VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291904 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2014-3581 | redhat_vex | httpd: NULL pointer dereference in mod_cache if Content-Type has empty value | fixed: 229 known not affected: 21 | 2026-08-04T23:17:16+00:00 | Vulnerability · Source |
| CVE-2014-0119 | redhat_vex | Tomcat/JBossWeb: XML parser hijack by malicious web application | fixed: 298 known affected: 5 | 2026-08-04T23:17:15+00:00 | Vulnerability · Source |
| CVE-2014-3572 | redhat_vex | openssl: ECDH downgrade bug fix | fixed: 144 known affected: 1 known not affected: 9 | 2026-08-04T23:17:13+00:00 | Vulnerability · Source |
| CVE-2014-3558 | redhat_vex | Validator: JSM bypass via ReflectionHelper | fixed: 621 known affected: 10 known not affected: 6 | 2026-08-04T23:17:10+00:00 | Vulnerability · Source |
| CVE-2014-7827 | redhat_vex | Security: Wrong security context loaded when using SAML2 STS Login Module | fixed: 549 known affected: 12 | 2026-08-04T23:17:07+00:00 | Vulnerability · Source |
| CVE-2014-3472 | redhat_vex | Security: Invalid EJB caller role check implementation | fixed: 762 known not affected: 4 | 2026-08-04T23:17:05+00:00 | Vulnerability · Source |
| CVE-2014-0058 | redhat_vex | EAP6: Plain text password logging during security audit | fixed: 12 known affected: 1 known not affected: 1 | 2026-08-04T23:17:01+00:00 | Vulnerability · Source |
| CVE-2014-8109 | redhat_vex | httpd: LuaAuthzProvider argument handling issue | known affected: 19 known not affected: 20 | 2026-08-04T23:16:58+00:00 | Vulnerability · Source |
| CVE-2014-0230 | redhat_vex | tomcat: non-persistent DoS attack by feeding data by aborting an upload | fixed: 782 known affected: 11 known not affected: 11 under investigation: 2 | 2026-08-04T23:16:55+00:00 | Vulnerability · Source |
| CVE-2015-3198 | redhat_vex | JBOSS: JSP source code leak when a slash added at the end of the URL | known not affected: 1 | 2026-08-04T23:16:53+00:00 | Vulnerability · Source |
| CVE-2015-3196 | redhat_vex | OpenSSL: Race condition handling PSK identify hint | fixed: 152 known affected: 2 known not affected: 9 | 2026-08-04T23:16:51+00:00 | Vulnerability · Source |
| CVE-2015-1791 | redhat_vex | OpenSSL: Race condition handling NewSessionTicket | fixed: 152 known affected: 5 known not affected: 5 | 2026-08-04T23:16:49+00:00 | Vulnerability · Source |
| CVE-2015-0205 | redhat_vex | openssl: DH client certificates accepted without verification | fixed: 144 known affected: 1 known not affected: 9 | 2026-08-04T23:16:47+00:00 | Vulnerability · Source |
| CVE-2015-0290 | redhat_vex | openssl: multiblock corrupted pointer | known not affected: 25 | 2026-08-04T23:16:43+00:00 | Vulnerability · Source |
| CVE-2015-3194 | redhat_vex | OpenSSL: Certificate verify crash with missing PSS parameter | fixed: 152 known affected: 8 known not affected: 3 | 2026-08-04T23:16:39+00:00 | Vulnerability · Source |
| CVE-2015-0886 | redhat_vex | jBCrypt: integer overflow in the crypt_raw method | known not affected: 1 under investigation: 1 | 2026-08-04T23:16:37+00:00 | Vulnerability · Source |
| CVE-2015-0228 | redhat_vex | httpd: Possible mod_lua crash due to websocket bug | fixed: 70 known not affected: 31 | 2026-08-04T23:16:35+00:00 | Vulnerability · Source |
| CVE-2015-1794 | redhat_vex | OpenSSL: Anon DH ServerKeyExchange with 0 p parameter | known not affected: 21 | 2026-08-04T23:16:34+00:00 | Vulnerability · Source |
| CVE-2015-3216 | redhat_vex | openssl: Crash in ssleay_rand_bytes due to locking regression | fixed: 153 known affected: 1 known not affected: 3 | 2026-08-04T23:16:31+00:00 | Vulnerability · Source |
| CVE-2015-0287 | redhat_vex | openssl: ASN.1 structure reuse memory corruption | fixed: 201 known affected: 9 known not affected: 3 | 2026-08-04T23:16:29+00:00 | Vulnerability · Source |
| CVE-2015-5174 | redhat_vex | tomcat: URL Normalization issue | fixed: 525 known affected: 20 | 2026-08-04T23:16:25+00:00 | Vulnerability · Source |
| CVE-2015-0288 | redhat_vex | openssl: X509_to_X509_REQ NULL pointer dereference | fixed: 280 known affected: 9 known not affected: 2 | 2026-08-04T23:16:24+00:00 | Vulnerability · Source |
| CVE-2015-0209 | redhat_vex | openssl: use-after-free on invalid EC private key import | fixed: 160 known affected: 4 known not affected: 10 | 2026-08-04T23:16:22+00:00 | Vulnerability · Source |
| CVE-2015-0253 | redhat_vex | httpd: NULL pointer dereference crash with ErrorDocument 400 pointing to a local URL-path | fixed: 70 known not affected: 31 | 2026-08-04T23:16:20+00:00 | Vulnerability · Source |
| CVE-2015-0289 | redhat_vex | openssl: PKCS7 NULL pointer dereference | fixed: 201 known affected: 8 known not affected: 4 | 2026-08-04T23:16:17+00:00 | Vulnerability · Source |
