VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292431 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-2665 | redhat_vex | rhscon-core: creates world readable file /etc/skyring/skyring.conf which leaks mongodb password for skyring database | known affected: 1 | 2026-06-30T11:39:55+00:00 | Vulnerability · Source |
| CVE-2017-2663 | redhat_vex | subscription-manager: unsafe dbus interface | known not affected: 19 | 2026-06-30T11:39:52+00:00 | Vulnerability · Source |
| CVE-2017-2654 | redhat_vex | jenkins-email-ext: Emails were sent to addresses not associated with actual users of Jenkins by Mailer Plugin | known not affected: 1 | 2026-06-30T11:39:50+00:00 | Vulnerability · Source |
| CVE-2017-2651 | redhat_vex | jenkins-mailer-plugin: Emails were sent to addresses not associated with actual users of Jenkins by Mailer Plugin | known not affected: 2 | 2026-06-30T11:39:46+00:00 | Vulnerability · Source |
| CVE-2017-2640 | redhat_vex | pidgin: Out-of-bounds write in purple_markup_unescape_entity triggered by invalid XML | fixed: 115 known affected: 12 | 2026-06-30T11:39:43+00:00 | Vulnerability · Source |
| CVE-2017-2639 | redhat_vex | CloudForms: cloudforms fails to properly check certificates when communicating with RHEV and OpenShift and custom CA | fixed: 179 | 2026-06-30T11:39:42+00:00 | Vulnerability · Source |
| CVE-2017-2635 | redhat_vex | libvirt: Null pointer dereference when updating storage size on empty drives | known not affected: 45 | 2026-06-30T11:39:37+00:00 | Vulnerability · Source |
| CVE-2017-2634 | redhat_vex | kernel: dccp: crash while sending ipv6 reset packet | fixed: 153 known not affected: 31 | 2026-06-30T11:39:34+00:00 | Vulnerability · Source |
| CVE-2017-2633 | redhat_vex | Qemu: VNC: memory corruption due to unchecked resolution limit | fixed: 70 known affected: 8 known not affected: 30 | 2026-06-30T11:39:33+00:00 | Vulnerability · Source |
| CVE-2017-2632 | redhat_vex | cfme: tenant administrator can create a group with higher permissions | fixed: 8 | 2026-06-30T11:39:29+00:00 | Vulnerability · Source |
| CVE-2017-2627 | redhat_vex | openstack-tripleo-common: sudoers file is too permissive | known affected: 3 known not affected: 4 | 2026-06-30T11:39:24+00:00 | Vulnerability · Source |
| CVE-2017-2625 | redhat_vex | libXdmcp: weak entropy usage for session keys | fixed: 1793 known affected: 3 | 2026-06-30T11:39:23+00:00 | Vulnerability · Source |
| CVE-2017-2623 | redhat_vex | rpm-ostree-client: fails to check gpg package signatures when layering | fixed: 6 | 2026-06-30T11:39:19+00:00 | Vulnerability · Source |
| CVE-2017-2622 | redhat_vex | openstack-mistral: /var/log/mistral/ is world readable | fixed: 8 known not affected: 1 | 2026-06-30T11:39:18+00:00 | Vulnerability · Source |
| CVE-2017-2618 | redhat_vex | kernel: Off-by-one error in selinux_setprocattr (/proc/self/attr/fscreate) | fixed: 207 known not affected: 15 | 2026-06-30T11:39:15+00:00 | Vulnerability · Source |
| CVE-2017-2617 | redhat_vex | Hawtio: Unrestricted file upload leads to RCE | fixed: 2 known affected: 2 under investigation: 1 | 2026-06-30T11:39:13+00:00 | Vulnerability · Source |
| CVE-2017-2616 | redhat_vex | util-linux: Sending SIGKILL to other processes with root privileges via su | fixed: 168 known affected: 1 known not affected: 12 | 2026-06-30T11:39:09+00:00 | Vulnerability · Source |
| CVE-2017-2613 | redhat_vex | jenkins: User creation CSRF using GET by admins (SECURITY-406) | under investigation: 3 | 2026-06-30T11:39:08+00:00 | Vulnerability · Source |
| CVE-2017-2612 | redhat_vex | jenkins: Low privilege users were able to override JDK download credentials (SECURITY-392) | under investigation: 3 | 2026-06-30T11:39:05+00:00 | Vulnerability · Source |
| CVE-2017-2611 | redhat_vex | jenkins: Insufficient permission check for periodic processes (SECURITY-389) | under investigation: 3 | 2026-06-30T11:39:04+00:00 | Vulnerability · Source |
| CVE-2017-2610 | redhat_vex | jenkins: Persisted cross-site scripting vulnerability in search suggestions (SECURITY-388) | under investigation: 3 | 2026-06-30T11:39:01+00:00 | Vulnerability · Source |
| CVE-2017-2607 | redhat_vex | jenkins: Persisted cross-site scripting vulnerability in console notes (SECURITY-382) | under investigation: 3 | 2026-06-30T11:39:00+00:00 | Vulnerability · Source |
| CVE-2017-2609 | redhat_vex | jenkins: Information disclosure vulnerability in search suggestions (SECURITY-385) | under investigation: 3 | 2026-06-30T11:38:59+00:00 | Vulnerability · Source |
| CVE-2017-2606 | redhat_vex | jenkins: Internal API allowed access to item names that should not be visible (SECURITY-380) | under investigation: 3 | 2026-06-30T11:38:55+00:00 | Vulnerability · Source |
