VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2014-3562 | redhat_vex | 389-ds: unauthenticated information disclosure | fixed: 70 | 2026-06-27T10:40:00+00:00 | Vulnerability · Source |
| CVE-2014-3535 | redhat_vex | Kernel: netdevice.h: NULL pointer dereference over VxLAN | fixed: 179 known not affected: 30 | 2026-06-27T10:39:58+00:00 | Vulnerability · Source |
| CVE-2014-3612 | redhat_vex | JAAS: LDAPLoginModule allows empty password authentication | fixed: 5 known affected: 2 | 2026-06-27T10:39:55+00:00 | Vulnerability · Source |
| CVE-2014-3611 | redhat_vex | kernel: kvm: PIT timer race condition | fixed: 433 known affected: 1 | 2026-06-27T10:39:53+00:00 | Vulnerability · Source |
| CVE-2014-3634 | redhat_vex | rsyslog: remote syslog PRI vulnerability | fixed: 346 known affected: 4 | 2026-06-27T10:39:52+00:00 | Vulnerability · Source |
| CVE-2014-3560 | redhat_vex | samba: remote code execution in nmbd | fixed: 327 known not affected: 52 | 2026-06-27T10:38:24+00:00 | Vulnerability · Source |
| CVE-2014-3675 | redhat_vex | shim: out-of-bounds memory read flaw in DHCPv6 packet processing | fixed: 24 | 2026-06-27T10:36:18+00:00 | Vulnerability · Source |
| CVE-2014-3692 | redhat_vex | CFME: default fallback password in customization_templates.yml | fixed: 10 | 2026-06-27T10:36:14+00:00 | Vulnerability · Source |
| CVE-2014-4200 | redhat_vex | open-vm-tools: vm-support's diagnostics archive created with world-readable permissions | fixed: 24 known affected: 1 | 2026-06-27T10:36:10+00:00 | Vulnerability · Source |
| CVE-2014-3712 | redhat_vex | Katello: user parameters passed to to_sym | known affected: 9 | 2026-06-27T10:36:10+00:00 | Vulnerability · Source |
| CVE-2014-3916 | redhat_vex | ruby: DoS via long string in str_buf_cat() | known affected: 20 known not affected: 27 | 2026-06-27T10:36:07+00:00 | Vulnerability · Source |
| CVE-2014-3676 | redhat_vex | shim: heap-based buffer overflow flaw in IPv6 address parsing | fixed: 24 | 2026-06-27T10:36:05+00:00 | Vulnerability · Source |
| CVE-2014-3646 | redhat_vex | kernel: kvm: vmx: invvpid vm exit not handled | fixed: 419 known affected: 1 | 2026-06-27T10:36:03+00:00 | Vulnerability · Source |
| CVE-2014-4038 | redhat_vex | ppc64-diag: multiple temporary file races | fixed: 6 | 2026-06-27T10:36:01+00:00 | Vulnerability · Source |
| CVE-2014-3674 | redhat_vex | Enterprise: gears fail to properly isolate network traffic | fixed: 938 | 2026-06-27T10:35:55+00:00 | Vulnerability · Source |
| CVE-2014-3661 | redhat_vex | jenkins: denial of service (SECURITY-87) | fixed: 260 known affected: 1 | 2026-06-27T10:35:55+00:00 | Vulnerability · Source |
| CVE-2014-3679 | redhat_vex | jenkins: lack of access control in the monitoring plug-in (SECURITY-113) | known affected: 2 | 2026-06-27T10:35:51+00:00 | Vulnerability · Source |
| CVE-2014-3657 | redhat_vex | libvirt: domain_conf: domain deadlock DoS | fixed: 218 known affected: 1 known not affected: 1 | 2026-06-27T10:35:48+00:00 | Vulnerability · Source |
| CVE-2014-3693 | redhat_vex | libreoffice: Use-After-Free in socket manager of Impress Remote | fixed: 615 known affected: 133 | 2026-06-27T10:35:45+00:00 | Vulnerability · Source |
| CVE-2014-3678 | redhat_vex | jenkins: cross-site scripting flaws in the monitoring plug-in (SECURITY-113) | fixed: 6 known affected: 1 | 2026-06-27T10:35:41+00:00 | Vulnerability · Source |
| CVE-2014-4039 | redhat_vex | ppc64-diag: multiple temporary file races | fixed: 6 | 2026-06-27T10:35:32+00:00 | Vulnerability · Source |
| CVE-2014-3707 | redhat_vex | curl: incorrect handle duplication after COPYPOSTFIELDS | fixed: 111 known affected: 3 known not affected: 1 | 2026-06-27T10:35:28+00:00 | Vulnerability · Source |
| CVE-2014-3677 | redhat_vex | shim: memory corruption flaw when processing Machine Owner Keys (MOKs) | fixed: 24 | 2026-06-27T10:35:26+00:00 | Vulnerability · Source |
| CVE-2014-3662 | redhat_vex | jenkins: username discovery (SECURITY-110) | fixed: 260 known affected: 1 | 2026-06-27T10:35:24+00:00 | Vulnerability · Source |
| CVE-2014-3664 | redhat_vex | jenkins: directory traversal flaw (SECURITY-131) | fixed: 260 known affected: 1 | 2026-06-27T10:35:19+00:00 | Vulnerability · Source |
