VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288586 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2014-4167 | redhat_vex | openstack-neutron: L3-agent denial of service through IPv6 subnet | fixed: 19 known affected: 1 | 2026-07-31T11:42:21+00:00 | Vulnerability · Source |
| CVE-2014-5356 | redhat_vex | openstack-glance: Glance store disk space exhaustion | fixed: 12 | 2026-07-31T11:42:16+00:00 | Vulnerability · Source |
| CVE-2013-4294 | redhat_vex | OpenStack: Keystone Token revocation failure using Keystone memcache/KVS backends | fixed: 4 known affected: 1 | 2026-07-31T11:42:12+00:00 | Vulnerability · Source |
| CVE-2013-2256 | redhat_vex | OpenStack: Nova private flavors resource limit circumvention | fixed: 14 known affected: 1 | 2026-07-31T11:42:09+00:00 | Vulnerability · Source |
| CVE-2013-4428 | redhat_vex | Glance: image_download policy not enforced for cached images | fixed: 4 known affected: 1 | 2026-07-31T11:42:06+00:00 | Vulnerability · Source |
| CVE-2014-3474 | redhat_vex | openstack-horizon: multiple XSS flaws | fixed: 10 known affected: 1 | 2026-07-31T11:42:03+00:00 | Vulnerability · Source |
| CVE-2013-4183 | redhat_vex | OpenStack: Cinder LVM volume driver does not support secure deletion | fixed: 4 known affected: 1 | 2026-07-31T11:41:58+00:00 | Vulnerability · Source |
| CVE-2014-8578 | redhat_vex | openstack-horizon: multiple XSS flaws | fixed: 10 known affected: 1 | 2026-07-31T11:41:53+00:00 | Vulnerability · Source |
| CVE-2014-3517 | redhat_vex | openstack-nova: timing attack issue allows access to other instances' configuration information | fixed: 30 known affected: 1 | 2026-07-31T11:41:50+00:00 | Vulnerability · Source |
| CVE-2013-6419 | redhat_vex | Nova: Metadata queries from Neutron to Nova are not restricted by tenant | fixed: 34 | 2026-07-31T11:41:44+00:00 | Vulnerability · Source |
| CVE-2015-3219 | redhat_vex | python-django-horizon: XSS in Heat stack creation | fixed: 5 known not affected: 7 | 2026-07-31T11:41:40+00:00 | Vulnerability · Source |
| CVE-2014-0006 | redhat_vex | Swift: TempURL timing attack | fixed: 14 | 2026-07-31T11:41:35+00:00 | Vulnerability · Source |
| CVE-2013-6426 | redhat_vex | Heat: CFN policy rules not all enforced | fixed: 6 known affected: 1 | 2026-07-31T11:41:27+00:00 | Vulnerability · Source |
| CVE-2013-2167 | redhat_vex | python-keystoneclient: middleware memcache encryption and signing bypass | fixed: 3 | 2026-07-31T11:41:24+00:00 | Vulnerability · Source |
| CVE-2014-4615 | redhat_vex | pycadf: token leak to message queue | fixed: 8 known affected: 3 known not affected: 3 | 2026-07-31T11:41:20+00:00 | Vulnerability · Source |
| CVE-2014-0105 | redhat_vex | python-keystoneclient: Potential context confusion in Keystone middleware | fixed: 13 | 2026-07-31T11:41:16+00:00 | Vulnerability · Source |
| CVE-2014-0071 | redhat_vex | PackStack: Neutron Security Groups fail to block network traffic | fixed: 3 known affected: 1 | 2026-07-31T11:41:14+00:00 | Vulnerability · Source |
| CVE-2014-3476 | redhat_vex | openstack-keystone: privilege escalation through trust chained delegation | fixed: 8 known affected: 1 | 2026-07-31T11:41:10+00:00 | Vulnerability · Source |
| CVE-2013-2157 | redhat_vex | openstack-keystone: Authentication bypass when using LDAP backend | fixed: 8 | 2026-07-31T11:41:07+00:00 | Vulnerability · Source |
| CVE-2014-0162 | redhat_vex | openstack-glance: remote code execution in Glance Sheepdog backend | fixed: 4 known affected: 1 known not affected: 1 | 2026-07-31T11:40:55+00:00 | Vulnerability · Source |
| CVE-2015-0259 | redhat_vex | openstack-nova: console Cross-Site WebSocket hijacking | fixed: 48 known affected: 1 | 2026-07-31T11:38:50+00:00 | Vulnerability · Source |
| CVE-2020-13558 | redhat_vex | webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution | fixed: 59 known affected: 9 known not affected: 379 | 2026-07-31T11:29:27+00:00 | Vulnerability · Source |
| CVE-2023-39928 | redhat_vex | webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports | fixed: 105 known affected: 9 | 2026-07-31T11:29:23+00:00 | Vulnerability · Source |
| CVE-2023-6185 | redhat_vex | libreoffice: Improper Input Validation leading to arbitrary gstreamer plugin execution | fixed: 4468 known affected: 487 | 2026-07-31T11:24:15+00:00 | Vulnerability · Source |
| CVE-2026-43368 | redhat_vex | kernel: drm/i915: Fix potential overflow of shmem scatterlist length | known affected: 184 known not affected: 90 | 2026-07-31T10:48:09+00:00 | Vulnerability · Source |
| CVE-2023-40476 | redhat_vex | gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite | fixed: 62 known affected: 13 | 2026-07-31T10:43:39+00:00 | Vulnerability · Source |
