Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/88871?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/88871?format=api", "vulnerability_id": "VCID-mhvv-yftm-wyek", "summary": "Untrusted applet causes DoS by filling up disk space", "aliases": [ { "alias": "CVE-2006-2426" } ], "fixed_packages": [], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/128571?format=api", "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.18-1jpp.1?arch=el5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3des-5j3d-kya4" }, { "vulnerability": "VCID-3f5w-6rwe-9fg9" }, { "vulnerability": "VCID-6dwj-y7qv-bkah" }, { "vulnerability": "VCID-7kec-9nbt-8qh1" }, { "vulnerability": "VCID-8dsm-695w-9yfx" }, { "vulnerability": "VCID-gs9t-z7tn-5fhn" }, { "vulnerability": "VCID-k4rr-5rxv-hqe8" }, { "vulnerability": "VCID-ks25-kdxj-m7cr" }, { "vulnerability": "VCID-mhvv-yftm-wyek" }, { "vulnerability": "VCID-p2fp-hr1d-ske5" }, { "vulnerability": "VCID-tpv7-d7p6-bbe6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.5.0-sun@1.5.0.18-1jpp.1%3Farch=el5" }, { "url": "http://public2.vulnerablecode.io/api/packages/128572?format=api", "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.18-1jpp.1?arch=el4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3des-5j3d-kya4" }, { "vulnerability": "VCID-3f5w-6rwe-9fg9" }, { "vulnerability": "VCID-6dwj-y7qv-bkah" }, { "vulnerability": "VCID-7kec-9nbt-8qh1" }, { "vulnerability": "VCID-8dsm-695w-9yfx" }, { "vulnerability": "VCID-gs9t-z7tn-5fhn" }, { "vulnerability": "VCID-k4rr-5rxv-hqe8" }, { "vulnerability": "VCID-ks25-kdxj-m7cr" }, { "vulnerability": "VCID-mhvv-yftm-wyek" }, { "vulnerability": "VCID-p2fp-hr1d-ske5" }, { "vulnerability": "VCID-tpv7-d7p6-bbe6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.5.0-sun@1.5.0.18-1jpp.1%3Farch=el4" }, { "url": "http://public2.vulnerablecode.io/api/packages/128194?format=api", "purl": "pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.1?arch=el4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1c8j-4sxr-sqen" }, { "vulnerability": "VCID-2gpd-vwgb-67cn" }, { "vulnerability": "VCID-3des-5j3d-kya4" }, { "vulnerability": "VCID-3f5w-6rwe-9fg9" }, { "vulnerability": "VCID-52v7-ahwt-n7bj" }, { "vulnerability": "VCID-6dwj-y7qv-bkah" }, { "vulnerability": "VCID-7kec-9nbt-8qh1" }, { "vulnerability": "VCID-8dsm-695w-9yfx" }, { "vulnerability": "VCID-c5un-z1f5-wuhd" }, { "vulnerability": "VCID-e5nw-x67y-hyeu" }, { "vulnerability": "VCID-e7t4-rgaz-4uec" }, { "vulnerability": "VCID-fz23-zbk9-gugq" }, { "vulnerability": "VCID-gs9t-z7tn-5fhn" }, { "vulnerability": "VCID-j4h4-nhsd-6bed" }, { "vulnerability": "VCID-jgc1-svry-fufd" }, { "vulnerability": "VCID-jtjm-tsyk-tud5" }, { "vulnerability": "VCID-ju9j-bz1n-2udp" }, { "vulnerability": "VCID-k4rr-5rxv-hqe8" }, { "vulnerability": "VCID-ks25-kdxj-m7cr" }, { "vulnerability": "VCID-m9ts-ympf-7fe9" }, { "vulnerability": "VCID-mhvv-yftm-wyek" }, { "vulnerability": "VCID-mvu4-7vct-13fx" }, { "vulnerability": "VCID-p2fp-hr1d-ske5" }, { "vulnerability": "VCID-pj8c-99t4-8khz" }, { "vulnerability": "VCID-pzcs-z6ju-qbcg" }, { "vulnerability": "VCID-rbap-5tnp-x3a7" }, { "vulnerability": "VCID-sakk-3wvn-tfhe" }, { "vulnerability": "VCID-th92-rtps-jba3" }, { "vulnerability": "VCID-tpv7-d7p6-bbe6" }, { "vulnerability": "VCID-txfj-uzzx-4ue7" }, { "vulnerability": "VCID-u26k-fk31-wbfc" }, { "vulnerability": "VCID-vgct-q7vz-sfgx" }, { "vulnerability": "VCID-weda-ey6f-yuc4" }, { "vulnerability": "VCID-xt9m-tfuj-6uht" }, { "vulnerability": "VCID-ypf2-kcj7-hfh5" }, { "vulnerability": "VCID-z522-d7z2-f7dr" }, { "vulnerability": "VCID-zbsh-w7k8-f7bp" }, { "vulnerability": "VCID-zd4q-75kh-zbfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.5.0-sun@1.5.0.22-1jpp.1%3Farch=el4" }, { "url": "http://public2.vulnerablecode.io/api/packages/128556?format=api", "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1:1.6.0.0-0.30.b09?arch=el5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-697d-rrxb-rkbm" }, { "vulnerability": "VCID-6dwj-y7qv-bkah" }, { "vulnerability": "VCID-8dsm-695w-9yfx" }, { "vulnerability": "VCID-d277-taud-kydb" }, { "vulnerability": "VCID-g31s-n677-kye3" }, { "vulnerability": "VCID-gs9t-z7tn-5fhn" }, { "vulnerability": "VCID-hhef-yk98-4fhh" }, { "vulnerability": "VCID-ks25-kdxj-m7cr" }, { "vulnerability": "VCID-mhvv-yftm-wyek" }, { "vulnerability": "VCID-n74p-uev8-v7hc" }, { "vulnerability": "VCID-tpv7-d7p6-bbe6" }, { "vulnerability": "VCID-tymd-uw95-q7b1" }, { "vulnerability": "VCID-uxbc-8sru-c7a6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.6.0-openjdk@1:1.6.0.0-0.30.b09%3Farch=el5" }, { "url": "http://public2.vulnerablecode.io/api/packages/128566?format=api", "purl": "pkg:rpm/redhat/java-1.6.0-sun@1:1.6.0.13-1jpp.1?arch=el4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3des-5j3d-kya4" }, { "vulnerability": "VCID-3f5w-6rwe-9fg9" }, { "vulnerability": "VCID-6dwj-y7qv-bkah" }, { "vulnerability": "VCID-7kec-9nbt-8qh1" }, { "vulnerability": "VCID-8dsm-695w-9yfx" }, { "vulnerability": "VCID-g31s-n677-kye3" }, { "vulnerability": "VCID-gs9t-z7tn-5fhn" }, { "vulnerability": "VCID-k4rr-5rxv-hqe8" }, { "vulnerability": "VCID-ks25-kdxj-m7cr" }, { "vulnerability": "VCID-mhvv-yftm-wyek" }, { "vulnerability": "VCID-p2fp-hr1d-ske5" }, { "vulnerability": "VCID-r911-4n39-ekb9" }, { "vulnerability": "VCID-tpv7-d7p6-bbe6" }, { "vulnerability": "VCID-tymd-uw95-q7b1" }, { "vulnerability": "VCID-tz7n-mxmc-63ek" }, { "vulnerability": "VCID-uxbc-8sru-c7a6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.6.0-sun@1:1.6.0.13-1jpp.1%3Farch=el4" }, { "url": "http://public2.vulnerablecode.io/api/packages/128565?format=api", "purl": "pkg:rpm/redhat/java-1.6.0-sun@1:1.6.0.13-1jpp.1?arch=el5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3des-5j3d-kya4" }, { "vulnerability": "VCID-3f5w-6rwe-9fg9" }, { "vulnerability": "VCID-6dwj-y7qv-bkah" }, { "vulnerability": "VCID-7kec-9nbt-8qh1" }, { "vulnerability": "VCID-8dsm-695w-9yfx" }, { "vulnerability": "VCID-g31s-n677-kye3" }, { "vulnerability": "VCID-gs9t-z7tn-5fhn" }, { "vulnerability": "VCID-k4rr-5rxv-hqe8" }, { "vulnerability": "VCID-ks25-kdxj-m7cr" }, { "vulnerability": "VCID-mhvv-yftm-wyek" }, { "vulnerability": "VCID-p2fp-hr1d-ske5" }, { "vulnerability": "VCID-r911-4n39-ekb9" }, { "vulnerability": "VCID-tpv7-d7p6-bbe6" }, { "vulnerability": "VCID-tymd-uw95-q7b1" }, { "vulnerability": "VCID-tz7n-mxmc-63ek" }, { "vulnerability": "VCID-uxbc-8sru-c7a6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.6.0-sun@1:1.6.0.13-1jpp.1%3Farch=el5" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2426.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2426.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2006-2426", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96567", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96576", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96581", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96584", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96592", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96594", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96596", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96598", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96604", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96609", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96613", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96614", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96615", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96618", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96626", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96629", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96635", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96637", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96642", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.29364", "scoring_system": "epss", "scoring_elements": "0.96651", "published_at": "2026-05-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2006-2426" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=395481", "reference_id": "395481", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=395481" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/java/dos/27882.java", "reference_id": "CVE-2006-2426;OSVDB-25561", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/java/dos/27882.java" }, { "reference_url": "https://www.securityfocus.com/bid/17981/info", "reference_id": "CVE-2006-2426;OSVDB-25561", "reference_type": "exploit", "scores": [], "url": "https://www.securityfocus.com/bid/17981/info" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2009:0377", "reference_id": "RHSA-2009:0377", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2009:0377" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2009:0392", "reference_id": "RHSA-2009:0392", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2009:0392" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2009:0394", "reference_id": "RHSA-2009:0394", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2009:0394" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2009:1662", "reference_id": "RHSA-2009:1662", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2009:1662" }, { "reference_url": "https://usn.ubuntu.com/748-1/", "reference_id": "USN-748-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/748-1/" } ], "weaknesses": [], "exploits": [ { "date_added": "2006-05-15", "description": "Sun Java Applet - Font.createFont Remote Denial of Service", "required_action": null, "due_date": null, "notes": null, "known_ransomware_campaign_use": true, "source_date_published": "2006-05-15", "exploit_type": "dos", "platform": "java", "source_date_updated": "2013-08-26", "data_source": "Exploit-DB", "source_url": "https://www.securityfocus.com/bid/17981/info" } ], "severity_range_score": null, "exploitability": "2.0", "weighted_severity": "0.3", "risk_score": 0.6, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mhvv-yftm-wyek" }