VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292431 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-8639 | redhat_vex | foreman: Stored XSS via organization/location with HTML in name | fixed: 276 known affected: 1 | 2026-06-30T11:37:43+00:00 | Vulnerability · Source |
| CVE-2016-8635 | redhat_vex | nss: small-subgroups attack flaw | fixed: 314 | 2026-06-30T11:37:38+00:00 | Vulnerability · Source |
| CVE-2016-8634 | redhat_vex | foreman: Stored XSS in org/loc wizard | fixed: 276 known affected: 1 | 2026-06-30T11:37:35+00:00 | Vulnerability · Source |
| CVE-2016-8631 | redhat_vex | 3: Router sometimes selects new routes over old routes when determining claimed hostnames | fixed: 11 | 2026-06-30T11:37:34+00:00 | Vulnerability · Source |
| CVE-2016-8628 | redhat_vex | ansible: Command injection by compromised server via fact variables | fixed: 21 known affected: 1 known not affected: 6 | 2026-06-30T11:37:29+00:00 | Vulnerability · Source |
| CVE-2016-8627 | redhat_vex | admin-cli: Potential EAP resource starvation DOS attack via GET requests for server log files | fixed: 1479 | 2026-06-30T11:37:28+00:00 | Vulnerability · Source |
| CVE-2016-8626 | redhat_vex | Ceph: RGW Denial of Service by sending null or specially crafted POST object requests | fixed: 242 known not affected: 3 | 2026-06-30T11:37:25+00:00 | Vulnerability · Source |
| CVE-2016-8625 | redhat_vex | curl: IDNA 2003 makes curl use wrong host | fixed: 337 known affected: 19 | 2026-06-30T11:37:24+00:00 | Vulnerability · Source |
| CVE-2016-8624 | redhat_vex | curl: Invalid URL parsing with '#' | fixed: 337 known affected: 19 | 2026-06-30T11:37:21+00:00 | Vulnerability · Source |
| CVE-2016-8619 | redhat_vex | curl: Double-free in krb5 code | fixed: 337 known affected: 19 | 2026-06-30T11:37:16+00:00 | Vulnerability · Source |
| CVE-2016-8618 | redhat_vex | curl: Double-free in curl_maprintf | fixed: 337 known affected: 19 | 2026-06-30T11:37:15+00:00 | Vulnerability · Source |
| CVE-2016-8617 | redhat_vex | curl: Out-of-bounds write via unchecked multiplication | fixed: 337 known affected: 19 | 2026-06-30T11:37:13+00:00 | Vulnerability · Source |
| CVE-2016-8615 | redhat_vex | curl: Cookie injection for other servers | fixed: 337 known affected: 19 | 2026-06-30T11:37:12+00:00 | Vulnerability · Source |
| CVE-2016-8614 | redhat_vex | ansible: Improper verification of key fingerprints in apt_key module | known not affected: 10 | 2026-06-30T11:37:10+00:00 | Vulnerability · Source |
| CVE-2016-8613 | redhat_vex | foreman: Stored XSS vulnerability in remote execution plugin | fixed: 276 | 2026-06-30T11:37:06+00:00 | Vulnerability · Source |
| CVE-2016-8609 | redhat_vex | keycloak: account hijacking via auth code fixation | fixed: 1 known not affected: 1 | 2026-06-30T11:37:03+00:00 | Vulnerability · Source |
| CVE-2016-8608 | redhat_vex | Stored XSS in business process editor | fixed: 2 known affected: 2 | 2026-06-30T11:37:02+00:00 | Vulnerability · Source |
| CVE-2016-8339 | redhat_vex | redis: OOB write vulnerability in handling of client-output-buffer-limit option during the CONFIG SET command | known not affected: 18 | 2026-06-30T11:37:00+00:00 | Vulnerability · Source |
| CVE-2016-8331 | redhat_vex | libtiff: FAX IFD Entry Parsing Type Confusion | known affected: 3 known not affected: 9 | 2026-06-30T11:36:59+00:00 | Vulnerability · Source |
| CVE-2016-7076 | redhat_vex | sudo: noexec bypass via wordexp() | fixed: 94 known affected: 1 | 2026-06-30T11:36:55+00:00 | Vulnerability · Source |
| CVE-2016-7070 | redhat_vex | Tower: PostgreSQL privilege escalation in Tower-deployed setups | known not affected: 1 | 2026-06-30T11:36:54+00:00 | Vulnerability · Source |
| CVE-2016-7043 | redhat_vex | kie-server: Plaintext password storage in kie-server and busitess-central | known affected: 4 | 2026-06-30T11:36:45+00:00 | Vulnerability · Source |
| CVE-2016-7041 | redhat_vex | Workbench: Path traversal vulnerability | fixed: 2 known affected: 2 | 2026-06-30T11:36:44+00:00 | Vulnerability · Source |
| CVE-2016-0750 | redhat_vex | client: unchecked deserialization in marshaller util | fixed: 2 under investigation: 1 | 2026-06-30T11:36:41+00:00 | Vulnerability · Source |
| CVE-2016-6343 | redhat_vex | Dashbuilder: Reflected XSS | fixed: 2 known affected: 1 known not affected: 1 | 2026-06-30T11:36:41+00:00 | Vulnerability · Source |
| CVE-2016-2125 | redhat_vex | samba: Unconditional privilege delegation to Kerberos servers in trusted realms | fixed: 610 known affected: 2 | 2026-06-30T11:36:40+00:00 | Vulnerability · Source |
| CVE-2014-8184 | redhat_vex | liblouis: stack-based buffer overflow in findTable() | fixed: 62 | 2026-06-30T11:36:35+00:00 | Vulnerability · Source |
