VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288719 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2013-6470 | redhat_vex | foreman-installer: insecure defaults | fixed: 2 known affected: 1 | 2026-07-31T11:46:42+00:00 | Vulnerability · Source |
| CVE-2014-3801 | redhat_vex | openstack-heat: authenticated information leak in Heat | fixed: 6 known affected: 1 | 2026-07-31T11:46:36+00:00 | Vulnerability · Source |
| CVE-2013-2161 | redhat_vex | Swift: Unchecked user input in Swift XML responses | fixed: 7 known affected: 1 | 2026-07-31T11:46:33+00:00 | Vulnerability · Source |
| CVE-2014-0187 | redhat_vex | openstack-neutron: security groups bypass through invalid CIDR | fixed: 19 | 2026-07-31T11:46:27+00:00 | Vulnerability · Source |
| CVE-2013-4354 | redhat_vex | OpenStack: Glance image creation in other tenant accounts | known affected: 2 | 2026-07-31T11:46:24+00:00 | Vulnerability · Source |
| CVE-2013-4278 | redhat_vex | OpenStack: Nova private flavors resource limit circumvention incomplete fix for CVE-2013-2256 | known not affected: 2 | 2026-07-31T11:46:22+00:00 | Vulnerability · Source |
| CVE-2013-4202 | redhat_vex | OpenStack: Cinder Denial of Service using XML entities | fixed: 4 known affected: 1 | 2026-07-31T11:46:22+00:00 | Vulnerability · Source |
| CVE-2013-4179 | redhat_vex | OpenStack: Nova XML entities DoS | fixed: 14 known affected: 1 | 2026-07-31T11:46:18+00:00 | Vulnerability · Source |
| CVE-2013-4185 | redhat_vex | OpenStack: Nova network source security groups denial of service | fixed: 14 known affected: 1 | 2026-07-31T11:46:12+00:00 | Vulnerability · Source |
| CVE-2013-4471 | redhat_vex | OpenStack: python-django-horizonpassword reset vulnerability | known affected: 2 | 2026-07-31T11:46:12+00:00 | Vulnerability · Source |
| CVE-2014-3473 | redhat_vex | openstack-horizon: multiple XSS flaws | fixed: 10 known affected: 1 | 2026-07-31T11:46:08+00:00 | Vulnerability · Source |
| CVE-2013-2096 | redhat_vex | Nova: fails to verify image virtual size denial of service | known affected: 1 | 2026-07-31T11:46:05+00:00 | Vulnerability · Source |
| CVE-2013-4477 | redhat_vex | openstack-keystone: unintentional role granting with Keystone LDAP backend | fixed: 4 known affected: 1 | 2026-07-31T11:46:02+00:00 | Vulnerability · Source |
| CVE-2014-2828 | redhat_vex | openstack-keystone: denial of service via V3 API authentication chaining | fixed: 4 known affected: 1 | 2026-07-31T11:45:59+00:00 | Vulnerability · Source |
| CVE-2013-4261 | redhat_vex | OpenStack: openstack-nova-compute console-log DoS | fixed: 14 known affected: 1 | 2026-07-31T11:45:55+00:00 | Vulnerability · Source |
| CVE-2013-7130 | redhat_vex | nova: Live migration can leak root disk into ephemeral storage | fixed: 29 | 2026-07-31T11:45:52+00:00 | Vulnerability · Source |
| CVE-2014-0134 | redhat_vex | openstack-nova: Nova host data leak to vm instance in rescue mode | fixed: 15 known affected: 2 | 2026-07-31T11:45:49+00:00 | Vulnerability · Source |
| CVE-2013-6428 | redhat_vex | Heat: ReST API doesn't respect tenant scoping | fixed: 6 known affected: 1 | 2026-07-31T11:45:46+00:00 | Vulnerability · Source |
| CVE-2013-4463 | redhat_vex | Nova: Compressed disk image DoS | fixed: 14 known affected: 1 | 2026-07-31T11:45:45+00:00 | Vulnerability · Source |
| CVE-2014-3621 | redhat_vex | openstack-keystone: configuration data information leak through Keystone catalog | fixed: 12 | 2026-07-31T11:45:42+00:00 | Vulnerability · Source |
| CVE-2013-4222 | redhat_vex | OpenStack: Keystone disabling a tenant does not disable a user token | fixed: 4 known affected: 1 | 2026-07-31T11:42:43+00:00 | Vulnerability · Source |
| CVE-2014-2237 | redhat_vex | openstack-keystone: trustee token revocation does not work with memcache backend | fixed: 8 | 2026-07-31T11:42:39+00:00 | Vulnerability · Source |
| CVE-2013-4155 | redhat_vex | OpenStack: Swift Denial of Service using superfluous object tombstones | fixed: 7 known affected: 1 | 2026-07-31T11:42:36+00:00 | Vulnerability · Source |
| CVE-2014-0056 | redhat_vex | openstack-neutron: insufficient authorization checks when creating ports | fixed: 19 known affected: 1 known not affected: 1 | 2026-07-31T11:42:34+00:00 | Vulnerability · Source |
| CVE-2013-6858 | redhat_vex | openstack: horizon multiple XSS vulnerabilities. | fixed: 4 known affected: 1 | 2026-07-31T11:42:27+00:00 | Vulnerability · Source |
