VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291911 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2014-3490 | redhat_vex | RESTEasy: XXE via parameter entities | fixed: 64 known affected: 7 known not affected: 1 | 2026-08-04T22:00:56+00:00 | Vulnerability · Source |
| CVE-2014-3470 | redhat_vex | openssl: client-side denial of service when using anonymous ECDH | fixed: 154 known not affected: 15 | 2026-08-04T22:00:51+00:00 | Vulnerability · Source |
| CVE-2015-3185 | redhat_vex | httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4 | fixed: 196 known affected: 1 known not affected: 21 | 2026-08-04T22:00:49+00:00 | Vulnerability · Source |
| CVE-2015-2575 | redhat_vex | mysql-connector-java: unspecified vulnerability related to Connector/J (CPU April 2015) | known affected: 5 known not affected: 1 | 2026-08-04T22:00:46+00:00 | Vulnerability · Source |
| CVE-2015-0227 | redhat_vex | wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property | fixed: 1262 known affected: 12 known not affected: 1 | 2026-08-04T22:00:41+00:00 | Vulnerability · Source |
| CVE-2014-9422 | redhat_vex | krb5: kadmind incorrectly validates server principal name (MITKRB5-SA-2015-001) | fixed: 151 known affected: 1 known not affected: 2 | 2026-08-04T22:00:38+00:00 | Vulnerability · Source |
| CVE-2015-0292 | redhat_vex | openssl: integer underflow leading to buffer overflow in base64 decoding | fixed: 201 known affected: 9 known not affected: 3 | 2026-08-04T22:00:35+00:00 | Vulnerability · Source |
| CVE-2014-9769 | redhat_vex | pcre: incorrect nested table jumps when JIT is used (8.36/6) | known not affected: 135 | 2026-08-04T22:00:32+00:00 | Vulnerability · Source |
| CVE-2015-1790 | redhat_vex | OpenSSL: PKCS7 crash with missing EnvelopedContent | fixed: 195 known affected: 7 known not affected: 3 | 2026-08-04T22:00:31+00:00 | Vulnerability · Source |
| CVE-2015-6748 | redhat_vex | jsoup: XSS vulnerability related to incomplete tags at EOF | fixed: 2 known affected: 2 | 2026-08-04T22:00:29+00:00 | Vulnerability · Source |
| CVE-2015-1832 | redhat_vex | Derby: XXE attack possible by using XmlVTI and the XML datatype | known not affected: 3 | 2026-08-04T22:00:28+00:00 | Vulnerability · Source |
| CVE-2015-1833 | redhat_vex | jackrabbit: Jackrabbit WebDAV bundle susceptible to XXE/XEE attack | known not affected: 3 | 2026-08-04T22:00:25+00:00 | Vulnerability · Source |
| CVE-2015-0264 | redhat_vex | Camel: XXE via XPath expression evaluation | fixed: 5 known affected: 2 | 2026-08-04T22:00:24+00:00 | Vulnerability · Source |
| CVE-2015-0286 | redhat_vex | openssl: invalid pointer use in ASN1_TYPE_cmp() | fixed: 159 known affected: 5 known not affected: 9 | 2026-08-04T22:00:19+00:00 | Vulnerability · Source |
| CVE-2015-0207 | redhat_vex | openssl: DTLS segmentation fault in DTLSv1_listen | known not affected: 25 | 2026-08-04T22:00:16+00:00 | Vulnerability · Source |
| CVE-2015-3193 | redhat_vex | OpenSSL: BN_mod_exp may produce incorrect results on x86_64 | known not affected: 19 | 2026-08-04T22:00:14+00:00 | Vulnerability · Source |
| CVE-2015-5253 | redhat_vex | apache-cxf: SAML SSO processing is vulnerable to wrapping attack | fixed: 1 known affected: 2 known not affected: 1 | 2026-08-04T22:00:08+00:00 | Vulnerability · Source |
| CVE-2015-1787 | redhat_vex | openssl: segmentation fault in client authentication with empty CKE and DHE | known not affected: 24 | 2026-08-04T22:00:06+00:00 | Vulnerability · Source |
| CVE-2015-1545 | redhat_vex | openldap: slapd crashes on search with deref control and empty attr list | known not affected: 16 | 2026-08-04T22:00:04+00:00 | Vulnerability · Source |
| CVE-2015-2328 | redhat_vex | pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20) | fixed: 327 known affected: 62 known not affected: 38 | 2026-08-04T22:00:01+00:00 | Vulnerability · Source |
| CVE-2015-5073 | redhat_vex | pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18) | fixed: 415 known affected: 67 known not affected: 23 | 2026-08-04T22:00:01+00:00 | Vulnerability · Source |
| CVE-2015-0208 | redhat_vex | openssl: segmentation fault for invalid PSS parameters | known not affected: 25 | 2026-08-04T21:59:59+00:00 | Vulnerability · Source |
| CVE-2015-2327 | redhat_vex | pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19) | fixed: 333 known affected: 67 known not affected: 33 | 2026-08-04T21:59:51+00:00 | Vulnerability · Source |
| CVE-2015-3254 | redhat_vex | thrift: Infinite recursion via vectors involving the skip function | fixed: 3 known affected: 3 known not affected: 1 | 2026-08-04T21:59:51+00:00 | Vulnerability · Source |
| CVE-2015-0263 | redhat_vex | Camel: XXE in via SAXSource expansion | fixed: 5 known affected: 2 | 2026-08-04T21:59:48+00:00 | Vulnerability · Source |
