| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
| url |
VCID-2j9q-ycd4-9kf3 |
| vulnerability_id |
VCID-2j9q-ycd4-9kf3 |
| summary |
PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\.|([^\\\\W_])?)+)+$/. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-3217 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00861 |
| scoring_system |
epss |
| scoring_elements |
0.75496 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.00861 |
| scoring_system |
epss |
| scoring_elements |
0.75567 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.00861 |
| scoring_system |
epss |
| scoring_elements |
0.7558 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.00861 |
| scoring_system |
epss |
| scoring_elements |
0.75575 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-3217 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-3217
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-2j9q-ycd4-9kf3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
| url |
VCID-5snu-edkf-huer |
| vulnerability_id |
VCID-5snu-edkf-huer |
| summary |
PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern and related patterns with certain internal recursive back references, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-2327 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.02821 |
| scoring_system |
epss |
| scoring_elements |
0.86473 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.02821 |
| scoring_system |
epss |
| scoring_elements |
0.86524 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.02821 |
| scoring_system |
epss |
| scoring_elements |
0.86534 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.02821 |
| scoring_system |
epss |
| scoring_elements |
0.86531 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-2327 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-2327
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5snu-edkf-huer |
|
| 9 |
| url |
VCID-6jjv-7sur-h3f1 |
| vulnerability_id |
VCID-6jjv-7sur-h3f1 |
| summary |
Multiple vulnerabilities have been found in libpcre, the worst of
which could lead to arbitrary code execution, or cause a Denial of Service
condition. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-8395 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.02405 |
| scoring_system |
epss |
| scoring_elements |
0.85409 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.02405 |
| scoring_system |
epss |
| scoring_elements |
0.8546 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.02405 |
| scoring_system |
epss |
| scoring_elements |
0.85469 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.02405 |
| scoring_system |
epss |
| scoring_elements |
0.85461 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-8395 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-8395
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6jjv-7sur-h3f1 |
|
| 10 |
|
| 11 |
|
| 12 |
| url |
VCID-6trm-pgn9-7ygd |
| vulnerability_id |
VCID-6trm-pgn9-7ygd |
| summary |
Multiple vulnerabilities have been found in libpcre, the worst of
which could lead to arbitrary code execution, or cause a Denial of Service
condition. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-8383 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.02335 |
| scoring_system |
epss |
| scoring_elements |
0.85193 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.02335 |
| scoring_system |
epss |
| scoring_elements |
0.85245 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.02335 |
| scoring_system |
epss |
| scoring_elements |
0.85255 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.02335 |
| scoring_system |
epss |
| scoring_elements |
0.85247 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-8383 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-8383
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6trm-pgn9-7ygd |
|
| 13 |
|
| 14 |
|
| 15 |
| url |
VCID-7nk1-kvgj-rbck |
| vulnerability_id |
VCID-7nk1-kvgj-rbck |
| summary |
Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by /^(?P=B)((?P=B)(?J:(?P<B>c)(?P<B>a(?P=B)))>WGXCREDITS)/, a different vulnerability than CVE-2015-8384. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2015-3210
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7nk1-kvgj-rbck |
|
| 16 |
| url |
VCID-7sft-m9gh-t7e3 |
| vulnerability_id |
VCID-7sft-m9gh-t7e3 |
| summary |
Multiple vulnerabilities have been found in libpcre, the worst of
which could lead to arbitrary code execution, or cause a Denial of Service
condition. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-8386 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0752 |
| scoring_system |
epss |
| scoring_elements |
0.91997 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.0752 |
| scoring_system |
epss |
| scoring_elements |
0.92025 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.0752 |
| scoring_system |
epss |
| scoring_elements |
0.92032 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.0752 |
| scoring_system |
epss |
| scoring_elements |
0.92028 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-8386 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-8386
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7sft-m9gh-t7e3 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
| url |
VCID-cz45-aust-dfa4 |
| vulnerability_id |
VCID-cz45-aust-dfa4 |
| summary |
Multiple vulnerabilities have been found in libpcre, the worst of
which could lead to arbitrary code execution, or cause a Denial of Service
condition. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-8385 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.05145 |
| scoring_system |
epss |
| scoring_elements |
0.90087 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.05145 |
| scoring_system |
epss |
| scoring_elements |
0.90118 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.05145 |
| scoring_system |
epss |
| scoring_elements |
0.90126 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.05145 |
| scoring_system |
epss |
| scoring_elements |
0.90124 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-8385 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-8385
