Lookup for vulnerable packages by Package URL.

Purlpkg:rpm/redhat/python27-python-setuptools@0.9.8-5?arch=el7
Typerpm
Namespaceredhat
Namepython27-python-setuptools
Version0.9.8-5
Qualifiers
arch el7
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-3bx6-aewc-7bd4
vulnerability_id VCID-3bx6-aewc-7bd4
summary
Multiple vulnerabilities have been found in Python, the worst of
    which could lead to arbitrary code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7185.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7185.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-7185
reference_id
reference_type
scores
0
value 0.01134
scoring_system epss
scoring_elements 0.78773
published_at 2026-06-11T12:55:00Z
1
value 0.01134
scoring_system epss
scoring_elements 0.78839
published_at 2026-06-12T12:55:00Z
2
value 0.01134
scoring_system epss
scoring_elements 0.78855
published_at 2026-06-13T12:55:00Z
3
value 0.01134
scoring_system epss
scoring_elements 0.78852
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-7185
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7185
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7185
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1146026
reference_id 1146026
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1146026
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=763848
reference_id 763848
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=763848
5
reference_url https://security.gentoo.org/glsa/201503-10
reference_id GLSA-201503-10
reference_type
scores
url https://security.gentoo.org/glsa/201503-10
6
reference_url https://access.redhat.com/errata/RHSA-2015:1064
reference_id RHSA-2015:1064
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1064
7
reference_url https://access.redhat.com/errata/RHSA-2015:1330
reference_id RHSA-2015:1330
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1330
8
reference_url https://access.redhat.com/errata/RHSA-2015:2101
reference_id RHSA-2015:2101
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2101
9
reference_url https://usn.ubuntu.com/2653-1/
reference_id USN-2653-1
reference_type
scores
url https://usn.ubuntu.com/2653-1/
fixed_packages
aliases CVE-2014-7185
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3bx6-aewc-7bd4
1
url VCID-3s5y-hqkg-zydu
vulnerability_id VCID-3s5y-hqkg-zydu
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4650.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4650.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-4650
reference_id
reference_type
scores
0
value 0.07232
scoring_system epss
scoring_elements 0.91809
published_at 2026-06-11T12:55:00Z
1
value 0.07232
scoring_system epss
scoring_elements 0.91837
published_at 2026-06-12T12:55:00Z
2
value 0.07232
scoring_system epss
scoring_elements 0.91845
published_at 2026-06-13T12:55:00Z
3
value 0.07232
scoring_system epss
scoring_elements 0.91841
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-4650
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4650
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4650
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1113527
reference_id 1113527
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1113527
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/33894.txt
reference_id CVE-2014-4650;OSVDB-108369
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/33894.txt
6
reference_url https://www.redteam-pentesting.de/advisories/rt-sa-2014-008
reference_id CVE-2014-4650;OSVDB-108369
reference_type exploit
scores
url https://www.redteam-pentesting.de/advisories/rt-sa-2014-008
7
reference_url https://access.redhat.com/errata/RHSA-2015:1064
reference_id RHSA-2015:1064
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1064
8
reference_url https://access.redhat.com/errata/RHSA-2015:1330
reference_id RHSA-2015:1330
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1330
9
reference_url https://access.redhat.com/errata/RHSA-2015:2101
reference_id RHSA-2015:2101
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2101
10
reference_url https://usn.ubuntu.com/2653-1/
reference_id USN-2653-1
reference_type
scores
url https://usn.ubuntu.com/2653-1/
fixed_packages
aliases CVE-2014-4650
risk_score 5.2
exploitability 2.0
weighted_severity 2.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3s5y-hqkg-zydu
2
url VCID-9h5r-3me7-97dy
vulnerability_id VCID-9h5r-3me7-97dy
summary
Multiple vulnerabilities have been found in Python, the worst of
    which could lead to arbitrary code execution.
