch1-1
aliases CVE-2020-16119
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uq2t-erng-jbag
Fixing_vulnerabilities
0
url VCID-g2jv-jveq-2qc1
vulnerability_id VCID-g2jv-jveq-2qc1
summary A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25704.json
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25704.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-25704
reference_id
reference_type
scores
0
value 0.00025
scoring_system epss
scoring_elements 0.07543
published_at 2026-06-06T12:55:00Z
1
value 0.00025
scoring_system epss
scoring_elements 0.07499
published_at 2026-06-04T12:55:00Z
2
value 0.00025
scoring_system epss
scoring_elements 0.07535
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-25704
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25704
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25704
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1895961
reference_id 1895961
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1895961
5
reference_url https://security.archlinux.org/ASA-202011-10
reference_id ASA-202011-10
reference_type
scores
url https://security.archlinux.org/ASA-202011-10
6
reference_url https://security.archlinux.org/AVG-1268
reference_id AVG-1268
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1268
7
reference_url https://security.archlinux.org/AVG-1269
reference_id AVG-1269
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1269
8
reference_url https://security.archlinux.org/AVG-1270
reference_id AVG-1270
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1270
9
reference_url https://security.archlinux.org/AVG-1271
reference_id AVG-1271
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1271
10
reference_url https://access.redhat.com/errata/RHSA-2021:1578
reference_id RHSA-2021:1578
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1578
11
reference_url https://access.redhat.com/errata/RHSA-2021:1739
reference_id RHSA-2021:1739
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1739
12
reference_url https://access.redhat.com/errata/RHSA-2021:2718
reference_id RHSA-2021:2718
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2718
13
reference_url https://access.redhat.com/errata/RHSA-2021:2719
reference_id RHSA-2021:2719
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2719
14
reference_url https://access.redhat.com/errata/RHSA-2022:0063
reference_id RHSA-2022:0063
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0063
15
reference_url https://access.redhat.com/errata/RHSA-2022:0065
reference_id RHSA-2022:0065
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0065
16
reference_url https://usn.ubuntu.com/4679-1/
reference_id USN-4679-1
reference_type
scores
url https://usn.ubuntu.com/4679-1/
17
reference_url https://usn.ubuntu.com/4710-1/
reference_id USN-4710-1
reference_type
scores
url https://usn.ubuntu.com/4710-1/
18
reference_url https://usn.ubuntu.com/4711-1/
reference_id USN-4711-1
reference_type
scores
url https://usn.ubuntu.com/4711-1/
19
reference_url https://usn.ubuntu.com/4751-1/
reference_id USN-4751-1
reference_type
scores
url https://usn.ubuntu.com/4751-1/
20
reference_url https://usn.ubuntu.com/4752-1/
reference_id USN-4752-1
reference_type
scores
url https://usn.ubuntu.com/4752-1/
fixed_packages
0
url pkg:alpm/archlinux/linux@5.9.7.arch1-1
purl pkg:alpm/archlinux/linux@5.9.7.arch1-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hdbd-y3cp-17aw
1
vulnerability VCID-uq2t-erng-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/linux@5.9.7.arch1-1
aliases CVE-2020-25704
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g2jv-jveq-2qc1
1
url VCID-hkct-xae7-euc8
vulnerability_id VCID-hkct-xae7-euc8
summary A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28974.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28974.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-28974
reference_id
reference_type
scores
0
value 0.00059
scoring_system epss
scoring_elements 0.18745
published_at 2026-06-04T12:55:00Z
1
value 0.00059
scoring_system epss
scoring_elements 0.18822
published_at 2026-06-05T12:55:00Z
2
value 0.00059
scoring_system epss
scoring_elements 0.18824
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-28974
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28974
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28974
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1903126
reference_id 1903126
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1903126
5
reference_url https://security.archlinux.org/AVG-1313
reference_id AVG-1313
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1313
6
reference_url https://access.redhat.com/errata/RHSA-2021:1578
reference_id RHSA-2021:1578
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1578
7
reference_url https://access.redhat.com/errata/RHSA-2021:1739
reference_id RHSA-2021:1739
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1739
8
reference_url https://usn.ubuntu.com/4679-1/
reference_id USN-4679-1
reference_type
scores
url https://usn.ubuntu.com/4679-1/
9
reference_url https://usn.ubuntu.com/4680-1/
reference_id USN-4680-1
reference_type
scores
url https://usn.ubuntu.com/4680-1/
10
reference_url https://usn.ubuntu.com/4681-1/
reference_id USN-4681-1
reference_type
scores
url https://usn.ubuntu.com/4681-1/
11
reference_url https://usn.ubuntu.com/4683-1/
reference_id USN-4683-1
reference_type
scores
url https://usn.ubuntu.com/4683-1/
12
reference_url https://usn.ubuntu.com/4751-1/
reference_id USN-4751-1
reference_type
scores
url https://usn.ubuntu.com/4751-1/
fixed_packages
0
url pkg:alpm/archlinux/linux@5.9.7.arch1-1
purl pkg:alpm/archlinux/linux@5.9.7.arch1-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hdbd-y3cp-17aw
1
vulnerability VCID-uq2t-erng-jbag
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/linux@5.9.7.arch1-1
aliases CVE-2020-28974
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hkct-xae7-euc8
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/linux@5.9.7.arch1-1