VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-10727 | redhat_vex | evolution-data-server: IMAPx Component Information Disclosure | fixed: 145 known not affected: 12 | 2026-06-27T07:34:37+00:00 | Vulnerability · Source |
| CVE-2016-1248 | redhat_vex | vim: Lack of validation of values for few options results in code exection | fixed: 112 known affected: 1 | 2026-06-27T07:34:30+00:00 | Vulnerability · Source |
| CVE-2016-1522 | redhat_vex | graphite2: Null pointer dereference and out-of-bounds access vulnerabilities | fixed: 171 | 2026-06-27T07:34:27+00:00 | Vulnerability · Source |
| CVE-2016-1521 | redhat_vex | graphite2: Out-of-bound read vulnerability triggered by crafted fonts | fixed: 171 | 2026-06-27T07:34:25+00:00 | Vulnerability · Source |
| CVE-2016-1523 | redhat_vex | graphite2: Heap-based buffer overflow in context item handling functionality | fixed: 171 | 2026-06-27T07:33:31+00:00 | Vulnerability · Source |
| CVE-2025-55178 | redhat_vex | llama-stack: llama stack unverified input | known affected: 1 | 2026-06-27T07:31:15+00:00 | Vulnerability · Source |
| CVE-2025-4215 | redhat_vex | uBlock: gorhill uBlock Origin UI 1p-filters.js currentStateChanged redos | known not affected: 1 | 2026-06-27T07:26:17+00:00 | Vulnerability · Source |
| CVE-2026-13218 | redhat_vex | kubevirt: kubevirt: symlink following in WriteToCachedFile allows host file overwrite from virt-launcher | known affected: 2 | 2026-06-27T07:26:02+00:00 | Vulnerability · Source |
| CVE-2025-8864 | redhat_vex | yugabytedb: YugabyteDB token exposure | known affected: 2 | 2026-06-27T07:25:13+00:00 | Vulnerability · Source |
| CVE-2016-1979 | redhat_vex | nss: Use-after-free during processing of DER encoded keys in NSS (MFSA 2016-36) | fixed: 500 | 2026-06-27T07:24:47+00:00 | Vulnerability · Source |
| CVE-2016-1904 | redhat_vex | php: heap buffer overflow in escapeshell functions | known not affected: 140 | 2026-06-27T07:24:46+00:00 | Vulnerability · Source |
| CVE-2016-1841 | redhat_vex | libxslt: Use after free in xsltDocumentFunctionLoadDocument | known affected: 18 | 2026-06-27T07:24:44+00:00 | Vulnerability · Source |
| CVE-2016-1978 | redhat_vex | nss: Use-after-free in NSS during SSL connections in low memory (MFSA 2016-15) | fixed: 500 | 2026-06-27T07:24:38+00:00 | Vulnerability · Source |
| CVE-2016-1905 | redhat_vex | server: patch operation should use patched object to check admission control | fixed: 261 known affected: 1 | 2026-06-27T07:24:36+00:00 | Vulnerability · Source |
| CVE-2016-2086 | redhat_vex | nodejs: Request smuggling vulnerability | known affected: 5 known not affected: 8 | 2026-06-27T07:24:30+00:00 | Vulnerability · Source |
| CVE-2016-2515 | redhat_vex | nodejs-hawk: Long headers or URIs can cause minor DoS | under investigation: 4 | 2026-06-27T07:19:42+00:00 | Vulnerability · Source |
| CVE-2016-2111 | redhat_vex | samba: Spoofing vulnerability when domain controller is configured | fixed: 2600 | 2026-06-27T07:19:41+00:00 | Vulnerability · Source |
| CVE-2016-2392 | redhat_vex | Qemu: usb: null pointer dereference in remote NDIS control message handling | known affected: 14 known not affected: 27 | 2026-06-27T07:19:40+00:00 | Vulnerability · Source |
| CVE-2016-2216 | redhat_vex | nodejs: Response splitting vulnerability using Unicode characters | known affected: 5 known not affected: 8 | 2026-06-27T07:19:36+00:00 | Vulnerability · Source |
| CVE-2016-2115 | redhat_vex | samba: Smb signing not required by default when smb client connection is used for ipc usage | fixed: 2474 known affected: 2 | 2026-06-27T07:19:34+00:00 | Vulnerability · Source |
| CVE-2016-2162 | redhat_vex | struts2: unsanitized text in the Locale object constructed by I18NInterceptor | known not affected: 1 | 2026-06-27T07:19:27+00:00 | Vulnerability · Source |
| CVE-2016-2166 | redhat_vex | qpid-proton: reactor sends messages in clear if ssl is requested but not available | fixed: 680 known not affected: 7 | 2026-06-27T07:19:26+00:00 | Vulnerability · Source |
| CVE-2016-2103 | redhat_vex | 5: multiple stored XSS vulnerabilities | fixed: 7 | 2026-06-27T07:19:23+00:00 | Vulnerability · Source |
| CVE-2016-2113 | redhat_vex | samba: Server certificates not validated at client side | fixed: 2034 known not affected: 17 | 2026-06-27T07:19:20+00:00 | Vulnerability · Source |
| CVE-2016-2110 | redhat_vex | samba: Man-in-the-middle attacks possible with NTLMSSP authentication | fixed: 2600 | 2026-06-27T07:19:19+00:00 | Vulnerability · Source |
