VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291911 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2011-4317 | redhat_vex | httpd: uri scheme bypass of the reverse proxy vulnerability CVE-2011-3368 fix | fixed: 64 known not affected: 4 | 2026-08-04T22:06:57+00:00 | Vulnerability · Source |
| CVE-2010-5298 | redhat_vex | openssl: freelist misuse causing a possible use-after-free | fixed: 154 known not affected: 14 | 2026-08-04T22:06:57+00:00 | Vulnerability · Source |
| CVE-2011-3559 | redhat_vex | JBEWS: Unspecified vulnerability in GlassFish Enterprise Server 2.1.1 | under investigation: 1 | 2026-08-04T22:06:54+00:00 | Vulnerability · Source |
| CVE-2011-2260 | redhat_vex | glassfish: Unspecified vulnerability affecting confidentiality and integrity via unspecified vectors | under investigation: 1 | 2026-08-04T22:06:53+00:00 | Vulnerability · Source |
| CVE-2006-7248 | redhat_vex | openssl: mime_hdr_cmp NULL dereference crash | known affected: 4 known not affected: 8 | 2026-08-04T22:06:47+00:00 | Vulnerability · Source |
| CVE-1999-0428 | redhat_vex | openssl: allow remote attackers to reuse SSL sessions and bypass access controls | known not affected: 36 | 2026-08-04T22:06:46+00:00 | Vulnerability · Source |
| CVE-2000-1254 | redhat_vex | openssl: Mishandling C bitwise-shift operations making easier to bypass protection mechanisms | known not affected: 21 | 2026-08-04T22:06:38+00:00 | Vulnerability · Source |
| CVE-2011-4858 | redhat_vex | tomcat: hash table collisions CPU usage DoS (oCERT-2011-003) | fixed: 230 known not affected: 12 | 2026-08-04T22:06:37+00:00 | Vulnerability · Source |
| CVE-2011-2908 | redhat_vex | CSRF on jmx-console allows invocation of operations on mbeans | fixed: 884 known affected: 3 | 2026-08-04T22:06:35+00:00 | Vulnerability · Source |
| CVE-2011-5035 | redhat_vex | GlassFish: hash table collisions CPU usage DoS (oCERT-2011-003) | fixed: 327 known not affected: 1 | 2026-08-04T22:06:30+00:00 | Vulnerability · Source |
| CVE-2006-7250 | redhat_vex | openssl: mime_hdr_cmp NULL dereference crash | fixed: 43 known affected: 3 known not affected: 8 | 2026-08-04T22:06:26+00:00 | Vulnerability · Source |
| CVE-2002-0059 | redhat_vex | zlib: Double free in inflateEnd | fixed: 7 known not affected: 32 | 2026-08-04T22:06:23+00:00 | Vulnerability · Source |
| CVE-2011-1184 | redhat_vex | tomcat: Multiple weaknesses in HTTP DIGEST authentication | fixed: 197 known not affected: 12 | 2026-08-04T22:06:21+00:00 | Vulnerability · Source |
| CVE-2011-1511 | redhat_vex | glassfish: Unspecified vulnerability affecting confidentiality and integrity via unspecified vectors | under investigation: 1 | 2026-08-04T22:06:17+00:00 | Vulnerability · Source |
| CVE-2011-3190 | redhat_vex | tomcat: authentication bypass and information disclosure | fixed: 62 known not affected: 1 | 2026-08-04T22:06:15+00:00 | Vulnerability · Source |
| CVE-2011-3375 | redhat_vex | tomcat: information disclosure due to improper response and request object recycling | fixed: 23 known not affected: 11 | 2026-08-04T22:06:13+00:00 | Vulnerability · Source |
| CVE-2011-4084 | redhat_vex | tomcat: hash table collisions CPU usage DoS (oCERT-2011-003) | known affected: 14 | 2026-08-04T22:06:11+00:00 | Vulnerability · Source |
| CVE-2011-3639 | redhat_vex | httpd: http 0.9 request bypass of the reverse proxy vulnerability CVE-2011-3368 fix | fixed: 108 known affected: 1 known not affected: 2 | 2026-08-04T22:06:09+00:00 | Vulnerability · Source |
| CVE-2012-3451 | redhat_vex | apache-cxf: SOAPAction spoofing on document literal web services | fixed: 1026 known affected: 2 known not affected: 4 | 2026-08-04T22:06:05+00:00 | Vulnerability · Source |
| CVE-2013-1753 | redhat_vex | python: XMLRPC library unrestricted decompression of HTTP responses using gzip enconding | fixed: 220 known affected: 16 known not affected: 24 | 2026-08-04T22:06:03+00:00 | Vulnerability · Source |
| CVE-2011-5062 | redhat_vex | tomcat: Multiple weaknesses in HTTP DIGEST authentication | fixed: 197 known not affected: 12 | 2026-08-04T22:06:02+00:00 | Vulnerability · Source |
| CVE-2012-0104 | redhat_vex | GlassFish: Unspecified vulnerability allows remote attackers to affect availability via unknown vectors related to Web Container | under investigation: 1 | 2026-08-04T22:06:01+00:00 | Vulnerability · Source |
| CVE-2012-4929 | redhat_vex | SSL/TLS CRIME attack against HTTPS | fixed: 107 known affected: 9 known not affected: 13 | 2026-08-04T22:05:56+00:00 | Vulnerability · Source |
| CVE-2013-0315 | redhat_vex | Portal: XML eXternal Entity (XXE) flaw in site import | fixed: 1 known affected: 1 | 2026-08-04T22:05:53+00:00 | Vulnerability · Source |
| CVE-2012-1007 | redhat_vex | struts: multiple XSS flaws | under investigation: 1 | 2026-08-04T22:05:51+00:00 | Vulnerability · Source |
