VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292431 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-10898 | redhat_vex | openstack-tripleo-heat-templates: Default ODL deployment uses hard coded administrative credentials | fixed: 13 known not affected: 13 | 2026-06-30T11:25:06+00:00 | Vulnerability · Source |
| CVE-2018-10897 | redhat_vex | yum-utils: reposync: improper path validation may lead to directory traversal | fixed: 265 known affected: 1 known not affected: 6 | 2026-06-30T11:25:04+00:00 | Vulnerability · Source |
| CVE-2018-10884 | redhat_vex | ansible-tower: CSRF in awx/api/authentication.py allows for hijacking of the authtoken cookie | known affected: 1 known not affected: 7 | 2026-06-30T11:25:01+00:00 | Vulnerability · Source |
| CVE-2018-10873 | redhat_vex | spice: Missing check in demarshal.py:write_validate_array_item() allows for buffer overflow and denial of service | fixed: 210 known not affected: 4 | 2026-06-30T11:24:57+00:00 | Vulnerability · Source |
| CVE-2018-10870 | redhat_vex | redhat-certification: rhcertStore.py: __saveResultsFile allows to write any file | fixed: 10 known not affected: 1 | 2026-06-30T11:24:56+00:00 | Vulnerability · Source |
| CVE-2018-10869 | redhat_vex | redhat-certification: /download allows to download any file | fixed: 10 known not affected: 1 | 2026-06-30T11:24:54+00:00 | Vulnerability · Source |
| CVE-2018-10843 | redhat_vex | source-to-image: Builder images with assembler-user LABEL set to root allows attackers to execute arbitrary code | fixed: 32 known not affected: 2 | 2026-06-30T11:24:53+00:00 | Vulnerability · Source |
| CVE-2018-10841 | redhat_vex | glusterfs: access trusted peer group via remote-host command | fixed: 69 known not affected: 23 | 2026-06-30T11:24:50+00:00 | Vulnerability · Source |
| CVE-2018-3849 | redhat_vex | cfitsio: Stack-based buffer overflow in ffghtb() allows for potential code execution | known affected: 1 | 2026-06-30T11:24:49+00:00 | Vulnerability · Source |
| CVE-2018-3848 | redhat_vex | cfitsio: Stack-based buffer overflow in ffghbn() allows for potential code execution | known affected: 1 | 2026-06-30T11:24:44+00:00 | Vulnerability · Source |
| CVE-2018-3846 | redhat_vex | cfitsio: Unsafe use of sprintf() can allow a remote unauthenticated attacker to execute arbitrary code | known affected: 2 | 2026-06-30T11:24:43+00:00 | Vulnerability · Source |
| CVE-2018-1417 | redhat_vex | JDK: J9 JVM allows untrusted code running under a security manager to elevate its privileges | fixed: 205 known affected: 1 known not affected: 15 | 2026-06-30T11:24:40+00:00 | Vulnerability · Source |
| CVE-2018-1124 | redhat_vex | procps: Integer overflows leading to heap overflow in file2strvec | fixed: 273 known affected: 1 known not affected: 4 | 2026-06-30T11:24:39+00:00 | Vulnerability · Source |
| CVE-2018-1112 | redhat_vex | glusterfs: auth.allow allows unauthenticated clients to mount gluster volumes (CVE-2018-1088 regression) | fixed: 69 known not affected: 32 | 2026-06-30T11:24:36+00:00 | Vulnerability · Source |
| CVE-2018-1111 | redhat_vex | dhcp: Command injection vulnerability in the DHCP client NetworkManager integration script | fixed: 399 known not affected: 7 | 2026-06-30T11:24:34+00:00 | Vulnerability · Source |
| CVE-2018-1089 | redhat_vex | 389-ds-base: ns-slapd crash via large filter value in ldapsearch | fixed: 101 known not affected: 8 | 2026-06-30T11:24:34+00:00 | Vulnerability · Source |
| CVE-2018-1087 | redhat_vex | Kernel: KVM: error in exception handling leads to wrong debug stack value | fixed: 548 known affected: 2 known not affected: 75 | 2026-06-30T11:24:30+00:00 | Vulnerability · Source |
| CVE-2018-1085 | redhat_vex | openshift-ansible: Incorrectly quoted values in etcd.conf causes disabling of SSL client certificate authentication | fixed: 32 | 2026-06-30T11:24:27+00:00 | Vulnerability · Source |
| CVE-2018-1084 | redhat_vex | corosync: Integer overflow in exec/totemcrypto.c:authenticate_nss_2_3() function | fixed: 44 known affected: 4 known not affected: 9 | 2026-06-30T11:24:25+00:00 | Vulnerability · Source |
| CVE-2018-1079 | redhat_vex | pcs: Privilege escalation via authorized user malicious REST call | fixed: 20 known not affected: 7 | 2026-06-30T11:24:21+00:00 | Vulnerability · Source |
| CVE-2018-1070 | redhat_vex | Routing: Malicous Service configuration can bring down routing for an entire shard. | fixed: 32 | 2026-06-30T11:24:21+00:00 | Vulnerability · Source |
| CVE-2017-7543 | redhat_vex | openstack-neutron: iptables not active after update | fixed: 112 known not affected: 12 | 2026-06-30T11:24:18+00:00 | Vulnerability · Source |
| CVE-2017-7530 | redhat_vex | cfme: Execution of arbitrary methods through filter param | fixed: 16 | 2026-06-30T11:24:16+00:00 | Vulnerability · Source |
| CVE-2017-7466 | redhat_vex | ansible: Arbitrary code execution on control node (incomplete fix for CVE-2016-9587) | fixed: 54 known not affected: 4 | 2026-06-30T11:24:13+00:00 | Vulnerability · Source |