| CVE-2016-2144 | redhat_vex | Sat5: XSS in uset details | known affected: 1 | 2026-06-27T07:19:13+00:00 | Vulnerability · Source |
| CVE-2016-2112 | redhat_vex | samba: Missing downgrade detection | fixed: 2474 known not affected: 2 | 2026-06-27T07:19:13+00:00 | Vulnerability · Source |
| CVE-2016-2119 | redhat_vex | samba: Client side SMB2/3 required signing can be downgraded | fixed: 433 known not affected: 15 | 2026-06-27T07:19:10+00:00 | Vulnerability · Source |
| CVE-2016-2193 | redhat_vex | postgresql: row security policies in prepared statements disregard user ID changes | known not affected: 66 | 2026-06-27T07:19:09+00:00 | Vulnerability · Source |
| CVE-2016-2114 | redhat_vex | samba: Samba based active directory domain controller does not enforce smb signing | fixed: 2034 known not affected: 17 | 2026-06-27T07:19:01+00:00 | Vulnerability · Source |
| CVE-2016-2118 | redhat_vex | samba: SAMR and LSA man in the middle attacks | fixed: 2600 | 2026-06-27T07:18:48+00:00 | Vulnerability · Source |
| CVE-2025-8581 | redhat_vex | chromium-browser: Inappropriate implementation in Extensions in Google Chrome | known not affected: 1 | 2026-06-27T07:15:36+00:00 | Vulnerability · Source |
| CVE-2016-2533 | redhat_vex | python-pillow: Buffer overflow in PCD decoding | known affected: 13 | 2026-06-27T07:13:59+00:00 | Vulnerability · Source |
| CVE-2016-2834 | redhat_vex | nss: Multiple security flaws (MFSA 2016-61) | fixed: 314 | 2026-06-27T07:13:56+00:00 | Vulnerability · Source |
| CVE-2016-3065 | redhat_vex | postgresql: memory disclosure in pageinspect functions | known not affected: 66 | 2026-06-27T07:13:54+00:00 | Vulnerability · Source |
| CVE-2016-3190 | redhat_vex | cairo: out of bounds read in fill_xrgb32_lerp_opaque_spans | fixed: 1263 known not affected: 3 | 2026-06-27T07:09:59+00:00 | Vulnerability · Source |
| CVE-2016-3078 | redhat_vex | php: Heap overflow caused by integer overflow when reading zip files in ZipArchive | known not affected: 141 | 2026-06-27T07:09:25+00:00 | Vulnerability · Source |
| CVE-2026-2323 | redhat_vex | chromium-browser: Inappropriate implementation in Downloads | known not affected: 1 | 2026-06-27T07:07:03+00:00 | Vulnerability · Source |
| CVE-2016-3722 | redhat_vex | jenkins: Malicious users with multiple user accounts can prevent other users from logging in (SECURITY-243) | fixed: 75 | 2026-06-27T07:06:00+00:00 | Vulnerability · Source |
| CVE-2016-3725 | redhat_vex | jenkins: Regular users can trigger download of update site metadata (SECURITY-273) | fixed: 75 | 2026-06-27T07:05:57+00:00 | Vulnerability · Source |
| CVE-2016-3711 | redhat_vex | haproxy: Setting cookie containing internal IP address of a pod | fixed: 4 known not affected: 849 | 2026-06-27T07:05:53+00:00 | Vulnerability · Source |
| CVE-2016-3727 | redhat_vex | jenkins: Granting the permission to read node configurations allows access to overall system configuration (SECURITY-281) | fixed: 75 | 2026-06-27T07:05:53+00:00 | Vulnerability · Source |
| CVE-2016-4003 | redhat_vex | struts2: cross-site scripting vulnerability in the URLDecoder function | known not affected: 1 | 2026-06-27T07:05:50+00:00 | Vulnerability · Source |
| CVE-2016-3723 | redhat_vex | jenkins: Information on installed plugins exposed via API (SECURITY-250) | fixed: 75 | 2026-06-27T07:05:49+00:00 | Vulnerability · Source |
| CVE-2016-3726 | redhat_vex | jenkins: Open redirect to scheme-relative URLs (SECURITY-276) | fixed: 75 | 2026-06-27T07:05:43+00:00 | Vulnerability · Source |
| CVE-2016-3724 | redhat_vex | jenkins: Encrypted secrets (e.g. passwords) were leaked to users with permission to read configuration (SECURITY-266) | fixed: 75 | 2026-06-27T07:05:37+00:00 | Vulnerability · Source |
| CVE-2016-3703 | redhat_vex | 3: Untrusted content loaded via the API proxy can access web console credentials on the same domain | fixed: 25 | 2026-06-27T07:05:33+00:00 | Vulnerability · Source |
| CVE-2016-3708 | redhat_vex | 3: s2i builds implicitly perform docker builds | fixed: 14 | 2026-06-27T07:05:32+00:00 | Vulnerability · Source |
| CVE-2016-3693 | redhat_vex | foreman: inspect in a provisioning template exposes sensitive controller information | fixed: 276 known affected: 3 | 2026-06-27T07:04:35+00:00 | Vulnerability · Source |
| CVE-2016-3738 | redhat_vex | origin: pod update allows docker socket access via build-pod | fixed: 14 | 2026-06-27T07:03:56+00:00 | Vulnerability · Source |