VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294458 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-9592 | redhat_vex | openshift: Failing to detach a volume causes DoS by retrying to perform delete | known not affected: 1 | 2026-06-30T11:38:12+00:00 | Vulnerability · Source |
| CVE-2016-9590 | redhat_vex | puppet-swift: installs config file with world readable permissions | fixed: 6 known not affected: 2 | 2026-06-30T11:38:10+00:00 | Vulnerability · Source |
| CVE-2016-9579 | redhat_vex | ceph: Object Gateway server DoS by sending invalid cross-origin HTTP request | fixed: 188 known not affected: 4 | 2026-06-30T11:38:08+00:00 | Vulnerability · Source |
| CVE-2016-9578 | redhat_vex | spice: Remote DoS via crafted message | fixed: 48 known affected: 1 | 2026-06-30T11:38:06+00:00 | Vulnerability · Source |
| CVE-2016-9577 | redhat_vex | spice: Buffer overflow in main_channel_alloc_msg_rcv_buf when reading large messages | fixed: 48 known affected: 1 | 2026-06-30T11:38:03+00:00 | Vulnerability · Source |
| CVE-2016-9574 | redhat_vex | nss: Remote DoS during session handshake when using SessionTicket extention and ECDHE-ECDSA | known affected: 13 | 2026-06-30T11:38:01+00:00 | Vulnerability · Source |
| CVE-2016-9042 | redhat_vex | ntp: DoS via origin timestamp check functionality | known not affected: 12 | 2026-06-30T11:37:59+00:00 | Vulnerability · Source |
| CVE-2016-9573 | redhat_vex | openjpeg: heap out-of-bounds read due to insufficient check in imagetopnm() | fixed: 68 known not affected: 4 | 2026-06-30T11:37:58+00:00 | Vulnerability · Source |
| CVE-2016-8707 | redhat_vex | ImageMagick: OOB write in convert utility when deflating TIFF files | known affected: 15 known not affected: 1 | 2026-06-30T11:37:53+00:00 | Vulnerability · Source |
| CVE-2016-8706 | redhat_vex | memcached: SASL authentication remote code execution | fixed: 46 known affected: 1 known not affected: 8 | 2026-06-30T11:37:52+00:00 | Vulnerability · Source |
| CVE-2016-8637 | redhat_vex | dracut: Local information disclosure of initramfs when early cpio is used | known not affected: 18 | 2026-06-30T11:37:48+00:00 | Vulnerability · Source |
| CVE-2016-8648 | redhat_vex | Karaf JMX Console RCE during deserialization | known affected: 2 known not affected: 2 | 2026-06-30T11:37:48+00:00 | Vulnerability · Source |
| CVE-2016-8653 | redhat_vex | Fuse-6: JMX endpoint deserializes untrusted credentials. | known affected: 2 | 2026-06-30T11:37:48+00:00 | Vulnerability · Source |
| CVE-2016-8641 | redhat_vex | nagios: Unsafe ownership change leading to privilege escalation | known affected: 10 known not affected: 1 | 2026-06-30T11:37:44+00:00 | Vulnerability · Source |
| CVE-2016-8639 | redhat_vex | foreman: Stored XSS via organization/location with HTML in name | fixed: 276 known affected: 1 | 2026-06-30T11:37:43+00:00 | Vulnerability · Source |
| CVE-2016-8635 | redhat_vex | nss: small-subgroups attack flaw | fixed: 314 | 2026-06-30T11:37:38+00:00 | Vulnerability · Source |
| CVE-2016-8634 | redhat_vex | foreman: Stored XSS in org/loc wizard | fixed: 276 known affected: 1 | 2026-06-30T11:37:35+00:00 | Vulnerability · Source |
| CVE-2016-8631 | redhat_vex | 3: Router sometimes selects new routes over old routes when determining claimed hostnames | fixed: 11 | 2026-06-30T11:37:34+00:00 | Vulnerability · Source |
| CVE-2016-8628 | redhat_vex | ansible: Command injection by compromised server via fact variables | fixed: 21 known affected: 1 known not affected: 6 | 2026-06-30T11:37:29+00:00 | Vulnerability · Source |
| CVE-2016-8627 | redhat_vex | admin-cli: Potential EAP resource starvation DOS attack via GET requests for server log files | fixed: 1479 | 2026-06-30T11:37:28+00:00 | Vulnerability · Source |
| CVE-2016-8626 | redhat_vex | Ceph: RGW Denial of Service by sending null or specially crafted POST object requests | fixed: 242 known not affected: 3 | 2026-06-30T11:37:25+00:00 | Vulnerability · Source |
| CVE-2016-8625 | redhat_vex | curl: IDNA 2003 makes curl use wrong host | fixed: 337 known affected: 19 | 2026-06-30T11:37:24+00:00 | Vulnerability · Source |
| CVE-2016-8624 | redhat_vex | curl: Invalid URL parsing with '#' | fixed: 337 known affected: 19 | 2026-06-30T11:37:21+00:00 | Vulnerability · Source |
| CVE-2016-8619 | redhat_vex | curl: Double-free in krb5 code | fixed: 337 known affected: 19 | 2026-06-30T11:37:16+00:00 | Vulnerability · Source |
| CVE-2016-8618 | redhat_vex | curl: Double-free in curl_maprintf | fixed: 337 known affected: 19 | 2026-06-30T11:37:15+00:00 | Vulnerability · Source |
| CVE-2016-8617 | redhat_vex | curl: Out-of-bounds write via unchecked multiplication | fixed: 337 known affected: 19 | 2026-06-30T11:37:13+00:00 | Vulnerability · Source |
