VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299385 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2021-21344 | redhat_vex | XStream: Unsafe deserizaliation of javax.sql.rowset.BaseRowSet | fixed: 18 known affected: 10 known not affected: 5 | 2026-05-14T18:31:01+00:00 | Vulnerability · Source |
| CVE-2020-11971 | redhat_vex | camel: DNS Rebinding in JMX Connector could result in remote command execution | fixed: 1 known affected: 1 | 2026-05-14T18:30:02+00:00 | Vulnerability · Source |
| CVE-2020-10771 | redhat_vex | infinispan-server-rest: Actions with effects should not be permitted via GET requests using REST API | fixed: 1 known not affected: 5 | 2026-05-14T18:29:56+00:00 | Vulnerability · Source |
| CVE-2020-9489 | redhat_vex | tika-core: Denial of Service Vulnerabilities in Some of Apache Tika's Parsers | fixed: 1 known affected: 4 | 2026-05-14T18:29:48+00:00 | Vulnerability · Source |
| CVE-2020-1960 | redhat_vex | apache-flink: JMX information disclosure vulnerability | fixed: 1 | 2026-05-14T18:29:38+00:00 | Vulnerability · Source |
| CVE-2019-11777 | redhat_vex | org.eclipse.paho.client.mqttv3: Improper hostname validation in the MQTT library | fixed: 1 known affected: 1 | 2026-05-14T18:29:14+00:00 | Vulnerability · Source |
| CVE-2020-1925 | redhat_vex | olingo-odata: Server side request forgery in AsyncResponseWrapperImpl | fixed: 1 known affected: 2 | 2026-05-14T18:24:47+00:00 | Vulnerability · Source |
| CVE-2019-19906 | redhat_vex | cyrus-sasl: denial of service in _sasl_add_string function | fixed: 232 known affected: 24 | 2026-05-14T18:24:33+00:00 | Vulnerability · Source |
| CVE-2019-17007 | redhat_vex | nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS | fixed: 1925 known affected: 1 | 2026-05-14T18:24:23+00:00 | Vulnerability · Source |
| CVE-2019-11719 | redhat_vex | nss: Out-of-bounds read when importing curve25519 private key | fixed: 765 known affected: 8 known not affected: 8 | 2026-05-14T18:23:42+00:00 | Vulnerability · Source |
| CVE-2019-10782 | redhat_vex | checkstyle: XML External Entity Injection due to an incomplete fix for CVE-2019-9658 | known affected: 1 | 2026-05-14T18:23:35+00:00 | Vulnerability · Source |
| CVE-2019-10241 | redhat_vex | jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions | fixed: 3 known affected: 78 | 2026-05-14T18:23:33+00:00 | Vulnerability · Source |
| CVE-2019-3802 | redhat_vex | spring-data-api: potential information disclosure through maliciously crafted example value in ExampleMatcher | fixed: 1 | 2026-05-14T18:23:19+00:00 | Vulnerability · Source |
| CVE-2019-0231 | redhat_vex | mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure. | fixed: 1318 known affected: 12 | 2026-05-14T18:23:04+00:00 | Vulnerability · Source |
| CVE-2018-9159 | redhat_vex | spark: Absolute and relative pathnames allow for unintended static file disclosure | fixed: 3 known affected: 2 | 2026-05-14T18:22:07+00:00 | Vulnerability · Source |
| CVE-2018-8041 | redhat_vex | camel-mail: path traversal vulnerability | fixed: 1 known affected: 3 | 2026-05-14T18:22:06+00:00 | Vulnerability · Source |
| CVE-2018-3831 | redhat_vex | elasticsearch: Information exposure via _cluster/settings API | fixed: 1 known affected: 6 known not affected: 17 | 2026-05-14T18:21:51+00:00 | Vulnerability · Source |
| CVE-2018-12440 | redhat_vex | netty-tcnative-boringssl-static: memory-cache side-channel attack on DSA signatures | known affected: 1 known not affected: 1 | 2026-05-14T18:19:11+00:00 | Vulnerability · Source |
| CVE-2018-11796 | redhat_vex | tika: Incomplete fix allows for XML entity expansion resulting in denial of service | fixed: 1 known affected: 6 known not affected: 5 | 2026-05-14T18:19:10+00:00 | Vulnerability · Source |
| CVE-2018-11771 | redhat_vex | apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip | fixed: 1 known affected: 14 known not affected: 8 | 2026-05-14T18:19:03+00:00 | Vulnerability · Source |
| CVE-2018-11761 | redhat_vex | tika: XML entity expansion vulnerability due to lack of limit configuration | known affected: 12 known not affected: 1 | 2026-05-14T18:18:57+00:00 | Vulnerability · Source |
| CVE-2017-12197 | redhat_vex | libpam4j: Account check bypass | fixed: 7 | 2026-05-14T18:17:28+00:00 | Vulnerability · Source |
| CVE-2017-9735 | redhat_vex | jetty: Timing channel attack in util/security/Password.java | known affected: 75 | 2026-05-14T18:17:15+00:00 | Vulnerability · Source |
| CVE-2017-9287 | redhat_vex | openldap: Double free vulnerability in servers/slapd/back-mdb/search.c | fixed: 320 known affected: 10 known not affected: 1 | 2026-05-14T18:17:12+00:00 | Vulnerability · Source |
| CVE-2017-9233 | redhat_vex | expat: Inifinite loop due to invalid XML in external entity | known affected: 38 | 2026-05-14T18:17:10+00:00 | Vulnerability · Source |
