VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294458 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-10853 | redhat_vex | kernel: kvm: guest userspace to guest kernel write | fixed: 530 known not affected: 75 | 2026-06-30T11:32:38+00:00 | Vulnerability · Source |
| CVE-2018-10850 | redhat_vex | 389-ds-base: race condition on reference counter leads to DoS using persistent search | fixed: 62 known affected: 4 known not affected: 8 | 2026-06-30T11:32:35+00:00 | Vulnerability · Source |
| CVE-2018-10845 | redhat_vex | gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant | fixed: 104 known affected: 6 known not affected: 9 | 2026-06-30T11:32:30+00:00 | Vulnerability · Source |
| CVE-2018-10846 | redhat_vex | gnutls: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery | fixed: 104 known affected: 9 known not affected: 6 | 2026-06-30T11:32:30+00:00 | Vulnerability · Source |
| CVE-2018-10844 | redhat_vex | gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls | fixed: 104 known affected: 6 known not affected: 9 | 2026-06-30T11:32:28+00:00 | Vulnerability · Source |
| CVE-2018-10840 | redhat_vex | kernel: Heap-based buffer overflow in fs/ext4/xattr.c:ext4_xattr_set_entry() with crafted ext4 image | fixed: 26 known affected: 15 known not affected: 72 | 2026-06-30T11:32:20+00:00 | Vulnerability · Source |
| CVE-2018-10839 | redhat_vex | QEMU: ne2000: integer overflow leads to buffer overflow issue | fixed: 32 known affected: 50 known not affected: 23 | 2026-06-30T11:32:20+00:00 | Vulnerability · Source |
| CVE-2018-1656 | redhat_vex | JDK: path traversal flaw in the Diagnostic Tooling Framework | fixed: 187 | 2026-06-30T11:32:12+00:00 | Vulnerability · Source |
| CVE-2018-1517 | redhat_vex | JDK: DoS in the java.math component | fixed: 187 | 2026-06-30T11:32:10+00:00 | Vulnerability · Source |
| CVE-2018-1140 | redhat_vex | libldb: LDAP server crash via distinguishedName | known not affected: 26 | 2026-06-30T11:32:04+00:00 | Vulnerability · Source |
| CVE-2018-1139 | redhat_vex | samba: Weak authentication protocol regression | fixed: 429 known not affected: 67 | 2026-06-30T11:32:00+00:00 | Vulnerability · Source |
| CVE-2018-1130 | redhat_vex | kernel: a null pointer dereference in net/dccp/output.c:dccp_write_xmit() leads to a system crash | fixed: 402 known affected: 13 known not affected: 57 | 2026-06-30T11:31:53+00:00 | Vulnerability · Source |
| CVE-2018-1126 | redhat_vex | procps: incorrect integer size in proc/alloc.* leading to truncation / integer overflow issues | fixed: 238 known affected: 1 known not affected: 8 | 2026-06-30T11:31:43+00:00 | Vulnerability · Source |
| CVE-2018-1122 | redhat_vex | procps: Local privilege escalation in top | fixed: 202 known affected: 4 known not affected: 4 | 2026-06-30T11:31:42+00:00 | Vulnerability · Source |
| CVE-2018-1120 | redhat_vex | kernel: fuse-backed file mmap-ed onto process cmdline arguments causes denial of service | fixed: 358 known affected: 15 known not affected: 45 | 2026-06-30T11:31:40+00:00 | Vulnerability · Source |
| CVE-2018-1114 | redhat_vex | undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service | fixed: 225 known affected: 4 known not affected: 2 | 2026-06-30T11:31:29+00:00 | Vulnerability · Source |
| CVE-2018-1103 | redhat_vex | source-to-image: Unsanitized paths in tar.go:ExtractTarStreamFromTarReader() allow malicious containers to overwrite files on the client machine | known affected: 1 | 2026-06-30T11:31:26+00:00 | Vulnerability · Source |
| CVE-2018-1090 | redhat_vex | pulp: sensitive credentials revealed through the API | fixed: 1110 known affected: 1 | 2026-06-30T11:31:20+00:00 | Vulnerability · Source |
| CVE-2018-1086 | redhat_vex | pcs: Debug parameter removal bypass, allowing information disclosure | fixed: 30 known not affected: 5 | 2026-06-30T11:31:18+00:00 | Vulnerability · Source |
| CVE-2018-1080 | redhat_vex | pki-core: Mishandled ACL configuration in AAclAuthz.java reverses rules that allow and deny access | fixed: 79 known affected: 14 known not affected: 35 | 2026-06-30T11:31:08+00:00 | Vulnerability · Source |
| CVE-2018-1075 | redhat_vex | ovirt-engine: Unfiltered password when choosing manual db provisioning | fixed: 21 | 2026-06-30T11:31:02+00:00 | Vulnerability · Source |
| CVE-2018-1061 | redhat_vex | python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib | fixed: 521 known affected: 24 | 2026-06-30T11:30:56+00:00 | Vulnerability · Source |
| CVE-2017-9117 | redhat_vex | libtiff: Heap-based buffer over-read in bmp2tiff | known affected: 12 | 2026-06-30T11:30:52+00:00 | Vulnerability · Source |
| CVE-2025-4404 | redhat_vex | freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA | fixed: 1119 known affected: 7 | 2026-06-30T11:30:32+00:00 | Vulnerability · Source |
| CVE-2017-7558 | redhat_vex | kernel: Out of bounds read in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() in SCTP stack | fixed: 207 known affected: 16 known not affected: 15 | 2026-06-30T11:30:30+00:00 | Vulnerability · Source |
