VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291911 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-6305 | redhat_vex | openssl: SSL_peek() hang on empty record | known not affected: 23 | 2026-08-04T21:57:49+00:00 | Vulnerability · Source |
| CVE-2016-4472 | redhat_vex | expat: Undefined behavior and pointer overflows | known affected: 25 known not affected: 52 under investigation: 1 | 2026-08-04T21:57:47+00:00 | Vulnerability · Source |
| CVE-2016-4993 | redhat_vex | eap: HTTP header injection / response splitting | fixed: 1039 known not affected: 41 | 2026-08-04T21:57:42+00:00 | Vulnerability · Source |
| CVE-2016-4911 | redhat_vex | openstack-keystone: Incorrect Audit IDs in Keystone Fernet Tokens can result in revocation bypass | known not affected: 13 | 2026-08-04T21:57:40+00:00 | Vulnerability · Source |
| CVE-2016-0701 | redhat_vex | OpenSSL: DH small subgroups | known not affected: 21 | 2026-08-04T21:57:38+00:00 | Vulnerability · Source |
| CVE-2016-2094 | redhat_vex | EAP: HTTPS NIO connector uses no timeout when reading SSL handshake from client | fixed: 481 | 2026-08-04T21:57:34+00:00 | Vulnerability · Source |
| CVE-2016-1546 | redhat_vex | httpd: mod_http2 denial-of-service by thread starvation | fixed: 60 known not affected: 31 | 2026-08-04T21:57:28+00:00 | Vulnerability · Source |
| CVE-2015-8388 | redhat_vex | pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18) | fixed: 415 known affected: 67 known not affected: 23 | 2026-08-04T21:57:25+00:00 | Vulnerability · Source |
| CVE-2016-2161 | redhat_vex | httpd: DoS vulnerability in mod_auth_digest | fixed: 201 known not affected: 23 | 2026-08-04T21:57:22+00:00 | Vulnerability · Source |
| CVE-2026-48990 | redhat_vex | joserfc: joserfc: Resource exhaustion via oversized JSON Web Signature (JWS) payloads | fixed: 11 known not affected: 200 | 2026-08-04T21:57:09+00:00 | Vulnerability · Source |
| CVE-2017-18640 | redhat_vex | snakeyaml: Billion laughs attack via alias feature | fixed: 5 known affected: 6 known not affected: 2 | 2026-08-04T21:57:03+00:00 | Vulnerability · Source |
| CVE-2017-15139 | redhat_vex | openstack-cinder: Data retained after deletion of a ScaleIO volume | fixed: 7 known affected: 10 known not affected: 10 | 2026-08-04T21:56:58+00:00 | Vulnerability · Source |
| CVE-2016-8739 | redhat_vex | apache-cxf: Atom entity provider of Apache CXF JAX-RS is vulnerable to XXE | fixed: 2 known affected: 3 known not affected: 10 under investigation: 2 | 2026-08-04T21:56:56+00:00 | Vulnerability · Source |
| CVE-2017-14868 | redhat_vex | restlet: XML external entity injection | known not affected: 2 | 2026-08-04T21:56:55+00:00 | Vulnerability · Source |
| CVE-2016-9177 | redhat_vex | Spark: Directory traversal vulnerability in version 2.5 | fixed: 2 known affected: 1 | 2026-08-04T21:56:51+00:00 | Vulnerability · Source |
| CVE-2016-8743 | redhat_vex | httpd: Apache HTTP Request Parsing Whitespace Defects | fixed: 263 known affected: 4 known not affected: 3 | 2026-08-04T21:56:49+00:00 | Vulnerability · Source |
| CVE-2016-8620 | redhat_vex | curl: Glob parser write/read out of bounds | fixed: 336 known affected: 9 known not affected: 11 | 2026-08-04T21:56:48+00:00 | Vulnerability · Source |
| CVE-2017-12624 | redhat_vex | cxf: Improper size validation in message attachment header for JAX-WS and JAX-RS services | fixed: 262 known affected: 7 known not affected: 8 | 2026-08-04T21:56:42+00:00 | Vulnerability · Source |
| CVE-2017-11368 | redhat_vex | krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure | fixed: 117 known affected: 8 known not affected: 4 | 2026-08-04T21:56:40+00:00 | Vulnerability · Source |
| CVE-2017-15088 | redhat_vex | krb5: Buffer overflow in get_matching_data() | known affected: 8 known not affected: 12 | 2026-08-04T21:56:34+00:00 | Vulnerability · Source |
| CVE-2017-1000257 | redhat_vex | curl: IMAP FETCH response out of bounds read | fixed: 400 known affected: 6 known not affected: 9 | 2026-08-04T21:56:32+00:00 | Vulnerability · Source |
| CVE-2016-7052 | redhat_vex | openssl: Missing CRL sanity check | known not affected: 23 | 2026-08-04T21:56:29+00:00 | Vulnerability · Source |
| CVE-2017-3156 | redhat_vex | cxf: CXF OAuth2 Hawk and JOSE MAC Validation code are vulnerable to timing attacks | fixed: 2 known affected: 5 known not affected: 8 under investigation: 1 | 2026-08-04T21:56:28+00:00 | Vulnerability · Source |
| CVE-2017-17740 | redhat_vex | openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service | known affected: 1 known not affected: 24 | 2026-08-04T21:56:26+00:00 | Vulnerability · Source |
| CVE-2016-7053 | redhat_vex | openssl: CMS Null dereference vulnerability | known not affected: 22 | 2026-08-04T21:56:24+00:00 | Vulnerability · Source |
