VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288586 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-2592 | redhat_vex | python-oslo-middleware: CatchErrors leaks sensitive values into error logs | fixed: 7 known not affected: 10 | 2026-07-31T12:16:18+00:00 | Vulnerability · Source |
| CVE-2026-45831 | redhat_vex | ChromaDB: ChromaDB: Unauthorized cross-tenant actions due to improper authorization checks | known affected: 4 known not affected: 1 | 2026-07-31T12:11:49+00:00 | Vulnerability · Source |
| CVE-2014-5251 | redhat_vex | openstack-keystone: revocation events are broken with mysql | fixed: 8 known not affected: 1 | 2026-07-31T11:51:44+00:00 | Vulnerability · Source |
| CVE-2014-5252 | redhat_vex | openstack-keystone: token expiration date stored incorrectly | fixed: 8 known not affected: 1 | 2026-07-31T11:51:42+00:00 | Vulnerability · Source |
| CVE-2013-1838 | redhat_vex | Nova: DoS by allocating all Fixed IPs | fixed: 13 | 2026-07-31T11:51:36+00:00 | Vulnerability · Source |
| CVE-2014-5253 | redhat_vex | openstack-keystone: domain-scoped tokens don't get revoked | fixed: 8 known not affected: 1 | 2026-07-31T11:51:34+00:00 | Vulnerability · Source |
| CVE-2014-0157 | redhat_vex | openstack-horizon: XSS in Horizon orchestration dashboard when using a malicious template | fixed: 5 known affected: 1 | 2026-07-31T11:51:31+00:00 | Vulnerability · Source |
| CVE-2013-4497 | redhat_vex | openstack-nova: XenAPI security groups not kept through migrate or resize | fixed: 14 known affected: 1 | 2026-07-31T11:51:27+00:00 | Vulnerability · Source |
| CVE-2015-5251 | redhat_vex | openstack-glance allows illegal modification of image status | fixed: 16 | 2026-07-31T11:51:20+00:00 | Vulnerability · Source |
| CVE-2014-8333 | redhat_vex | openstack-nova: Nova VMware instance in resize state may leak | fixed: 32 known affected: 1 | 2026-07-31T11:51:19+00:00 | Vulnerability · Source |
| CVE-2014-6414 | redhat_vex | openstack-neutron: Admin-only network attributes may be reset to defaults by non-privileged users | fixed: 71 | 2026-07-31T11:51:14+00:00 | Vulnerability · Source |
| CVE-2014-3641 | redhat_vex | openstack-cinder: Cinder-volume host data leak to virtual machine instance | fixed: 8 known affected: 1 | 2026-07-31T11:51:13+00:00 | Vulnerability · Source |
| CVE-2014-3708 | redhat_vex | openstack-nova: Nova network denial of service through API filtering | fixed: 32 known affected: 1 | 2026-07-31T11:51:09+00:00 | Vulnerability · Source |
| CVE-2015-3646 | redhat_vex | openstack-keystone: cache backend password leak in log (OSSA 2015-008) | known affected: 1 known not affected: 2 | 2026-07-31T11:47:20+00:00 | Vulnerability · Source |
| CVE-2014-3475 | redhat_vex | openstack-horizon: multiple XSS flaws | fixed: 10 known affected: 1 | 2026-07-31T11:47:16+00:00 | Vulnerability · Source |
| CVE-2014-3497 | redhat_vex | openstack-swift: XSS in Swift requests through WWW-Authenticate header | fixed: 10 known not affected: 2 | 2026-07-31T11:47:14+00:00 | Vulnerability · Source |
| CVE-2014-7821 | redhat_vex | openstack-neutron: DoS via maliciously crafted dns_nameservers | fixed: 67 | 2026-07-31T11:47:09+00:00 | Vulnerability · Source |
| CVE-2013-6491 | redhat_vex | nova: qpid SSL configuration | fixed: 42 known not affected: 1 | 2026-07-31T11:47:06+00:00 | Vulnerability · Source |
| CVE-2013-4111 | redhat_vex | OpenStack: python-glanceclient failing SSL certificate check | fixed: 2 known affected: 1 | 2026-07-31T11:47:02+00:00 | Vulnerability · Source |
| CVE-2014-3555 | redhat_vex | openstack-neutron: Denial of Service in Neutron allowed address pair | fixed: 63 | 2026-07-31T11:46:58+00:00 | Vulnerability · Source |
| CVE-2014-1948 | redhat_vex | openstack-glance: Glance Swift store backend password leak | fixed: 4 known not affected: 1 | 2026-07-31T11:46:54+00:00 | Vulnerability · Source |
| CVE-2014-3594 | redhat_vex | openstack-horizon: persistent XSS in Horizon Host Aggregates interface | fixed: 15 known affected: 1 | 2026-07-31T11:46:50+00:00 | Vulnerability · Source |
| CVE-2013-2104 | redhat_vex | Keystone: Missing expiration check in Keystone PKI token validation | fixed: 3 | 2026-07-31T11:46:44+00:00 | Vulnerability · Source |
| CVE-2014-0167 | redhat_vex | openstack-nova: RBAC policy not properly enforced in Nova EC2 API | fixed: 15 known affected: 2 | 2026-07-31T11:46:43+00:00 | Vulnerability · Source |
