VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2012-2662 | redhat_vex | System: multiple XSS flaws | fixed: 74 known affected: 9 | 2026-06-27T13:50:44+00:00 | Vulnerability · Source |
| CVE-2012-2681 | redhat_vex | cumin: weak session keys | fixed: 234 known affected: 1 | 2026-06-27T13:50:42+00:00 | Vulnerability · Source |
| CVE-2012-2680 | redhat_vex | cumin: authentication bypass flaws | fixed: 234 known affected: 1 | 2026-06-27T13:50:41+00:00 | Vulnerability · Source |
| CVE-2012-2390 | redhat_vex | kernel: huge pages: memory leak on mmap failure | fixed: 190 known not affected: 1 | 2026-06-27T13:50:39+00:00 | Vulnerability · Source |
| CVE-2012-2386 | redhat_vex | php: Integer overflow leading to heap-buffer overflow in the Phar extension | fixed: 413 known not affected: 1 | 2026-06-27T13:50:37+00:00 | Vulnerability · Source |
| CVE-2012-2685 | redhat_vex | cumin: DoS via large image requests | fixed: 234 known affected: 1 | 2026-06-27T13:50:32+00:00 | Vulnerability · Source |
| CVE-2012-2384 | redhat_vex | kernel: drm/i915: integer overflow in i915_gem_do_execbuffer() | fixed: 174 known not affected: 13 | 2026-06-27T13:50:26+00:00 | Vulnerability · Source |
| CVE-2012-2744 | redhat_vex | kernel: netfilter: null pointer dereference in nf_ct_frag6_reasm() | fixed: 334 known not affected: 13 | 2026-06-27T13:49:40+00:00 | Vulnerability · Source |
| CVE-2025-67638 | redhat_vex | org.jenkins-ci.main/jenkins-core: Jenkins authorization token leak | known affected: 1 | 2026-06-27T13:46:45+00:00 | Vulnerability · Source |
| CVE-2025-67637 | redhat_vex | org.jenkins-ci.main/jenkins-core: Jenkins storage of authorization tokens in cleartext | known affected: 1 | 2026-06-27T13:46:42+00:00 | Vulnerability · Source |
| CVE-2025-67636 | redhat_vex | org.jenkins-ci.main/jenkins-core: Jenkins missing permission check | known affected: 1 | 2026-06-27T13:46:42+00:00 | Vulnerability · Source |
| CVE-2025-66577 | redhat_vex | cpp-httplib: cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust | known not affected: 1 | 2026-06-27T13:46:23+00:00 | Vulnerability · Source |
| CVE-2025-66547 | redhat_vex | nextcloud-server: Nextcloud Server users can modify tags on files that do not belong to them | known not affected: 1 | 2026-06-27T13:46:22+00:00 | Vulnerability · Source |
| CVE-2025-66552 | redhat_vex | nextcloud-server: Nextcloud Server admin_audit does not log all actions on files in groupfolders | known not affected: 1 | 2026-06-27T13:46:22+00:00 | Vulnerability · Source |
| CVE-2025-66512 | redhat_vex | nextcloud-server: Nextcloud Server XSS in SVG images when opened outside of Nextcloud | known not affected: 1 | 2026-06-27T13:46:20+00:00 | Vulnerability · Source |
| CVE-2025-66510 | redhat_vex | nextcloud-server: Nextcloud Server Search allowed users to retrieve contact information of other users beyond their contact list | known not affected: 1 | 2026-06-27T13:46:20+00:00 | Vulnerability · Source |
| CVE-2025-66491 | redhat_vex | github.com/traefik/traefik: Traefik has Inverted TLS Verification Logic in its ingress-nginx Provider | known affected: 1 | 2026-06-27T13:46:19+00:00 | Vulnerability · Source |
| CVE-2025-66019 | redhat_vex | pypdf: pypdf manipulated LZWDecode streams can exhaust RAM | known affected: 35 | 2026-06-27T13:46:12+00:00 | Vulnerability · Source |
| CVE-2025-65111 | redhat_vex | github.com/authzed/spicedb: SpiceDB can return incomplete results | known not affected: 1 | 2026-06-27T13:46:04+00:00 | Vulnerability · Source |
| CVE-2025-65516 | redhat_vex | seafile: Seafile cross-site scripting | known not affected: 1 | 2026-06-27T13:46:03+00:00 | Vulnerability · Source |
| CVE-2025-65015 | redhat_vex | joserfc: joserfc: Arbitrarily large JWT payloads in logs via exception messages | known not affected: 1 | 2026-06-27T13:45:57+00:00 | Vulnerability · Source |
| CVE-2012-3378 | redhat_vex | at-spi2-atk: insecure temporary file handling | known not affected: 1 | 2026-06-27T13:45:49+00:00 | Vulnerability · Source |
| CVE-2012-3404 | redhat_vex | glibc: incorrect size calculation in formatted printing can lead to FORTIFY_SOURCE format string protection bypass | fixed: 129 known not affected: 1 | 2026-06-27T13:45:47+00:00 | Vulnerability · Source |
| CVE-2012-3406 | redhat_vex | glibc: printf() unbound alloca() usage in case of positional parameters + many format specs | fixed: 192 | 2026-06-27T13:45:45+00:00 | Vulnerability · Source |
| CVE-2012-2944 | redhat_vex | nut: Heap-based buffer overflow due improper processing of non-printable characters in random network data | known not affected: 1 | 2026-06-27T13:45:44+00:00 | Vulnerability · Source |