| CVE-2014-3999 | redhat_vex | php-horde-Horde-Ldap: connect to LDAP without knowing the password | known not affected: 1 | 2026-06-27T10:35:16+00:00 | Vulnerability · Source |
| CVE-2014-3667 | redhat_vex | jenkins: plug-in code can be downloaded by anyone with read access (SECURITY-155) | fixed: 260 known affected: 1 | 2026-06-27T10:35:16+00:00 | Vulnerability · Source |
| CVE-2014-3663 | redhat_vex | jenkins: job configuration issues (SECURITY-127, SECURITY-128) | fixed: 260 known affected: 1 | 2026-06-27T10:35:13+00:00 | Vulnerability · Source |
| CVE-2014-3681 | redhat_vex | jenkins: cross-site scripting flaw in Jenkins core (SECURITY-143) | fixed: 260 known affected: 1 | 2026-06-27T10:35:11+00:00 | Vulnerability · Source |
| CVE-2014-3645 | redhat_vex | kernel: kvm: vmx: invept vm exit not handled | fixed: 419 known affected: 1 | 2026-06-27T10:35:07+00:00 | Vulnerability · Source |
| CVE-2014-3666 | redhat_vex | jenkins: remote code execution flaw (SECURITY-150) | fixed: 260 under investigation: 1 | 2026-06-27T10:35:03+00:00 | Vulnerability · Source |
| CVE-2014-3683 | redhat_vex | rsyslog: integer overflow in PRI parsing | known not affected: 41 | 2026-06-27T10:35:03+00:00 | Vulnerability · Source |
| CVE-2014-3665 | redhat_vex | jenkins: remote code execution from slaves (SECURITY-144) | fixed: 6 known affected: 1 | 2026-06-27T10:33:35+00:00 | Vulnerability · Source |
| CVE-2014-3691 | redhat_vex | foreman-proxy: failure to verify SSL certificates | fixed: 138 | 2026-06-27T10:33:00+00:00 | Vulnerability · Source |
| CVE-2014-4341 | redhat_vex | krb5: denial of service flaws when handling padding length longer than the plaintext | fixed: 204 | 2026-06-27T10:29:35+00:00 | Vulnerability · Source |
| CVE-2014-4342 | redhat_vex | krb5: denial of service flaws when handling RFC 1964 tokens | fixed: 151 known not affected: 1 | 2026-06-27T10:29:34+00:00 | Vulnerability · Source |
| CVE-2014-4659 | redhat_vex | ansible: information disclosure through incorrect file permission | known not affected: 18 | 2026-06-27T10:29:30+00:00 | Vulnerability · Source |
| CVE-2014-5325 | redhat_vex | dwr: XML external entity injection (JVN#91502163) | known affected: 1 | 2026-06-27T10:25:45+00:00 | Vulnerability · Source |
| CVE-2014-5277 | redhat_vex | docker: fallback to HTTP when HTTPS connections to the registry fail | known affected: 1 | 2026-06-27T10:25:43+00:00 | Vulnerability · Source |
| CVE-2014-6051 | redhat_vex | libvncserver: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling | fixed: 96 known not affected: 21 | 2026-06-27T10:25:40+00:00 | Vulnerability · Source |
| CVE-2014-6272 | redhat_vex | libevent: potential heap overflow in buffer/bufferevent APIs | known affected: 22 known not affected: 10 | 2026-06-27T10:25:38+00:00 | Vulnerability · Source |
| CVE-2014-5177 | redhat_vex | libvirt: unsafe parsing of XML documents allows libvirt DoS and/or arbitrary file read | fixed: 150 known affected: 7 under investigation: 1 | 2026-06-27T10:25:32+00:00 | Vulnerability · Source |
| CVE-2014-5444 | redhat_vex | geary: failure to handle certificate errors | known not affected: 1 | 2026-06-27T10:25:30+00:00 | Vulnerability · Source |
| CVE-2014-5326 | redhat_vex | dwr: cross-site scripting flaw (JVN#52422792) | known affected: 1 | 2026-06-27T10:25:30+00:00 | Vulnerability · Source |
| CVE-2014-5339 | redhat_vex | check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4 | fixed: 213 | 2026-06-27T10:25:28+00:00 | Vulnerability · Source |
| CVE-2014-5119 | redhat_vex | glibc: off-by-one error leading to a heap-based buffer overflow flaw in __gconv_translit_find() | fixed: 473 | 2026-06-27T10:25:25+00:00 | Vulnerability · Source |
| CVE-2014-5338 | redhat_vex | check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4 | fixed: 213 | 2026-06-27T10:25:20+00:00 | Vulnerability · Source |
| CVE-2014-5340 | redhat_vex | check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4 | fixed: 213 | 2026-06-27T10:23:55+00:00 | Vulnerability · Source |
| CVE-2025-8863 | redhat_vex | yugabytedb: YugabyteDB information exposure | known affected: 2 | 2026-06-27T10:20:34+00:00 | Vulnerability · Source |
| CVE-2014-6439 | redhat_vex | Elasticsearch: CSRF via insecure CORS default configuration | known affected: 1 under investigation: 1 | 2026-06-27T10:20:13+00:00 | Vulnerability · Source |