VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-10337 | redhat_vex | jenkins-plugin-token-macro: XML External Entity processing the ${XML} macro | fixed: 28 known affected: 8 | 2026-06-27T00:54:52+00:00 | Vulnerability · Source |
| CVE-2019-11070 | redhat_vex | webkitgtk: HTTP proxy setting deanonymization information disclosure | fixed: 984 known affected: 9 | 2026-06-27T00:54:47+00:00 | Vulnerability · Source |
| CVE-2019-11072 | redhat_vex | lighttpd: signed integer overflow causing denial of service | known not affected: 1 | 2026-06-27T00:54:46+00:00 | Vulnerability · Source |
| CVE-2019-10903 | redhat_vex | wireshark: DCERPC SPOOLSS dissector crash (wnpa-sec-2019-18) | known affected: 4 | 2026-06-27T00:54:41+00:00 | Vulnerability · Source |
| CVE-2019-10871 | redhat_vex | poppler: heap-based buffer over-read in function PSOutputDev::checkPageSlice in PSOutputDev.cc | fixed: 322 known not affected: 11 | 2026-06-27T00:54:35+00:00 | Vulnerability · Source |
| CVE-2019-10328 | redhat_vex | jenkins-plugin-workflow-remote-loader: Unsafe Script Security whitelist entry in Pipeline Remote Loader Plugin (SECURITY-921) | fixed: 63 known affected: 8 known not affected: 251 | 2026-06-27T00:54:24+00:00 | Vulnerability · Source |
| CVE-2019-10392 | redhat_vex | jenkins-git-client-plugin: OS command injection via 'git ls-remote' | fixed: 133 | 2026-06-27T00:53:55+00:00 | Vulnerability · Source |
| CVE-2019-11640 | redhat_vex | recutils: Multiple security issues | known not affected: 1 | 2026-06-27T00:49:35+00:00 | Vulnerability · Source |
| CVE-2019-11459 | redhat_vex | evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail() | fixed: 1120 known affected: 6 | 2026-06-27T00:49:35+00:00 | Vulnerability · Source |
| CVE-2019-11470 | redhat_vex | ImageMagick: denial of service in cineon parsing component | fixed: 218 known affected: 8 | 2026-06-27T00:49:33+00:00 | Vulnerability · Source |
| CVE-2019-11472 | redhat_vex | ImageMagick: denial of service in ReadXWDImage in coders/xwd.c in the XWD image parsing component | fixed: 218 known affected: 8 | 2026-06-27T00:49:32+00:00 | Vulnerability · Source |
| CVE-2019-11639 | redhat_vex | recutils: Multiple security issues | known not affected: 1 | 2026-06-27T00:49:32+00:00 | Vulnerability · Source |
| CVE-2019-11638 | redhat_vex | recutils: Multiple security issues | known not affected: 1 | 2026-06-27T00:49:31+00:00 | Vulnerability · Source |
| CVE-2019-11637 | redhat_vex | recutils: Multiple security issues | known not affected: 1 | 2026-06-27T00:49:31+00:00 | Vulnerability · Source |
| CVE-2019-11727 | redhat_vex | nss: PKCS#1 v1.5 signatures can be used for TLS 1.3 | fixed: 332 known affected: 7 | 2026-06-27T00:49:30+00:00 | Vulnerability · Source |
| CVE-2019-11597 | redhat_vex | ImageMagick: heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c leading to DoS or information disclosure | fixed: 218 known affected: 8 | 2026-06-27T00:49:15+00:00 | Vulnerability · Source |
| CVE-2019-11694 | redhat_vex | Mozilla: Uninitialized memory leakage in Windows sandbox | known not affected: 12 | 2026-06-27T00:49:13+00:00 | Vulnerability · Source |
| CVE-2019-11733 | redhat_vex | firefox: stored passwords in 'Saved Logins' can be copied without master password entry | fixed: 64 | 2026-06-27T00:49:13+00:00 | Vulnerability · Source |
| CVE-2019-11253 | redhat_vex | kubernetes: YAML parsing vulnerable to "Billion Laughs" attack, allowing for remote denial of service | fixed: 113 known affected: 3 known not affected: 6 | 2026-06-27T00:49:10+00:00 | Vulnerability · Source |
| CVE-2019-11598 | redhat_vex | ImageMagick: heap-based buffer over-read in the function WritePNMImage of coders/pnm.c leading to DoS or information disclosure | fixed: 218 known affected: 7 known not affected: 1 | 2026-06-27T00:49:09+00:00 | Vulnerability · Source |
| CVE-2019-12110 | redhat_vex | miniupnp: null-pointer dereference in upnpredirect.c causing denial of service | known not affected: 1 | 2026-06-27T00:45:01+00:00 | Vulnerability · Source |
| CVE-2019-12214 | redhat_vex | freeimage: out-of-bounds access in function j2k_read_ppm_v3 in j2k.c | known not affected: 1 | 2026-06-27T00:45:01+00:00 | Vulnerability · Source |
| CVE-2019-11756 | redhat_vex | nss: Use-after-free in sftk_FreeSession due to improper refcounting | fixed: 561 known affected: 7 | 2026-06-27T00:44:54+00:00 | Vulnerability · Source |
| CVE-2019-12108 | redhat_vex | miniupnp: null-pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for int_port causing denial of service | known not affected: 1 | 2026-06-27T00:44:54+00:00 | Vulnerability · Source |
| CVE-2019-12111 | redhat_vex | miniupnpd: null pointer dereference in copyIPv6IfDifferent in pcpserver.c causing denial of service | known not affected: 1 | 2026-06-27T00:44:51+00:00 | Vulnerability · Source |