references
0
reference_url http://bugs.python.org/issue21529
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://bugs.python.org/issue21529
1
reference_url http://lists.opensuse.org/opensuse-updates/2014-07/msg00015.html
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2014-07/msg00015.html
2
reference_url http://openwall.com/lists/oss-security/2014/06/24/7
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2014/06/24/7
3
reference_url http://rhn.redhat.com/errata/RHSA-2015-1064.html
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-1064.html
4
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4616.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4616.json
5
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-4616
reference_id
reference_type
scores
0
value 0.00427
scoring_system epss
scoring_elements 0.62956
published_at 2026-06-14T12:55:00Z
1
value 0.00427
scoring_system epss
scoring_elements 0.62949
published_at 2026-06-12T12:55:00Z
2
value 0.00427
scoring_system epss
scoring_elements 0.62961
published_at 2026-06-13T12:55:00Z
3
value 0.00427
scoring_system epss
scoring_elements 0.62847
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-4616
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4616
7
reference_url https://github.com/simplejson/simplejson
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/simplejson/simplejson
8
reference_url https://hackerone.com/reports/12297
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://hackerone.com/reports/12297
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-4616
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-4616
10
reference_url http://www.securityfocus.com/bid/68119
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/68119
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1112285
reference_id 1112285
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1112285
12
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752395
reference_id 752395
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752395
13
reference_url https://github.com/advisories/GHSA-9772-cwx9-r4cj
reference_id GHSA-9772-cwx9-r4cj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9772-cwx9-r4cj
14
reference_url https://security.gentoo.org/glsa/201503-10
reference_id GLSA-201503-10
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/201503-10
15
reference_url https://access.redhat.com/errata/RHSA-2015:1064
reference_id RHSA-2015:1064
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1064
16
reference_url https://access.redhat.com/errata/RHSA-2015:2101
reference_id RHSA-2015:2101
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2101
17
reference_url https://usn.ubuntu.com/2653-1/
reference_id USN-2653-1
reference_type
scores
url https://usn.ubuntu.com/2653-1/
fixed_packages
aliases CVE-2014-4616, GHSA-9772-cwx9-r4cj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9h5r-3me7-97dy
3
url VCID-cjwy-u2pp-gufs
vulnerability_id VCID-cjwy-u2pp-gufs
summary The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1753.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1753.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-1753
reference_id
reference_type
scores
0
value 0.00371
scoring_system epss
scoring_elements 0.59319
published_at 2026-06-11T12:55:00Z
1
value 0.00371
scoring_system epss
scoring_elements 0.59429
published_at 2026-06-12T12:55:00Z
2
value 0.00371
scoring_system epss
scoring_elements 0.59441
published_at 2026-06-13T12:55:00Z
3
value 0.00371
scoring_system epss
scoring_elements 0.59432
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-1753
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1753
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1753
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1046170
reference_id 1046170
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1046170
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742929
reference_id 742929
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742929
5
reference_url https://access.redhat.com/errata/RHSA-2015:1064
reference_id RHSA-2015:1064
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1064
6
reference_url https://access.redhat.com/errata/RHSA-2015:2101
reference_id RHSA-2015:2101
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2101
7
reference_url https://usn.ubuntu.com/2653-1/
reference_id USN-2653-1
reference_type
scores
url https://usn.ubuntu.com/2653-1/
fixed_packages
aliases CVE-2013-1753
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cjwy-u2pp-gufs
4
url VCID-us6r-txjj-u3g5
vulnerability_id VCID-us6r-txjj-u3g5
summary security update
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1912.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1912.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-1912
reference_id
reference_type
scores
0
value 0.33997
scoring_system epss
scoring_elements 0.97079
published_at 2026-06-11T12:55:00Z
1
value 0.33997
scoring_system epss
scoring_elements 0.97088
published_at 2026-06-12T12:55:00Z
2
value 0.33997
scoring_system epss
scoring_elements 0.9709
published_at 2026-06-13T12:55:00Z
3
value 0.33997
scoring_system epss
scoring_elements 0.97089
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-1912
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1912
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1062370
reference_id 1062370
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1062370
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/31875.py
reference_id CVE-2014-1912;OSVDB-102929
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/31875.py
6
reference_url https://security.gentoo.org/glsa/201503-10
reference_id GLSA-201503-10
reference_type
scores
url https://security.gentoo.org/glsa/201503-10
7
reference_url https://access.redhat.com/errata/RHSA-2015:1064
reference_id RHSA-2015:1064
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1064
8
reference_url https://access.redhat.com/errata/RHSA-2015:1330
reference_id RHSA-2015:1330
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1330
9
reference_url https://usn.ubuntu.com/2125-1/
reference_id USN-2125-1
reference_type
scores
url https://usn.ubuntu.com/2125-1/
fixed_packages
aliases CVE-2014-1912
risk_score 0.6
exploitability 2.0
weighted_severity 0.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-us6r-txjj-u3g5
5
url VCID-v2wt-hgq3-gqf4
vulnerability_id VCID-v2wt-hgq3-gqf4
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1752.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1752.json
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1046174
reference_id 1046174
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1046174
3
reference_url https://security.gentoo.org/glsa/201503-10
reference_id GLSA-201503-10
reference_type
scores
url https://security.gentoo.org/glsa/201503-10
4
reference_url https://access.redhat.com/errata/RHSA-2015:1064
reference_id RHSA-2015:1064
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1064
5
reference_url https://access.redhat.com/errata/RHSA-2015:1330
reference_id RHSA-2015:1330
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1330
6
reference_url https://access.redhat.com/errata/RHSA-2015:2101
reference_id RHSA-2015:2101
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2101
7
reference_url https://usn.ubuntu.com/2653-1/
reference_id USN-2653-1
reference_type
scores
url https://usn.ubuntu.com/2653-1/
fixed_packages
aliases CVE-2013-1752
risk_score 1.3
exploitability 0.5
weighted_severity 2.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v2wt-hgq3-gqf4
Fixing_vulnerabilities
Risk_score5.2
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python27-python-setuptools@0.9.8-5%3Farch=el7