| CVE-2012-3367 | redhat_vex | System: CA certificate can be revoked | fixed: 9 | 2026-06-27T13:45:43+00:00 | Vulnerability · Source |
| CVE-2012-3375 | redhat_vex | kernel: epoll: can leak file descriptors when returning -ELOOP | fixed: 104 known affected: 14 | 2026-06-27T13:45:41+00:00 | Vulnerability · Source |
| CVE-2012-3405 | redhat_vex | glibc: incorrect use of extend_alloca() in formatted printing can lead to FORTIFY_SOURCE format string protection bypass | fixed: 129 known not affected: 1 | 2026-06-27T13:44:51+00:00 | Vulnerability · Source |
| CVE-2012-3105 | redhat_vex | Mozilla: Miscellaneous memory safety hazards (rv:13.0/ rv:10.0.5) (MFSA 2012-34) | fixed: 160 | 2026-06-27T13:44:48+00:00 | Vulnerability · Source |
| CVE-2025-64436 | redhat_vex | kubevirt.io/kubevirt: KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes | known affected: 29 | 2026-06-27T13:41:39+00:00 | Vulnerability · Source |
| CVE-2025-64437 | redhat_vex | kubevirt.io/kubevirt: KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes | known affected: 29 | 2026-06-27T13:41:39+00:00 | Vulnerability · Source |
| CVE-2025-64435 | redhat_vex | kubevirt.io/kubevirt: KubeVirt VMI Denial-of-Service Using Pod Impersonation | known affected: 29 | 2026-06-27T13:41:39+00:00 | Vulnerability · Source |
| CVE-2025-64434 | redhat_vex | kubevirt: KubeVirt: API Identity Spoofing Vulnerability | known affected: 1 | 2026-06-27T13:41:38+00:00 | Vulnerability · Source |
| CVE-2025-64433 | redhat_vex | kubevirt.io/kubevirt: KubeVirt Arbitrary Container File Read | known affected: 29 | 2026-06-27T13:41:37+00:00 | Vulnerability · Source |
| CVE-2025-64432 | redhat_vex | kubevirt.io/kubevirt: KubeVirt Authentication Bypass in Kubernetes Aggregation Layer | known affected: 29 | 2026-06-27T13:41:37+00:00 | Vulnerability · Source |
| CVE-2025-64170 | redhat_vex | sudo-rs: sudo-rs: Partial password reveal is possible after timeout | known not affected: 1 | 2026-06-27T13:41:33+00:00 | Vulnerability · Source |
| CVE-2025-63938 | redhat_vex | tinyproxy: Tinyproxy integer overflow | known not affected: 1 | 2026-06-27T13:41:32+00:00 | Vulnerability · Source |
| CVE-2025-62875 | redhat_vex | opensmtpd: Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock | known not affected: 1 | 2026-06-27T13:41:30+00:00 | Vulnerability · Source |
| CVE-2025-62513 | redhat_vex | github.com/openbao/openbao/audit: OpenBao leaks HTTPRawBody in Audit Logs | known not affected: 1 | 2026-06-27T13:41:21+00:00 | Vulnerability · Source |
| CVE-2025-62375 | redhat_vex | github.com/in-toto/go-witness: go-witness Improper Verification of AWS EC2 Identity Documents | known affected: 4 | 2026-06-27T13:41:15+00:00 | Vulnerability · Source |
| CVE-2025-62157 | redhat_vex | github.com/argoproj/argo-workflows: Argo Workflows exposes artifact repository credentials | known affected: 11 | 2026-06-27T13:41:08+00:00 | Vulnerability · Source |
| CVE-2025-6211 | redhat_vex | llama-index: llama_index MD5 Hash Collision | known affected: 11 | 2026-06-27T13:41:08+00:00 | Vulnerability · Source |
| CVE-2025-6203 | redhat_vex | github.com/hashicorp/vault: Vault unauthenticated denial of service | known affected: 5 known not affected: 3 | 2026-06-27T13:41:05+00:00 | Vulnerability · Source |
| CVE-2025-61962 | redhat_vex | fetchmail: Fetchmail denial of service | known affected: 6 | 2026-06-27T13:41:02+00:00 | Vulnerability · Source |
| CVE-2025-61765 | redhat_vex | python-socketio: python-socketio code execution (RCE) via pickle deserialization | known not affected: 1 | 2026-06-27T13:40:51+00:00 | Vulnerability · Source |
| CVE-2025-61670 | redhat_vex | wasmtime-c-api: wasmtime-c-api-impl: Wasmtime memory leak in C API | known not affected: 1 | 2026-06-27T13:40:47+00:00 | Vulnerability · Source |
| CVE-2025-61672 | redhat_vex | matrix-synapse: Synapse: Lack of device key validation leads to federation degradation | known not affected: 1 | 2026-06-27T13:40:47+00:00 | Vulnerability · Source |
| CVE-2025-60751 | redhat_vex | geographiclib: GeographicLib buffer overflow | known not affected: 1 | 2026-06-27T13:40:37+00:00 | Vulnerability · Source |
| CVE-2012-3491 | redhat_vex | condor: local users can abort any idle jobs | fixed: 234 | 2026-06-27T13:40:24+00:00 | Vulnerability · Source |
| CVE-2012-3425 | redhat_vex | libpng: Out-of heap-based buffer read by inflating certain PNG images | known affected: 1 known not affected: 4 | 2026-06-27T13:40:21+00:00 | Vulnerability · Source |