| CVE-2013-6437 | redhat_vex | openstack-nova: DoS through ephemeral disk backing files | fixed: 15 known affected: 1 | 2026-07-31T11:42:24+00:00 | Vulnerability · Source |
| CVE-2014-4167 | redhat_vex | openstack-neutron: L3-agent denial of service through IPv6 subnet | fixed: 19 known affected: 1 | 2026-07-31T11:42:21+00:00 | Vulnerability · Source |
| CVE-2014-5356 | redhat_vex | openstack-glance: Glance store disk space exhaustion | fixed: 12 | 2026-07-31T11:42:16+00:00 | Vulnerability · Source |
| CVE-2013-4294 | redhat_vex | OpenStack: Keystone Token revocation failure using Keystone memcache/KVS backends | fixed: 4 known affected: 1 | 2026-07-31T11:42:12+00:00 | Vulnerability · Source |
| CVE-2013-2256 | redhat_vex | OpenStack: Nova private flavors resource limit circumvention | fixed: 14 known affected: 1 | 2026-07-31T11:42:09+00:00 | Vulnerability · Source |
| CVE-2013-4428 | redhat_vex | Glance: image_download policy not enforced for cached images | fixed: 4 known affected: 1 | 2026-07-31T11:42:06+00:00 | Vulnerability · Source |
| CVE-2014-3474 | redhat_vex | openstack-horizon: multiple XSS flaws | fixed: 10 known affected: 1 | 2026-07-31T11:42:03+00:00 | Vulnerability · Source |
| CVE-2013-4183 | redhat_vex | OpenStack: Cinder LVM volume driver does not support secure deletion | fixed: 4 known affected: 1 | 2026-07-31T11:41:58+00:00 | Vulnerability · Source |
| CVE-2014-8578 | redhat_vex | openstack-horizon: multiple XSS flaws | fixed: 10 known affected: 1 | 2026-07-31T11:41:53+00:00 | Vulnerability · Source |
| CVE-2014-3517 | redhat_vex | openstack-nova: timing attack issue allows access to other instances' configuration information | fixed: 30 known affected: 1 | 2026-07-31T11:41:50+00:00 | Vulnerability · Source |
| CVE-2013-6419 | redhat_vex | Nova: Metadata queries from Neutron to Nova are not restricted by tenant | fixed: 34 | 2026-07-31T11:41:44+00:00 | Vulnerability · Source |
| CVE-2015-3219 | redhat_vex | python-django-horizon: XSS in Heat stack creation | fixed: 5 known not affected: 7 | 2026-07-31T11:41:40+00:00 | Vulnerability · Source |
| CVE-2014-0006 | redhat_vex | Swift: TempURL timing attack | fixed: 14 | 2026-07-31T11:41:35+00:00 | Vulnerability · Source |
| CVE-2013-6426 | redhat_vex | Heat: CFN policy rules not all enforced | fixed: 6 known affected: 1 | 2026-07-31T11:41:27+00:00 | Vulnerability · Source |
| CVE-2013-2167 | redhat_vex | python-keystoneclient: middleware memcache encryption and signing bypass | fixed: 3 | 2026-07-31T11:41:24+00:00 | Vulnerability · Source |
| CVE-2014-4615 | redhat_vex | pycadf: token leak to message queue | fixed: 8 known affected: 3 known not affected: 3 | 2026-07-31T11:41:20+00:00 | Vulnerability · Source |
| CVE-2014-0105 | redhat_vex | python-keystoneclient: Potential context confusion in Keystone middleware | fixed: 13 | 2026-07-31T11:41:16+00:00 | Vulnerability · Source |
| CVE-2014-0071 | redhat_vex | PackStack: Neutron Security Groups fail to block network traffic | fixed: 3 known affected: 1 | 2026-07-31T11:41:14+00:00 | Vulnerability · Source |
| CVE-2014-3476 | redhat_vex | openstack-keystone: privilege escalation through trust chained delegation | fixed: 8 known affected: 1 | 2026-07-31T11:41:10+00:00 | Vulnerability · Source |
| CVE-2013-2157 | redhat_vex | openstack-keystone: Authentication bypass when using LDAP backend | fixed: 8 | 2026-07-31T11:41:07+00:00 | Vulnerability · Source |
| CVE-2014-0162 | redhat_vex | openstack-glance: remote code execution in Glance Sheepdog backend | fixed: 4 known affected: 1 known not affected: 1 | 2026-07-31T11:40:55+00:00 | Vulnerability · Source |
| CVE-2015-0259 | redhat_vex | openstack-nova: console Cross-Site WebSocket hijacking | fixed: 48 known affected: 1 | 2026-07-31T11:38:50+00:00 | Vulnerability · Source |
| CVE-2020-13558 | redhat_vex | webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution | fixed: 59 known affected: 9 known not affected: 379 | 2026-07-31T11:29:27+00:00 | Vulnerability · Source |
| CVE-2023-39928 | redhat_vex | webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports | fixed: 105 known affected: 9 | 2026-07-31T11:29:23+00:00 | Vulnerability · Source |
| CVE-2023-6185 | redhat_vex | libreoffice: Improper Input Validation leading to arbitrary gstreamer plugin execution | fixed: 4468 known affected: 487 | 2026-07-31T11:24:15+00:00 | Vulnerability · Source |