Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/vlc@0.8.6.h-4.1?distro=trixie
Typedeb
Namespacedebian
Namevlc
Version0.8.6.h-4.1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version0.8.6.h-5
Latest_non_vulnerable_version3.0.23-3
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-s24v-pgr6-mucf
vulnerability_id VCID-s24v-pgr6-mucf
summary Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.
references
0
reference_url http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d859e6b9537af2d7326276f70de25a840f554dc3
reference_id
reference_type
scores
url http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d859e6b9537af2d7326276f70de25a840f554dc3
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-4686
reference_id
reference_type
scores
0
value 0.08258
scoring_system epss
scoring_elements 0.92257
published_at 2026-05-05T12:55:00Z
1
value 0.08258
scoring_system epss
scoring_elements 0.92198
published_at 2026-04-01T12:55:00Z
2
value 0.08258
scoring_system epss
scoring_elements 0.92205
published_at 2026-04-02T12:55:00Z
3
value 0.08258
scoring_system epss
scoring_elements 0.92211
published_at 2026-04-04T12:55:00Z
4
value 0.08258
scoring_system epss
scoring_elements 0.92214
published_at 2026-04-07T12:55:00Z
5
value 0.08258
scoring_system epss
scoring_elements 0.92225
published_at 2026-04-08T12:55:00Z
6
value 0.08258
scoring_system epss
scoring_elements 0.92229
published_at 2026-04-09T12:55:00Z
7
value 0.08258
scoring_system epss
scoring_elements 0.92234
published_at 2026-04-11T12:55:00Z
8
value 0.08258
scoring_system epss
scoring_elements 0.92235
published_at 2026-04-12T12:55:00Z
9
value 0.08258
scoring_system epss
scoring_elements 0.92232
published_at 2026-04-13T12:55:00Z
10
value 0.08258
scoring_system epss
scoring_elements 0.92244
published_at 2026-04-16T12:55:00Z
11
value 0.08258
scoring_system epss
scoring_elements 0.92243
published_at 2026-04-18T12:55:00Z
12
value 0.08258
scoring_system epss
scoring_elements 0.92245
published_at 2026-04-21T12:55:00Z
13
value 0.08258
scoring_system epss
scoring_elements 0.9225
published_at 2026-04-24T12:55:00Z
14
value 0.08258
scoring_system epss
scoring_elements 0.92251
published_at 2026-04-26T12:55:00Z
15
value 0.08258
scoring_system epss
scoring_elements 0.92246
published_at 2026-04-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-4686
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4686
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4686
3
reference_url https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14630
reference_id
reference_type
scores
url https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14630
4
reference_url http://www.openwall.com/lists/oss-security/2008/10/19/2
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2008/10/19/2
5
reference_url http://www.openwall.com/lists/oss-security/2008/10/22/6
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2008/10/22/6
6
reference_url http://www.securityfocus.com/bid/31867
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/31867
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503118
reference_id 503118
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503118
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:videolan:vlc_media_player:0.9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:videolan:vlc_media_player:0.9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:videolan:vlc_media_player:0.9.0:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:videolan:vlc_media_player:0.9.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:videolan:vlc_media_player:0.9.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:videolan:vlc_media_player:0.9.1:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:videolan:vlc_media_player:0.9.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:videolan:vlc_media_player:0.9.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:videolan:vlc_media_player:0.9.2:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:videolan:vlc_media_player:0.9.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:videolan:vlc_media_player:0.9.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:videolan:vlc_media_player:0.9.3:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:videolan:vlc_media_player:0.9.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:videolan:vlc_media_player:0.9.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:videolan:vlc_media_player:0.9.4:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2008-4686
reference_id CVE-2008-4686
reference_type
scores
0
value 9.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:C/I:C/A:C
url https://nvd.nist.gov/vuln/detail/CVE-2008-4686
fixed_packages
0
url pkg:deb/debian/vlc@0.8.6.h-4.1?distro=trixie
purl pkg:deb/debian/vlc@0.8.6.h-4.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@0.8.6.h-4.1%3Fdistro=trixie
1
url pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.21-0%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/vlc@3.0.22-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/vlc@3.0.22-0%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.22-0%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/vlc@3.0.23-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/vlc@3.0.23-0%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.23-0%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/vlc@3.0.23-1?distro=trixie
purl pkg:deb/debian/vlc@3.0.23-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.23-1%3Fdistro=trixie
5
url pkg:deb/debian/vlc@3.0.23-3?distro=trixie
purl pkg:deb/debian/vlc@3.0.23-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.23-3%3Fdistro=trixie
aliases CVE-2008-4686
risk_score 10.0
exploitability 2.0
weighted_severity 8.4
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s24v-pgr6-mucf
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@0.8.6.h-4.1%3Fdistro=trixie