| CVE-2012-1094 | redhat_vex | mod_cluster registers and exposes the root context of a JBoss AS 7 server by default, despite ROOT being in the excluded-contexts list | known not affected: 1 | 2026-08-04T22:05:48+00:00 | Vulnerability · Source |
| CVE-2013-4517 | redhat_vex | Java: Java XML Signature DoS Attack | fixed: 294 known affected: 7 known not affected: 5 | 2026-08-04T22:05:42+00:00 | Vulnerability · Source |
| CVE-2012-6708 | redhat_vex | js-jquery: XSS via improper selector detection | known affected: 198 known not affected: 62 | 2026-08-04T22:05:39+00:00 | Vulnerability · Source |
| CVE-2012-0213 | redhat_vex | jakarta: JVM destabilization due to memory exhaustion when processing CDF/CFBF files | fixed: 1 known affected: 1 known not affected: 1 | 2026-08-04T22:05:38+00:00 | Vulnerability · Source |
| CVE-2012-5887 | redhat_vex | tomcat: three DIGEST authentication implementation issues | fixed: 176 known affected: 4 known not affected: 14 | 2026-08-04T22:05:37+00:00 | Vulnerability · Source |
| CVE-2012-5784 | redhat_vex | axis: missing connection hostname check against X.509 certificate name | fixed: 46 known affected: 1 | 2026-08-04T22:05:33+00:00 | Vulnerability · Source |
| CVE-2012-3370 | redhat_vex | JBoss: SecurityAssociation.getCredential() will return the previous credential if no security context is provided | fixed: 883 known affected: 3 | 2026-08-04T22:05:32+00:00 | Vulnerability · Source |
| CVE-2012-1006 | redhat_vex | struts2: multiple XSS flaws | under investigation: 1 | 2026-08-04T22:05:29+00:00 | Vulnerability · Source |
| CVE-2012-3532 | redhat_vex | Portal: Cross Site Request Forgery | fixed: 1 known affected: 1 | 2026-08-04T22:05:27+00:00 | Vulnerability · Source |
| CVE-2013-4424 | redhat_vex | GateIn: XSS due to improper url escaping | fixed: 1 known affected: 1 | 2026-08-04T22:05:24+00:00 | Vulnerability · Source |
| CVE-2011-5064 | redhat_vex | tomcat: Multiple weaknesses in HTTP DIGEST authentication | fixed: 197 known not affected: 12 | 2026-08-04T22:05:20+00:00 | Vulnerability · Source |
| CVE-2012-1167 | redhat_vex | JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealm | fixed: 45 known affected: 3 known not affected: 12 | 2026-08-04T22:05:16+00:00 | Vulnerability · Source |
| CVE-2013-4452 | redhat_vex | ON: World readable configuration files expose sensitive data | fixed: 1 known affected: 1 | 2026-08-04T22:05:14+00:00 | Vulnerability · Source |
| CVE-2013-2067 | redhat_vex | tomcat: Session fixation in form authenticator | fixed: 922 known affected: 3 known not affected: 3 | 2026-08-04T22:05:13+00:00 | Vulnerability · Source |
| CVE-2012-0081 | redhat_vex | GlassFish: Unspecified vulnerability allows local users to affect confidentiality, integrity and availability via unknown vectors | under investigation: 1 | 2026-08-04T22:05:10+00:00 | Vulnerability · Source |
| CVE-2012-0881 | redhat_vex | xml: xerces-j2 hash table collisions CPU usage DoS (oCERT-2011-003) | known affected: 10 | 2026-08-04T22:05:10+00:00 | Vulnerability · Source |
| CVE-2013-4322 | redhat_vex | tomcat: incomplete fix for CVE-2012-3544 | fixed: 137 known affected: 3 known not affected: 9 | 2026-08-04T22:05:07+00:00 | Vulnerability · Source |
| CVE-2013-2160 | redhat_vex | apache-cxf: Multiple denial of service flaws in the StAX parser | fixed: 3 known not affected: 1 | 2026-08-04T22:05:00+00:00 | Vulnerability · Source |
| CVE-2012-4431 | redhat_vex | Tomcat/JBoss Web - Bypass of CSRF prevention filter | fixed: 55 known affected: 2 known not affected: 15 | 2026-08-04T22:04:57+00:00 | Vulnerability · Source |
| CVE-2012-3544 | redhat_vex | tomcat: Limited DoS in chunked transfer encoding input filter | fixed: 133 known affected: 1 known not affected: 14 | 2026-08-04T22:04:53+00:00 | Vulnerability · Source |
| CVE-2013-4122 | redhat_vex | cyrus-sasl: NULL pointer dereference (DoS) when glibc v.2.17 or FIPS-140 enabled Linux system used | known not affected: 26 | 2026-08-04T22:04:51+00:00 | Vulnerability · Source |
| CVE-2012-5531 | redhat_vex | Portal: Reflected Cross-Site Scripting (XSS) | fixed: 1 known affected: 1 | 2026-08-04T22:04:49+00:00 | Vulnerability · Source |
| CVE-2011-5245 | redhat_vex | RESTEasy: XML eXternal Entity (XXE) flaw | fixed: 53 known affected: 4 known not affected: 10 | 2026-08-04T22:04:49+00:00 | Vulnerability · Source |
| CVE-2013-4352 | redhat_vex | httpd: mod_cache NULL pointer dereference crash | fixed: 110 known affected: 1 known not affected: 20 | 2026-08-04T22:04:42+00:00 | Vulnerability · Source |
| CVE-2011-5063 | redhat_vex | tomcat: Multiple weaknesses in HTTP DIGEST authentication | fixed: 197 known not affected: 12 | 2026-08-04T22:04:38+00:00 | Vulnerability · Source |