VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294458 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-10933 | redhat_vex | libssh: Authentication Bypass due to improper message callbacks implementation | fixed: 53 known not affected: 16 | 2026-06-30T11:25:40+00:00 | Vulnerability · Source |
| CVE-2018-10931 | redhat_vex | cobbler: CobblerXMLRPCInterface exports all its methods over XMLRPC | fixed: 6 known not affected: 2 | 2026-06-30T11:25:39+00:00 | Vulnerability · Source |
| CVE-2018-10930 | redhat_vex | glusterfs: Files can be renamed outside volume | fixed: 84 known not affected: 32 | 2026-06-30T11:25:37+00:00 | Vulnerability · Source |
| CVE-2018-10929 | redhat_vex | glusterfs: Arbitrary file creation on storage server allows for execution of arbitrary code | fixed: 84 known not affected: 32 | 2026-06-30T11:25:35+00:00 | Vulnerability · Source |
| CVE-2018-10928 | redhat_vex | glusterfs: Improper resolution of symlinks allows for privilege escalation | fixed: 84 known not affected: 32 | 2026-06-30T11:25:32+00:00 | Vulnerability · Source |
| CVE-2018-10927 | redhat_vex | glusterfs: File status information leak and denial of service | fixed: 84 known not affected: 32 | 2026-06-30T11:25:31+00:00 | Vulnerability · Source |
| CVE-2018-10926 | redhat_vex | glusterfs: Device files can be created in arbitrary locations | fixed: 84 known not affected: 32 | 2026-06-30T11:25:28+00:00 | Vulnerability · Source |
| CVE-2018-10925 | redhat_vex | postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements | fixed: 673 known affected: 15 known not affected: 53 | 2026-06-30T11:25:27+00:00 | Vulnerability · Source |
| CVE-2018-10923 | redhat_vex | glusterfs: I/O to arbitrary devices on storage server | fixed: 84 known not affected: 32 | 2026-06-30T11:25:24+00:00 | Vulnerability · Source |
| CVE-2018-10915 | redhat_vex | postgresql: Certain host connection parameters defeat client-side security defenses | fixed: 864 known affected: 13 known not affected: 39 | 2026-06-30T11:25:23+00:00 | Vulnerability · Source |
| CVE-2018-10907 | redhat_vex | glusterfs: Stack-based buffer overflow in server-rpc-fops.c allows remote attackers to execute arbitrary code | fixed: 84 known not affected: 32 | 2026-06-30T11:25:20+00:00 | Vulnerability · Source |
| CVE-2018-10905 | redhat_vex | cfme: Improper access control in dRuby allows local users to execute arbitrary commands as root | fixed: 32 | 2026-06-30T11:25:18+00:00 | Vulnerability · Source |
| CVE-2018-10904 | redhat_vex | glusterfs: Unsanitized file names in debug/io-stats translator can allow remote attackers to execute arbitrary code | fixed: 84 known not affected: 32 | 2026-06-30T11:25:16+00:00 | Vulnerability · Source |
| CVE-2018-10901 | redhat_vex | kernel: kvm: vmx: host GDT limit corruption | fixed: 369 known not affected: 74 | 2026-06-30T11:25:11+00:00 | Vulnerability · Source |
| CVE-2018-10898 | redhat_vex | openstack-tripleo-heat-templates: Default ODL deployment uses hard coded administrative credentials | fixed: 13 known not affected: 13 | 2026-06-30T11:25:06+00:00 | Vulnerability · Source |
| CVE-2018-10897 | redhat_vex | yum-utils: reposync: improper path validation may lead to directory traversal | fixed: 265 known affected: 1 known not affected: 6 | 2026-06-30T11:25:04+00:00 | Vulnerability · Source |
| CVE-2018-10884 | redhat_vex | ansible-tower: CSRF in awx/api/authentication.py allows for hijacking of the authtoken cookie | known affected: 1 known not affected: 7 | 2026-06-30T11:25:01+00:00 | Vulnerability · Source |
| CVE-2018-10873 | redhat_vex | spice: Missing check in demarshal.py:write_validate_array_item() allows for buffer overflow and denial of service | fixed: 210 known not affected: 4 | 2026-06-30T11:24:57+00:00 | Vulnerability · Source |
| CVE-2018-10870 | redhat_vex | redhat-certification: rhcertStore.py: __saveResultsFile allows to write any file | fixed: 10 known not affected: 1 | 2026-06-30T11:24:56+00:00 | Vulnerability · Source |
| CVE-2018-10869 | redhat_vex | redhat-certification: /download allows to download any file | fixed: 10 known not affected: 1 | 2026-06-30T11:24:54+00:00 | Vulnerability · Source |
| CVE-2018-10843 | redhat_vex | source-to-image: Builder images with assembler-user LABEL set to root allows attackers to execute arbitrary code | fixed: 32 known not affected: 2 | 2026-06-30T11:24:53+00:00 | Vulnerability · Source |
| CVE-2018-10841 | redhat_vex | glusterfs: access trusted peer group via remote-host command | fixed: 69 known not affected: 23 | 2026-06-30T11:24:50+00:00 | Vulnerability · Source |
| CVE-2018-3849 | redhat_vex | cfitsio: Stack-based buffer overflow in ffghtb() allows for potential code execution | known affected: 1 | 2026-06-30T11:24:49+00:00 | Vulnerability · Source |
| CVE-2018-3848 | redhat_vex | cfitsio: Stack-based buffer overflow in ffghbn() allows for potential code execution | known affected: 1 | 2026-06-30T11:24:44+00:00 | Vulnerability · Source |