| CVE-2015-1849 | redhat_vex | EAP: LDAP bind password is being logged with TRACE log level | fixed: 439 known affected: 5 | 2026-08-04T23:16:15+00:00 | Vulnerability · Source |
| CVE-2015-0285 | redhat_vex | openssl: handshake with unseeded PRNG | known not affected: 25 | 2026-08-04T23:16:14+00:00 | Vulnerability · Source |
| CVE-2016-2176 | redhat_vex | openssl: EBCDIC overread in X509_NAME_oneline() | known not affected: 23 | 2026-08-04T23:16:11+00:00 | Vulnerability · Source |
| CVE-2015-8387 | redhat_vex | pcre: Integer overflow in subroutine calls (8.38/8) | known affected: 124 known not affected: 11 | 2026-08-04T23:16:08+00:00 | Vulnerability · Source |
| CVE-2016-0798 | redhat_vex | OpenSSL: Avoid memory leak in SRP | known not affected: 20 | 2026-08-04T23:16:05+00:00 | Vulnerability · Source |
| CVE-2016-0702 | redhat_vex | OpenSSL: Side channel attack on modular exponentiation | fixed: 156 known affected: 9 known not affected: 2 | 2026-08-04T23:16:04+00:00 | Vulnerability · Source |
| CVE-2016-2180 | redhat_vex | OpenSSL: OOB read in TS_OBJ_print_bio() | fixed: 151 known not affected: 12 | 2026-08-04T23:16:00+00:00 | Vulnerability · Source |
| CVE-2016-5004 | redhat_vex | xmlrpc: DoS through decompression-bomb attack when Content-Encoding=gzip | known affected: 24 known not affected: 2 | 2026-08-04T23:15:58+00:00 | Vulnerability · Source |
| CVE-2015-8390 | redhat_vex | pcre: uninitialized memory read triggered by malformed posix character class (8.38/22) | known affected: 118 known not affected: 17 | 2026-08-04T23:15:56+00:00 | Vulnerability · Source |
| CVE-2016-5018 | redhat_vex | tomcat: security manager bypass via IntrospectHelper utility function | fixed: 630 known affected: 35 | 2026-08-04T23:15:52+00:00 | Vulnerability · Source |
| CVE-2016-3120 | redhat_vex | krb5: S4U2Self KDC crash when anon is restricted | fixed: 96 known affected: 8 known not affected: 5 | 2026-08-04T23:15:51+00:00 | Vulnerability · Source |
| CVE-2015-8629 | redhat_vex | krb5: xdr_nullstring() doesn't check for terminating null character | fixed: 158 known affected: 1 known not affected: 1 | 2026-08-04T23:15:49+00:00 | Vulnerability · Source |
| CVE-2015-8380 | redhat_vex | pcre: OOB write when pcre_exec() is called with ovecsize of 1 (8.38/10) | known affected: 6 known not affected: 129 | 2026-08-04T23:15:46+00:00 | Vulnerability · Source |
| CVE-2015-8630 | redhat_vex | krb5: krb5 doesn't check for null policy when KADM5_POLICY is set in the mask | fixed: 75 known not affected: 10 | 2026-08-04T23:15:44+00:00 | Vulnerability · Source |
| CVE-2016-5017 | redhat_vex | zookeeper: Buffer overflow vulnerability in C cli shell | known not affected: 6 | 2026-08-04T23:15:42+00:00 | Vulnerability · Source |
| CVE-2016-6307 | redhat_vex | openssl: excessive allocation of memory in tls_get_message_header() | known not affected: 23 | 2026-08-04T23:15:39+00:00 | Vulnerability · Source |
| CVE-2016-0797 | redhat_vex | OpenSSL: BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption | fixed: 199 known affected: 3 known not affected: 2 | 2026-08-04T23:15:38+00:00 | Vulnerability · Source |
| CVE-2016-6345 | redhat_vex | RESTEasy: Insufficient use of random values in RESTEasy async jobs could lead to loss of data confidentiality | known affected: 28 known not affected: 4 under investigation: 1 | 2026-08-04T23:15:34+00:00 | Vulnerability · Source |
| CVE-2016-2842 | redhat_vex | openssl: doapr_outch function does not verify that certain memory allocation succeeds | fixed: 194 known affected: 10 known not affected: 1 | 2026-08-04T23:15:33+00:00 | Vulnerability · Source |
| CVE-2015-8386 | redhat_vex | pcre: Buffer overflow caused by lookbehind assertion (8.38/6) | fixed: 415 known affected: 79 known not affected: 11 | 2026-08-04T23:15:30+00:00 | Vulnerability · Source |
| CVE-2016-0705 | redhat_vex | OpenSSL: Double-free in DSA code | fixed: 248 known affected: 3 known not affected: 8 | 2026-08-04T23:15:26+00:00 | Vulnerability · Source |
| CVE-2015-8394 | redhat_vex | pcre: Integer overflow caused by missing check for certain conditions (8.38/31) | known affected: 124 known not affected: 11 | 2026-08-04T23:15:24+00:00 | Vulnerability · Source |
| CVE-2016-0762 | redhat_vex | tomcat: timing attack in Realm implementation | fixed: 149 known affected: 34 known not affected: 2 | 2026-08-04T23:15:23+00:00 | Vulnerability · Source |
| CVE-2016-3119 | redhat_vex | krb5: null pointer dereference in kadmin | fixed: 96 known affected: 9 known not affected: 1 | 2026-08-04T23:15:14+00:00 | Vulnerability · Source |
| CVE-2016-2109 | redhat_vex | openssl: ASN.1 BIO handling of large amounts of data | fixed: 195 known affected: 11 known not affected: 2 | 2026-08-04T23:15:12+00:00 | Vulnerability · Source |