| CVE-2017-2604 | redhat_vex | jenkins: Low privilege users were able to act on administrative monitors (SECURITY-371) | under investigation: 3 | 2026-06-30T11:38:52+00:00 | Vulnerability · Source |
| CVE-2017-2601 | redhat_vex | jenkins: Persisted cross-site scripting vulnerability in parameter names and descriptions (SECURITY-353) | under investigation: 3 | 2026-06-30T11:38:51+00:00 | Vulnerability · Source |
| CVE-2017-2600 | redhat_vex | jenkins: Node monitor data could be viewed by low privilege users (SECURITY-343) | under investigation: 3 | 2026-06-30T11:38:50+00:00 | Vulnerability · Source |
| CVE-2017-2599 | redhat_vex | jenkins: Items could be created with same name as existing item (SECURITY-321) | under investigation: 3 | 2026-06-30T11:38:46+00:00 | Vulnerability · Source |
| CVE-2017-2598 | redhat_vex | jenkins: Use of AES ECB block cipher mode without IV for encrypting secrets (SECURITY-304) | under investigation: 3 | 2026-06-30T11:38:43+00:00 | Vulnerability · Source |
| CVE-2017-2595 | redhat_vex | wildfly: Arbitrary file read via path traversal | fixed: 1598 under investigation: 1 | 2026-06-30T11:38:40+00:00 | Vulnerability · Source |
| CVE-2017-2594 | redhat_vex | hawtio: information Disclosure flaws due to unsafe path traversal | fixed: 2 known affected: 3 | 2026-06-30T11:38:36+00:00 | Vulnerability · Source |
| CVE-2017-2590 | redhat_vex | ipa: Insufficient permission check for ca-del, ca-disable and ca-enable commands | fixed: 66 known not affected: 7 | 2026-06-30T11:38:29+00:00 | Vulnerability · Source |
| CVE-2017-2581 | redhat_vex | netpbm: Out-of-bounds write in writeRasterPbm() function | known affected: 4 known not affected: 4 | 2026-06-30T11:38:24+00:00 | Vulnerability · Source |
| CVE-2017-2580 | redhat_vex | netpbm: Out-of-bounds write of heap data | known affected: 3 known not affected: 5 | 2026-06-30T11:38:22+00:00 | Vulnerability · Source |
| CVE-2016-9605 | redhat_vex | cobbler: Cross site scripting in profile page | known not affected: 1 | 2026-06-30T11:38:20+00:00 | Vulnerability · Source |
| CVE-2016-9595 | redhat_vex | katello-debug: Possible symlink attacks due to use of predictable file names | fixed: 276 | 2026-06-30T11:38:18+00:00 | Vulnerability · Source |
| CVE-2016-9592 | redhat_vex | openshift: Failing to detach a volume causes DoS by retrying to perform delete | known not affected: 1 | 2026-06-30T11:38:12+00:00 | Vulnerability · Source |
| CVE-2016-9590 | redhat_vex | puppet-swift: installs config file with world readable permissions | fixed: 6 known not affected: 2 | 2026-06-30T11:38:10+00:00 | Vulnerability · Source |
| CVE-2016-9579 | redhat_vex | ceph: Object Gateway server DoS by sending invalid cross-origin HTTP request | fixed: 188 known not affected: 4 | 2026-06-30T11:38:08+00:00 | Vulnerability · Source |
| CVE-2016-9578 | redhat_vex | spice: Remote DoS via crafted message | fixed: 48 known affected: 1 | 2026-06-30T11:38:06+00:00 | Vulnerability · Source |
| CVE-2016-9577 | redhat_vex | spice: Buffer overflow in main_channel_alloc_msg_rcv_buf when reading large messages | fixed: 48 known affected: 1 | 2026-06-30T11:38:03+00:00 | Vulnerability · Source |
| CVE-2016-9574 | redhat_vex | nss: Remote DoS during session handshake when using SessionTicket extention and ECDHE-ECDSA | known affected: 13 | 2026-06-30T11:38:01+00:00 | Vulnerability · Source |
| CVE-2016-9042 | redhat_vex | ntp: DoS via origin timestamp check functionality | known not affected: 12 | 2026-06-30T11:37:59+00:00 | Vulnerability · Source |
| CVE-2016-9573 | redhat_vex | openjpeg: heap out-of-bounds read due to insufficient check in imagetopnm() | fixed: 68 known not affected: 4 | 2026-06-30T11:37:58+00:00 | Vulnerability · Source |
| CVE-2016-8707 | redhat_vex | ImageMagick: OOB write in convert utility when deflating TIFF files | known affected: 15 known not affected: 1 | 2026-06-30T11:37:53+00:00 | Vulnerability · Source |
| CVE-2016-8706 | redhat_vex | memcached: SASL authentication remote code execution | fixed: 46 known affected: 1 known not affected: 8 | 2026-06-30T11:37:52+00:00 | Vulnerability · Source |
| CVE-2016-8637 | redhat_vex | dracut: Local information disclosure of initramfs when early cpio is used | known not affected: 18 | 2026-06-30T11:37:48+00:00 | Vulnerability · Source |
| CVE-2016-8648 | redhat_vex | Karaf JMX Console RCE during deserialization | known affected: 2 known not affected: 2 | 2026-06-30T11:37:48+00:00 | Vulnerability · Source |
| CVE-2016-8653 | redhat_vex | Fuse-6: JMX endpoint deserializes untrusted credentials. | known affected: 2 | 2026-06-30T11:37:48+00:00 | Vulnerability · Source |
| CVE-2016-8641 | redhat_vex | nagios: Unsafe ownership change leading to privilege escalation | known affected: 10 known not affected: 1 | 2026-06-30T11:37:44+00:00 | Vulnerability · Source |