| CVE-2017-7539 | redhat_vex | Qemu: qemu-nbd crashes due to undefined I/O coroutine | fixed: 58 known not affected: 22 | 2026-06-30T11:30:27+00:00 | Vulnerability · Source |
| CVE-2017-7545 | redhat_vex | jbpmmigration: XXE vulnerability in XmlUtils | fixed: 2 known affected: 1 | 2026-06-30T11:30:26+00:00 | Vulnerability · Source |
| CVE-2017-7538 | redhat_vex | 5: organization name allows XSS | fixed: 60 | 2026-06-30T11:30:25+00:00 | Vulnerability · Source |
| CVE-2017-7537 | redhat_vex | pki-core: mock CMC authentication plugin with hardcoded secret enabled by default | fixed: 56 known not affected: 14 | 2026-06-30T11:30:16+00:00 | Vulnerability · Source |
| CVE-2017-7535 | redhat_vex | foreman: XSS in the manage organization page | known affected: 1 under investigation: 17 | 2026-06-30T11:30:12+00:00 | Vulnerability · Source |
| CVE-2017-7528 | redhat_vex | Tower: X-Forwarded-For header allows internal servers to deploy other systems (using callback) | under investigation: 2 | 2026-06-30T11:30:09+00:00 | Vulnerability · Source |
| CVE-2017-7526 | redhat_vex | libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery | known affected: 10 | 2026-06-30T11:30:07+00:00 | Vulnerability · Source |
| CVE-2017-7518 | redhat_vex | Kernel: KVM: debug exception via syscall emulation | fixed: 191 known not affected: 43 | 2026-06-30T11:30:03+00:00 | Vulnerability · Source |
| CVE-2017-7514 | redhat_vex | SAT 5 XSS in the Failed Systems page | fixed: 672 | 2026-06-30T11:30:02+00:00 | Vulnerability · Source |
| CVE-2017-7513 | redhat_vex | 5: Failure to verify DB hostname against hostname in certificate in PostgreSQL through SSL configuration | known affected: 1 | 2026-06-30T11:30:01+00:00 | Vulnerability · Source |
| CVE-2017-7509 | redhat_vex | 8: Enrolling certificate without certreq field causes CA to crash | fixed: 17 | 2026-06-30T11:29:54+00:00 | Vulnerability · Source |
| CVE-2017-7500 | redhat_vex | rpm: Following symlinks to directories when installing packages allows privilege escalation | known affected: 20 | 2026-06-30T11:29:54+00:00 | Vulnerability · Source |
| CVE-2017-7497 | redhat_vex | CFME: Dialog for creating cloud volumes does not filter cloud tenants CVE-2017-7497 | fixed: 32 | 2026-06-30T11:29:46+00:00 | Vulnerability · Source |
| CVE-2017-7482 | redhat_vex | kernel: net/rxrpc: overflow in decoding of krb5 principal | fixed: 16 known affected: 11 known not affected: 33 | 2026-06-30T11:29:42+00:00 | Vulnerability · Source |
| CVE-2017-7481 | redhat_vex | ansible: Security issue with lookup return not tainting the jinja2 environment | fixed: 54 known affected: 1 known not affected: 3 | 2026-06-30T11:29:36+00:00 | Vulnerability · Source |
| CVE-2017-7470 | redhat_vex | spacewalk-backend: spacewalk-channel can be used by non-admin or disabled users for performing administrative tasks | fixed: 54 | 2026-06-30T11:29:34+00:00 | Vulnerability · Source |
| CVE-2026-27876 | redhat_vex | grafana: grafana-enterprise-plugin: Grafana: Remote arbitrary code execution via chained SQL Expressions and Enterprise plugin attack | known not affected: 21 | 2026-06-30T11:29:20+00:00 | Vulnerability · Source |
| CVE-2024-34351 | redhat_vex | next: Next.js Server-Side Request Forgery in Server Actions | fixed: 1 known affected: 3 known not affected: 2 | 2026-06-30T11:29:17+00:00 | Vulnerability · Source |
| CVE-2018-5740 | redhat_vex | bind: processing of certain records when "deny-answer-aliases" is in use may trigger an assert leading to a denial of service | fixed: 304 known affected: 1 known not affected: 20 | 2026-06-30T11:29:16+00:00 | Vulnerability · Source |
| CVE-2018-5735 | redhat_vex | bind: Assertion failure in validator.c due to incorrect handling of DNSSEC validation | known not affected: 45 | 2026-06-30T11:29:15+00:00 | Vulnerability · Source |
| CVE-2018-5732 | redhat_vex | dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server | fixed: 156 known affected: 1 known not affected: 6 | 2026-06-30T11:29:13+00:00 | Vulnerability · Source |
| CVE-2018-5734 | redhat_vex | bind: A malformed request can trigger an assertion failure in badcache.c | known not affected: 45 | 2026-06-30T11:29:13+00:00 | Vulnerability · Source |
| CVE-2018-5383 | redhat_vex | kernel: Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange | fixed: 76 known affected: 1 known not affected: 41 | 2026-06-30T11:29:12+00:00 | Vulnerability · Source |
| CVE-2018-5379 | redhat_vex | quagga: Double free vulnerability in bgpd when processing certain forms of UPDATE message allowing to crash or potentially execute arbitrary code | fixed: 54 known affected: 5 known not affected: 3 | 2026-06-30T11:29:04+00:00 | Vulnerability · Source |
| CVE-2017-7467 | redhat_vex | minicom: Out of bounds write in vt100.c | known affected: 3 | 2026-06-30T11:28:55+00:00 | Vulnerability · Source |