| CVE-2018-3846 | redhat_vex | cfitsio: Unsafe use of sprintf() can allow a remote unauthenticated attacker to execute arbitrary code | known affected: 2 | 2026-06-30T11:24:43+00:00 | Vulnerability · Source |
| CVE-2018-1417 | redhat_vex | JDK: J9 JVM allows untrusted code running under a security manager to elevate its privileges | fixed: 205 known affected: 1 known not affected: 15 | 2026-06-30T11:24:40+00:00 | Vulnerability · Source |
| CVE-2018-1124 | redhat_vex | procps: Integer overflows leading to heap overflow in file2strvec | fixed: 273 known affected: 1 known not affected: 4 | 2026-06-30T11:24:39+00:00 | Vulnerability · Source |
| CVE-2018-1112 | redhat_vex | glusterfs: auth.allow allows unauthenticated clients to mount gluster volumes (CVE-2018-1088 regression) | fixed: 69 known not affected: 32 | 2026-06-30T11:24:36+00:00 | Vulnerability · Source |
| CVE-2018-1111 | redhat_vex | dhcp: Command injection vulnerability in the DHCP client NetworkManager integration script | fixed: 399 known not affected: 7 | 2026-06-30T11:24:34+00:00 | Vulnerability · Source |
| CVE-2018-1089 | redhat_vex | 389-ds-base: ns-slapd crash via large filter value in ldapsearch | fixed: 101 known not affected: 8 | 2026-06-30T11:24:34+00:00 | Vulnerability · Source |
| CVE-2018-1087 | redhat_vex | Kernel: KVM: error in exception handling leads to wrong debug stack value | fixed: 548 known affected: 2 known not affected: 75 | 2026-06-30T11:24:30+00:00 | Vulnerability · Source |
| CVE-2018-1085 | redhat_vex | openshift-ansible: Incorrectly quoted values in etcd.conf causes disabling of SSL client certificate authentication | fixed: 32 | 2026-06-30T11:24:27+00:00 | Vulnerability · Source |
| CVE-2018-1084 | redhat_vex | corosync: Integer overflow in exec/totemcrypto.c:authenticate_nss_2_3() function | fixed: 44 known affected: 4 known not affected: 9 | 2026-06-30T11:24:25+00:00 | Vulnerability · Source |
| CVE-2018-1079 | redhat_vex | pcs: Privilege escalation via authorized user malicious REST call | fixed: 20 known not affected: 7 | 2026-06-30T11:24:21+00:00 | Vulnerability · Source |
| CVE-2018-1070 | redhat_vex | Routing: Malicous Service configuration can bring down routing for an entire shard. | fixed: 32 | 2026-06-30T11:24:21+00:00 | Vulnerability · Source |
| CVE-2017-7543 | redhat_vex | openstack-neutron: iptables not active after update | fixed: 112 known not affected: 12 | 2026-06-30T11:24:18+00:00 | Vulnerability · Source |
| CVE-2017-7530 | redhat_vex | cfme: Execution of arbitrary methods through filter param | fixed: 16 | 2026-06-30T11:24:16+00:00 | Vulnerability · Source |
| CVE-2017-7466 | redhat_vex | ansible: Arbitrary code execution on control node (incomplete fix for CVE-2016-9587) | fixed: 54 known not affected: 4 | 2026-06-30T11:24:13+00:00 | Vulnerability · Source |
| CVE-2017-3145 | redhat_vex | bind: Improper fetch cleanup sequencing in the resolver can cause named to crash | fixed: 575 known affected: 1 known not affected: 18 | 2026-06-30T11:24:06+00:00 | Vulnerability · Source |
| CVE-2017-3143 | redhat_vex | bind: An error in TSIG authentication can permit unauthorized dynamic updates | fixed: 264 known affected: 1 known not affected: 1 | 2026-06-30T11:24:06+00:00 | Vulnerability · Source |
| CVE-2017-3141 | redhat_vex | bind: BIND installer on Windows uses an unquoted service path which allows privilege escalation | known not affected: 26 | 2026-06-30T11:24:01+00:00 | Vulnerability · Source |
| CVE-2017-3137 | redhat_vex | bind: Processing a response containing CNAME or DNAME with unusual order can crash resolver | fixed: 511 known affected: 2 | 2026-06-30T11:23:56+00:00 | Vulnerability · Source |
| CVE-2017-2888 | redhat_vex | SDL: Integer overflow while creating a new RGB surface | known not affected: 8 | 2026-06-30T11:23:56+00:00 | Vulnerability · Source |
| CVE-2017-2862 | redhat_vex | gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function | fixed: 8618 known affected: 3 known not affected: 6 | 2026-06-30T11:23:51+00:00 | Vulnerability · Source |
| CVE-2017-2839 | redhat_vex | freerdp: Rdp Client License Read Challenge Packet Denial of Service | known affected: 12 | 2026-06-30T11:23:51+00:00 | Vulnerability · Source |
| CVE-2017-2838 | redhat_vex | freerdp: Rdp Client License Read Product Info Denial of Service | known affected: 12 | 2026-06-30T11:23:51+00:00 | Vulnerability · Source |
| CVE-2017-2885 | redhat_vex | libsoup: Stack based buffer overflow with HTTP Chunked Encoding | fixed: 47 known not affected: 4 | 2026-06-30T11:23:51+00:00 | Vulnerability · Source |
| CVE-2025-6199 | redhat_vex | gdk-pixbuf: Uninitialized Memory Disclosure in GdkPixbuf GIF LZW Decoder | known affected: 28 | 2026-06-30T11:13:25+00:00 | Vulnerability · Source |
| CVE-2025-4945 | redhat_vex | libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup | fixed: 309 known affected: 3 | 2026-06-30T11:13:12+00:00 | Vulnerability · Source |
| CVE-2025-49178 | redhat_vex | xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore | fixed: 1166 known affected: 9 | 2026-06-30T11:10:44+00:00 | Vulnerability · Source |