VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294458 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2011-2927 | redhat_vex | Spacewalk: Spacewalk and Red Hat Network Satellite: Cross-site scripting vulnerability via Search forms | known affected: 8 | 2026-06-30T11:36:10+00:00 | Vulnerability · Source |
| CVE-2011-2920 | redhat_vex | Spacewalk: Spacewalk: Cross-site scripting vulnerability allows arbitrary web script execution. | known affected: 8 | 2026-06-30T11:36:07+00:00 | Vulnerability · Source |
| CVE-2011-1594 | redhat_vex | Spacewalk: Spacewalk: Open redirect vulnerability enables phishing attacks via URL parameter | known affected: 8 | 2026-06-30T11:36:07+00:00 | Vulnerability · Source |
| CVE-2009-4139 | redhat_vex | spacewalk-java: spacewalk: Red Hat Network Satellite: Spacewalk Java: Privilege escalation via cross-site request forgery | known affected: 2 | 2026-06-30T11:36:05+00:00 | Vulnerability · Source |
| CVE-2018-1002100 | redhat_vex | kubernetes: Kubectl copy doesn't check for paths outside of it's destination directory | fixed: 38 known affected: 1 known not affected: 36 | 2026-06-30T11:34:46+00:00 | Vulnerability · Source |
| CVE-2018-14661 | redhat_vex | glusterfs: features/locks translator passes an user-controlled string to snprintf without a proper format string resulting in a denial of service | fixed: 80 known not affected: 32 | 2026-06-30T11:34:45+00:00 | Vulnerability · Source |
| CVE-2018-14660 | redhat_vex | glusterfs: Repeat use of "GF_META_LOCK_KEY" xattr allows for memory exhaustion | fixed: 80 known not affected: 32 | 2026-06-30T11:34:42+00:00 | Vulnerability · Source |
| CVE-2018-14659 | redhat_vex | glusterfs: Unlimited file creation via "GF_XATTR_IOSTATS_DUMP_KEY" xattr allows for denial of service | fixed: 80 known not affected: 32 | 2026-06-30T11:34:39+00:00 | Vulnerability · Source |
| CVE-2018-14658 | redhat_vex | keycloak: Open Redirect in Login and Logout | fixed: 7 known affected: 2 | 2026-06-30T11:34:36+00:00 | Vulnerability · Source |
| CVE-2018-14655 | redhat_vex | keycloak: XSS-Vulnerability with response_mode=form_post | fixed: 7 known affected: 2 | 2026-06-30T11:34:35+00:00 | Vulnerability · Source |
| CVE-2018-14654 | redhat_vex | glusterfs: "features/index" translator can create arbitrary, empty files | fixed: 80 known not affected: 32 | 2026-06-30T11:34:31+00:00 | Vulnerability · Source |
| CVE-2018-14653 | redhat_vex | glusterfs: Heap-based buffer overflow via "gf_getspec_req" RPC message | fixed: 80 known not affected: 32 | 2026-06-30T11:34:29+00:00 | Vulnerability · Source |
| CVE-2018-14650 | redhat_vex | sos-collector: incorrect permissions set on newly created files | fixed: 10 | 2026-06-30T11:34:27+00:00 | Vulnerability · Source |
| CVE-2018-14652 | redhat_vex | glusterfs: Buffer overflow in "features/locks" translator allows for denial of service | fixed: 80 known not affected: 32 | 2026-06-30T11:34:25+00:00 | Vulnerability · Source |
| CVE-2018-14648 | redhat_vex | 389-ds-base: Mishandled search requests in servers/slapd/search.c:do_search() allows for denial of service | fixed: 92 known affected: 4 known not affected: 8 | 2026-06-30T11:34:20+00:00 | Vulnerability · Source |
| CVE-2018-14647 | redhat_vex | python: Missing salt initialization in _elementtree.c module | fixed: 570 known affected: 16 known not affected: 50 | 2026-06-30T11:34:18+00:00 | Vulnerability · Source |