| CVE-2017-7957 | redhat_vex | XStream: DoS when unmarshalling void type | fixed: 4 known affected: 11 known not affected: 2 under investigation: 1 | 2026-05-14T18:17:01+00:00 | Vulnerability · Source |
| CVE-2017-5643 | redhat_vex | camel-core: Validation component vulnerable to SSRF via remote DTDs and XXE | fixed: 2 known affected: 6 | 2026-05-14T18:16:27+00:00 | Vulnerability · Source |
| CVE-2017-5637 | redhat_vex | zookeeper: Incorrect input validation with wchp/wchc four letter words | fixed: 3 known affected: 2 under investigation: 1 | 2026-05-14T18:16:25+00:00 | Vulnerability · Source |
| CVE-2020-26217 | redhat_vex | XStream: remote code execution due to insecure XML deserialization when relying on blocklists | fixed: 19 known affected: 6 known not affected: 4 | 2026-05-14T18:15:25+00:00 | Vulnerability · Source |
| CVE-2016-10027 | redhat_vex | smack: TLS SecurityMode.required bypass via StripTLS attack | known affected: 2 | 2026-05-14T18:12:42+00:00 | Vulnerability · Source |
| CVE-2016-9879 | redhat_vex | Security: Improper handling of path parameters allows bypassing the security constraint | fixed: 2 known affected: 1 under investigation: 2 | 2026-05-14T18:12:40+00:00 | Vulnerability · Source |
| CVE-2016-9878 | redhat_vex | Framework: Directory Traversal in the Spring Framework ResourceServlet | fixed: 2 known affected: 6 known not affected: 5 under investigation: 2 | 2026-05-14T18:12:38+00:00 | Vulnerability · Source |
| CVE-2016-8749 | redhat_vex | camel-jacksonxml: Unmarshalling operation are vulnerable to RCE | fixed: 2 known affected: 2 under investigation: 1 | 2026-05-14T18:12:13+00:00 | Vulnerability · Source |
| CVE-2016-0704 | redhat_vex | openssl: SSLv2 Bleichenbacher protection overwrites wrong bytes for export ciphers | fixed: 785 known affected: 1 under investigation: 4 | 2026-05-14T18:08:51+00:00 | Vulnerability · Source |
| CVE-2016-0703 | redhat_vex | openssl: Divide-and-conquer session key recovery in SSLv2 | fixed: 785 known affected: 1 under investigation: 4 | 2026-05-14T18:08:44+00:00 | Vulnerability · Source |
| CVE-2015-8710 | redhat_vex | libxml2: out-of-bounds memory access when parsing an unclosed HTML comment | fixed: 481 known affected: 2 | 2026-05-14T18:08:34+00:00 | Vulnerability · Source |
| CVE-2015-8035 | redhat_vex | libxml2: DoS caused by incorrect error detection during XZ decompression | fixed: 267 known affected: 1 known not affected: 6 | 2026-05-14T18:08:28+00:00 | Vulnerability · Source |
| CVE-2015-7942 | redhat_vex | libxml2: heap-based buffer overflow in xmlParseConditionalSections() | fixed: 481 known affected: 3 | 2026-05-14T18:08:25+00:00 | Vulnerability · Source |
| CVE-2015-7500 | redhat_vex | libxml2: Heap buffer overflow in xmlParseMisc | fixed: 481 known affected: 2 | 2026-05-14T18:08:06+00:00 | Vulnerability · Source |
| CVE-2015-7499 | redhat_vex | libxml2: Heap-based buffer overflow in xmlGROW | fixed: 481 known affected: 2 | 2026-05-14T18:08:01+00:00 | Vulnerability · Source |
| CVE-2015-7498 | redhat_vex | libxml2: Heap-based buffer overflow in xmlParseXmlDecl | fixed: 481 known affected: 2 | 2026-05-14T18:07:47+00:00 | Vulnerability · Source |
| CVE-2015-7497 | redhat_vex | libxml2: Heap-based buffer overflow in xmlDictComputeFastQKey | fixed: 481 known affected: 2 | 2026-05-14T18:07:43+00:00 | Vulnerability · Source |
| CVE-2019-14863 | redhat_vex | angular: Cross-site Scripting (XSS) due to no proper sanitization of xlink:href attributes | fixed: 2 | 2026-05-14T18:05:28+00:00 | Vulnerability · Source |
| CVE-2019-13990 | redhat_vex | libquartz: XXE attacks via job description | fixed: 5 known affected: 3 known not affected: 167 | 2026-05-14T18:05:18+00:00 | Vulnerability · Source |
| CVE-2019-11272 | redhat_vex | spring-security-core: mishandling of user passwords allows logging in with a password of NULL | fixed: 1 known affected: 3 known not affected: 4 | 2026-05-14T18:05:01+00:00 | Vulnerability · Source |
| CVE-2015-5344 | redhat_vex | camel-xstream: Java object de-serialization vulnerability leads to RCE | fixed: 1 known affected: 5 | 2026-05-14T18:02:36+00:00 | Vulnerability · Source |
| CVE-2015-5312 | redhat_vex | libxml2: CPU exhaustion when processing specially crafted XML input | fixed: 481 known affected: 2 | 2026-05-14T18:02:33+00:00 | Vulnerability · Source |
| CVE-2018-1000850 | redhat_vex | retrofit: Directory traversal in RequestBuilder allows manipulation of resources | fixed: 1 | 2026-05-14T18:01:33+00:00 | Vulnerability · Source |
| CVE-2018-1000130 | redhat_vex | jolokia: JMX proxy mode vulnerable to remote code execution | fixed: 1 known affected: 10 known not affected: 4 | 2026-05-14T18:01:29+00:00 | Vulnerability · Source |
| CVE-2018-1295 | redhat_vex | ignite: Possible Execution of Arbitrary Code Within Deserialization Endpoints | fixed: 1 known affected: 3 | 2026-05-14T18:01:03+00:00 | Vulnerability · Source |