| CVE-2016-8615 | redhat_vex | curl: Cookie injection for other servers | fixed: 337 known affected: 19 | 2026-06-30T11:37:12+00:00 | Vulnerability · Source |
| CVE-2016-8614 | redhat_vex | ansible: Improper verification of key fingerprints in apt_key module | known not affected: 10 | 2026-06-30T11:37:10+00:00 | Vulnerability · Source |
| CVE-2016-8613 | redhat_vex | foreman: Stored XSS vulnerability in remote execution plugin | fixed: 276 | 2026-06-30T11:37:06+00:00 | Vulnerability · Source |
| CVE-2016-8609 | redhat_vex | keycloak: account hijacking via auth code fixation | fixed: 1 known not affected: 1 | 2026-06-30T11:37:03+00:00 | Vulnerability · Source |
| CVE-2016-8608 | redhat_vex | Stored XSS in business process editor | fixed: 2 known affected: 2 | 2026-06-30T11:37:02+00:00 | Vulnerability · Source |
| CVE-2016-8339 | redhat_vex | redis: OOB write vulnerability in handling of client-output-buffer-limit option during the CONFIG SET command | known not affected: 18 | 2026-06-30T11:37:00+00:00 | Vulnerability · Source |
| CVE-2016-8331 | redhat_vex | libtiff: FAX IFD Entry Parsing Type Confusion | known affected: 3 known not affected: 9 | 2026-06-30T11:36:59+00:00 | Vulnerability · Source |
| CVE-2016-7076 | redhat_vex | sudo: noexec bypass via wordexp() | fixed: 94 known affected: 1 | 2026-06-30T11:36:55+00:00 | Vulnerability · Source |
| CVE-2016-7070 | redhat_vex | Tower: PostgreSQL privilege escalation in Tower-deployed setups | known not affected: 1 | 2026-06-30T11:36:54+00:00 | Vulnerability · Source |
| CVE-2016-7043 | redhat_vex | kie-server: Plaintext password storage in kie-server and busitess-central | known affected: 4 | 2026-06-30T11:36:45+00:00 | Vulnerability · Source |
| CVE-2016-7041 | redhat_vex | Workbench: Path traversal vulnerability | fixed: 2 known affected: 2 | 2026-06-30T11:36:44+00:00 | Vulnerability · Source |
| CVE-2016-0750 | redhat_vex | client: unchecked deserialization in marshaller util | fixed: 2 under investigation: 1 | 2026-06-30T11:36:41+00:00 | Vulnerability · Source |
| CVE-2016-6343 | redhat_vex | Dashbuilder: Reflected XSS | fixed: 2 known affected: 1 known not affected: 1 | 2026-06-30T11:36:41+00:00 | Vulnerability · Source |
| CVE-2016-2125 | redhat_vex | samba: Unconditional privilege delegation to Kerberos servers in trusted realms | fixed: 610 known affected: 2 | 2026-06-30T11:36:40+00:00 | Vulnerability · Source |
| CVE-2014-8184 | redhat_vex | liblouis: stack-based buffer overflow in findTable() | fixed: 62 | 2026-06-30T11:36:35+00:00 | Vulnerability · Source |
| CVE-2014-8183 | redhat_vex | foreman: models with a 'belongs_to' association to an Organization do not verify association belongs to that Organization | fixed: 276 | 2026-06-30T11:36:34+00:00 | Vulnerability · Source |
| CVE-2013-1815 | redhat_vex | PackStack: Red Hat OpenStack: PackStack: Unauthorized system modification via insecure answer file creation | known affected: 2 | 2026-06-30T11:36:30+00:00 | Vulnerability · Source |
| CVE-2013-0266 | redhat_vex | puppetlabs-cinder: PackStack: OpenStack: puppetlabs-cinder: Information disclosure of OpenStack administrative passwords due to world-readable configuration files. | known affected: 2 | 2026-06-30T11:36:26+00:00 | Vulnerability · Source |
| CVE-2013-0261 | redhat_vex | PackStack: PackStack: Arbitrary File Overwrite via Symlink Attack | known affected: 2 | 2026-06-30T11:36:25+00:00 | Vulnerability · Source |
| CVE-2012-5571 | redhat_vex | OpenStack Keystone: OpenStack Keystone: Authorization bypass via improper EC2 token handling | known affected: 10 | 2026-06-30T11:36:21+00:00 | Vulnerability · Source |
| CVE-2012-4550 | redhat_vex | JBoss Enterprise Application Platform: JBoss EAP: JBEAP: JBoss Enterprise Application Platform: Unauthorized EJB access via authorization module bypass | fixed: 1010 known not affected: 3 | 2026-06-30T11:36:20+00:00 | Vulnerability · Source |
| CVE-2012-4549 | redhat_vex | JBoss Enterprise Application Platform: org.jboss.as.ejb3: JBoss Enterprise Application Platform: Access restriction bypass via improper EJB method authorization | fixed: 1010 known not affected: 3 | 2026-06-30T11:36:15+00:00 | Vulnerability · Source |
| CVE-2012-0059 | redhat_vex | Spacewalk-backend: Spacewalk-backend: Information Disclosure via cleartext passwords in error messages | known affected: 8 | 2026-06-30T11:36:12+00:00 | Vulnerability · Source |
| CVE-2011-3344 | redhat_vex | spacewalk: Spacewalk: Cross-site scripting via URI in Lookup Login/Password form | known affected: 8 | 2026-06-30T11:36:11+00:00 | Vulnerability · Source |