| CVE-2018-14646 | redhat_vex | kernel: NULL pointer dereference in af_netlink.c:__netlink_ns_capable() allows for denial of service | fixed: 302 known affected: 12 known not affected: 79 | 2026-06-30T11:34:15+00:00 | Vulnerability · Source |
| CVE-2018-14638 | redhat_vex | 389-ds-base: Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly | fixed: 62 known affected: 4 known not affected: 8 | 2026-06-30T11:34:12+00:00 | Vulnerability · Source |
| CVE-2018-14633 | redhat_vex | kernel: stack-based buffer overflow in chap_server_compute_md5() in iscsi target | fixed: 302 known affected: 28 known not affected: 47 | 2026-06-30T11:34:04+00:00 | Vulnerability · Source |
| CVE-2018-14629 | redhat_vex | samba: Unprivileged adding of CNAME record causing loop in AD LDAP server | known not affected: 134 | 2026-06-30T11:34:02+00:00 | Vulnerability · Source |
| CVE-2018-14627 | redhat_vex | JBoss/WildFly: iiop does not honour strict transport confidentiality | fixed: 222 known affected: 2 | 2026-06-30T11:33:58+00:00 | Vulnerability · Source |
| CVE-2018-14625 | redhat_vex | kernel: use-after-free Read in vhost_transport_send_pkt | fixed: 230 known not affected: 60 | 2026-06-30T11:33:54+00:00 | Vulnerability · Source |
| CVE-2018-14624 | redhat_vex | 389-ds-base: Server crash through modify command with large DN | fixed: 62 known affected: 4 known not affected: 8 | 2026-06-30T11:33:53+00:00 | Vulnerability · Source |
| CVE-2018-14620 | redhat_vex | openstack-rabbitmq-container: Insecure download of rabbitmq_clusterer during docker build | fixed: 251 known not affected: 1 | 2026-06-30T11:33:48+00:00 | Vulnerability · Source |
| CVE-2018-10937 | redhat_vex | tectonic-console: XSS Vulnerability in K8s API proxy | known not affected: 11 | 2026-06-30T11:33:48+00:00 | Vulnerability · Source |
| CVE-2018-10935 | redhat_vex | 389-ds-base: ldapsearch with server side sort allows users to cause a crash | fixed: 62 known not affected: 12 | 2026-06-30T11:33:44+00:00 | Vulnerability · Source |
| CVE-2018-10924 | redhat_vex | glusterfs: Denial-of-service via fsync(2) in Gluster FUSE client | known not affected: 50 | 2026-06-30T11:33:39+00:00 | Vulnerability · Source |
| CVE-2018-10919 | redhat_vex | samba: Confidential attribute disclosure via substring search | known not affected: 134 | 2026-06-30T11:33:38+00:00 | Vulnerability · Source |
| CVE-2018-10918 | redhat_vex | samba: DsCrackNames on a user without an SPN can trigger NULL-pointer de-reference | known not affected: 134 | 2026-06-30T11:33:34+00:00 | Vulnerability · Source |
| CVE-2018-10917 | redhat_vex | pulp: Improper path parsing leads to overwriting of iso repositories | fixed: 1185 known not affected: 1 | 2026-06-30T11:33:33+00:00 | Vulnerability · Source |
| CVE-2018-10916 | redhat_vex | lftp: particular remote file names may lead to current working directory erased | fixed: 34 known affected: 2 known not affected: 3 | 2026-06-30T11:33:30+00:00 | Vulnerability · Source |
| CVE-2018-10914 | redhat_vex | glusterfs: remote denial of service of gluster volumes via posix_get_file_contents function in posix-helpers.c | fixed: 84 known not affected: 32 | 2026-06-30T11:33:28+00:00 | Vulnerability · Source |
| CVE-2018-10912 | redhat_vex | keycloak: infinite loop in session replacement leading to denial of service | fixed: 2 known affected: 2 known not affected: 2 | 2026-06-30T11:33:26+00:00 | Vulnerability · Source |