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-cz45-aust-dfa4 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
|
| 35 |
|
| 36 |
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
| 41 |
|
| 42 |
|
| 43 |
|
| 44 |
|
| 45 |
|
| 46 |
|
| 47 |
| url |
VCID-jzb9-bkq1-q3cb |
| vulnerability_id |
VCID-jzb9-bkq1-q3cb |
| summary |
Multiple vulnerabilities have been found in libpcre, the worst of
which could lead to arbitrary code execution, or cause a Denial of Service
condition. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-5073 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00637 |
| scoring_system |
epss |
| scoring_elements |
0.7096 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.00637 |
| scoring_system |
epss |
| scoring_elements |
0.7105 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.00637 |
| scoring_system |
epss |
| scoring_elements |
0.71062 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.00637 |
| scoring_system |
epss |
| scoring_elements |
0.7106 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-5073 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-5073
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jzb9-bkq1-q3cb |
|
| 48 |
| url |
VCID-k5d8-8fw6-8bau |
| vulnerability_id |
VCID-k5d8-8fw6-8bau |
| summary |
Multiple vulnerabilities have been found in libpcre, the worst of
which could lead to arbitrary code execution, or cause a Denial of Service
condition. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-8384 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01192 |
| scoring_system |
epss |
| scoring_elements |
0.7926 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.01192 |
| scoring_system |
epss |
| scoring_elements |
0.79325 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.01192 |
| scoring_system |
epss |
| scoring_elements |
0.79339 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.01192 |
| scoring_system |
epss |
| scoring_elements |
0.79334 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-8384 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-8384
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-k5d8-8fw6-8bau |
|
| 49 |
|
| 50 |
|
| 51 |
|
| 52 |
|
| 53 |
|
| 54 |
|
| 55 |
|
| 56 |
|
| 57 |
|
| 58 |
|
| 59 |
| url |
VCID-s9z4-v43m-8yec |
| vulnerability_id |
VCID-s9z4-v43m-8yec |
| summary |
PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-2328 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.02714 |
| scoring_system |
epss |
| scoring_elements |
0.86246 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.02714 |
| scoring_system |
epss |
| scoring_elements |
0.86296 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.02714 |
| scoring_system |
epss |
| scoring_elements |
0.86306 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.02714 |
| scoring_system |
epss |
| scoring_elements |
0.86303 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-2328 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-2328
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-s9z4-v43m-8yec |
|
| 60 |
|
| 61 |
|
| 62 |
| url |
VCID-sv55-3rcn-cba9 |
| vulnerability_id |
VCID-sv55-3rcn-cba9 |
| summary |
The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large number of times within a repeated outer group that has a zero minimum quantifier. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-2325 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00471 |
| scoring_system |
epss |
| scoring_elements |
0.65066 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.00471 |
| scoring_system |
epss |
| scoring_elements |
0.65166 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.00471 |
| scoring_system |
epss |
| scoring_elements |
0.65177 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.00471 |
| scoring_system |
epss |
| scoring_elements |
0.65175 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-2325 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-2325
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sv55-3rcn-cba9 |
|
| 63 |
|
| 64 |
|
| 65 |
|
| 66 |
|
| 67 |
| url |
VCID-u4xt-9b1j-yfd9 |
| vulnerability_id |
VCID-u4xt-9b1j-yfd9 |
| summary |
Multiple vulnerabilities have been found in libpcre, the worst of
which could lead to arbitrary code execution, or cause a Denial of Service
condition. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-8392 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.04389 |
| scoring_system |
epss |
| scoring_elements |
0.89231 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.04389 |
| scoring_system |
epss |
| scoring_elements |
0.89268 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.04389 |
| scoring_system |
epss |
| scoring_elements |
0.89277 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.04389 |
| scoring_system |
epss |
| scoring_elements |
0.89276 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-8392 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-8392
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-u4xt-9b1j-yfd9 |
|
| 68 |
|
| 69 |
|
| 70 |
|
| 71 |
|
| 72 |
|
| 73 |
|
| 74 |
|
| 75 |
| url |
VCID-wxys-zawr-sfh4 |
| vulnerability_id |
VCID-wxys-zawr-sfh4 |
| summary |
Multiple vulnerabilities have been found in libpcre, the worst of
which could lead to arbitrary code execution, or cause a Denial of Service
condition. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-8391 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.06404 |
| scoring_system |
epss |
| scoring_elements |
0.91235 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.06404 |
| scoring_system |
epss |
| scoring_elements |
0.91265 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.06404 |
| scoring_system |
epss |
| scoring_elements |
0.91272 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.06404 |
| scoring_system |
epss |
| scoring_elements |
0.9127 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-8391 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-8391
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-wxys-zawr-sfh4 |
|
| 76 |
|
| 77 |
|
| 78 |
|
| 79 |
|