Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/php-gettext@1.0.12-4?distro=sid
Typedeb
Namespacedebian
Namephp-gettext
Version1.0.12-4
Qualifiers
distro sid
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.0.12-5
Latest_non_vulnerable_version1.0.12-6
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-hfeu-7sr5-pkdf
vulnerability_id VCID-hfeu-7sr5-pkdf
summary The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8980
reference_id
reference_type
scores
0
value 0.04573
scoring_system epss
scoring_elements 0.89451
published_at 2026-06-11T12:55:00Z
1
value 0.04573
scoring_system epss
scoring_elements 0.89487
published_at 2026-06-12T12:55:00Z
2
value 0.04573
scoring_system epss
scoring_elements 0.89494
published_at 2026-06-13T12:55:00Z
3
value 0.04573
scoring_system epss
scoring_elements 0.89493
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8980
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8980
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8980
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851770
reference_id 851770
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851770
3
reference_url https://usn.ubuntu.com/USN-4779-1/
reference_id USN-USN-4779-1
reference_type
scores
url https://usn.ubuntu.com/USN-4779-1/
fixed_packages
0
url pkg:deb/debian/php-gettext@1.0.12-0.1?distro=sid
purl pkg:deb/debian/php-gettext@1.0.12-0.1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-gettext@1.0.12-0.1%3Fdistro=sid
1
url pkg:deb/debian/php-gettext@1.0.12-4?distro=sid
purl pkg:deb/debian/php-gettext@1.0.12-4?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-gettext@1.0.12-4%3Fdistro=sid
2
url pkg:deb/debian/php-gettext@1.0.12-5?distro=sid
purl pkg:deb/debian/php-gettext@1.0.12-5?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-gettext@1.0.12-5%3Fdistro=sid
3
url pkg:deb/debian/php-gettext@1.0.12-6?distro=sid
purl pkg:deb/debian/php-gettext@1.0.12-6?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-gettext@1.0.12-6%3Fdistro=sid
aliases CVE-2015-8980
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hfeu-7sr5-pkdf
1
url VCID-ywsy-rzjq-5uc8
vulnerability_id VCID-ywsy-rzjq-5uc8
summary Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-6175
reference_id
reference_type
scores
0
value 0.10928
scoring_system epss
scoring_elements 0.93567
published_at 2026-06-11T12:55:00Z
1
value 0.10928
scoring_system epss
scoring_elements 0.93588
published_at 2026-06-12T12:55:00Z
2
value 0.10928
scoring_system epss
scoring_elements 0.93591
published_at 2026-06-13T12:55:00Z
3
value 0.10928
scoring_system epss
scoring_elements 0.93592
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-6175
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6175
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6175
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851771
reference_id 851771
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851771
3
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/40154.txt
reference_id CVE-2016-6175
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/40154.txt
fixed_packages
0
url pkg:deb/debian/php-gettext@1.0.12-1?distro=sid
purl pkg:deb/debian/php-gettext@1.0.12-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-gettext@1.0.12-1%3Fdistro=sid
1
url pkg:deb/debian/php-gettext@1.0.12-4?distro=sid
purl pkg:deb/debian/php-gettext@1.0.12-4?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-gettext@1.0.12-4%3Fdistro=sid
2
url pkg:deb/debian/php-gettext@1.0.12-5?distro=sid
purl pkg:deb/debian/php-gettext@1.0.12-5?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-gettext@1.0.12-5%3Fdistro=sid
3
url pkg:deb/debian/php-gettext@1.0.12-6?distro=sid
purl pkg:deb/debian/php-gettext@1.0.12-6?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/php-gettext@1.0.12-6%3Fdistro=sid
aliases CVE-2016-6175
risk_score 0.2
exploitability 2.0
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ywsy-rzjq-5uc8
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/php-gettext@1.0.12-4%3Fdistro=sid