VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288717 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-65423 | redhat_vex | open62541: open62541: Out-of-bounds write via integer overflow | known not affected: 1 | 2026-07-31T14:58:37+00:00 | Vulnerability · Source |
| CVE-2026-63035 | redhat_vex | open62541: open62541: Arbitrary Code Execution via Use After Free in TransferSubscriptions Service | known not affected: 1 | 2026-07-31T14:58:34+00:00 | Vulnerability · Source |
| CVE-2026-63559 | redhat_vex | open62541: open62541: Information disclosure via integer overflow | known not affected: 1 | 2026-07-31T14:58:30+00:00 | Vulnerability · Source |
| CVE-2026-9546 | redhat_vex | libcurl: libcurl: Information disclosure due to persistent Referer header | fixed: 7 known not affected: 42 under investigation: 60 | 2026-07-31T14:50:22+00:00 | Vulnerability · Source |
| CVE-2024-12224 | redhat_vex | idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded | fixed: 267 known affected: 71 known not affected: 287 | 2026-07-31T14:36:35+00:00 | Vulnerability · Source |
| CVE-2026-16768 | redhat_vex | gdk-pixbuf: out-of-bounds read in ICO parser | known affected: 21 | 2026-07-31T14:03:34+00:00 | Vulnerability · Source |
| CVE-2026-63807 | redhat_vex | kernel: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level | fixed: 307 known affected: 232 known not affected: 42 | 2026-07-31T14:01:14+00:00 | Vulnerability · Source |
| CVE-2026-9080 | redhat_vex | libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback | fixed: 7 known not affected: 42 under investigation: 60 | 2026-07-31T13:58:34+00:00 | Vulnerability · Source |
| CVE-2026-16615 | redhat_vex | librest: weak random number generation in PKCE implementation | fixed: 33 | 2026-07-31T13:58:27+00:00 | Vulnerability · Source |
| CVE-2023-3637 | redhat_vex | openstack-neutron: unrestricted creation of security groups (fix for CVE-2022-3277) | fixed: 11 known affected: 11 known not affected: 38 | 2026-07-31T13:28:53+00:00 | Vulnerability · Source |
| CVE-2023-6110 | redhat_vex | openstack: deleting a non existing access rule deletes another existing access rule in it's scope | fixed: 12 known affected: 7 | 2026-07-31T13:28:46+00:00 | Vulnerability · Source |
| CVE-2023-1625 | redhat_vex | openstack-heat: information leak in API | known affected: 20 | 2026-07-31T13:28:42+00:00 | Vulnerability · Source |
| CVE-2026-46113 | redhat_vex | kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN | fixed: 1085 known affected: 22 known not affected: 42 | 2026-07-31T13:20:38+00:00 | Vulnerability · Source |
| CVE-2026-46116 | redhat_vex | kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete | fixed: 2085 known affected: 22 under investigation: 14 | 2026-07-31T13:20:27+00:00 | Vulnerability · Source |
| CVE-2019-14433 | redhat_vex | openstack-nova: Nova server resource faults leak external exception details | fixed: 52 known affected: 17 known not affected: 15 | 2026-07-31T13:11:03+00:00 | Vulnerability · Source |
| CVE-2019-10876 | redhat_vex | openstack-neutron: DOS via broken port range merging in security group | fixed: 22 known not affected: 59 | 2026-07-31T13:09:43+00:00 | Vulnerability · Source |
| CVE-2018-16856 | redhat_vex | openstack-octavia: Private keys written to world-readable log files | fixed: 26 known affected: 10 | 2026-07-31T13:09:39+00:00 | Vulnerability · Source |
| CVE-2019-19687 | redhat_vex | openstack-keystone: Credentials API allows non-admin to list and retrieve all users credentials | fixed: 6 known not affected: 2610 | 2026-07-31T13:06:40+00:00 | Vulnerability · Source |
| CVE-2019-9735 | redhat_vex | openstack-neutron: incorrect validation of port settings in iptables security group driver | fixed: 42 known not affected: 47 | 2026-07-31T13:03:36+00:00 | Vulnerability · Source |
| CVE-2017-2673 | redhat_vex | openstack-keystone: Incorrect role assignment with federated Keystone | fixed: 8 known affected: 1 known not affected: 7 | 2026-07-31T12:58:36+00:00 | Vulnerability · Source |
| CVE-2016-8611 | redhat_vex | openstack-glance: Glance Image service v1 and v2 api image-create vulnerability | known affected: 16 | 2026-07-31T12:53:48+00:00 | Vulnerability · Source |
| CVE-2013-2255 | redhat_vex | openstack-*: Inconsistent and non-validating HTTPS client | known affected: 4 | 2026-07-31T12:33:29+00:00 | Vulnerability · Source |
| CVE-2017-2592 | redhat_vex | python-oslo-middleware: CatchErrors leaks sensitive values into error logs | fixed: 7 known not affected: 10 | 2026-07-31T12:16:18+00:00 | Vulnerability · Source |
