GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

VEX records

Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.

Reset

297693 VEX records

API response
Vulnerability Source Title Product status Imported Links
CVE-2025-52494 redhat_vex aws: AdaCore AWS: Missing SSL handshake timeout can cause denial of service known not affected: 1 2026-06-27T13:20:56+00:00 Vulnerability · Source
CVE-2025-50200 redhat_vex rabbitmq-server: RabbitMQ Node can log Basic Auth header from an HTTP request known affected: 5 2026-06-27T13:20:40+00:00 Vulnerability · Source
CVE-2025-46722 redhat_vex vllm: vLLM has a Weakness in MultiModalHasher Image Hashing Implementation known affected: 13 2026-06-27T13:15:28+00:00 Vulnerability · Source
CVE-2025-46560 redhat_vex vllm: vLLM phi4mm: Quadratic Time Complexity in Input Token Processing​ leads to denial of service known not affected: 12 2026-06-27T13:15:25+00:00 Vulnerability · Source
CVE-2025-46205 redhat_vex podofo: Podofo denial of service known not affected: 1 2026-06-27T13:15:24+00:00 Vulnerability · Source
CVE-2025-46149 redhat_vex torch: PyTorch reachable assertion known affected: 42 2026-06-27T13:15:23+00:00 Vulnerability · Source
CVE-2025-46153 redhat_vex torch: PyTorch inconsistent results known affected: 42 2026-06-27T13:15:23+00:00 Vulnerability · Source
CVE-2025-46148 redhat_vex torch: PyTorch incorrect results known affected: 42 2026-06-27T13:15:23+00:00 Vulnerability · Source
CVE-2025-4563 redhat_vex kube-apiserver: NodeRestriction Admission Controller Dynamic Resource Allocation Bypass known affected: 8 known not affected: 5 2026-06-27T13:15:19+00:00 Vulnerability · Source
CVE-2025-45160 redhat_vex cacti: Cacti: HTML injection vulnerability via invalid file upload known not affected: 1 2026-06-27T13:15:18+00:00 Vulnerability · Source
CVE-2025-43967 redhat_vex libheif: NULL Pointer Dereference in ImageItem_Grid::get_decoder in libheif known not affected: 1 2026-06-27T13:15:14+00:00 Vulnerability · Source
CVE-2025-4166 redhat_vex vault: Vault May Include Sensitive Data in Error Logs When Using the KV v2 Plugin known affected: 4 2026-06-27T13:14:50+00:00 Vulnerability · Source
CVE-2025-40919 redhat_vex authen-digestmd5: Authen::DigestMD5 insecure cnonce generation known not affected: 1 2026-06-27T13:14:43+00:00 Vulnerability · Source
CVE-2012-5509 redhat_vex aeolus-configserver: aeolus-configserver-setup /tmp file conductor credentials leak fixed: 14 2026-06-27T13:14:28+00:00 Vulnerability · Source
CVE-2012-5603 redhat_vex Katello: lack of authorization in proxies_controller.rb fixed: 114 2026-06-27T13:14:27+00:00 Vulnerability · Source
CVE-2012-5561 redhat_vex Katello: /etc/katello/secure/passphrase is world readable fixed: 78 2026-06-27T13:14:24+00:00 Vulnerability · Source
CVE-2012-5515 redhat_vex kernel: xen: Several memory hypercall operations allow invalid extent order values fixed: 61 2026-06-27T13:14:19+00:00 Vulnerability · Source
CVE-2012-5513 redhat_vex kernel: xen: XENMEM_exchange may overwrite hypervisor memory fixed: 88 2026-06-27T13:13:32+00:00 Vulnerability · Source
CVE-2025-40264 redhat_vex kernel: Linux kernel: be2net driver NULL pointer dereference leading to denial of service known affected: 260 known not affected: 14 2026-06-27T13:10:58+00:00 Vulnerability · Source
CVE-2012-5635 redhat_vex GlusterFS: insecure temporary file creation fixed: 80 2026-06-27T13:09:59+00:00 Vulnerability · Source
CVE-2012-5667 redhat_vex grep: Integer overflow leading to heap-based buffer-overflow when reading large lines fixed: 22 known not affected: 3 2026-06-27T13:09:58+00:00 Vulnerability · Source
CVE-2012-5638 redhat_vex sanlock world writable /var/log/sanlock.log fixed: 86 known affected: 5 2026-06-27T13:09:55+00:00 Vulnerability · Source
CVE-2012-5920 redhat_vex GWT: unknown XSS flaw fixed: 1 known affected: 1 2026-06-27T13:09:52+00:00 Vulnerability · Source
CVE-2012-5658 redhat_vex Origin: rhc-chk.rb password exposure in log files fixed: 69 2026-06-27T13:09:50+00:00 Vulnerability · Source
