VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291904 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-15026 | redhat_vex | dd-plist: XXE attack | known not affected: 10 | 2026-08-04T23:15:07+00:00 | Vulnerability · Source |
| CVE-2016-6308 | redhat_vex | openssl: excessive allocation of memory in dtls1_preprocess_fragment() | known not affected: 23 | 2026-08-04T23:15:04+00:00 | Vulnerability · Source |
| CVE-2016-8740 | redhat_vex | httpd: Incomplete handling of LimitRequestFields directive in mod_http2 | fixed: 123 known not affected: 32 | 2026-08-04T23:15:01+00:00 | Vulnerability · Source |
| CVE-2016-6797 | redhat_vex | tomcat: unrestricted access to global resources | fixed: 149 known affected: 34 known not affected: 2 | 2026-08-04T23:14:59+00:00 | Vulnerability · Source |
| CVE-2017-14159 | redhat_vex | openldap: Privilege escalation via PID file manipulation | known not affected: 19 | 2026-08-04T23:14:55+00:00 | Vulnerability · Source |
| CVE-2016-6796 | redhat_vex | tomcat: security manager bypass via JSP Servlet config parameters | fixed: 630 known affected: 34 known not affected: 1 | 2026-08-04T23:14:49+00:00 | Vulnerability · Source |
| CVE-2017-15706 | redhat_vex | tomcat: Incorrect documentation of CGI Servlet search algorithm may lead to misconfiguration | known not affected: 56 | 2026-08-04T23:14:46+00:00 | Vulnerability · Source |
| CVE-2016-9843 | redhat_vex | zlib: Big-endian out-of-bounds pointer | fixed: 482 known not affected: 18 | 2026-08-04T23:14:43+00:00 | Vulnerability · Source |
| CVE-2016-9586 | redhat_vex | curl: printf floating point buffer overflow | fixed: 336 known affected: 18 known not affected: 1 | 2026-08-04T23:14:40+00:00 | Vulnerability · Source |
| CVE-2016-9841 | redhat_vex | zlib: Out-of-bounds pointer arithmetic in inffast.c | fixed: 482 known not affected: 18 | 2026-08-04T23:14:36+00:00 | Vulnerability · Source |
| CVE-2017-11164 | redhat_vex | pcre: OP_KETRMAX feature in the match function in pcre_exec.c | known affected: 114 known not affected: 6 | 2026-08-04T23:14:31+00:00 | Vulnerability · Source |
| CVE-2017-15715 | redhat_vex | httpd: <FilesMatch> bypass with a trailing newline in the file name | fixed: 544 known affected: 9 known not affected: 17 | 2026-08-04T23:14:26+00:00 | Vulnerability · Source |
| CVE-2016-6794 | redhat_vex | tomcat: system property disclosure | fixed: 149 known affected: 34 known not affected: 2 | 2026-08-04T23:14:17+00:00 | Vulnerability · Source |
| CVE-2016-9842 | redhat_vex | zlib: Undefined left shift of negative number | fixed: 482 known not affected: 18 | 2026-08-04T23:14:15+00:00 | Vulnerability · Source |
| CVE-2017-1000101 | redhat_vex | curl: URL globbing out of bounds read | fixed: 336 known affected: 10 known not affected: 15 | 2026-08-04T23:14:11+00:00 | Vulnerability · Source |
| CVE-2017-15709 | redhat_vex | activemq-openwire-generator: Information Exposure in ActiveMQ | known affected: 1 known not affected: 1 | 2026-08-04T23:14:07+00:00 | Vulnerability · Source |
| CVE-2017-18258 | redhat_vex | libxml2: Unrestricted memory usage in xz_head() function in xzlib.c | fixed: 79 known affected: 4 known not affected: 11 | 2026-08-04T23:14:03+00:00 | Vulnerability · Source |
| CVE-2017-12165 | redhat_vex | undertow: improper whitespace parsing leading to potential HTTP request smuggling | fixed: 985 known affected: 1 known not affected: 4 | 2026-08-04T23:14:00+00:00 | Vulnerability · Source |
| CVE-2017-16231 | redhat_vex | pcre: self-recursive call in match() in pcre_exec.c leads to denial of service | known not affected: 108 | 2026-08-04T23:13:56+00:00 | Vulnerability · Source |
| CVE-2016-7055 | redhat_vex | openssl: Carry propagating bug in Montgomery multiplication | fixed: 169 known affected: 3 known not affected: 21 | 2026-08-04T23:13:53+00:00 | Vulnerability · Source |
| CVE-2016-6348 | redhat_vex | RESTEasy: Use of JacksonJsonpInterceptor in RESTEasy can lead to Cross Site Script Inclusion attack | known affected: 26 known not affected: 4 under investigation: 3 | 2026-08-04T23:13:49+00:00 | Vulnerability · Source |
| CVE-2017-7244 | redhat_vex | pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c) | fixed: 1 known affected: 112 known not affected: 7 | 2026-08-04T23:13:46+00:00 | Vulnerability · Source |
| CVE-2017-7245 | redhat_vex | pcre: stack-based buffer overflow write in pcre32_copy_substring | fixed: 1 known affected: 112 known not affected: 7 | 2026-08-04T23:13:43+00:00 | Vulnerability · Source |
| CVE-2017-7246 | redhat_vex | pcre: stack-based buffer overflow write in pcre32_copy_substring | fixed: 1 known affected: 112 known not affected: 7 | 2026-08-04T23:13:39+00:00 | Vulnerability · Source |
| CVE-2017-7376 | redhat_vex | libxml2: Incorrect limit used for port values | known not affected: 23 | 2026-08-04T23:13:38+00:00 | Vulnerability · Source |
