VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294458 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-12171 | redhat_vex | httpd: # character matches all IPs | fixed: 62 known not affected: 34 | 2026-06-30T11:40:28+00:00 | Vulnerability · Source |
| CVE-2017-12167 | redhat_vex | EAP-7: Wrong privileges on multiple property files | fixed: 983 | 2026-06-30T11:40:27+00:00 | Vulnerability · Source |
| CVE-2017-12163 | redhat_vex | Samba: Server memory information leak over SMB1 | fixed: 602 known affected: 1 | 2026-06-30T11:40:24+00:00 | Vulnerability · Source |
| CVE-2017-12164 | redhat_vex | gdm: lock screen can be circumvented when autologin is set | known not affected: 11 | 2026-06-30T11:40:24+00:00 | Vulnerability · Source |
| CVE-2017-12151 | redhat_vex | samba: SMB2 connections don't keep encryption across DFS redirects | fixed: 317 known affected: 15 known not affected: 16 | 2026-06-30T11:40:23+00:00 | Vulnerability · Source |
| CVE-2017-12150 | redhat_vex | samba: Some code path don't enforce smb signing, when they should | fixed: 602 known affected: 2 | 2026-06-30T11:40:16+00:00 | Vulnerability · Source |
| CVE-2017-2835 | redhat_vex | freerdp: Out-of-bounds write in rdp_recv_tpkt_pdu | known affected: 12 | 2026-06-30T11:40:15+00:00 | Vulnerability · Source |
| CVE-2017-2820 | redhat_vex | poppler: Integer overflow in the JPEG 2000 image parsing functionality | known not affected: 22 | 2026-06-30T11:40:13+00:00 | Vulnerability · Source |
| CVE-2017-2834 | redhat_vex | freerdp: Out-of-bounds write in license_recv() | known affected: 12 | 2026-06-30T11:40:11+00:00 | Vulnerability · Source |
| CVE-2017-2818 | redhat_vex | poppler: Heap-buffer overflow in the image rendering functionality | known not affected: 22 | 2026-06-30T11:40:09+00:00 | Vulnerability · Source |
| CVE-2017-2814 | redhat_vex | poppler: Heap-buffer overflow in DCTStream::readScan() | known not affected: 22 | 2026-06-30T11:40:06+00:00 | Vulnerability · Source |
| CVE-2017-2674 | redhat_vex | business-central: Multiple stored XSS in task and process filters | fixed: 2 | 2026-06-30T11:40:05+00:00 | Vulnerability · Source |
| CVE-2017-2672 | redhat_vex | foreman: Image password leak | fixed: 276 known affected: 2 | 2026-06-30T11:40:01+00:00 | Vulnerability · Source |
| CVE-2017-2670 | redhat_vex | undertow: IO thread DoS via unclean Websocket closing | fixed: 1119 known affected: 5 | 2026-06-30T11:40:00+00:00 | Vulnerability · Source |
| CVE-2017-2665 | redhat_vex | rhscon-core: creates world readable file /etc/skyring/skyring.conf which leaks mongodb password for skyring database | known affected: 1 | 2026-06-30T11:39:55+00:00 | Vulnerability · Source |
| CVE-2017-2663 | redhat_vex | subscription-manager: unsafe dbus interface | known not affected: 19 | 2026-06-30T11:39:52+00:00 | Vulnerability · Source |
| CVE-2017-2654 | redhat_vex | jenkins-email-ext: Emails were sent to addresses not associated with actual users of Jenkins by Mailer Plugin | known not affected: 1 | 2026-06-30T11:39:50+00:00 | Vulnerability · Source |
| CVE-2017-2651 | redhat_vex | jenkins-mailer-plugin: Emails were sent to addresses not associated with actual users of Jenkins by Mailer Plugin | known not affected: 2 | 2026-06-30T11:39:46+00:00 | Vulnerability · Source |
| CVE-2017-2640 | redhat_vex | pidgin: Out-of-bounds write in purple_markup_unescape_entity triggered by invalid XML | fixed: 115 known affected: 12 | 2026-06-30T11:39:43+00:00 | Vulnerability · Source |
| CVE-2017-2639 | redhat_vex | CloudForms: cloudforms fails to properly check certificates when communicating with RHEV and OpenShift and custom CA | fixed: 179 | 2026-06-30T11:39:42+00:00 | Vulnerability · Source |
| CVE-2017-2635 | redhat_vex | libvirt: Null pointer dereference when updating storage size on empty drives | known not affected: 45 | 2026-06-30T11:39:37+00:00 | Vulnerability · Source |
| CVE-2017-2634 | redhat_vex | kernel: dccp: crash while sending ipv6 reset packet | fixed: 153 known not affected: 31 | 2026-06-30T11:39:34+00:00 | Vulnerability · Source |
| CVE-2017-2633 | redhat_vex | Qemu: VNC: memory corruption due to unchecked resolution limit | fixed: 70 known affected: 8 known not affected: 30 | 2026-06-30T11:39:33+00:00 | Vulnerability · Source |
| CVE-2017-2632 | redhat_vex | cfme: tenant administrator can create a group with higher permissions | fixed: 8 | 2026-06-30T11:39:29+00:00 | Vulnerability · Source |
| CVE-2017-2627 | redhat_vex | openstack-tripleo-common: sudoers file is too permissive | known affected: 3 known not affected: 4 | 2026-06-30T11:39:24+00:00 | Vulnerability · Source |
