VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294458 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-7463 | redhat_vex | business-central: Reflected XSS in artifact upload error message | fixed: 2 | 2026-06-30T11:28:49+00:00 | Vulnerability · Source |
| CVE-2017-5529 | redhat_vex | jasperreports: Information disclosure vulnerability | known affected: 1 | 2026-06-30T11:28:39+00:00 | Vulnerability · Source |
| CVE-2017-5528 | redhat_vex | jasperrreports: XSS and CSRF vulnerabilities leading to information disclosure | known affected: 1 | 2026-06-30T11:28:33+00:00 | Vulnerability · Source |
| CVE-2017-3144 | redhat_vex | dhcp: omapi code doesn't free socket descriptors when empty message is received allowing denial-of-service | fixed: 92 known not affected: 6 | 2026-06-30T11:28:23+00:00 | Vulnerability · Source |
| CVE-2017-3142 | redhat_vex | bind: An error in TSIG authentication can permit unauthorized zone transfers | fixed: 264 known affected: 1 known not affected: 1 | 2026-06-30T11:28:19+00:00 | Vulnerability · Source |
| CVE-2017-3140 | redhat_vex | bind: Error processing RPZ rules leads to endless loop while handling query | known not affected: 26 | 2026-06-30T11:28:03+00:00 | Vulnerability · Source |
| CVE-2017-3138 | redhat_vex | bind: REQUIRE assertion failure when null command string on control channel is received | known not affected: 26 | 2026-06-30T11:27:52+00:00 | Vulnerability · Source |
| CVE-2017-3136 | redhat_vex | bind: Incorrect error handling causes assertion failure when using DNS64 with "break-dnssec yes;" | fixed: 264 known not affected: 2 | 2026-06-30T11:27:47+00:00 | Vulnerability · Source |
| CVE-2017-3135 | redhat_vex | bind: Assertion failure when using DNS64 and RPZ Can Lead to Crash | fixed: 176 known not affected: 9 | 2026-06-30T11:27:47+00:00 | Vulnerability · Source |
| CVE-2017-2870 | redhat_vex | gdk-pixbuf2: Integer overflow in tiff_image_parse function | known affected: 7 | 2026-06-30T11:27:43+00:00 | Vulnerability · Source |
| CVE-2017-1002101 | redhat_vex | kubernetes: Volume security can be sidestepped with innocent emptyDir and subpath | fixed: 72 known affected: 1 known not affected: 4 | 2026-06-30T11:27:13+00:00 | Vulnerability · Source |
| CVE-2017-15118 | redhat_vex | Qemu: stack buffer overflow in NBD server triggered via long export name | fixed: 46 known affected: 5 known not affected: 43 | 2026-06-30T11:27:09+00:00 | Vulnerability · Source |
| CVE-2017-13090 | redhat_vex | wget: Heap-based buffer overflow in HTTP protocol handling | fixed: 18 known not affected: 3 | 2026-06-30T11:27:08+00:00 | Vulnerability · Source |
| CVE-2017-13089 | redhat_vex | wget: Stack-based buffer overflow in HTTP protocol handling | fixed: 18 known not affected: 3 | 2026-06-30T11:27:05+00:00 | Vulnerability · Source |
| CVE-2017-12148 | redhat_vex | Tower: modification of git hooks in SCM repo via upstream playbook execution | fixed: 18 known affected: 1 | 2026-06-30T11:27:04+00:00 | Vulnerability · Source |
| CVE-2017-2668 | redhat_vex | 389-ds-base: Remote crash via crafted LDAP messages | fixed: 77 | 2026-06-30T11:26:59+00:00 | Vulnerability · Source |
| CVE-2017-2664 | redhat_vex | CloudForms: lack of RBAC on various methods in web UI | fixed: 28 | 2026-06-30T11:26:55+00:00 | Vulnerability · Source |
| CVE-2017-2646 | redhat_vex | keycloak: DoS via SAML request | known not affected: 1 | 2026-06-30T11:26:54+00:00 | Vulnerability · Source |
| CVE-2017-2637 | redhat_vex | rhosp-director: libvirtd is deployed with no authentication | fixed: 48 known not affected: 1 | 2026-06-30T11:26:51+00:00 | Vulnerability · Source |
| CVE-2017-2630 | redhat_vex | Qemu: nbd: oob stack write in client routine drop_sync | fixed: 11 known not affected: 48 | 2026-06-30T11:26:50+00:00 | Vulnerability · Source |
| CVE-2017-2620 | redhat_vex | Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo | fixed: 142 known affected: 3 known not affected: 1 | 2026-06-30T11:26:46+00:00 | Vulnerability · Source |
| CVE-2017-2615 | redhat_vex | Qemu: display: cirrus: oob access while doing bitblt copy backward mode | fixed: 142 known affected: 3 known not affected: 1 | 2026-06-30T11:26:44+00:00 | Vulnerability · Source |
| CVE-2017-2614 | redhat_vex | rhev-m-4: Fails to validate existing expired passwords when changing a password | fixed: 2 | 2026-06-30T11:26:42+00:00 | Vulnerability · Source |
| CVE-2017-2608 | redhat_vex | jenkins: XStream remote code execution vulnerability (SECURITY-383) | under investigation: 3 | 2026-06-30T11:26:40+00:00 | Vulnerability · Source |
| CVE-2017-2589 | redhat_vex | hawtio: Proxy is sharing cookies among all the clients | fixed: 2 known affected: 2 under investigation: 1 | 2026-06-30T11:26:39+00:00 | Vulnerability · Source |