| CVE-2015-1788 | redhat_vex | OpenSSL: Malformed ECParameters causes infinite loop | known not affected: 22 | 2026-08-04T21:59:47+00:00 | Vulnerability · Source |
| CVE-2014-9970 | redhat_vex | jasypt: Vulnerable to timing attack against the password hash comparison | fixed: 121 known affected: 3 known not affected: 2 under investigation: 1 | 2026-08-04T21:59:29+00:00 | Vulnerability · Source |
| CVE-2015-3217 | redhat_vex | pcre: stack overflow caused by mishandled group empty match (8.38/11) | fixed: 415 known affected: 73 known not affected: 17 | 2026-08-04T21:59:24+00:00 | Vulnerability · Source |
| CVE-2015-1789 | redhat_vex | OpenSSL: out-of-bounds read in X509_cmp_time | fixed: 195 known affected: 6 known not affected: 4 | 2026-08-04T21:59:18+00:00 | Vulnerability · Source |
| CVE-2015-5348 | redhat_vex | Camel: Java object deserialisation in Jetty/Servlet | fixed: 1 known affected: 3 known not affected: 2 | 2026-08-04T21:59:16+00:00 | Vulnerability · Source |
| CVE-2015-0206 | redhat_vex | openssl: DTLS memory leak in dtls1_buffer_record | fixed: 144 known affected: 1 known not affected: 9 | 2026-08-04T21:59:12+00:00 | Vulnerability · Source |
| CVE-2016-4979 | redhat_vex | httpd: X509 client certificate authentication bypass using HTTP/2 | fixed: 80 known not affected: 32 | 2026-08-04T21:58:48+00:00 | Vulnerability · Source |
| CVE-2016-1000031 | redhat_vex | FileUpload: DiskFileItem file manipulation | known not affected: 22 | 2026-08-04T21:58:47+00:00 | Vulnerability · Source |
| CVE-2016-5422 | redhat_vex | JON3: privilege escalation via improper authorization | fixed: 1 | 2026-08-04T21:58:45+00:00 | Vulnerability · Source |
| CVE-2016-6303 | redhat_vex | openssl: Integer overflow in MDC2_Update() | known not affected: 22 | 2026-08-04T21:58:44+00:00 | Vulnerability · Source |
| CVE-2016-4800 | redhat_vex | jetty: path normalization | known not affected: 84 | 2026-08-04T21:58:41+00:00 | Vulnerability · Source |
| CVE-2015-8391 | redhat_vex | pcre: inefficient posix character class syntax check (8.38/16) | fixed: 415 known affected: 62 known not affected: 28 | 2026-08-04T21:58:40+00:00 | Vulnerability · Source |
| CVE-2016-2106 | redhat_vex | openssl: EVP_EncryptUpdate overflow | fixed: 275 known affected: 10 known not affected: 1 | 2026-08-04T21:58:39+00:00 | Vulnerability · Source |
| CVE-2016-2179 | redhat_vex | openssl: DTLS memory exhaustion DoS when messages are not removed from fragment buffer | fixed: 151 known affected: 7 known not affected: 4 | 2026-08-04T21:58:32+00:00 | Vulnerability · Source |
| CVE-2015-8389 | redhat_vex | pcre: infinite recursion in JIT compiler when processing certain patterns (8.38/21) | known not affected: 135 | 2026-08-04T21:58:23+00:00 | Vulnerability · Source |
| CVE-2015-7575 | redhat_vex | TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH) | fixed: 1303 known affected: 2 known not affected: 29 | 2026-08-04T21:58:22+00:00 | Vulnerability · Source |
| CVE-2016-2107 | redhat_vex | openssl: Padding oracle in AES-NI CBC MAC check | fixed: 194 known affected: 2 known not affected: 11 | 2026-08-04T21:58:21+00:00 | Vulnerability · Source |
| CVE-2016-3739 | redhat_vex | curl: TLS certificate name check bypass with mbedTLS and PolarSSL | known not affected: 13 | 2026-08-04T21:58:17+00:00 | Vulnerability · Source |
| CVE-2016-5388 | redhat_vex | Tomcat: CGI sets environmental variable based on user supplied Proxy request header | fixed: 163 known affected: 6 under investigation: 1 | 2026-08-04T21:58:07+00:00 | Vulnerability · Source |
| CVE-2016-2181 | redhat_vex | openssl: DTLS replay protection bypass allows DoS against DTLS connection | fixed: 151 known affected: 7 known not affected: 4 | 2026-08-04T21:58:04+00:00 | Vulnerability · Source |
| CVE-2016-0736 | redhat_vex | httpd: Padding Oracle in Apache mod_session_crypto | fixed: 201 known affected: 1 known not affected: 22 | 2026-08-04T21:58:03+00:00 | Vulnerability · Source |
| CVE-2016-5421 | redhat_vex | curl: Use of connection struct after free | fixed: 336 known affected: 9 known not affected: 10 | 2026-08-04T21:58:01+00:00 | Vulnerability · Source |
| CVE-2016-2105 | redhat_vex | openssl: EVP_EncodeUpdate overflow | fixed: 275 known affected: 10 known not affected: 1 | 2026-08-04T21:57:56+00:00 | Vulnerability · Source |
| CVE-2015-8631 | redhat_vex | krb5: Memory leak caused by supplying a null principal name in request | fixed: 158 known affected: 1 known not affected: 1 | 2026-08-04T21:57:53+00:00 | Vulnerability · Source |
| CVE-2016-5002 | redhat_vex | xmlrpc: XML external entity vulnerability SSRF via a crafted DTD | fixed: 1 known affected: 24 known not affected: 3 | 2026-08-04T21:57:51+00:00 | Vulnerability · Source |