Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/xen@4.7.0-r1?arch=ppc64le&distroversion=v3.11&reponame=main
Typeapk
Namespacealpine
Namexen
Version4.7.0-r1
Qualifiers
arch ppc64le
distroversion v3.11
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version4.7.0-r5
Latest_non_vulnerable_version4.13.4-r2
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-17ef-swr6-h3ee
vulnerability_id VCID-17ef-swr6-h3ee
summary Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7093.json
reference_id
reference_type
scores
0
value 8.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7093.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-7093
reference_id
reference_type
scores
0
value 0.0006
scoring_system epss
scoring_elements 0.19026
published_at 2026-06-04T12:55:00Z
1
value 0.0006
scoring_system epss
scoring_elements 0.191
published_at 2026-06-05T12:55:00Z
2
value 0.0006
scoring_system epss
scoring_elements 0.19099
published_at 2026-06-06T12:55:00Z
3
value 0.0006
scoring_system epss
scoring_elements 0.19058
published_at 2026-06-07T12:55:00Z
4
value 0.0006
scoring_system epss
scoring_elements 0.18986
published_at 2026-06-08T12:55:00Z
5
value 0.0006
scoring_system epss
scoring_elements 0.19006
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-7093
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1370322
reference_id 1370322
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1370322
3
reference_url https://security.gentoo.org/glsa/201611-09
reference_id GLSA-201611-09
reference_type
scores
url https://security.gentoo.org/glsa/201611-09
4
reference_url https://xenbits.xen.org/xsa/advisory-186.html
reference_id XSA-186
reference_type
scores
url https://xenbits.xen.org/xsa/advisory-186.html
fixed_packages
0
url pkg:apk/alpine/xen@4.7.0-r1?arch=ppc64le&distroversion=v3.11&reponame=main
purl pkg:apk/alpine/xen@4.7.0-r1?arch=ppc64le&distroversion=v3.11&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.7.0-r1%3Farch=ppc64le&distroversion=v3.11&reponame=main
aliases CVE-2016-7093, XSA-186
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-17ef-swr6-h3ee
1
url VCID-gc8n-r3t7-ayd3
vulnerability_id VCID-gc8n-r3t7-ayd3
summary The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7092.json
reference_id
reference_type
scores
0
value 8.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7092.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-7092
reference_id
reference_type
scores
0
value 0.00077
scoring_system epss
scoring_elements 0.23097
published_at 2026-06-04T12:55:00Z
1
value 0.00077
scoring_system epss
scoring_elements 0.23179
published_at 2026-06-05T12:55:00Z
2
value 0.00077
scoring_system epss
scoring_elements 0.23166
published_at 2026-06-06T12:55:00Z
3
value 0.00077
scoring_system epss
scoring_elements 0.23121
published_at 2026-06-07T12:55:00Z
4
value 0.00077
scoring_system epss
scoring_elements 0.23065
published_at 2026-06-08T12:55:00Z
5
value 0.00077
scoring_system epss
scoring_elements 0.2307
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-7092
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7092
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7092
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7094
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7094
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7154
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7154
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1370319
reference_id 1370319
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1370319
7
reference_url https://security.gentoo.org/glsa/201611-09
reference_id GLSA-201611-09
reference_type
scores
url https://security.gentoo.org/glsa/201611-09
8
reference_url https://xenbits.xen.org/xsa/advisory-185.html
reference_id XSA-185
reference_type
scores
url https://xenbits.xen.org/xsa/advisory-185.html
fixed_packages
0
url pkg:apk/alpine/xen@4.7.0-r1?arch=ppc64le&distroversion=v3.11&reponame=main
purl pkg:apk/alpine/xen@4.7.0-r1?arch=ppc64le&distroversion=v3.11&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.7.0-r1%3Farch=ppc64le&distroversion=v3.11&reponame=main
aliases CVE-2016-7092, XSA-185
risk_score 3.9
exploitability 0.5
weighted_severity 7.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gc8n-r3t7-ayd3
2
url VCID-suke-k1aj-ruc2
vulnerability_id VCID-suke-k1aj-ruc2
summary Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7094.json
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7094.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-7094
reference_id
reference_type
scores
0
value 0.0007
scoring_system epss
scoring_elements 0.21557
published_at 2026-06-04T12:55:00Z
1
value 0.0007
scoring_system epss
scoring_elements 0.21637
published_at 2026-06-05T12:55:00Z
2
value 0.0007
scoring_system epss
scoring_elements 0.21623
published_at 2026-06-06T12:55:00Z
3
value 0.0007
scoring_system epss
scoring_elements 0.21578
published_at 2026-06-07T12:55:00Z
4
value 0.0007
scoring_system epss
scoring_elements 0.2152
published_at 2026-06-08T12:55:00Z
5
value 0.0007
scoring_system epss
scoring_elements 0.21528
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-7094
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7092
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7092
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7094
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7094
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7154
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7154
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv2
scoring_elements AV:L/AC:M/Au:S/C:N/I:N/A:C
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1370332
reference_id 1370332
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1370332
7
reference_url https://security.gentoo.org/glsa/201611-09
reference_id GLSA-201611-09
reference_type
scores
url https://security.gentoo.org/glsa/201611-09
8
reference_url https://xenbits.xen.org/xsa/advisory-187.html
reference_id XSA-187
reference_type
scores
url https://xenbits.xen.org/xsa/advisory-187.html
fixed_packages
0
url pkg:apk/alpine/xen@4.7.0-r1?arch=ppc64le&distroversion=v3.11&reponame=main
purl pkg:apk/alpine/xen@4.7.0-r1?arch=ppc64le&distroversion=v3.11&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.7.0-r1%3Farch=ppc64le&distroversion=v3.11&reponame=main
aliases CVE-2016-7094, XSA-187
risk_score 2.9
exploitability 0.5
weighted_severity 5.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-suke-k1aj-ruc2
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/xen@4.7.0-r1%3Farch=ppc64le&distroversion=v3.11&reponame=main