| CVE-2014-8183 | redhat_vex | foreman: models with a 'belongs_to' association to an Organization do not verify association belongs to that Organization | fixed: 276 | 2026-06-30T11:36:34+00:00 | Vulnerability · Source |
| CVE-2013-1815 | redhat_vex | PackStack: Red Hat OpenStack: PackStack: Unauthorized system modification via insecure answer file creation | known affected: 2 | 2026-06-30T11:36:30+00:00 | Vulnerability · Source |
| CVE-2013-0266 | redhat_vex | puppetlabs-cinder: PackStack: OpenStack: puppetlabs-cinder: Information disclosure of OpenStack administrative passwords due to world-readable configuration files. | known affected: 2 | 2026-06-30T11:36:26+00:00 | Vulnerability · Source |
| CVE-2013-0261 | redhat_vex | PackStack: PackStack: Arbitrary File Overwrite via Symlink Attack | known affected: 2 | 2026-06-30T11:36:25+00:00 | Vulnerability · Source |
| CVE-2012-5571 | redhat_vex | OpenStack Keystone: OpenStack Keystone: Authorization bypass via improper EC2 token handling | known affected: 10 | 2026-06-30T11:36:21+00:00 | Vulnerability · Source |
| CVE-2012-4550 | redhat_vex | JBoss Enterprise Application Platform: JBoss EAP: JBEAP: JBoss Enterprise Application Platform: Unauthorized EJB access via authorization module bypass | fixed: 1010 known not affected: 3 | 2026-06-30T11:36:20+00:00 | Vulnerability · Source |
| CVE-2012-4549 | redhat_vex | JBoss Enterprise Application Platform: org.jboss.as.ejb3: JBoss Enterprise Application Platform: Access restriction bypass via improper EJB method authorization | fixed: 1010 known not affected: 3 | 2026-06-30T11:36:15+00:00 | Vulnerability · Source |
| CVE-2012-0059 | redhat_vex | Spacewalk-backend: Spacewalk-backend: Information Disclosure via cleartext passwords in error messages | known affected: 8 | 2026-06-30T11:36:12+00:00 | Vulnerability · Source |
| CVE-2011-3344 | redhat_vex | spacewalk: Spacewalk: Cross-site scripting via URI in Lookup Login/Password form | known affected: 8 | 2026-06-30T11:36:11+00:00 | Vulnerability · Source |
| CVE-2011-2927 | redhat_vex | Spacewalk: Spacewalk and Red Hat Network Satellite: Cross-site scripting vulnerability via Search forms | known affected: 8 | 2026-06-30T11:36:10+00:00 | Vulnerability · Source |
| CVE-2011-2920 | redhat_vex | Spacewalk: Spacewalk: Cross-site scripting vulnerability allows arbitrary web script execution. | known affected: 8 | 2026-06-30T11:36:07+00:00 | Vulnerability · Source |
| CVE-2011-1594 | redhat_vex | Spacewalk: Spacewalk: Open redirect vulnerability enables phishing attacks via URL parameter | known affected: 8 | 2026-06-30T11:36:07+00:00 | Vulnerability · Source |
| CVE-2009-4139 | redhat_vex | spacewalk-java: spacewalk: Red Hat Network Satellite: Spacewalk Java: Privilege escalation via cross-site request forgery | known affected: 2 | 2026-06-30T11:36:05+00:00 | Vulnerability · Source |
| CVE-2018-1002100 | redhat_vex | kubernetes: Kubectl copy doesn't check for paths outside of it's destination directory | fixed: 38 known affected: 1 known not affected: 36 | 2026-06-30T11:34:46+00:00 | Vulnerability · Source |
| CVE-2018-14661 | redhat_vex | glusterfs: features/locks translator passes an user-controlled string to snprintf without a proper format string resulting in a denial of service | fixed: 80 known not affected: 32 | 2026-06-30T11:34:45+00:00 | Vulnerability · Source |
| CVE-2018-14660 | redhat_vex | glusterfs: Repeat use of "GF_META_LOCK_KEY" xattr allows for memory exhaustion | fixed: 80 known not affected: 32 | 2026-06-30T11:34:42+00:00 | Vulnerability · Source |
| CVE-2018-14659 | redhat_vex | glusterfs: Unlimited file creation via "GF_XATTR_IOSTATS_DUMP_KEY" xattr allows for denial of service | fixed: 80 known not affected: 32 | 2026-06-30T11:34:39+00:00 | Vulnerability · Source |
| CVE-2018-14658 | redhat_vex | keycloak: Open Redirect in Login and Logout | fixed: 7 known affected: 2 | 2026-06-30T11:34:36+00:00 | Vulnerability · Source |
| CVE-2018-14655 | redhat_vex | keycloak: XSS-Vulnerability with response_mode=form_post | fixed: 7 known affected: 2 | 2026-06-30T11:34:35+00:00 | Vulnerability · Source |
| CVE-2018-14654 | redhat_vex | glusterfs: "features/index" translator can create arbitrary, empty files | fixed: 80 known not affected: 32 | 2026-06-30T11:34:31+00:00 | Vulnerability · Source |
| CVE-2018-14653 | redhat_vex | glusterfs: Heap-based buffer overflow via "gf_getspec_req" RPC message | fixed: 80 known not affected: 32 | 2026-06-30T11:34:29+00:00 | Vulnerability · Source |
| CVE-2018-14650 | redhat_vex | sos-collector: incorrect permissions set on newly created files | fixed: 10 | 2026-06-30T11:34:27+00:00 | Vulnerability · Source |
| CVE-2018-14652 | redhat_vex | glusterfs: Buffer overflow in "features/locks" translator allows for denial of service | fixed: 80 known not affected: 32 | 2026-06-30T11:34:25+00:00 | Vulnerability · Source |