| CVE-2023-50186 | redhat_vex | gstreamer-plugins-bad-free: buffer overflow vulnerability | fixed: 31 known not affected: 7 | 2026-07-31T10:43:32+00:00 | Vulnerability · Source |
| CVE-2024-0444 | redhat_vex | gstreamer: AV1 Video Parsing Stack-based Buffer Overflow | fixed: 59 known affected: 14 known not affected: 85 | 2026-07-31T10:43:30+00:00 | Vulnerability · Source |
| CVE-2023-40475 | redhat_vex | gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio | fixed: 62 known affected: 13 | 2026-07-31T10:38:14+00:00 | Vulnerability · Source |
| CVE-2023-40474 | redhat_vex | gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video | fixed: 62 known affected: 13 | 2026-07-31T10:38:12+00:00 | Vulnerability · Source |
| CVE-2023-37329 | redhat_vex | gstreamer-plugins-bad: heap overwrite in PGS subtitle overlay decoder | known affected: 13 known not affected: 7 | 2026-07-31T10:38:11+00:00 | Vulnerability · Source |
| CVE-2023-37328 | redhat_vex | gstreamer-plugins-base: heap overwrite in subtitle parsing | fixed: 56 known affected: 16 | 2026-07-31T10:23:44+00:00 | Vulnerability · Source |
| CVE-2026-23466 | redhat_vex | kernel: drm/xe: Open-code GGTT MMIO access protection | known affected: 184 known not affected: 90 | 2026-07-31T10:13:46+00:00 | Vulnerability · Source |
| CVE-2009-1932 | redhat_vex | gstreamer-plugins-good: PNG decoder integer overflow | fixed: 31 | 2026-07-31T10:08:44+00:00 | Vulnerability · Source |
| CVE-2016-9813 | redhat_vex | gstreamer-plugins-bad-free: NULL pointer dereference in mpegts parser | fixed: 58 known not affected: 12 | 2026-07-31T10:04:19+00:00 | Vulnerability · Source |
| CVE-2026-11770 | redhat_vex | 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check | known affected: 33 | 2026-07-31T10:04:09+00:00 | Vulnerability · Source |
| CVE-2021-3497 | redhat_vex | gstreamer-plugins-good: Use-after-free in matroska demuxing | fixed: 26 known affected: 8 known not affected: 3 | 2026-07-31T10:04:06+00:00 | Vulnerability · Source |
| CVE-2026-10079 | redhat_vex | stackrox: stackrox: Deploy-time policy enforcement and visibility bypass via label injection | known affected: 3 | 2026-07-31T10:03:58+00:00 | Vulnerability · Source |
| CVE-2009-0386 | redhat_vex | gstreamer-plugins-good: heap-based buffer overflow while parsing malformed QuickTime media files via crafted Composition Time To Sample (aka ctts) atom data | fixed: 31 | 2026-07-31T10:03:56+00:00 | Vulnerability · Source |
| CVE-2026-15722 | redhat_vex | 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing | known affected: 32 known not affected: 1 | 2026-07-31T10:03:46+00:00 | Vulnerability · Source |
| CVE-2009-0397 | redhat_vex | gstreamer-plugins-good: heap-based buffer overflow while parsing malformed QuickTime media files via crafted Time-to-sample (stss) atom data | fixed: 77 | 2026-07-31T10:03:45+00:00 | Vulnerability · Source |
| CVE-2009-0387 | redhat_vex | gstreamer-plugins-good: Array index error while parsing malformed QuickTime media files via crafted Sync Sample (aka stss) atom data | fixed: 31 | 2026-07-31T10:03:32+00:00 | Vulnerability · Source |
| CVE-2009-0398 | redhat_vex | gstreamer-plugins: Array index error while parsing malformed QuickTime media files | fixed: 46 | 2026-07-31T10:03:32+00:00 | Vulnerability · Source |
| CVE-2016-9812 | redhat_vex | gstreamer1-plugins-bad-free: Out-of-bounds read in gst_mpegts_section_new | fixed: 58 known not affected: 12 | 2026-07-31T09:59:59+00:00 | Vulnerability · Source |
| CVE-2016-9809 | redhat_vex | gstreamer-plugins-bad-free: Off-by-one read in gst_h264_parse_set_caps | fixed: 116 known affected: 3 known not affected: 5 | 2026-07-31T09:59:57+00:00 | Vulnerability · Source |
| CVE-2016-9807 | redhat_vex | gstreamer-plugins-good: Invalid memory read in flx_decode_chunks | fixed: 118 known affected: 4 | 2026-07-31T09:59:56+00:00 | Vulnerability · Source |
| CVE-2026-48501 | redhat_vex | github-cli: GitHub CLI: Information disclosure via incorrect authorization header handling | known affected: 3 | 2026-07-31T09:59:37+00:00 | Vulnerability · Source |
| CVE-2026-45830 | redhat_vex | chromadb: ChromaDB: Unauthorized data manipulation due to improper authorization validation | known affected: 4 known not affected: 1 | 2026-07-31T09:59:24+00:00 | Vulnerability · Source |
| CVE-2016-9636 | redhat_vex | gstreamer-plugins-good: Heap buffer overflow in FLIC decoder | fixed: 118 known affected: 4 | 2026-07-31T09:59:13+00:00 | Vulnerability · Source |
| CVE-2016-9808 | redhat_vex | gstreamer-plugins-good: Heap buffer overflow in FLIC decoder | fixed: 118 known affected: 4 | 2026-07-31T09:58:33+00:00 | Vulnerability · Source |