VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292431 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-1120 | redhat_vex | kernel: fuse-backed file mmap-ed onto process cmdline arguments causes denial of service | fixed: 358 known affected: 15 known not affected: 45 | 2026-06-30T11:31:40+00:00 | Vulnerability · Source |
| CVE-2018-1114 | redhat_vex | undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service | fixed: 225 known affected: 4 known not affected: 2 | 2026-06-30T11:31:29+00:00 | Vulnerability · Source |
| CVE-2018-1103 | redhat_vex | source-to-image: Unsanitized paths in tar.go:ExtractTarStreamFromTarReader() allow malicious containers to overwrite files on the client machine | known affected: 1 | 2026-06-30T11:31:26+00:00 | Vulnerability · Source |
| CVE-2018-1090 | redhat_vex | pulp: sensitive credentials revealed through the API | fixed: 1110 known affected: 1 | 2026-06-30T11:31:20+00:00 | Vulnerability · Source |
| CVE-2018-1086 | redhat_vex | pcs: Debug parameter removal bypass, allowing information disclosure | fixed: 30 known not affected: 5 | 2026-06-30T11:31:18+00:00 | Vulnerability · Source |
| CVE-2018-1080 | redhat_vex | pki-core: Mishandled ACL configuration in AAclAuthz.java reverses rules that allow and deny access | fixed: 79 known affected: 14 known not affected: 35 | 2026-06-30T11:31:08+00:00 | Vulnerability · Source |
| CVE-2018-1075 | redhat_vex | ovirt-engine: Unfiltered password when choosing manual db provisioning | fixed: 21 | 2026-06-30T11:31:02+00:00 | Vulnerability · Source |
| CVE-2018-1061 | redhat_vex | python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib | fixed: 521 known affected: 24 | 2026-06-30T11:30:56+00:00 | Vulnerability · Source |
| CVE-2017-9117 | redhat_vex | libtiff: Heap-based buffer over-read in bmp2tiff | known affected: 12 | 2026-06-30T11:30:52+00:00 | Vulnerability · Source |
| CVE-2025-4404 | redhat_vex | freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA | fixed: 1119 known affected: 7 | 2026-06-30T11:30:32+00:00 | Vulnerability · Source |
| CVE-2017-7558 | redhat_vex | kernel: Out of bounds read in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() in SCTP stack | fixed: 207 known affected: 16 known not affected: 15 | 2026-06-30T11:30:30+00:00 | Vulnerability · Source |
| CVE-2017-7539 | redhat_vex | Qemu: qemu-nbd crashes due to undefined I/O coroutine | fixed: 58 known not affected: 22 | 2026-06-30T11:30:27+00:00 | Vulnerability · Source |
| CVE-2017-7545 | redhat_vex | jbpmmigration: XXE vulnerability in XmlUtils | fixed: 2 known affected: 1 | 2026-06-30T11:30:26+00:00 | Vulnerability · Source |
| CVE-2017-7538 | redhat_vex | 5: organization name allows XSS | fixed: 60 | 2026-06-30T11:30:25+00:00 | Vulnerability · Source |
| CVE-2017-7537 | redhat_vex | pki-core: mock CMC authentication plugin with hardcoded secret enabled by default | fixed: 56 known not affected: 14 | 2026-06-30T11:30:16+00:00 | Vulnerability · Source |
| CVE-2017-7535 | redhat_vex | foreman: XSS in the manage organization page | known affected: 1 under investigation: 17 | 2026-06-30T11:30:12+00:00 | Vulnerability · Source |
| CVE-2017-7528 | redhat_vex | Tower: X-Forwarded-For header allows internal servers to deploy other systems (using callback) | under investigation: 2 | 2026-06-30T11:30:09+00:00 | Vulnerability · Source |
| CVE-2017-7526 | redhat_vex | libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery | known affected: 10 | 2026-06-30T11:30:07+00:00 | Vulnerability · Source |
| CVE-2017-7518 | redhat_vex | Kernel: KVM: debug exception via syscall emulation | fixed: 191 known not affected: 43 | 2026-06-30T11:30:03+00:00 | Vulnerability · Source |
| CVE-2017-7514 | redhat_vex | SAT 5 XSS in the Failed Systems page | fixed: 672 | 2026-06-30T11:30:02+00:00 | Vulnerability · Source |
| CVE-2017-7513 | redhat_vex | 5: Failure to verify DB hostname against hostname in certificate in PostgreSQL through SSL configuration | known affected: 1 | 2026-06-30T11:30:01+00:00 | Vulnerability · Source |
| CVE-2017-7509 | redhat_vex | 8: Enrolling certificate without certreq field causes CA to crash | fixed: 17 | 2026-06-30T11:29:54+00:00 | Vulnerability · Source |
| CVE-2017-7500 | redhat_vex | rpm: Following symlinks to directories when installing packages allows privilege escalation | known affected: 20 | 2026-06-30T11:29:54+00:00 | Vulnerability · Source |
| CVE-2017-7497 | redhat_vex | CFME: Dialog for creating cloud volumes does not filter cloud tenants CVE-2017-7497 | fixed: 32 | 2026-06-30T11:29:46+00:00 | Vulnerability · Source |
| CVE-2017-7482 | redhat_vex | kernel: net/rxrpc: overflow in decoding of krb5 principal | fixed: 16 known affected: 11 known not affected: 33 | 2026-06-30T11:29:42+00:00 | Vulnerability · Source |
| CVE-2017-7481 | redhat_vex | ansible: Security issue with lookup return not tainting the jinja2 environment | fixed: 54 known affected: 1 known not affected: 3 | 2026-06-30T11:29:36+00:00 | Vulnerability · Source |