| CVE-2019-12109 | redhat_vex | miniupnp: null-pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for rem_port causing denial of service | known not affected: 1 | 2026-06-27T00:44:48+00:00 | Vulnerability · Source |
| CVE-2019-12293 | redhat_vex | poppler: heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc | fixed: 322 known affected: 11 | 2026-06-27T00:44:48+00:00 | Vulnerability · Source |
| CVE-2019-12447 | redhat_vex | gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c | fixed: 773 known affected: 13 known not affected: 8 | 2026-06-27T00:44:44+00:00 | Vulnerability · Source |
| CVE-2019-12420 | redhat_vex | spamassassin: crafted email message can lead to DoS | fixed: 28 known affected: 2 | 2026-06-27T00:44:33+00:00 | Vulnerability · Source |
| CVE-2019-11745 | redhat_vex | nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate | fixed: 571 known affected: 1 known not affected: 14 | 2026-06-27T00:43:35+00:00 | Vulnerability · Source |
| CVE-2019-13113 | redhat_vex | exiv2: invalid data location in CRW image file causing denial of service | fixed: 97 known affected: 8 | 2026-06-27T00:40:34+00:00 | Vulnerability · Source |
| CVE-2019-12790 | redhat_vex | radare2: heap-based buffer over-read in function r_egg_lang_parsechar in egg_lang.c | known not affected: 1 | 2026-06-27T00:40:34+00:00 | Vulnerability · Source |
| CVE-2019-13108 | redhat_vex | exiv2: integer overflow PngImage::readMetadata leads to denial of service | known not affected: 13 | 2026-06-27T00:40:33+00:00 | Vulnerability · Source |
| CVE-2019-13133 | redhat_vex | ImageMagick: a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c | fixed: 218 known affected: 8 | 2026-06-27T00:40:29+00:00 | Vulnerability · Source |
| CVE-2019-13112 | redhat_vex | exiv2: uncontrolled memory allocation in PngChunk::parseChunkContent causing denial of service | fixed: 97 known affected: 8 | 2026-06-27T00:40:28+00:00 | Vulnerability · Source |
| CVE-2019-13109 | redhat_vex | exiv2: denial of service in PngImage::readMetadata | fixed: 97 known affected: 8 | 2026-06-27T00:40:26+00:00 | Vulnerability · Source |
| CVE-2019-13134 | redhat_vex | ImageMagick: a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c | fixed: 218 known affected: 8 | 2026-06-27T00:40:23+00:00 | Vulnerability · Source |
| CVE-2019-13111 | redhat_vex | exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service | fixed: 97 known affected: 8 | 2026-06-27T00:40:20+00:00 | Vulnerability · Source |
| CVE-2019-12975 | redhat_vex | imagemagick: memory leak vulnerability in function WriteDPXImage in coders/dpx.c | fixed: 218 known affected: 8 | 2026-06-27T00:40:20+00:00 | Vulnerability · Source |
| CVE-2019-13114 | redhat_vex | exiv2: null-pointer dereference in http.c causing denial of service | fixed: 97 known affected: 8 | 2026-06-27T00:40:18+00:00 | Vulnerability · Source |
| CVE-2019-12976 | redhat_vex | imagemagick: memory leak vulnerability in function ReadPCLImage in coders/pcl.c | fixed: 218 known affected: 8 | 2026-06-27T00:40:16+00:00 | Vulnerability · Source |
| CVE-2019-12795 | redhat_vex | gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd | fixed: 903 known affected: 21 | 2026-06-27T00:40:13+00:00 | Vulnerability · Source |
| CVE-2019-13110 | redhat_vex | exiv2: integer-overflow and out-of-bounds read in CiffDirectory::readDirectory leads to denail of service | known affected: 8 known not affected: 5 | 2026-06-27T00:40:12+00:00 | Vulnerability · Source |
| CVE-2019-12979 | redhat_vex | imagemagick: use of uninitialized value in functionSyncImageSettings in MagickCore/image.c | fixed: 218 known affected: 8 | 2026-06-27T00:40:07+00:00 | Vulnerability · Source |
| CVE-2019-12449 | redhat_vex | gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges | fixed: 773 known affected: 13 known not affected: 8 | 2026-06-27T00:40:05+00:00 | Vulnerability · Source |
| CVE-2019-12974 | redhat_vex | imagemagick: null-pointer dereference in function ReadPANGOImage in coders/pango.c and ReadVIDImage in coders/vid.c causing denial of service | fixed: 218 known affected: 8 | 2026-06-27T00:40:04+00:00 | Vulnerability · Source |
| CVE-2019-12978 | redhat_vex | imagemagick: use of uninitialized value in function ReadPANGOImage in coders/pango.c | fixed: 218 known affected: 8 | 2026-06-27T00:39:53+00:00 | Vulnerability · Source |
| CVE-2019-12761 | redhat_vex | pyxdg: code injection via crafted python code | known affected: 2 | 2026-06-27T00:39:50+00:00 | Vulnerability · Source |
| CVE-2019-12450 | redhat_vex | glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress | fixed: 268 known affected: 11 known not affected: 1 | 2026-06-27T00:39:46+00:00 | Vulnerability · Source |
| CVE-2019-13127 | redhat_vex | mxgraph: improper input validation leads to XSS | known not affected: 1 | 2026-06-27T00:39:40+00:00 | Vulnerability · Source |