| CVE-2018-0735 | redhat_vex | openssl: timing side channel attack in the ECDSA signature generation | fixed: 144 known affected: 6 known not affected: 15 | 2026-08-04T23:13:34+00:00 | Vulnerability · Source |
| CVE-2018-1301 | redhat_vex | httpd: Out of bounds access after failure in reading the HTTP request | fixed: 544 known affected: 11 known not affected: 15 | 2026-08-04T23:13:34+00:00 | Vulnerability · Source |
| CVE-2017-3589 | redhat_vex | mysql-connector-java: Connector/J unspecified vulnerability (CPU Apr 2017) | known affected: 6 known not affected: 1 | 2026-08-04T23:13:32+00:00 | Vulnerability · Source |
| CVE-2018-17189 | redhat_vex | httpd: mod_http2: DoS via slow, unneeded request bodies | fixed: 577 known not affected: 31 | 2026-08-04T23:13:27+00:00 | Vulnerability · Source |
| CVE-2018-1312 | redhat_vex | httpd: Weak Digest auth nonce generation in mod_auth_digest | fixed: 573 known affected: 10 known not affected: 16 | 2026-08-04T23:13:25+00:00 | Vulnerability · Source |
| CVE-2018-1257 | redhat_vex | spring-framework: ReDoS Attack with spring-messaging | fixed: 2 known affected: 3 known not affected: 14 | 2026-08-04T23:13:21+00:00 | Vulnerability · Source |
| CVE-2018-1115 | redhat_vex | postgresql: Too-permissive access control list on function pg_logfile_rotate() | fixed: 540 known affected: 1 known not affected: 89 | 2026-08-04T23:13:19+00:00 | Vulnerability · Source |
| CVE-2018-1302 | redhat_vex | httpd: Use-after-free on HTTP/2 stream shutdown | fixed: 139 known not affected: 45 | 2026-08-04T23:13:14+00:00 | Vulnerability · Source |
| CVE-2018-14618 | redhat_vex | curl: NTLM password overflow via integer overflow | fixed: 409 known affected: 11 known not affected: 7 | 2026-08-04T23:13:13+00:00 | Vulnerability · Source |
| CVE-2018-12122 | redhat_vex | nodejs: Slowloris HTTP Denial of Service | fixed: 206 known affected: 40 known not affected: 15 | 2026-08-04T23:13:09+00:00 | Vulnerability · Source |
| CVE-2018-1272 | redhat_vex | spring-framework: Multipart content pollution | fixed: 2 known affected: 13 known not affected: 26 | 2026-08-04T23:13:07+00:00 | Vulnerability · Source |
| CVE-2019-0221 | redhat_vex | tomcat: XSS in SSI printenv | fixed: 145 known affected: 32 known not affected: 2 | 2026-08-04T23:13:05+00:00 | Vulnerability · Source |
| CVE-2018-5710 | redhat_vex | krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c | known not affected: 28 | 2026-08-04T23:13:04+00:00 | Vulnerability · Source |
| CVE-2019-10209 | redhat_vex | postgresql: Memory disclosure in cross-type comparison for hashed subplan | known not affected: 110 | 2026-08-04T23:13:02+00:00 | Vulnerability · Source |
| CVE-2018-8034 | redhat_vex | tomcat: Host name verification missing in WebSocket client | fixed: 704 known affected: 6 known not affected: 36 | 2026-08-04T23:12:59+00:00 | Vulnerability · Source |
| CVE-2018-9251 | redhat_vex | libxml2: infinite loop in xz_decomp function in xzlib.c | fixed: 45 known not affected: 13 | 2026-08-04T23:12:56+00:00 | Vulnerability · Source |
| CVE-2019-10184 | redhat_vex | undertow: Information leak in requests for directories without trailing slashes | fixed: 509 known affected: 4 known not affected: 2 | 2026-08-04T23:12:52+00:00 | Vulnerability · Source |
| CVE-2018-5709 | redhat_vex | krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c | known not affected: 28 | 2026-08-04T23:12:52+00:00 | Vulnerability · Source |
| CVE-2019-7614 | redhat_vex | elasticsearch: Race condition in response headers on systems with multiple submitting requests | known affected: 20 known not affected: 1 | 2026-08-04T23:12:48+00:00 | Vulnerability · Source |
| CVE-2020-1698 | redhat_vex | keycloak: Password leak by logged exception in HttpMethod class | fixed: 3 known affected: 5 known not affected: 2 | 2026-08-04T23:12:46+00:00 | Vulnerability · Source |
| CVE-2020-15250 | redhat_vex | junit4: TemporaryFolder is shared between all users across system which could result in information disclosure | fixed: 1 known affected: 8 known not affected: 17 | 2026-08-04T23:12:42+00:00 | Vulnerability · Source |
| CVE-2019-25162 | redhat_vex | kernel: use after free in i2c | fixed: 709 known affected: 22 known not affected: 50 | 2026-08-04T23:12:40+00:00 | Vulnerability · Source |
| CVE-2019-5427 | redhat_vex | c3p0: loading XML configuration leads to denial of service | fixed: 1 known affected: 8 known not affected: 4 | 2026-08-04T23:12:38+00:00 | Vulnerability · Source |
| CVE-2019-1543 | redhat_vex | openssl: ChaCha20-Poly1305 with long nonces | fixed: 34 known not affected: 28 | 2026-08-04T23:12:35+00:00 | Vulnerability · Source |
| CVE-2019-7619 | redhat_vex | elasticsearch: Username disclosure in API Key service | known affected: 1 known not affected: 20 | 2026-08-04T23:12:34+00:00 | Vulnerability · Source |