| CVE-2017-3145 | redhat_vex | bind: Improper fetch cleanup sequencing in the resolver can cause named to crash | fixed: 575 known affected: 1 known not affected: 18 | 2026-06-30T11:24:06+00:00 | Vulnerability · Source |
| CVE-2017-3143 | redhat_vex | bind: An error in TSIG authentication can permit unauthorized dynamic updates | fixed: 264 known affected: 1 known not affected: 1 | 2026-06-30T11:24:06+00:00 | Vulnerability · Source |
| CVE-2017-3141 | redhat_vex | bind: BIND installer on Windows uses an unquoted service path which allows privilege escalation | known not affected: 26 | 2026-06-30T11:24:01+00:00 | Vulnerability · Source |
| CVE-2017-3137 | redhat_vex | bind: Processing a response containing CNAME or DNAME with unusual order can crash resolver | fixed: 511 known affected: 2 | 2026-06-30T11:23:56+00:00 | Vulnerability · Source |
| CVE-2017-2888 | redhat_vex | SDL: Integer overflow while creating a new RGB surface | known not affected: 8 | 2026-06-30T11:23:56+00:00 | Vulnerability · Source |
| CVE-2017-2862 | redhat_vex | gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function | fixed: 8618 known affected: 3 known not affected: 6 | 2026-06-30T11:23:51+00:00 | Vulnerability · Source |
| CVE-2017-2839 | redhat_vex | freerdp: Rdp Client License Read Challenge Packet Denial of Service | known affected: 12 | 2026-06-30T11:23:51+00:00 | Vulnerability · Source |
| CVE-2017-2838 | redhat_vex | freerdp: Rdp Client License Read Product Info Denial of Service | known affected: 12 | 2026-06-30T11:23:51+00:00 | Vulnerability · Source |
| CVE-2017-2885 | redhat_vex | libsoup: Stack based buffer overflow with HTTP Chunked Encoding | fixed: 47 known not affected: 4 | 2026-06-30T11:23:51+00:00 | Vulnerability · Source |
| CVE-2025-6199 | redhat_vex | gdk-pixbuf: Uninitialized Memory Disclosure in GdkPixbuf GIF LZW Decoder | known affected: 28 | 2026-06-30T11:13:25+00:00 | Vulnerability · Source |
| CVE-2025-4945 | redhat_vex | libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup | fixed: 309 known affected: 3 | 2026-06-30T11:13:12+00:00 | Vulnerability · Source |
| CVE-2025-49178 | redhat_vex | xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore | fixed: 1166 known affected: 9 | 2026-06-30T11:10:44+00:00 | Vulnerability · Source |
| CVE-2025-6035 | redhat_vex | gimp: Gimp Integer Overflow | known affected: 11 known not affected: 21 | 2026-06-30T11:10:40+00:00 | Vulnerability · Source |
| CVE-2025-5962 | redhat_vex | rhel-lightspeed: Improper Access Control in Lightspeed History Management Allows Local Privilege Manipulation | fixed: 6 | 2026-06-30T11:10:35+00:00 | Vulnerability · Source |
| CVE-2025-5024 | redhat_vex | gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs | fixed: 122 | 2026-06-30T11:10:25+00:00 | Vulnerability · Source |
| CVE-2025-4969 | redhat_vex | libsoup: Off-by-One Out-of-Bounds Read in find_boundary() in soup-multipart.c | known affected: 16 | 2026-06-30T11:10:21+00:00 | Vulnerability · Source |
| CVE-2025-49179 | redhat_vex | xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension | fixed: 1166 known affected: 9 | 2026-06-30T11:10:11+00:00 | Vulnerability · Source |
| CVE-2025-49177 | redhat_vex | xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Data Leak in XFIXES Extension's XFixesSetClientDisconnectMode | fixed: 161 known affected: 60 | 2026-06-30T11:10:08+00:00 | Vulnerability · Source |
| CVE-2025-6019 | redhat_vex | libblockdev: LPE from allow_active to root in libblockdev via udisks | fixed: 1847 | 2026-06-30T11:10:01+00:00 | Vulnerability · Source |
| CVE-2025-6018 | redhat_vex | pam-config: LPE from unprivileged to allow_active in PAM | known not affected: 10 | 2026-06-30T11:10:00+00:00 | Vulnerability · Source |
| CVE-2025-4948 | redhat_vex | libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup | fixed: 285 known affected: 3 | 2026-06-30T11:09:56+00:00 | Vulnerability · Source |
| CVE-2023-53672 | redhat_vex | kernel: btrfs: output extra debug info if we failed to find an inline backref | known affected: 42 known not affected: 232 | 2026-06-30T10:40:02+00:00 | Vulnerability · Source |
| CVE-2023-53230 | redhat_vex | kernel: Kernel: Denial of Service via memory leak in SMB client | fixed: 430 known affected: 22 known not affected: 126 | 2026-06-30T10:40:01+00:00 | Vulnerability · Source |
| CVE-2022-50484 | redhat_vex | kernel: ALSA: usb-audio: Fix potential memory leaks | fixed: 321 known affected: 80 known not affected: 76 | 2026-06-30T10:40:01+00:00 | Vulnerability · Source |
| CVE-2025-68725 | redhat_vex | kernel: bpf: Do not let BPF test infra emit invalid GSO types to stack | known affected: 246 known not affected: 28 | 2026-06-30T10:40:00+00:00 | Vulnerability · Source |
| CVE-2025-21805 | redhat_vex | kernel: RDMA/rtrs: Add missing deinit() call | known not affected: 274 | 2026-06-30T10:39:59+00:00 | Vulnerability · Source |