{"url":"http://public2.vulnerablecode.io/api/packages/4391?format=json","purl":"pkg:ebuild/media-gfx/exif@0.6.21","type":"ebuild","namespace":"media-gfx","name":"exif","version":"0.6.21","qualifiers":{},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"0.6.22","latest_non_vulnerable_version":"0.6.22","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179968?format=json","vulnerability_id":"VCID-2pkw-xkdc-73ct","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2837.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2837.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2837","reference_id":"","reference_type":"","scores":[{"value":"0.01256","scoring_system":"epss","scoring_elements":"0.7979","published_at":"2026-06-11T12:55:00Z"},{"value":"0.01256","scoring_system":"epss","scoring_elements":"0.79854","published_at":"2026-06-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2837"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2837","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2837"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454","reference_id":"681454","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=839185","reference_id":"839185","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839185"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"},{"reference_url":"https://access.redhat.com/errata/RHSA-2012:1255","reference_id":"RHSA-2012:1255","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2012:1255"},{"reference_url":"https://usn.ubuntu.com/1513-1/","reference_id":"USN-1513-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1513-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/4391?format=json","purl":"pkg:ebuild/media-gfx/exif@0.6.21","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/media-gfx/exif@0.6.21"}],"aliases":["CVE-2012-2837"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2pkw-xkdc-73ct"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179966?format=json","vulnerability_id":"VCID-2ugg-p2tg-p3ez","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2814.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2814.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2814","reference_id":"","reference_type":"","scores":[{"value":"0.03788","scoring_system":"epss","scoring_elements":"0.88336","published_at":"2026-06-11T12:55:00Z"},{"value":"0.03788","scoring_system":"epss","scoring_elements":"0.88375","published_at":"2026-06-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2814"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2814","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2814"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454","reference_id":"681454","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=839183","reference_id":"839183","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839183"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"},{"reference_url":"https://access.redhat.com/errata/RHSA-2012:1255","reference_id":"RHSA-2012:1255","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2012:1255"},{"reference_url":"https://usn.ubuntu.com/1513-1/","reference_id":"USN-1513-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1513-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/4391?format=json","purl":"pkg:ebuild/media-gfx/exif@0.6.21","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/media-gfx/exif@0.6.21"}],"aliases":["CVE-2012-2814"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2ugg-p2tg-p3ez"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179964?format=json","vulnerability_id":"VCID-3q3m-95pg-tqgw","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2812.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2812.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2812","reference_id":"","reference_type":"","scores":[{"value":"0.00928","scoring_system":"epss","scoring_elements":"0.76533","published_at":"2026-06-11T12:55:00Z"},{"value":"0.00928","scoring_system":"epss","scoring_elements":"0.76602","published_at":"2026-06-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2812"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2812","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2812"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454","reference_id":"681454","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=839203","reference_id":"839203","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839203"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"},{"reference_url":"https://access.redhat.com/errata/RHSA-2012:1255","reference_id":"RHSA-2012:1255","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2012:1255"},{"reference_url":"https://usn.ubuntu.com/1513-1/","reference_id":"USN-1513-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1513-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/4391?format=json","purl":"pkg:ebuild/media-gfx/exif@0.6.21","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/media-gfx/exif@0.6.21"}],"aliases":["CVE-2012-2812"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-3q3m-95pg-tqgw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179967?format=json","vulnerability_id":"VCID-8mwj-c8gf-83en","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2836.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2836.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2836","reference_id":"","reference_type":"","scores":[{"value":"0.02522","scoring_system":"epss","scoring_elements":"0.85741","published_at":"2026-06-11T12:55:00Z"},{"value":"0.02522","scoring_system":"epss","scoring_elements":"0.85791","published_at":"2026-06-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2836"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2836","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2836"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454","reference_id":"681454","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=839184","reference_id":"839184","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839184"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"},{"reference_url":"https://access.redhat.com/errata/RHSA-2012:1255","reference_id":"RHSA-2012:1255","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2012:1255"},{"reference_url":"https://usn.ubuntu.com/1513-1/","reference_id":"USN-1513-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1513-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/4391?format=json","purl":"pkg:ebuild/media-gfx/exif@0.6.21","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/media-gfx/exif@0.6.21"}],"aliases":["CVE-2012-2836"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-8mwj-c8gf-83en"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179965?format=json","vulnerability_id":"VCID-ajtr-5n9b-vba1","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2813.