| CVE-2013-6470 | redhat_vex | foreman-installer: insecure defaults | fixed: 2 known affected: 1 | 2026-07-31T11:46:42+00:00 | Vulnerability · Source |
| CVE-2014-3801 | redhat_vex | openstack-heat: authenticated information leak in Heat | fixed: 6 known affected: 1 | 2026-07-31T11:46:36+00:00 | Vulnerability · Source |
| CVE-2013-2161 | redhat_vex | Swift: Unchecked user input in Swift XML responses | fixed: 7 known affected: 1 | 2026-07-31T11:46:33+00:00 | Vulnerability · Source |
| CVE-2014-0187 | redhat_vex | openstack-neutron: security groups bypass through invalid CIDR | fixed: 19 | 2026-07-31T11:46:27+00:00 | Vulnerability · Source |
| CVE-2013-4354 | redhat_vex | OpenStack: Glance image creation in other tenant accounts | known affected: 2 | 2026-07-31T11:46:24+00:00 | Vulnerability · Source |
| CVE-2013-4278 | redhat_vex | OpenStack: Nova private flavors resource limit circumvention incomplete fix for CVE-2013-2256 | known not affected: 2 | 2026-07-31T11:46:22+00:00 | Vulnerability · Source |
| CVE-2013-4202 | redhat_vex | OpenStack: Cinder Denial of Service using XML entities | fixed: 4 known affected: 1 | 2026-07-31T11:46:22+00:00 | Vulnerability · Source |
| CVE-2013-4179 | redhat_vex | OpenStack: Nova XML entities DoS | fixed: 14 known affected: 1 | 2026-07-31T11:46:18+00:00 | Vulnerability · Source |
| CVE-2013-4185 | redhat_vex | OpenStack: Nova network source security groups denial of service | fixed: 14 known affected: 1 | 2026-07-31T11:46:12+00:00 | Vulnerability · Source |
| CVE-2013-4471 | redhat_vex | OpenStack: python-django-horizonpassword reset vulnerability | known affected: 2 | 2026-07-31T11:46:12+00:00 | Vulnerability · Source |
| CVE-2014-3473 | redhat_vex | openstack-horizon: multiple XSS flaws | fixed: 10 known affected: 1 | 2026-07-31T11:46:08+00:00 | Vulnerability · Source |
| CVE-2013-2096 | redhat_vex | Nova: fails to verify image virtual size denial of service | known affected: 1 | 2026-07-31T11:46:05+00:00 | Vulnerability · Source |
| CVE-2013-4477 | redhat_vex | openstack-keystone: unintentional role granting with Keystone LDAP backend | fixed: 4 known affected: 1 | 2026-07-31T11:46:02+00:00 | Vulnerability · Source |
| CVE-2014-2828 | redhat_vex | openstack-keystone: denial of service via V3 API authentication chaining | fixed: 4 known affected: 1 | 2026-07-31T11:45:59+00:00 | Vulnerability · Source |
| CVE-2013-4261 | redhat_vex | OpenStack: openstack-nova-compute console-log DoS | fixed: 14 known affected: 1 | 2026-07-31T11:45:55+00:00 | Vulnerability · Source |
| CVE-2013-7130 | redhat_vex | nova: Live migration can leak root disk into ephemeral storage | fixed: 29 | 2026-07-31T11:45:52+00:00 | Vulnerability · Source |
| CVE-2014-0134 | redhat_vex | openstack-nova: Nova host data leak to vm instance in rescue mode | fixed: 15 known affected: 2 | 2026-07-31T11:45:49+00:00 | Vulnerability · Source |
| CVE-2013-6428 | redhat_vex | Heat: ReST API doesn't respect tenant scoping | fixed: 6 known affected: 1 | 2026-07-31T11:45:46+00:00 | Vulnerability · Source |
| CVE-2013-4463 | redhat_vex | Nova: Compressed disk image DoS | fixed: 14 known affected: 1 | 2026-07-31T11:45:45+00:00 | Vulnerability · Source |
| CVE-2014-3621 | redhat_vex | openstack-keystone: configuration data information leak through Keystone catalog | fixed: 12 | 2026-07-31T11:45:42+00:00 | Vulnerability · Source |
| CVE-2013-4222 | redhat_vex | OpenStack: Keystone disabling a tenant does not disable a user token | fixed: 4 known affected: 1 | 2026-07-31T11:42:43+00:00 | Vulnerability · Source |
| CVE-2014-2237 | redhat_vex | openstack-keystone: trustee token revocation does not work with memcache backend | fixed: 8 | 2026-07-31T11:42:39+00:00 | Vulnerability · Source |
| CVE-2013-4155 | redhat_vex | OpenStack: Swift Denial of Service using superfluous object tombstones | fixed: 7 known affected: 1 | 2026-07-31T11:42:36+00:00 | Vulnerability · Source |
| CVE-2014-0056 | redhat_vex | openstack-neutron: insufficient authorization checks when creating ports | fixed: 19 known affected: 1 known not affected: 1 | 2026-07-31T11:42:34+00:00 | Vulnerability · Source |
| CVE-2013-6858 | redhat_vex | openstack: horizon multiple XSS vulnerabilities. | fixed: 4 known affected: 1 | 2026-07-31T11:42:27+00:00 | Vulnerability · Source |
| CVE-2013-6437 | redhat_vex | openstack-nova: DoS through ephemeral disk backing files | fixed: 15 known affected: 1 | 2026-07-31T11:42:24+00:00 | Vulnerability · Source |