VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290591 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2014-3625 | redhat_vex | Framework: directory traversal flaw | fixed: 5 known affected: 3 | 2026-08-04T22:02:24+00:00 | Vulnerability · Source |
| CVE-2014-0198 | redhat_vex | openssl: SSL_MODE_RELEASE_BUFFERS NULL pointer dereference in do_ssl3_write() | fixed: 154 known not affected: 14 | 2026-08-04T22:02:22+00:00 | Vulnerability · Source |
| CVE-2014-5355 | redhat_vex | krb5: unauthenticated denial of service in recvauth_common() and others | fixed: 165 known affected: 1 known not affected: 2 | 2026-08-04T22:02:18+00:00 | Vulnerability · Source |
| CVE-2014-0231 | redhat_vex | httpd: mod_cgid denial of service | fixed: 1170 known affected: 1 known not affected: 1 under investigation: 1 | 2026-08-04T22:02:17+00:00 | Vulnerability · Source |
| CVE-2014-0075 | redhat_vex | Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter | fixed: 150 known affected: 5 | 2026-08-04T22:02:15+00:00 | Vulnerability · Source |
| CVE-2014-3584 | redhat_vex | CXF: Denial of Service (DoS) via invalid JAX-RS SAML tokens | fixed: 1 known affected: 5 known not affected: 8 | 2026-08-04T22:02:14+00:00 | Vulnerability · Source |
| CVE-2014-3511 | redhat_vex | openssl: TLS protocol downgrade attack | fixed: 160 known not affected: 10 | 2026-08-04T22:02:10+00:00 | Vulnerability · Source |
| CVE-2014-0050 | redhat_vex | apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream | fixed: 102 known affected: 18 known not affected: 13 under investigation: 1 | 2026-08-04T22:02:05+00:00 | Vulnerability · Source |
| CVE-2014-0227 | redhat_vex | Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter | fixed: 1177 known affected: 11 | 2026-08-04T22:02:03+00:00 | Vulnerability · Source |
| CVE-2013-6430 | redhat_vex | Framework: org.spring.web.util.JavaScriptUtils.javaScriptEscape insufficient escaping of characters | fixed: 2 known affected: 4 | 2026-08-04T22:01:52+00:00 | Vulnerability · Source |
| CVE-2014-3507 | redhat_vex | openssl: DTLS memory leak from zero-length fragments | fixed: 154 known affected: 3 known not affected: 10 | 2026-08-04T22:01:51+00:00 | Vulnerability · Source |
| CVE-2014-0117 | redhat_vex | httpd: mod_proxy denial of service | fixed: 110 known not affected: 20 | 2026-08-04T22:01:48+00:00 | Vulnerability · Source |
| CVE-2014-5139 | redhat_vex | openssl: crash with SRP ciphersuite in Server Hello message | known not affected: 26 | 2026-08-04T22:01:48+00:00 | Vulnerability · Source |
| CVE-2014-3509 | redhat_vex | openssl: race condition in ssl_parse_serverhello_tlsext | fixed: 159 known not affected: 10 | 2026-08-04T22:01:45+00:00 | Vulnerability · Source |
| CVE-2014-9421 | redhat_vex | krb5: kadmind doubly frees partial deserialization results (MITKRB5-SA-2015-001) | fixed: 151 known affected: 1 known not affected: 2 | 2026-08-04T22:01:40+00:00 | Vulnerability · Source |
| CVE-2014-0002 | redhat_vex | Camel: XML eXternal Entity (XXE) flaw in XSLT component | fixed: 8 known affected: 2 | 2026-08-04T22:01:36+00:00 | Vulnerability · Source |
| CVE-2014-7810 | redhat_vex | Tomcat/JbossWeb: security manager bypass via EL expressions | fixed: 223 known affected: 5 known not affected: 4 under investigation: 3 | 2026-08-04T22:01:35+00:00 | Vulnerability · Source |
| CVE-2014-0225 | redhat_vex | Framework: Information disclosure via SSRF | fixed: 2 known affected: 6 known not affected: 3 | 2026-08-04T22:01:32+00:00 | Vulnerability · Source |
| CVE-2014-8176 | redhat_vex | OpenSSL: Invalid free in DTLS | fixed: 153 known affected: 7 known not affected: 5 | 2026-08-04T22:01:27+00:00 | Vulnerability · Source |
| CVE-2014-3523 | redhat_vex | httpd: WinNT MPM denial of service | fixed: 1 known not affected: 39 | 2026-08-04T22:01:25+00:00 | Vulnerability · Source |
| CVE-2013-6357 | redhat_vex | tomcat5: CSRF vulnerability in Manager application | known affected: 2 known not affected: 3 | 2026-08-04T22:01:25+00:00 | Vulnerability · Source |
| CVE-2014-0093 | redhat_vex | 6: JSM policy not respected by deployed applications | fixed: 321 known not affected: 4 | 2026-08-04T22:01:24+00:00 | Vulnerability · Source |
| CVE-2014-7849 | redhat_vex | Management: Limited RBAC authorization bypass | fixed: 548 known affected: 2 known not affected: 1 | 2026-08-04T22:01:18+00:00 | Vulnerability · Source |
| CVE-2014-7839 | redhat_vex | RESTeasy: External entities expanded by DocumentProvider | fixed: 552 known affected: 24 known not affected: 1 | 2026-08-04T22:01:14+00:00 | Vulnerability · Source |
| CVE-2014-5353 | redhat_vex | krb5: NULL pointer dereference when using a ticket policy name as a password policy name | fixed: 151 known affected: 1 known not affected: 2 | 2026-08-04T22:01:12+00:00 | Vulnerability · Source |