CVE-2012-5660 redhat_vex abrt: Race condition in abrt-action-install-debuginfo fixed: 298 2026-06-27T13:09:41+00:00 Vulnerability · Source
CVE-2012-5841 redhat_vex Mozilla: Improper security filtering for cross-origin wrappers (MFSA 2012-100) fixed: 160 2026-06-27T13:09:36+00:00 Vulnerability · Source
CVE-2012-5838 redhat_vex Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106) known not affected: 6 2026-06-27T13:09:36+00:00 Vulnerability · Source
CVE-2012-5659 redhat_vex abrt: Arbitrary Python code execution due improper sanitization of the PYTHONPATH environment variable by installing debuginfo packages into cache fixed: 298 2026-06-27T13:09:32+00:00 Vulnerability · Source
CVE-2012-5830 redhat_vex Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106) fixed: 160 2026-06-27T13:09:31+00:00 Vulnerability · Source
CVE-2012-5840 redhat_vex Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105) fixed: 160 2026-06-27T13:09:29+00:00 Vulnerability · Source
CVE-2012-5835 redhat_vex Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106) fixed: 160 2026-06-27T13:09:27+00:00 Vulnerability · Source
CVE-2012-5842 redhat_vex Mozilla: Miscellaneous memory safety hazards (rv:10.0.11) (MFSA 2012-91) fixed: 160 2026-06-27T13:09:26+00:00 Vulnerability · Source
CVE-2012-5833 redhat_vex Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106) fixed: 160 2026-06-27T13:09:21+00:00 Vulnerability · Source
CVE-2012-5829 redhat_vex Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105) fixed: 160 2026-06-27T13:09:15+00:00 Vulnerability · Source
CVE-2012-5839 redhat_vex Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105) fixed: 160 2026-06-27T13:08:51+00:00 Vulnerability · Source
CVE-2012-6607 redhat_vex augeas: symlink attack on a .augsave file known not affected: 11 2026-06-27T13:04:40+00:00 Vulnerability · Source
CVE-2012-6619 redhat_vex mongodb: memory over-read via incorrect BSON object length fixed: 86 known affected: 3 known not affected: 1818 2026-06-27T13:04:37+00:00 Vulnerability · Source
CVE-2012-6119 redhat_vex Candlepin: Re-enable manifest signature checking fixed: 39 2026-06-27T13:04:35+00:00 Vulnerability · Source
CVE-2012-6685 redhat_vex rubygem-nokogiri: XML eXternal Entity (XXE) flaw fixed: 311 known affected: 12 2026-06-27T13:04:31+00:00 Vulnerability · Source
CVE-2012-6074 redhat_vex Jenkins: cross-site scripting vulnerability fixed: 69 2026-06-27T13:04:30+00:00 Vulnerability · Source
CVE-2012-6072 redhat_vex Jenkins: HTTP response splitting fixed: 69 2026-06-27T13:04:27+00:00 Vulnerability · Source
CVE-2012-6711 redhat_vex bash: heap-based buffer overflow during echo of unsupported characters known affected: 3 known not affected: 7 2026-06-27T13:04:26+00:00 Vulnerability · Source
CVE-2012-6662 redhat_vex jquery-ui: XSS vulnerability in default content in Tooltip widget fixed: 104 known affected: 18 2026-06-27T13:04:22+00:00 Vulnerability · Source
CVE-2012-6073 redhat_vex Jenkins: open redirect fixed: 69 2026-06-27T13:04:21+00:00 Vulnerability · Source
CVE-2012-6116 redhat_vex Candlepin: bootstrap RPM deploys CA certificate file with mode 666 fixed: 58 2026-06-27T13:04:18+00:00 Vulnerability · Source
CVE-2012-6149 redhat_vex (spacewalk-java): XSS in system.addNote XML-RPC call due improper sanitization of note's subject and content fixed: 42 2026-06-27T13:04:16+00:00 Vulnerability · Source
CVE-2025-3879 redhat_vex vault: Vault’s Azure Authentication Method bound_location Restriction Could be Bypassed on Login known affected: 4 2026-06-27T13:01:01+00:00 Vulnerability · Source
CVE-2013-0164 redhat_vex openshift-origin-port-proxy: openshift-port-proxy-cfg lockwrap() tmp file creation fixed: 69 2026-06-27T12:59:37+00:00 Vulnerability · Source
CVE-2013-0221 redhat_vex coreutils: segfault in "sort -d" and "sort -M" with long line input fixed: 31 known affected: 1 2026-06-27T12:59:35+00:00 Vulnerability · Source
CVE-2013-0223 redhat_vex coreutils: segfault in "join -i" with long line input fixed: 31 known affected: 1 2026-06-27T12:59:32+00:00 Vulnerability · Source