| CVE-2017-2625 | redhat_vex | libXdmcp: weak entropy usage for session keys | fixed: 1793 known affected: 3 | 2026-06-30T11:39:23+00:00 | Vulnerability · Source |
| CVE-2017-2623 | redhat_vex | rpm-ostree-client: fails to check gpg package signatures when layering | fixed: 6 | 2026-06-30T11:39:19+00:00 | Vulnerability · Source |
| CVE-2017-2622 | redhat_vex | openstack-mistral: /var/log/mistral/ is world readable | fixed: 8 known not affected: 1 | 2026-06-30T11:39:18+00:00 | Vulnerability · Source |
| CVE-2017-2618 | redhat_vex | kernel: Off-by-one error in selinux_setprocattr (/proc/self/attr/fscreate) | fixed: 207 known not affected: 15 | 2026-06-30T11:39:15+00:00 | Vulnerability · Source |
| CVE-2017-2617 | redhat_vex | Hawtio: Unrestricted file upload leads to RCE | fixed: 2 known affected: 2 under investigation: 1 | 2026-06-30T11:39:13+00:00 | Vulnerability · Source |
| CVE-2017-2616 | redhat_vex | util-linux: Sending SIGKILL to other processes with root privileges via su | fixed: 168 known affected: 1 known not affected: 12 | 2026-06-30T11:39:09+00:00 | Vulnerability · Source |
| CVE-2017-2613 | redhat_vex | jenkins: User creation CSRF using GET by admins (SECURITY-406) | under investigation: 3 | 2026-06-30T11:39:08+00:00 | Vulnerability · Source |
| CVE-2017-2612 | redhat_vex | jenkins: Low privilege users were able to override JDK download credentials (SECURITY-392) | under investigation: 3 | 2026-06-30T11:39:05+00:00 | Vulnerability · Source |
| CVE-2017-2611 | redhat_vex | jenkins: Insufficient permission check for periodic processes (SECURITY-389) | under investigation: 3 | 2026-06-30T11:39:04+00:00 | Vulnerability · Source |
| CVE-2017-2610 | redhat_vex | jenkins: Persisted cross-site scripting vulnerability in search suggestions (SECURITY-388) | under investigation: 3 | 2026-06-30T11:39:01+00:00 | Vulnerability · Source |
| CVE-2017-2607 | redhat_vex | jenkins: Persisted cross-site scripting vulnerability in console notes (SECURITY-382) | under investigation: 3 | 2026-06-30T11:39:00+00:00 | Vulnerability · Source |
| CVE-2017-2609 | redhat_vex | jenkins: Information disclosure vulnerability in search suggestions (SECURITY-385) | under investigation: 3 | 2026-06-30T11:38:59+00:00 | Vulnerability · Source |
| CVE-2017-2606 | redhat_vex | jenkins: Internal API allowed access to item names that should not be visible (SECURITY-380) | under investigation: 3 | 2026-06-30T11:38:55+00:00 | Vulnerability · Source |
| CVE-2017-2604 | redhat_vex | jenkins: Low privilege users were able to act on administrative monitors (SECURITY-371) | under investigation: 3 | 2026-06-30T11:38:52+00:00 | Vulnerability · Source |
| CVE-2017-2601 | redhat_vex | jenkins: Persisted cross-site scripting vulnerability in parameter names and descriptions (SECURITY-353) | under investigation: 3 | 2026-06-30T11:38:51+00:00 | Vulnerability · Source |
| CVE-2017-2600 | redhat_vex | jenkins: Node monitor data could be viewed by low privilege users (SECURITY-343) | under investigation: 3 | 2026-06-30T11:38:50+00:00 | Vulnerability · Source |
| CVE-2017-2599 | redhat_vex | jenkins: Items could be created with same name as existing item (SECURITY-321) | under investigation: 3 | 2026-06-30T11:38:46+00:00 | Vulnerability · Source |
| CVE-2017-2598 | redhat_vex | jenkins: Use of AES ECB block cipher mode without IV for encrypting secrets (SECURITY-304) | under investigation: 3 | 2026-06-30T11:38:43+00:00 | Vulnerability · Source |
| CVE-2017-2595 | redhat_vex | wildfly: Arbitrary file read via path traversal | fixed: 1598 under investigation: 1 | 2026-06-30T11:38:40+00:00 | Vulnerability · Source |
| CVE-2017-2594 | redhat_vex | hawtio: information Disclosure flaws due to unsafe path traversal | fixed: 2 known affected: 3 | 2026-06-30T11:38:36+00:00 | Vulnerability · Source |
| CVE-2017-2590 | redhat_vex | ipa: Insufficient permission check for ca-del, ca-disable and ca-enable commands | fixed: 66 known not affected: 7 | 2026-06-30T11:38:29+00:00 | Vulnerability · Source |
| CVE-2017-2581 | redhat_vex | netpbm: Out-of-bounds write in writeRasterPbm() function | known affected: 4 known not affected: 4 | 2026-06-30T11:38:24+00:00 | Vulnerability · Source |
| CVE-2017-2580 | redhat_vex | netpbm: Out-of-bounds write of heap data | known affected: 3 known not affected: 5 | 2026-06-30T11:38:22+00:00 | Vulnerability · Source |
| CVE-2016-9605 | redhat_vex | cobbler: Cross site scripting in profile page | known not affected: 1 | 2026-06-30T11:38:20+00:00 | Vulnerability · Source |
| CVE-2016-9595 | redhat_vex | katello-debug: Possible symlink attacks due to use of predictable file names | fixed: 276 | 2026-06-30T11:38:18+00:00 | Vulnerability · Source |