VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2013-5606 | redhat_vex | nss: CERT_VerifyCert returns SECSuccess (saying certificate is good) even for bad certificates (MFSA 2013-103) | fixed: 259 known not affected: 6 | 2026-06-27T11:49:21+00:00 | Vulnerability · Source |
| CVE-2013-4956 | redhat_vex | Puppet: Local Privilege Escalation/Arbitrary Code Execution | fixed: 16 known not affected: 3 | 2026-06-27T11:49:21+00:00 | Vulnerability · Source |
| CVE-2013-5573 | redhat_vex | jenkins: default markup formatter permits offsite-bound forms (SECURITY-88) | fixed: 6 known affected: 1 | 2026-06-27T11:49:19+00:00 | Vulnerability · Source |
| CVE-2013-5590 | redhat_vex | Mozilla: Miscellaneous memory safety hazards (rv:17.0.10) (MFSA 2013-93) | fixed: 160 | 2026-06-27T11:49:19+00:00 | Vulnerability · Source |
| CVE-2013-5600 | redhat_vex | Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100) | fixed: 160 | 2026-06-27T11:49:15+00:00 | Vulnerability · Source |
| CVE-2013-5588 | redhat_vex | cacti: XSS and SQL injection flaws | known not affected: 1 | 2026-06-27T11:49:15+00:00 | Vulnerability · Source |
| CVE-2013-5599 | redhat_vex | Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100) | fixed: 160 | 2026-06-27T11:49:13+00:00 | Vulnerability · Source |
| CVE-2013-5602 | redhat_vex | Mozilla: Memory corruption in workers (MFSA 2013-101) | fixed: 160 | 2026-06-27T11:49:00+00:00 | Vulnerability · Source |
| CVE-2013-5601 | redhat_vex | Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100) | fixed: 160 | 2026-06-27T11:48:45+00:00 | Vulnerability · Source |
| CVE-2013-5605 | redhat_vex | nss: Null_Cipher() does not respect maxOutputLen (MFSA 2013-103) | fixed: 505 known not affected: 6 | 2026-06-27T11:48:18+00:00 | Vulnerability · Source |
| CVE-2013-5597 | redhat_vex | Mozilla: Use-after-free when updating offline cache (MFSA 2013-98) | fixed: 160 | 2026-06-27T11:48:05+00:00 | Vulnerability · Source |
| CVE-2013-6372 | redhat_vex | Jenkins: insecure storage of passwords in Subversion plugin (SECURITY-58) | fixed: 6 known affected: 1 | 2026-06-27T11:40:04+00:00 | Vulnerability · Source |
| CVE-2013-6490 | redhat_vex | pidgin: Heap-based buffer overflow in SIMPLE protocol plugin | fixed: 116 known not affected: 10 | 2026-06-27T11:39:57+00:00 | Vulnerability · Source |
| CVE-2013-6412 | redhat_vex | augeas: incorrect permissions set on newly created files | fixed: 65 known not affected: 7 | 2026-06-27T11:39:48+00:00 | Vulnerability · Source |
| CVE-2013-6399 | redhat_vex | qemu: virtio: buffer overrun on incoming migration | fixed: 114 known affected: 2 | 2026-06-27T11:39:35+00:00 | Vulnerability · Source |
| CVE-2013-6435 | redhat_vex | rpm: race condition during the installation process | fixed: 421 | 2026-06-27T11:39:30+00:00 | Vulnerability · Source |
| CVE-2013-6367 | redhat_vex | kvm: division by zero in apic_get_tmcct() | fixed: 277 known affected: 1 known not affected: 44 | 2026-06-27T11:39:28+00:00 | Vulnerability · Source |
| CVE-2013-6439 | redhat_vex | candlepin: insecure authentication enabled by default | fixed: 4 known not affected: 3 | 2026-06-27T11:38:50+00:00 | Vulnerability · Source |
| CVE-2013-6478 | redhat_vex | pidgin: DoS when rendering long URLs | fixed: 116 known not affected: 10 | 2026-06-27T11:35:40+00:00 | Vulnerability · Source |
| CVE-2013-7072 | redhat_vex | monitorix: HTTP server 'handle_request()' session fixation & XSS vulnerabilities | known not affected: 1 | 2026-06-27T11:35:38+00:00 | Vulnerability · Source |
| CVE-2013-6457 | redhat_vex | libvirt: avoid crashing if calling 'virsh numatune' on an inactive domain (libxl) | known not affected: 41 | 2026-06-27T11:35:36+00:00 | Vulnerability · Source |
| CVE-2013-6443 | redhat_vex | CFME: GET request CSRF vulnerability | fixed: 10 | 2026-06-27T11:35:34+00:00 | Vulnerability · Source |
| CVE-2013-6456 | redhat_vex | libvirt: unsafe usage of paths under /proc/$PID/root | known affected: 33 known not affected: 8 | 2026-06-27T11:35:31+00:00 | Vulnerability · Source |
| CVE-2013-6459 | redhat_vex | rubygem-will_paginate: XSS vulnerabilities | fixed: 276 known affected: 4 | 2026-06-27T11:35:27+00:00 | Vulnerability · Source |
| CVE-2013-7071 | redhat_vex | monitorix: HTTP server 'handle_request()' session fixation & XSS vulnerabilities | known not affected: 1 | 2026-06-27T11:35:25+00:00 | Vulnerability · Source |