| CVE-2026-45831 | redhat_vex | ChromaDB: ChromaDB: Unauthorized cross-tenant actions due to improper authorization checks | known affected: 4 known not affected: 1 | 2026-07-31T12:11:49+00:00 | Vulnerability · Source |
| CVE-2014-5251 | redhat_vex | openstack-keystone: revocation events are broken with mysql | fixed: 8 known not affected: 1 | 2026-07-31T11:51:44+00:00 | Vulnerability · Source |
| CVE-2014-5252 | redhat_vex | openstack-keystone: token expiration date stored incorrectly | fixed: 8 known not affected: 1 | 2026-07-31T11:51:42+00:00 | Vulnerability · Source |
| CVE-2013-1838 | redhat_vex | Nova: DoS by allocating all Fixed IPs | fixed: 13 | 2026-07-31T11:51:36+00:00 | Vulnerability · Source |
| CVE-2014-5253 | redhat_vex | openstack-keystone: domain-scoped tokens don't get revoked | fixed: 8 known not affected: 1 | 2026-07-31T11:51:34+00:00 | Vulnerability · Source |
| CVE-2014-0157 | redhat_vex | openstack-horizon: XSS in Horizon orchestration dashboard when using a malicious template | fixed: 5 known affected: 1 | 2026-07-31T11:51:31+00:00 | Vulnerability · Source |
| CVE-2013-4497 | redhat_vex | openstack-nova: XenAPI security groups not kept through migrate or resize | fixed: 14 known affected: 1 | 2026-07-31T11:51:27+00:00 | Vulnerability · Source |
| CVE-2015-5251 | redhat_vex | openstack-glance allows illegal modification of image status | fixed: 16 | 2026-07-31T11:51:20+00:00 | Vulnerability · Source |
| CVE-2014-8333 | redhat_vex | openstack-nova: Nova VMware instance in resize state may leak | fixed: 32 known affected: 1 | 2026-07-31T11:51:19+00:00 | Vulnerability · Source |
| CVE-2014-6414 | redhat_vex | openstack-neutron: Admin-only network attributes may be reset to defaults by non-privileged users | fixed: 71 | 2026-07-31T11:51:14+00:00 | Vulnerability · Source |
| CVE-2014-3641 | redhat_vex | openstack-cinder: Cinder-volume host data leak to virtual machine instance | fixed: 8 known affected: 1 | 2026-07-31T11:51:13+00:00 | Vulnerability · Source |
| CVE-2014-3708 | redhat_vex | openstack-nova: Nova network denial of service through API filtering | fixed: 32 known affected: 1 | 2026-07-31T11:51:09+00:00 | Vulnerability · Source |
| CVE-2015-3646 | redhat_vex | openstack-keystone: cache backend password leak in log (OSSA 2015-008) | known affected: 1 known not affected: 2 | 2026-07-31T11:47:20+00:00 | Vulnerability · Source |
| CVE-2014-3475 | redhat_vex | openstack-horizon: multiple XSS flaws | fixed: 10 known affected: 1 | 2026-07-31T11:47:16+00:00 | Vulnerability · Source |
| CVE-2014-3497 | redhat_vex | openstack-swift: XSS in Swift requests through WWW-Authenticate header | fixed: 10 known not affected: 2 | 2026-07-31T11:47:14+00:00 | Vulnerability · Source |
| CVE-2014-7821 | redhat_vex | openstack-neutron: DoS via maliciously crafted dns_nameservers | fixed: 67 | 2026-07-31T11:47:09+00:00 | Vulnerability · Source |
| CVE-2013-6491 | redhat_vex | nova: qpid SSL configuration | fixed: 42 known not affected: 1 | 2026-07-31T11:47:06+00:00 | Vulnerability · Source |
| CVE-2013-4111 | redhat_vex | OpenStack: python-glanceclient failing SSL certificate check | fixed: 2 known affected: 1 | 2026-07-31T11:47:02+00:00 | Vulnerability · Source |
| CVE-2014-3555 | redhat_vex | openstack-neutron: Denial of Service in Neutron allowed address pair | fixed: 63 | 2026-07-31T11:46:58+00:00 | Vulnerability · Source |
| CVE-2014-1948 | redhat_vex | openstack-glance: Glance Swift store backend password leak | fixed: 4 known not affected: 1 | 2026-07-31T11:46:54+00:00 | Vulnerability · Source |
| CVE-2014-3594 | redhat_vex | openstack-horizon: persistent XSS in Horizon Host Aggregates interface | fixed: 15 known affected: 1 | 2026-07-31T11:46:50+00:00 | Vulnerability · Source |
| CVE-2013-2104 | redhat_vex | Keystone: Missing expiration check in Keystone PKI token validation | fixed: 3 | 2026-07-31T11:46:44+00:00 | Vulnerability · Source |
| CVE-2014-0167 | redhat_vex | openstack-nova: RBAC policy not properly enforced in Nova EC2 API | fixed: 15 known affected: 2 | 2026-07-31T11:46:43+00:00 | Vulnerability · Source |
| CVE-2013-6470 | redhat_vex | foreman-installer: insecure defaults | fixed: 2 known affected: 1 | 2026-07-31T11:46:42+00:00 | Vulnerability · Source |
| CVE-2014-3801 | redhat_vex | openstack-heat: authenticated information leak in Heat | fixed: 6 known affected: 1 | 2026-07-31T11:46:36+00:00 | Vulnerability · Source |
| CVE-2013-2161 | redhat_vex | Swift: Unchecked user input in Swift XML responses | fixed: 7 known affected: 1 | 2026-07-31T11:46:33+00:00 | Vulnerability · Source |
| CVE-2014-0187 | redhat_vex | openstack-neutron: security groups bypass through invalid CIDR | fixed: 19 | 2026-07-31T11:46:27+00:00 | Vulnerability · Source |