VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-0174 | redhat_vex | hw: dram: reading bits in memory without accessing them | known not affected: 32 | 2026-06-27T01:09:56+00:00 | Vulnerability · Source |
| CVE-2018-9252 | redhat_vex | jasper: reachable assertion in jpc_abstorelstepsize() in jpc_enc.c | known affected: 17 | 2026-06-27T01:09:51+00:00 | Vulnerability · Source |
| CVE-2018-9055 | redhat_vex | jasper: reachable assertion in jpc_firstone() in jpc_math.c | known affected: 17 | 2026-06-27T01:09:48+00:00 | Vulnerability · Source |
| CVE-2019-0162 | redhat_vex | hw: dram: spoiler attack | known not affected: 32 | 2026-06-27T01:09:47+00:00 | Vulnerability · Source |
| CVE-2019-0117 | redhat_vex | hw: Intel SGX information leak | fixed: 79 known affected: 1 | 2026-06-27T01:09:46+00:00 | Vulnerability · Source |
| CVE-2018-8787 | redhat_vex | freerdp: Integer overflow leading to heap-based buffer overflow in gdi_Bitmap_Decompress() function | fixed: 82 known affected: 5 known not affected: 6 | 2026-06-27T01:09:44+00:00 | Vulnerability · Source |
| CVE-2019-1003010 | redhat_vex | jenkins-plugin-git: CSRF vulnerability in Git Plugin (SECURITY-1095) | fixed: 83 known affected: 12 known not affected: 2 | 2026-06-27T01:05:00+00:00 | Vulnerability · Source |
| CVE-2019-1003049 | redhat_vex | jenkins: Jenkins accepted cached legacy CLI authentication | fixed: 59 known affected: 10 known not affected: 2 | 2026-06-27T01:04:59+00:00 | Vulnerability · Source |
| CVE-2019-1003003 | redhat_vex | jenkins: cookie crafted using Jenkins script console allows unauthorised access to Jenkins instance | fixed: 83 known affected: 13 known not affected: 2 | 2026-06-27T01:04:55+00:00 | Vulnerability · Source |
| CVE-2019-1003050 | redhat_vex | jenkins: Improper escaping of job URLs in f:validateButton leads to cross-site scripting vulnerability. | fixed: 59 known affected: 10 known not affected: 2 | 2026-06-27T01:04:53+00:00 | Vulnerability · Source |
| CVE-2019-1003013 | redhat_vex | jenkins-plugin-blueocean: XSS vulnerability via user description in Blue Ocean (SECURITY-1204) | fixed: 83 known affected: 12 | 2026-06-27T01:04:47+00:00 | Vulnerability · Source |
| CVE-2019-1003014 | redhat_vex | jenkins-plugin-config-file-provider: Stored XSS vulnerability in Config File Provider Plugin (SECURITY-1253) | fixed: 83 known affected: 6 | 2026-06-27T01:04:45+00:00 | Vulnerability · Source |
| CVE-2019-1003012 | redhat_vex | jenkins-plugin-blueocean: Blue Ocean did not require CSRF tokens (SECURITY-1201) | fixed: 83 known affected: 12 | 2026-06-27T01:04:42+00:00 | Vulnerability · Source |
| CVE-2019-0542 | redhat_vex | xterm.js: Mishandling of special characters allows for remote code execution | fixed: 161 known not affected: 1 | 2026-06-27T01:04:35+00:00 | Vulnerability · Source |
| CVE-2019-1003004 | redhat_vex | jenkins: deleting a user record will does not invalidate existing sessions | fixed: 83 known affected: 13 known not affected: 2 | 2026-06-27T01:04:33+00:00 | Vulnerability · Source |
| CVE-2019-1000014 | redhat_vex | rebar: signing oracle vulnerability in package registry verification resulting in code execution via undetected modified packages. | known not affected: 1 | 2026-06-27T01:04:30+00:00 | Vulnerability · Source |