| CVE-2013-6485 | redhat_vex | pidgin: Heap-based buffer overflow when parsing chunked HTTP responses | fixed: 116 known not affected: 10 | 2026-06-27T11:35:25+00:00 | Vulnerability · Source |
| CVE-2013-6445 | redhat_vex | cumin: weak password hashing | fixed: 75 | 2026-06-27T11:35:22+00:00 | Vulnerability · Source |
| CVE-2013-6489 | redhat_vex | pidgin: Heap-based buffer overflow in MXit emoticon parsing | fixed: 116 known not affected: 10 | 2026-06-27T11:35:20+00:00 | Vulnerability · Source |
| CVE-2013-7070 | redhat_vex | monitorix: HTTP server 'handle_request()' session fixation & XSS vulnerabilities | known not affected: 1 | 2026-06-27T11:35:20+00:00 | Vulnerability · Source |
| CVE-2013-6780 | redhat_vex | XSS vulnerability in YUI 2.5.0 through 2.9.0 | known affected: 1 | 2026-06-27T11:35:19+00:00 | Vulnerability · Source |
| CVE-2013-6458 | redhat_vex | qemu: job usage issue in several APIs leading to libvirtd crash | fixed: 72 known affected: 2 known not affected: 33 | 2026-06-27T11:35:15+00:00 | Vulnerability · Source |
| CVE-2013-6481 | redhat_vex | pidgin: DoS caused due to OOB read in Yahoo protocol plugin | fixed: 116 known not affected: 10 | 2026-06-27T11:35:10+00:00 | Vulnerability · Source |
| CVE-2013-7437 | redhat_vex | potrace: possible heap overflow | known not affected: 1 | 2026-06-27T11:29:25+00:00 | Vulnerability · Source |
| CVE-2013-7439 | redhat_vex | libX11: buffer overflow in MakeBigReq macro | fixed: 854 known affected: 1 known not affected: 4 | 2026-06-27T11:29:23+00:00 | Vulnerability · Source |
| CVE-2013-7424 | redhat_vex | glibc: Invalid-free when using getaddrinfo() | fixed: 187 known not affected: 8 | 2026-06-27T11:29:17+00:00 | Vulnerability · Source |
| CVE-2013-7330 | redhat_vex | jenkins: configure a project you do not have access to (SECURITY-55) | fixed: 6 known affected: 1 | 2026-06-27T11:29:16+00:00 | Vulnerability · Source |
| CVE-2013-7354 | redhat_vex | libpng: integer overflow leading to a heap-based buffer overflow in png_set_sPLT() and png_set_text_2() | known not affected: 12 | 2026-06-27T11:29:14+00:00 | Vulnerability · Source |
| CVE-2013-7423 | redhat_vex | glibc: getaddrinfo() writes DNS queries to random file descriptors under high load | fixed: 362 known not affected: 1 | 2026-06-27T11:29:10+00:00 | Vulnerability · Source |
| CVE-2013-7353 | redhat_vex | libpng: integer overflow leading to a heap-based buffer overflow in png_set_unknown_chunks() | known not affected: 12 | 2026-06-27T11:29:08+00:00 | Vulnerability · Source |
| CVE-2013-7098 | redhat_vex | openconnect: heap-based buffer overflow if MTU is increased on reconnection | known not affected: 1 | 2026-06-27T11:29:07+00:00 | Vulnerability · Source |
| CVE-2025-58063 | redhat_vex | github.com/coredns/coredns: CoreDNS Lease ID Confusion | known affected: 2 known not affected: 1 | 2026-06-27T11:26:03+00:00 | Vulnerability · Source |
| CVE-2014-0040 | redhat_vex | openstack-heat-templates: use of HTTP to download signing keys/code | fixed: 2 | 2026-06-27T11:25:10+00:00 | Vulnerability · Source |
| CVE-2014-0084 | redhat_vex | rubygem-openshift-origin-node: cron.daily/cron.weekly denial of service | fixed: 865 known affected: 1 | 2026-06-27T11:25:09+00:00 | Vulnerability · Source |
| CVE-2014-0077 | redhat_vex | kernel: vhost-net: insufficiency in handling of big packets in handle_rx() | fixed: 361 known not affected: 44 | 2026-06-27T11:24:51+00:00 | Vulnerability · Source |
| CVE-2014-0036 | redhat_vex | rubygem-rbovirt: unsafe use of rest-client | known affected: 2 | 2026-06-27T11:24:45+00:00 | Vulnerability · Source |
| CVE-2014-0028 | redhat_vex | libvirt: event registration bypasses domain:getattr ACL | known affected: 33 known not affected: 8 | 2026-06-27T11:24:38+00:00 | Vulnerability · Source |
| CVE-2014-0078 | redhat_vex | CFME: multiple authorization bypass vulnerabilities in CatalogController | fixed: 23 | 2026-06-27T11:24:29+00:00 | Vulnerability · Source |
| CVE-2014-0087 | redhat_vex | CFME: check_privileges logic error resulting in privilege escalation | fixed: 10 | 2026-06-27T11:24:28+00:00 | Vulnerability · Source |
| CVE-2014-0022 | redhat_vex | yum: yum-cron installs unsigned packages | fixed: 4 known not affected: 4 | 2026-06-27T11:24:25+00:00 | Vulnerability · Source |
| CVE-2014-0092 | redhat_vex | gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2) | fixed: 298 known affected: 1 known not affected: 6 | 2026-06-27T11:24:22+00:00 | Vulnerability · Source |