| CVE-2014-0005 | redhat_vex | PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application | fixed: 321 known affected: 5 known not affected: 3 | 2026-08-04T22:01:09+00:00 | Vulnerability · Source |
| CVE-2014-0099 | redhat_vex | Tomcat/JBossWeb: Request smuggling via malicious content length header | fixed: 150 known affected: 5 | 2026-08-04T22:01:05+00:00 | Vulnerability · Source |
| CVE-2014-3490 | redhat_vex | RESTEasy: XXE via parameter entities | fixed: 64 known affected: 7 known not affected: 1 | 2026-08-04T22:00:56+00:00 | Vulnerability · Source |
| CVE-2014-3470 | redhat_vex | openssl: client-side denial of service when using anonymous ECDH | fixed: 154 known not affected: 15 | 2026-08-04T22:00:51+00:00 | Vulnerability · Source |
| CVE-2015-3185 | redhat_vex | httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4 | fixed: 196 known affected: 1 known not affected: 21 | 2026-08-04T22:00:49+00:00 | Vulnerability · Source |
| CVE-2015-2575 | redhat_vex | mysql-connector-java: unspecified vulnerability related to Connector/J (CPU April 2015) | known affected: 5 known not affected: 1 | 2026-08-04T22:00:46+00:00 | Vulnerability · Source |
| CVE-2015-0227 | redhat_vex | wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property | fixed: 1262 known affected: 12 known not affected: 1 | 2026-08-04T22:00:41+00:00 | Vulnerability · Source |
| CVE-2014-9422 | redhat_vex | krb5: kadmind incorrectly validates server principal name (MITKRB5-SA-2015-001) | fixed: 151 known affected: 1 known not affected: 2 | 2026-08-04T22:00:38+00:00 | Vulnerability · Source |
| CVE-2015-0292 | redhat_vex | openssl: integer underflow leading to buffer overflow in base64 decoding | fixed: 201 known affected: 9 known not affected: 3 | 2026-08-04T22:00:35+00:00 | Vulnerability · Source |
| CVE-2014-9769 | redhat_vex | pcre: incorrect nested table jumps when JIT is used (8.36/6) | known not affected: 135 | 2026-08-04T22:00:32+00:00 | Vulnerability · Source |
| CVE-2015-1790 | redhat_vex | OpenSSL: PKCS7 crash with missing EnvelopedContent | fixed: 195 known affected: 7 known not affected: 3 | 2026-08-04T22:00:31+00:00 | Vulnerability · Source |
| CVE-2015-6748 | redhat_vex | jsoup: XSS vulnerability related to incomplete tags at EOF | fixed: 2 known affected: 2 | 2026-08-04T22:00:29+00:00 | Vulnerability · Source |
| CVE-2015-1832 | redhat_vex | Derby: XXE attack possible by using XmlVTI and the XML datatype | known not affected: 3 | 2026-08-04T22:00:28+00:00 | Vulnerability · Source |
| CVE-2015-1833 | redhat_vex | jackrabbit: Jackrabbit WebDAV bundle susceptible to XXE/XEE attack | known not affected: 3 | 2026-08-04T22:00:25+00:00 | Vulnerability · Source |
| CVE-2015-0264 | redhat_vex | Camel: XXE via XPath expression evaluation | fixed: 5 known affected: 2 | 2026-08-04T22:00:24+00:00 | Vulnerability · Source |
| CVE-2015-0286 | redhat_vex | openssl: invalid pointer use in ASN1_TYPE_cmp() | fixed: 159 known affected: 5 known not affected: 9 | 2026-08-04T22:00:19+00:00 | Vulnerability · Source |
| CVE-2015-0207 | redhat_vex | openssl: DTLS segmentation fault in DTLSv1_listen | known not affected: 25 | 2026-08-04T22:00:16+00:00 | Vulnerability · Source |
| CVE-2015-3193 | redhat_vex | OpenSSL: BN_mod_exp may produce incorrect results on x86_64 | known not affected: 19 | 2026-08-04T22:00:14+00:00 | Vulnerability · Source |
| CVE-2015-5253 | redhat_vex | apache-cxf: SAML SSO processing is vulnerable to wrapping attack | fixed: 1 known affected: 2 known not affected: 1 | 2026-08-04T22:00:08+00:00 | Vulnerability · Source |
| CVE-2015-1787 | redhat_vex | openssl: segmentation fault in client authentication with empty CKE and DHE | known not affected: 24 | 2026-08-04T22:00:06+00:00 | Vulnerability · Source |
| CVE-2015-1545 | redhat_vex | openldap: slapd crashes on search with deref control and empty attr list | known not affected: 16 | 2026-08-04T22:00:04+00:00 | Vulnerability · Source |
| CVE-2015-2328 | redhat_vex | pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20) | fixed: 327 known affected: 62 known not affected: 38 | 2026-08-04T22:00:01+00:00 | Vulnerability · Source |
| CVE-2015-5073 | redhat_vex | pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18) | fixed: 415 known affected: 67 known not affected: 23 | 2026-08-04T22:00:01+00:00 | Vulnerability · Source |
| CVE-2015-0208 | redhat_vex | openssl: segmentation fault for invalid PSS parameters | known not affected: 25 | 2026-08-04T21:59:59+00:00 | Vulnerability · Source |
| CVE-2015-2327 | redhat_vex | pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19) | fixed: 333 known affected: 67 known not affected: 33 | 2026-08-04T21:59:51+00:00 | Vulnerability · Source |