| CVE-2019-10054 | redhat_vex | suricata: invalid memory access in function process_reply_record_v3 leads to denial of service | known not affected: 1 | 2026-06-27T01:04:30+00:00 | Vulnerability · Source |
| CVE-2019-1003000 | redhat_vex | jenkins-plugin-script-security: Sandbox Bypass in Script Security Plugin | fixed: 83 known affected: 12 known not affected: 2 | 2026-06-27T01:04:25+00:00 | Vulnerability · Source |
| CVE-2019-1003001 | redhat_vex | jenkins-plugin-workflow-cps: Sandbox Bypass in Pipeline: Groovy Plugin | fixed: 83 known affected: 12 known not affected: 2 | 2026-06-27T01:04:24+00:00 | Vulnerability · Source |
| CVE-2019-1003011 | redhat_vex | jenkins-plugin-token-macro: Recursive token expansion results in information disclosure and DoS in Token Macro Plugin (SECURITY-1102) | fixed: 83 known affected: 10 | 2026-06-27T01:04:20+00:00 | Vulnerability · Source |
| CVE-2019-1003002 | redhat_vex | jenkins-plugin-pipeline-model-definition: Sandbox Bypass in Pipeline: Declarative | fixed: 83 known affected: 9 known not affected: 5 | 2026-06-27T01:04:16+00:00 | Vulnerability · Source |
| CVE-2019-10246 | redhat_vex | jetty: Directory Listing on Windows reveals Resource Base path | known not affected: 36 | 2026-06-27T00:59:28+00:00 | Vulnerability · Source |
| CVE-2019-1010190 | redhat_vex | mgetty: out-of-bounds read in function putwhitespan() in g3/pbm2g3.c causing denial of service | known affected: 9 | 2026-06-27T00:59:26+00:00 | Vulnerability · Source |
| CVE-2019-1010317 | redhat_vex | wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS | fixed: 31 known not affected: 4 | 2026-06-27T00:59:25+00:00 | Vulnerability · Source |
| CVE-2019-1010301 | redhat_vex | jhead: buffer overflow in gpsinfo.c Line 151 ProcessGpsInfo() causing denial of service | known not affected: 1 | 2026-06-27T00:59:24+00:00 | Vulnerability · Source |
| CVE-2019-1010319 | redhat_vex | wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS | fixed: 31 known not affected: 4 | 2026-06-27T00:59:23+00:00 | Vulnerability · Source |
| CVE-2019-1010302 | redhat_vex | jhead: incorrect access control in iptc.c Line 122 show_IPTC() causing denial of service | known not affected: 1 | 2026-06-27T00:59:23+00:00 | Vulnerability · Source |
| CVE-2019-1010022 | redhat_vex | glibc: stack guard protection bypass | known not affected: 448 | 2026-06-27T00:59:23+00:00 | Vulnerability · Source |
| CVE-2019-1010004 | redhat_vex | sox: OOB read in function read_samples in xa.c:219 causing denial of service | known affected: 6 | 2026-06-27T00:59:19+00:00 | Vulnerability · Source |
| CVE-2019-1010228 | redhat_vex | DCMTK: buffer overflow in DcmRLEDecoder::decompress() leads to possible code execution and denial of service | known not affected: 1 | 2026-06-27T00:59:15+00:00 | Vulnerability · Source |
| CVE-2019-10213 | redhat_vex | openshift: Secret data written to pod logs when operator set at Debug level or higher | fixed: 5 known affected: 6 known not affected: 3 | 2026-06-27T00:59:14+00:00 | Vulnerability · Source |
| CVE-2019-1010006 | redhat_vex | evince: buffer overflow in backend/tiff/tiff-document.c leads to DOS/possible code execution | known affected: 6 known not affected: 13 | 2026-06-27T00:59:14+00:00 | Vulnerability · Source |
| CVE-2019-10320 | redhat_vex | jenkins-credentials-plugin: Certificate file read vulnerability in Credentials Plugin (SECURITY-1322) | fixed: 61 known affected: 8 | 2026-06-27T00:59:10+00:00 | Vulnerability · Source |