| CVE-2016-6816 | redhat_vex | tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests | fixed: 633 known affected: 22 known not affected: 5 under investigation: 1 | 2026-08-04T21:56:23+00:00 | Vulnerability · Source |
| CVE-2017-2629 | redhat_vex | curl: SSL_VERIFYSTATUS ignored | known not affected: 20 | 2026-08-04T21:56:21+00:00 | Vulnerability · Source |
| CVE-2017-2638 | redhat_vex | infinispan: auth bypass in REST api | fixed: 1 known affected: 1 | 2026-08-04T21:56:20+00:00 | Vulnerability · Source |
| CVE-2016-7056 | redhat_vex | openssl: ECDSA P-256 timing attack key recovery | fixed: 218 known affected: 10 known not affected: 8 | 2026-08-04T21:56:13+00:00 | Vulnerability · Source |
| CVE-2016-6346 | redhat_vex | RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack | fixed: 1728 known affected: 24 known not affected: 5 under investigation: 2 | 2026-08-04T21:56:07+00:00 | Vulnerability · Source |
| CVE-2017-14867 | redhat_vex | git: cvsserver command injection | known affected: 49 known not affected: 7 | 2026-08-04T21:56:06+00:00 | Vulnerability · Source |
| CVE-2017-1000487 | redhat_vex | plexus-utils: Mishandled strings in Commandline class allow for command injection | fixed: 2 known affected: 6 known not affected: 12 under investigation: 3 | 2026-08-04T21:56:06+00:00 | Vulnerability · Source |
| CVE-2016-9594 | redhat_vex | curl: Unitialized random | known not affected: 20 | 2026-08-04T21:55:56+00:00 | Vulnerability · Source |
| CVE-2017-15288 | redhat_vex | scala: Privilege escalation in Scala compilation daemon | known affected: 8 known not affected: 7 | 2026-08-04T21:55:53+00:00 | Vulnerability · Source |
| CVE-2017-16012 | redhat_vex | js-jquery: XSS in responses from cross-origin ajax requests | fixed: 2 known affected: 16 known not affected: 1 | 2026-08-04T21:55:51+00:00 | Vulnerability · Source |
| CVE-2017-10140 | redhat_vex | libdb: Reads DB_CONFIG from the current working directory | fixed: 1 known affected: 32 known not affected: 27 under investigation: 1 | 2026-08-04T21:55:46+00:00 | Vulnerability · Source |
| CVE-2017-2582 | redhat_vex | keycloak: SAML request parser replaces special strings with system properties | fixed: 2303 known affected: 3 known not affected: 13 | 2026-08-04T21:55:42+00:00 | Vulnerability · Source |
| CVE-2016-6812 | redhat_vex | apache-cxf: XSS in Apache CXF FormattedServiceListWriter | fixed: 2 known affected: 8 known not affected: 6 under investigation: 1 | 2026-08-04T21:55:40+00:00 | Vulnerability · Source |
| CVE-2016-9606 | redhat_vex | Resteasy: Yaml unmarshalling vulnerable to RCE | fixed: 768 known affected: 2 known not affected: 19 | 2026-08-04T21:55:30+00:00 | Vulnerability · Source |
| CVE-2017-1000099 | redhat_vex | curl: FILE buffer read out of bounds | known not affected: 22 | 2026-08-04T21:55:28+00:00 | Vulnerability · Source |
| CVE-2017-0663 | redhat_vex | libxml2: Heap buffer overflow in xmlAddID | known affected: 15 known not affected: 5 under investigation: 3 | 2026-08-04T21:55:27+00:00 | Vulnerability · Source |
| CVE-2016-6347 | redhat_vex | RESTEasy: Use of the default exception handler in RESTEasy can lead to reflected XSS attack | known affected: 22 known not affected: 9 under investigation: 2 | 2026-08-04T21:55:23+00:00 | Vulnerability · Source |
| CVE-2017-14949 | redhat_vex | restlet: XXE vulnerability in XML extension allows remote attackers to access arbitrary files via a crafted REST API HTTP request | known affected: 2 | 2026-08-04T21:55:20+00:00 | Vulnerability · Source |
| CVE-2017-3731 | redhat_vex | openssl: Truncated packet could crash via OOB read | fixed: 327 known affected: 7 known not affected: 8 | 2026-08-04T21:55:14+00:00 | Vulnerability · Source |
| CVE-2017-7668 | redhat_vex | httpd: ap_find_token() buffer overread | fixed: 228 known not affected: 15 | 2026-08-04T21:55:11+00:00 | Vulnerability · Source |
| CVE-2017-3586 | redhat_vex | mysql-connector-java: Connector/J unspecified vulnerability (CPU Apr 2017) | known affected: 6 known not affected: 1 | 2026-08-04T21:55:10+00:00 | Vulnerability · Source |
| CVE-2017-5653 | redhat_vex | cxf: CXF JAX-RS XML Security streaming clients do not validate that the service response was signed or encrypted | fixed: 2 known not affected: 13 under investigation: 1 | 2026-08-04T21:55:06+00:00 | Vulnerability · Source |
| CVE-2017-6004 | redhat_vex | pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3) | fixed: 1 known affected: 42 known not affected: 72 | 2026-08-04T21:55:05+00:00 | Vulnerability · Source |
| CVE-2017-7468 | redhat_vex | curl: TLS session resumption client cert bypass | known not affected: 20 | 2026-08-04T21:55:03+00:00 | Vulnerability · Source |
| CVE-2018-1000129 | redhat_vex | jolokia: Cross site scripting in the HTTP servlet | fixed: 3 known affected: 11 known not affected: 4 | 2026-08-04T21:55:01+00:00 | Vulnerability · Source |