| CVE-2017-7470 | redhat_vex | spacewalk-backend: spacewalk-channel can be used by non-admin or disabled users for performing administrative tasks | fixed: 54 | 2026-06-30T11:29:34+00:00 | Vulnerability · Source |
| CVE-2026-27876 | redhat_vex | grafana: grafana-enterprise-plugin: Grafana: Remote arbitrary code execution via chained SQL Expressions and Enterprise plugin attack | known not affected: 21 | 2026-06-30T11:29:20+00:00 | Vulnerability · Source |
| CVE-2024-34351 | redhat_vex | next: Next.js Server-Side Request Forgery in Server Actions | fixed: 1 known affected: 3 known not affected: 2 | 2026-06-30T11:29:17+00:00 | Vulnerability · Source |
| CVE-2018-5740 | redhat_vex | bind: processing of certain records when "deny-answer-aliases" is in use may trigger an assert leading to a denial of service | fixed: 304 known affected: 1 known not affected: 20 | 2026-06-30T11:29:16+00:00 | Vulnerability · Source |
| CVE-2018-5735 | redhat_vex | bind: Assertion failure in validator.c due to incorrect handling of DNSSEC validation | known not affected: 45 | 2026-06-30T11:29:15+00:00 | Vulnerability · Source |
| CVE-2018-5732 | redhat_vex | dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server | fixed: 156 known affected: 1 known not affected: 6 | 2026-06-30T11:29:13+00:00 | Vulnerability · Source |
| CVE-2018-5734 | redhat_vex | bind: A malformed request can trigger an assertion failure in badcache.c | known not affected: 45 | 2026-06-30T11:29:13+00:00 | Vulnerability · Source |
| CVE-2018-5383 | redhat_vex | kernel: Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange | fixed: 76 known affected: 1 known not affected: 41 | 2026-06-30T11:29:12+00:00 | Vulnerability · Source |
| CVE-2018-5379 | redhat_vex | quagga: Double free vulnerability in bgpd when processing certain forms of UPDATE message allowing to crash or potentially execute arbitrary code | fixed: 54 known affected: 5 known not affected: 3 | 2026-06-30T11:29:04+00:00 | Vulnerability · Source |
| CVE-2017-7467 | redhat_vex | minicom: Out of bounds write in vt100.c | known affected: 3 | 2026-06-30T11:28:55+00:00 | Vulnerability · Source |
| CVE-2017-7463 | redhat_vex | business-central: Reflected XSS in artifact upload error message | fixed: 2 | 2026-06-30T11:28:49+00:00 | Vulnerability · Source |
| CVE-2017-5529 | redhat_vex | jasperreports: Information disclosure vulnerability | known affected: 1 | 2026-06-30T11:28:39+00:00 | Vulnerability · Source |
| CVE-2017-5528 | redhat_vex | jasperrreports: XSS and CSRF vulnerabilities leading to information disclosure | known affected: 1 | 2026-06-30T11:28:33+00:00 | Vulnerability · Source |
| CVE-2017-3144 | redhat_vex | dhcp: omapi code doesn't free socket descriptors when empty message is received allowing denial-of-service | fixed: 92 known not affected: 6 | 2026-06-30T11:28:23+00:00 | Vulnerability · Source |
| CVE-2017-3142 | redhat_vex | bind: An error in TSIG authentication can permit unauthorized zone transfers | fixed: 264 known affected: 1 known not affected: 1 | 2026-06-30T11:28:19+00:00 | Vulnerability · Source |
| CVE-2017-3140 | redhat_vex | bind: Error processing RPZ rules leads to endless loop while handling query | known not affected: 26 | 2026-06-30T11:28:03+00:00 | Vulnerability · Source |
| CVE-2017-3138 | redhat_vex | bind: REQUIRE assertion failure when null command string on control channel is received | known not affected: 26 | 2026-06-30T11:27:52+00:00 | Vulnerability · Source |
| CVE-2017-3136 | redhat_vex | bind: Incorrect error handling causes assertion failure when using DNS64 with "break-dnssec yes;" | fixed: 264 known not affected: 2 | 2026-06-30T11:27:47+00:00 | Vulnerability · Source |
| CVE-2017-3135 | redhat_vex | bind: Assertion failure when using DNS64 and RPZ Can Lead to Crash | fixed: 176 known not affected: 9 | 2026-06-30T11:27:47+00:00 | Vulnerability · Source |
| CVE-2017-2870 | redhat_vex | gdk-pixbuf2: Integer overflow in tiff_image_parse function | known affected: 7 | 2026-06-30T11:27:43+00:00 | Vulnerability · Source |
| CVE-2017-1002101 | redhat_vex | kubernetes: Volume security can be sidestepped with innocent emptyDir and subpath | fixed: 72 known affected: 1 known not affected: 4 | 2026-06-30T11:27:13+00:00 | Vulnerability · Source |
| CVE-2017-15118 | redhat_vex | Qemu: stack buffer overflow in NBD server triggered via long export name | fixed: 46 known affected: 5 known not affected: 43 | 2026-06-30T11:27:09+00:00 | Vulnerability · Source |
| CVE-2017-13090 | redhat_vex | wget: Heap-based buffer overflow in HTTP protocol handling | fixed: 18 known not affected: 3 | 2026-06-30T11:27:08+00:00 | Vulnerability · Source |
| CVE-2017-13089 | redhat_vex | wget: Stack-based buffer overflow in HTTP protocol handling | fixed: 18 known not affected: 3 | 2026-06-30T11:27:05+00:00 | Vulnerability · Source |