| CVE-2016-9778 | redhat_vex | bind: assertion failure while handling certain queries using the nxdomain-redirect feature | known not affected: 26 | 2026-06-30T11:26:36+00:00 | Vulnerability · Source |
| CVE-2016-9603 | redhat_vex | Qemu: cirrus: heap buffer overflow via vnc connection | fixed: 128 known affected: 1 known not affected: 3 | 2026-06-30T11:26:34+00:00 | Vulnerability · Source |
| CVE-2016-9599 | redhat_vex | puppet-tripleo: if ssl is enabled, traffic is open on both undercloud and overcloud | fixed: 2 known not affected: 1 | 2026-06-30T11:26:32+00:00 | Vulnerability · Source |
| CVE-2016-9602 | redhat_vex | Qemu: 9p: virtfs allows guest to access host filesystem | known not affected: 69 | 2026-06-30T11:26:32+00:00 | Vulnerability · Source |
| CVE-2016-9587 | redhat_vex | Ansible: Compromised remote hosts can lead to running commands on the Ansible controller | fixed: 51 known affected: 2 | 2026-06-30T11:26:32+00:00 | Vulnerability · Source |
| CVE-2016-8705 | redhat_vex | memcached: Server update remote code execution | fixed: 91 known affected: 3 known not affected: 2 | 2026-06-30T11:26:26+00:00 | Vulnerability · Source |
| CVE-2016-8704 | redhat_vex | memcached: Server append/prepend remote code execution | fixed: 91 known affected: 3 known not affected: 2 | 2026-06-30T11:26:21+00:00 | Vulnerability · Source |
| CVE-2016-8332 | redhat_vex | openjpeg2: JPEG2000 mcc record Code Execution Vulnerability | known not affected: 8 | 2026-06-30T11:26:17+00:00 | Vulnerability · Source |
| CVE-2016-8654 | redhat_vex | jasper: heap-based buffer overflow in QMFB code in JPC codec | fixed: 146 known affected: 3 known not affected: 1 | 2026-06-30T11:26:17+00:00 | Vulnerability · Source |
| CVE-2016-7075 | redhat_vex | 3: API server does not validate client-provided intermediate certificates correctly | fixed: 34 | 2026-06-30T11:26:13+00:00 | Vulnerability · Source |
| CVE-2016-7071 | redhat_vex | CFME: bypass authorization by altering VM ID | fixed: 8 | 2026-06-30T11:26:11+00:00 | Vulnerability · Source |
| CVE-2016-7035 | redhat_vex | pacemaker: Privilege escalation due to improper guarding of IPC communication | fixed: 88 | 2026-06-30T11:26:09+00:00 | Vulnerability · Source |
| CVE-2016-5402 | redhat_vex | cfme: RCE via Capacity & Utilization feature | fixed: 15 | 2026-06-30T11:26:08+00:00 | Vulnerability · Source |
| CVE-2016-2123 | redhat_vex | samba: NDR Parsing ndr_pull_dnsp_name Heap-based Buffer Overflow Remote Code Execution Vulnerability (ZDI-CAN-3995) | known not affected: 96 | 2026-06-30T11:26:05+00:00 | Vulnerability · Source |
| CVE-2012-5562 | redhat_vex | rhn-proxy: rhn-satellite: rhn-proxy: Information disclosure via clear-text credential transmission when accessing RHN Satellite | known not affected: 6 | 2026-06-30T11:26:03+00:00 | Vulnerability · Source |
| CVE-2018-14656 | redhat_vex | kernel: Arbitrary Kernel Read into dmesg via Missing Address Check in segfault Handler | known not affected: 104 | 2026-06-30T11:26:01+00:00 | Vulnerability · Source |
| CVE-2018-14651 | redhat_vex | glusterfs: glusterfs server exploitable via symlinks to relative paths | fixed: 72 known not affected: 32 | 2026-06-30T11:25:59+00:00 | Vulnerability · Source |
| CVE-2018-14649 | redhat_vex | ceph-iscsi-cli: rbd-target-api service runs in debug mode allowing for remote command execution | fixed: 10 | 2026-06-30T11:25:56+00:00 | Vulnerability · Source |
| CVE-2018-14645 | redhat_vex | haproxy: Out-of-bounds read in HPACK decoder | fixed: 57 known not affected: 78 | 2026-06-30T11:25:55+00:00 | Vulnerability · Source |
| CVE-2018-14643 | redhat_vex | smart_proxy_dynflow: Authentication bypass in Foreman remote execution feature | fixed: 4 known not affected: 2 | 2026-06-30T11:25:53+00:00 | Vulnerability · Source |
| CVE-2018-14641 | redhat_vex | kernel: a bug in ip_frag_reasm() can cause a crash in ip_do_fragment() | fixed: 26 known not affected: 87 | 2026-06-30T11:25:51+00:00 | Vulnerability · Source |
| CVE-2018-14637 | redhat_vex | keycloak: expiration not validated in SAML broker consumer endpoint | fixed: 7 known affected: 1 known not affected: 1 | 2026-06-30T11:25:50+00:00 | Vulnerability · Source |
| CVE-2018-14634 | redhat_vex | kernel: Integer overflow in Linux's create_elf_tables function | fixed: 910 known not affected: 49 | 2026-06-30T11:25:46+00:00 | Vulnerability · Source |
| CVE-2018-14632 | redhat_vex | atomic-openshift: oc patch with json causes masterapi service crash | fixed: 86 known affected: 60 known not affected: 472 | 2026-06-30T11:25:44+00:00 | Vulnerability · Source |
| CVE-2018-14619 | redhat_vex | kernel: crash (possible privesc) in kernel crypto api. | fixed: 26 known not affected: 76 | 2026-06-30T11:25:42+00:00 | Vulnerability · Source |