{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/62249?format=json","vulnerability_id":"VCID-stw1-18ae-mfas","summary":"Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current working directory.","aliases":[{"alias":"CVE-2014-2093"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/518164?format=json","purl":"pkg:deb/debian/catfish@1.2.2-1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/catfish@1.2.2-1"},{"url":"http://public2.vulnerablecode.io/api/packages/89859?format=json","purl":"pkg:deb/debian/catfish@1.0.1-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/catfish@1.0.1-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/89860?format=json","purl":"pkg:deb/debian/catfish@4.16.0-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/catfish@4.16.0-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/89857?format=json","purl":"pkg:deb/debian/catfish@4.16.4-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/catfish@4.16.4-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/89861?format=json","purl":"pkg:deb/debian/catfish@4.20.0-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/catfish@4.20.0-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/191971?format=json","purl":"pkg:ebuild/dev-util/catfish@1.0.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-util/catfish@1.0.2"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/518161?format=json","purl":"pkg:deb/debian/catfish@0.3-2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jhf-fsc5-u3a1"},{"vulnerability":"VCID-ezk3-7su9-83e7"},{"vulnerability":"VCID-qztv-k3h5-bydw"},{"vulnerability":"VCID-stw1-18ae-mfas"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/catfish@0.3-2"},{"url":"http://public2.vulnerablecode.io/api/packages/518162?format=json","purl":"pkg:deb/debian/catfish@0.3.2-1%2Bdeb6u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jhf-fsc5-u3a1"},{"vulnerability":"VCID-ezk3-7su9-83e7"},{"vulnerability":"VCID-qztv-k3h5-bydw"},{"vulnerability":"VCID-stw1-18ae-mfas"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/catfish@0.3.2-1%252Bdeb6u2"},{"url":"http://public2.vulnerablecode.io/api/packages/518163?format=json","purl":"pkg:deb/debian/catfish@0.3.2-2%2Bdeb7u1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jhf-fsc5-u3a1"},{"vulnerability":"VCID-ezk3-7su9-83e7"},{"vulnerability":"VCID-qztv-k3h5-bydw"},{"vulnerability":"VCID-stw1-18ae-mfas"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/catfish@0.3.2-2%252Bdeb7u1.1"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-2093","reference_id":"","reference_type":"","scores":[{"value":"0.00066","scoring_system":"epss","scoring_elements":"0.20537","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00066","scoring_system":"epss","scoring_elements":"0.2061","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-2093"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2093","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2093"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739958","reference_id":"739958","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739958"},{"reference_url":"https://security.gentoo.org/glsa/201408-04","reference_id":"GLSA-201408-04","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201408-04"}],"weaknesses":[],"exploits":[],"severity_range_score":null,"exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-stw1-18ae-mfas"}