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2813.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2813","reference_id":"","reference_type":"","scores":[{"value":"0.00933","scoring_system":"epss","scoring_elements":"0.76595","published_at":"2026-06-11T12:55:00Z"},{"value":"0.00933","scoring_system":"epss","scoring_elements":"0.76664","published_at":"2026-06-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2813"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2813","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2813"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454","reference_id":"681454","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=839182","reference_id":"839182","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839182"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"},{"reference_url":"https://access.redhat.com/errata/RHSA-2012:1255","reference_id":"RHSA-2012:1255","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2012:1255"},{"reference_url":"https://usn.ubuntu.com/1513-1/","reference_id":"USN-1513-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1513-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/4391?format=json","purl":"pkg:ebuild/media-gfx/exif@0.6.21","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/media-gfx/exif@0.6.21"}],"aliases":["CVE-2012-2813"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ajtr-5n9b-vba1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179969?format=json","vulnerability_id":"VCID-fkxf-pzuc-4yda","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2840.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2840.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2840","reference_id":"","reference_type":"","scores":[{"value":"0.02397","scoring_system":"epss","scoring_elements":"0.85377","published_at":"2026-06-11T12:55:00Z"},{"value":"0.02397","scoring_system":"epss","scoring_elements":"0.85429","published_at":"2026-06-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2840"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2840","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2840"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454","reference_id":"681454","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=839188","reference_id":"839188","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839188"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"},{"reference_url":"https://access.redhat.com/errata/RHSA-2012:1255","reference_id":"RHSA-2012:1255","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2012:1255"},{"reference_url":"https://usn.ubuntu.com/1513-1/","reference_id":"USN-1513-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1513-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/4391?format=json","purl":"pkg:ebuild/media-gfx/exif@0.6.21","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/media-gfx/exif@0.6.21"}],"aliases":["CVE-2012-2840"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fkxf-pzuc-4yda"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179970?format=json","vulnerability_id":"VCID-uzr9-d4t2-hfc5","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2841.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2841.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2841","reference_id":"","reference_type":"","scores":[{"value":"0.04256","scoring_system":"epss","scoring_elements":"0.89056","published_at":"2026-06-11T12:55:00Z"},{"value":"0.04256","scoring_system":"epss","scoring_elements":"0.89094","published_at":"2026-06-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2841"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2841","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2841"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454","reference_id":"681454","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681454"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=839189","reference_id":"839189","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839189"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"},{"reference_url":"https://access.redhat.com/errata/RHSA-2012:1255","reference_id":"RHSA-2012:1255","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2012:1255"},{"reference_url":"https://usn.ubuntu.com/1513-1/","reference_id":"USN-1513-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1513-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/4391?format=json","purl":"pkg:ebuild/media-gfx/exif@0.6.21","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/media-gfx/exif@0.6.21"}],"aliases":["CVE-2012-2841"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-uzr9-d4t2-hfc5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/179971?format=json","vulnerability_id":"VCID-vdqk-rcum-f7ff","summary":"Multiple vulnerabilities have been found in libexif and exif, some\n    of which may allow execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2845.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2845.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2845","reference_id":"","reference_type":"","scores":[{"value":"0.00624","scoring_system":"epss","scoring_elements":"0.7065","published_at":"2026-06-11T12:55:00Z"},{"value":"0.00624","scoring_system":"epss","scoring_elements":"0.7074","published_at":"2026-06-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-2845"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2845","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2845"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681465","reference_id":"681465","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681465"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=840002","reference_id":"840002","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=840002"},{"reference_url":"https://security.gentoo.org/glsa/201401-10","reference_id":"GLSA-201401-10","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201401-10"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/4391?format=json","purl":"pkg:ebuild/media-gfx/exif@0.6.21","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/media-gfx/exif@0.6.21"}],"aliases":["CVE-2012-2845"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vdqk-rcum-f7ff"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/media-gfx/exif@0.6.21"}