| CVE-2018-10911 | redhat_vex | glusterfs: Improper deserialization in dict.c:dict_unserialize() can allow attackers to read arbitrary memory | fixed: 209 known not affected: 10 | 2026-06-30T11:33:24+00:00 | Vulnerability · Source |
| CVE-2018-10908 | redhat_vex | vdsm: calls to qemu-img are not protected by prlimit/ulimit | fixed: 27 known not affected: 27 | 2026-06-30T11:33:21+00:00 | Vulnerability · Source |
| CVE-2018-10906 | redhat_vex | fuse: bypass of the "user_allow_other" restriction when SELinux is active | fixed: 70 known affected: 1 known not affected: 11 | 2026-06-30T11:33:18+00:00 | Vulnerability · Source |
| CVE-2018-10903 | redhat_vex | python-cryptography: GCM tag forgery via truncated tag in finalize_with_tag API | fixed: 10 known affected: 1 known not affected: 8 | 2026-06-30T11:33:17+00:00 | Vulnerability · Source |
| CVE-2018-10893 | redhat_vex | spice-client: Insufficient encoding checks for LZ can cause different integer/buffer overflows | fixed: 194 known affected: 1 known not affected: 8 | 2026-06-30T11:33:12+00:00 | Vulnerability · Source |
| CVE-2018-10892 | redhat_vex | docker: container breakout without selinux in enforcing mode | fixed: 35 known not affected: 21 | 2026-06-30T11:33:09+00:00 | Vulnerability · Source |
| CVE-2018-10878 | redhat_vex | kernel: out-of-bound write in ext4_init_block_bitmap function with a crafted ext4 image | fixed: 248 known affected: 12 known not affected: 56 | 2026-06-30T11:33:08+00:00 | Vulnerability · Source |
| CVE-2018-10885 | redhat_vex | atomic-openshift: Malicious network-policy can cause Openshift Routing DoS when using ovs-networkpolicy plugin | known affected: 20 | 2026-06-30T11:33:07+00:00 | Vulnerability · Source |
| CVE-2018-10875 | redhat_vex | ansible: ansible.cfg is being read from current working directory allowing possible code execution | fixed: 28 known affected: 7 known not affected: 6 | 2026-06-30T11:33:01+00:00 | Vulnerability · Source |
| CVE-2018-10874 | redhat_vex | ansible: Inventory variables are loaded from current working directory when running ad-hoc command that can lead to code execution | fixed: 28 known affected: 7 known not affected: 6 | 2026-06-30T11:32:59+00:00 | Vulnerability · Source |
| CVE-2018-10872 | redhat_vex | kernel: error in exception handling leads to DoS (CVE-2018-8897 regression) | fixed: 180 known not affected: 77 | 2026-06-30T11:32:55+00:00 | Vulnerability · Source |
| CVE-2018-10871 | redhat_vex | 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default | fixed: 42 known affected: 9 | 2026-06-30T11:32:54+00:00 | Vulnerability · Source |
| CVE-2018-10860 | redhat_vex | perl-Archive-Zip: Directory traversal in Archive::Zip | known affected: 6 known not affected: 3 | 2026-06-30T11:32:50+00:00 | Vulnerability · Source |
| CVE-2018-10858 | redhat_vex | samba: Insufficient input validation in libsmbclient | fixed: 437 known not affected: 52 | 2026-06-30T11:32:49+00:00 | Vulnerability · Source |
| CVE-2018-10856 | redhat_vex | podman: Containers run as non-root users do not drop capabilities | fixed: 7 known not affected: 9 | 2026-06-30T11:32:45+00:00 | Vulnerability · Source |
| CVE-2018-10855 | redhat_vex | ansible: Failed tasks do not honour no_log option allowing for secrets to be disclosed in logs | fixed: 52 known affected: 6 known not affected: 3 | 2026-06-30T11:32:44+00:00 | Vulnerability · Source |
| CVE-2018-10854 | redhat_vex | cloudforms: stored cross-site scripting in Name field | fixed: 28 | 2026-06-30T11:32:40+00:00 | Vulnerability · Source |