| CVE-2019-10200 | redhat_vex | openshift: Users with permission to schedule pods on master nodes can access credentials for AWS IAM roles | known affected: 1 | 2026-06-27T00:59:09+00:00 | Vulnerability · Source |
| CVE-2019-10649 | redhat_vex | ImageMagick: memory leak in SVGKeyValuePairs of coders/svg.c that leads to denial of service via crafted image file | known not affected: 15 | 2026-06-27T00:54:56+00:00 | Vulnerability · Source |
| CVE-2019-10650 | redhat_vex | ImageMagick: heap-based buffer over-read in WriteTIFFImage of coders/tiff.c leads to denial of service or information disclosure via crafted image file | fixed: 218 known affected: 8 | 2026-06-27T00:54:55+00:00 | Vulnerability · Source |
| CVE-2019-10678 | redhat_vex | domoticz: insecure argument options neglected to be categorised | known not affected: 1 | 2026-06-27T00:54:54+00:00 | Vulnerability · Source |
| CVE-2019-10337 | redhat_vex | jenkins-plugin-token-macro: XML External Entity processing the ${XML} macro | fixed: 28 known affected: 8 | 2026-06-27T00:54:52+00:00 | Vulnerability · Source |
| CVE-2019-11070 | redhat_vex | webkitgtk: HTTP proxy setting deanonymization information disclosure | fixed: 984 known affected: 9 | 2026-06-27T00:54:47+00:00 | Vulnerability · Source |
| CVE-2019-11072 | redhat_vex | lighttpd: signed integer overflow causing denial of service | known not affected: 1 | 2026-06-27T00:54:46+00:00 | Vulnerability · Source |
| CVE-2019-10903 | redhat_vex | wireshark: DCERPC SPOOLSS dissector crash (wnpa-sec-2019-18) | known affected: 4 | 2026-06-27T00:54:41+00:00 | Vulnerability · Source |
| CVE-2019-10871 | redhat_vex | poppler: heap-based buffer over-read in function PSOutputDev::checkPageSlice in PSOutputDev.cc | fixed: 322 known not affected: 11 | 2026-06-27T00:54:35+00:00 | Vulnerability · Source |
| CVE-2019-10328 | redhat_vex | jenkins-plugin-workflow-remote-loader: Unsafe Script Security whitelist entry in Pipeline Remote Loader Plugin (SECURITY-921) | fixed: 63 known affected: 8 known not affected: 251 | 2026-06-27T00:54:24+00:00 | Vulnerability · Source |
| CVE-2019-10392 | redhat_vex | jenkins-git-client-plugin: OS command injection via 'git ls-remote' | fixed: 133 | 2026-06-27T00:53:55+00:00 | Vulnerability · Source |
| CVE-2019-11640 | redhat_vex | recutils: Multiple security issues | known not affected: 1 | 2026-06-27T00:49:35+00:00 | Vulnerability · Source |
| CVE-2019-11459 | redhat_vex | evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail() | fixed: 1120 known affected: 6 | 2026-06-27T00:49:35+00:00 | Vulnerability · Source |
| CVE-2019-11470 | redhat_vex | ImageMagick: denial of service in cineon parsing component | fixed: 218 known affected: 8 | 2026-06-27T00:49:33+00:00 | Vulnerability · Source |
| CVE-2019-11472 | redhat_vex | ImageMagick: denial of service in ReadXWDImage in coders/xwd.c in the XWD image parsing component | fixed: 218 known affected: 8 | 2026-06-27T00:49:32+00:00 | Vulnerability · Source |
| CVE-2019-11639 | redhat_vex | recutils: Multiple security issues | known not affected: 1 | 2026-06-27T00:49:32+00:00 | Vulnerability · Source |
| CVE-2019-11638 | redhat_vex | recutils: Multiple security issues | known not affected: 1 | 2026-06-27T00:49:31+00:00 | Vulnerability · Source |