Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-1rnj-xbph-afd9 |
| Summary | An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function does not block '/' characters in the gplot rootname argument, potentially leading to path traversal and arbitrary file overwrite. |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
| 0 |
| url |
pkg:deb/debian/leptonlib@1.37-1 |
| purl |
pkg:deb/debian/leptonlib@1.37-1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1rnj-xbph-afd9 |
|
| 1 |
| vulnerability |
VCID-58uu-hzmb-gkdf |
|
| 2 |
| vulnerability |
VCID-9ntb-5c2a-8uhy |
|
| 3 |
| vulnerability |
VCID-a2de-6vw3-suey |
|
| 4 |
| vulnerability |
VCID-ad8n-e81g-v7eb |
|
| 5 |
| vulnerability |
VCID-ey2r-cgfc-rkf6 |
|
| 6 |
| vulnerability |
VCID-f6m7-jffv-n7b2 |
|
| 7 |
| vulnerability |
VCID-g5x5-uxdq-gfbt |
|
| 8 |
| vulnerability |
VCID-hh6e-vnn6-vug2 |
|
| 9 |
| vulnerability |
VCID-m6qf-9k8h-y3fy |
|
| 10 |
| vulnerability |
VCID-pzmc-5fp3-j3fz |
|
| 11 |
| vulnerability |
VCID-rcy9-yq1w-ubdx |
|
| 12 |
| vulnerability |
VCID-xy9u-crnd-pfas |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/leptonlib@1.37-1 |
|
| 1 |
| url |
pkg:deb/debian/leptonlib@1.57-1 |
| purl |
pkg:deb/debian/leptonlib@1.57-1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1rnj-xbph-afd9 |
|
| 1 |
| vulnerability |
VCID-58uu-hzmb-gkdf |
|
| 2 |
| vulnerability |
VCID-9ntb-5c2a-8uhy |
|
| 3 |
| vulnerability |
VCID-a2de-6vw3-suey |
|
| 4 |
| vulnerability |
VCID-ad8n-e81g-v7eb |
|
| 5 |
| vulnerability |
VCID-ey2r-cgfc-rkf6 |
|
| 6 |
| vulnerability |
VCID-f6m7-jffv-n7b2 |
|
| 7 |
| vulnerability |
VCID-g5x5-uxdq-gfbt |
|
| 8 |
| vulnerability |
VCID-hh6e-vnn6-vug2 |
|
| 9 |
| vulnerability |
VCID-m6qf-9k8h-y3fy |
|
| 10 |
| vulnerability |
VCID-pzmc-5fp3-j3fz |
|
| 11 |
| vulnerability |
VCID-rcy9-yq1w-ubdx |
|
| 12 |
| vulnerability |
VCID-xy9u-crnd-pfas |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/leptonlib@1.57-1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| References |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2018-7442 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00204 |
| scoring_system |
epss |
| scoring_elements |
0.42347 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00204 |
| scoring_system |
epss |
| scoring_elements |
0.42422 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00204 |
| scoring_system |
epss |
| scoring_elements |
0.42433 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00204 |
| scoring_system |
epss |
| scoring_elements |
0.42406 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00204 |
| scoring_system |
epss |
| scoring_elements |
0.42372 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00204 |
| scoring_system |
epss |
| scoring_elements |
0.42382 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2018-7442 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| Weaknesses |
|
| Exploits |
|
| Severity_range_score | null |
| Exploitability | 0.5 |
| Weighted_severity | 0.0 |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-1rnj-xbph-afd9 |