VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299385 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-7658 | redhat_vex | jetty: Incorrect header handling | fixed: 1 known affected: 78 | 2026-05-14T18:00:22+00:00 | Vulnerability · Source |
| CVE-2017-7657 | redhat_vex | jetty: HTTP request smuggling | fixed: 2 known affected: 77 | 2026-05-14T18:00:17+00:00 | Vulnerability · Source |
| CVE-2017-7656 | redhat_vex | jetty: HTTP request smuggling using the range header | fixed: 1 known affected: 79 | 2026-05-14T18:00:13+00:00 | Vulnerability · Source |
| CVE-2016-6325 | redhat_vex | tomcat: tomcat writable config files allow privilege escalation | fixed: 227 known affected: 3 | 2026-05-14T17:59:55+00:00 | Vulnerability · Source |
| CVE-2014-8275 | redhat_vex | openssl: Fix various certificate fingerprint issues | fixed: 551 known affected: 7 | 2026-05-14T17:55:56+00:00 | Vulnerability · Source |
| CVE-2014-3628 | redhat_vex | solr: Cross-site scripting (XSS) vulnerability via the fieldvaluecache object | known affected: 3 | 2026-05-14T17:55:48+00:00 | Vulnerability · Source |
| CVE-2016-3674 | redhat_vex | XStream: enabled processing of external entities | fixed: 2 known affected: 17 | 2026-05-14T17:50:41+00:00 | Vulnerability · Source |
| CVE-2015-1546 | redhat_vex | openldap: slapd crash in valueReturnFilter cleanup | known affected: 2 known not affected: 14 | 2026-05-14T17:50:33+00:00 | Vulnerability · Source |
| CVE-2015-0293 | redhat_vex | openssl: assertion failure in SSLv2 servers | fixed: 788 known affected: 7 | 2026-05-14T17:50:27+00:00 | Vulnerability · Source |
| CVE-2015-0204 | redhat_vex | openssl: only allow ephemeral RSA keys in export ciphersuites (FREAK) | fixed: 554 known affected: 9 | 2026-05-14T17:50:01+00:00 | Vulnerability · Source |
| CVE-2014-3570 | redhat_vex | openssl: Bignum squaring may produce incorrect results | fixed: 466 known affected: 9 | 2026-05-14T17:49:18+00:00 | Vulnerability · Source |
| CVE-2014-3623 | redhat_vex | CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods | fixed: 18 known affected: 10 | 2026-05-14T17:49:18+00:00 | Vulnerability · Source |
| CVE-2014-3571 | redhat_vex | openssl: DTLS segmentation fault in dtls1_get_record | fixed: 464 known affected: 7 known not affected: 1 | 2026-05-14T17:49:18+00:00 | Vulnerability · Source |
| CVE-2014-0098 | redhat_vex | httpd: mod_log_config does not properly handle logging certain cookies resulting in DoS | fixed: 294 known affected: 12 known not affected: 10 | 2026-05-14T16:01:47+00:00 | Vulnerability · Source |
| CVE-2014-0035 | redhat_vex | CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy | fixed: 306 known affected: 7 | 2026-05-14T16:01:44+00:00 | Vulnerability · Source |
| CVE-2014-3510 | redhat_vex | openssl: DTLS anonymous (EC)DH denial of service | fixed: 559 known affected: 9 known not affected: 1 | 2026-05-14T15:57:28+00:00 | Vulnerability · Source |
| CVE-2014-3508 | redhat_vex | openssl: information leak in pretty printing functions | fixed: 559 known affected: 10 | 2026-05-14T15:57:21+00:00 | Vulnerability · Source |
| CVE-2014-3506 | redhat_vex | openssl: DTLS memory exhaustion | fixed: 559 known affected: 9 known not affected: 1 | 2026-05-14T15:57:18+00:00 | Vulnerability · Source |
| CVE-2014-3505 | redhat_vex | openssl: DTLS packet processing double free | fixed: 559 known affected: 9 known not affected: 1 | 2026-05-14T15:57:12+00:00 | Vulnerability · Source |
| CVE-2014-0221 | redhat_vex | openssl: DoS when sending invalid DTLS handshake | fixed: 559 known affected: 7 known not affected: 4 | 2026-05-14T15:57:02+00:00 | Vulnerability · Source |
| CVE-2014-0110 | redhat_vex | CXF: Large invalid content could cause temporary space to fill | fixed: 306 known affected: 7 | 2026-05-14T15:56:48+00:00 | Vulnerability · Source |
| CVE-2014-0109 | redhat_vex | CXF: HTML content posted to SOAP endpoint could cause OOM errors | fixed: 306 known affected: 7 | 2026-05-14T15:56:43+00:00 | Vulnerability · Source |
| CVE-2014-0034 | redhat_vex | CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid | fixed: 306 known affected: 7 | 2026-05-14T15:56:33+00:00 | Vulnerability · Source |
| CVE-2014-0224 | redhat_vex | openssl: SSL/TLS MITM vulnerability | fixed: 1004 known affected: 3 known not affected: 4 | 2026-05-14T15:55:53+00:00 | Vulnerability · Source |
| CVE-2013-6438 | redhat_vex | httpd: mod_dav denial of service via crafted DAV WRITE request | fixed: 294 known affected: 13 known not affected: 9 | 2026-05-14T15:55:53+00:00 | Vulnerability · Source |
| CVE-2014-0059 | redhat_vex | JBossSX/PicketBox: World readable audit.log file | fixed: 341 known affected: 2 | 2026-05-14T15:34:15+00:00 | Vulnerability · Source |
| CVE-2013-1921 | redhat_vex | PicketBox: Insecure storage of masked passwords | fixed: 477 known affected: 2 | 2026-05-14T15:33:52+00:00 | Vulnerability · Source |
| CVE-2013-1896 | redhat_vex | httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_dav | fixed: 686 known affected: 2 known not affected: 9 under investigation: 1 | 2026-05-14T15:29:44+00:00 | Vulnerability · Source |
| CVE-2013-1416 | redhat_vex | krb5: NULL pointer dereference (DoS, KDC crash) by processing certain TGS requests | fixed: 222 known affected: 1 known not affected: 2 | 2026-05-14T15:29:39+00:00 | Vulnerability · Source |
| CVE-2013-2186 | redhat_vex | commons-fileupload: Arbitrary file upload via deserialization | fixed: 266 known affected: 7 | 2026-05-14T15:29:05+00:00 | Vulnerability · Source |
| CVE-2013-0239 | redhat_vex | apache-cxf: UsernameTokenPolicyValidator and UsernameTokenInterceptor allow empty passwords to authenticate | fixed: 7 known affected: 1 | 2026-05-14T15:29:01+00:00 | Vulnerability · Source |
| CVE-2012-3499 | redhat_vex | httpd: multiple XSS flaws due to unescaped hostnames | fixed: 794 known affected: 1 | 2026-05-14T15:28:59+00:00 | Vulnerability · Source |
| CVE-2013-0166 | redhat_vex | openssl: DoS due to improper handling of OCSP response verification | fixed: 250 known affected: 4 | 2026-05-14T15:28:59+00:00 | Vulnerability · Source |
| CVE-2012-4558 | redhat_vex | httpd: XSS flaw in mod_proxy_balancer manager interface | fixed: 794 known affected: 1 | 2026-05-14T15:28:59+00:00 | Vulnerability · Source |
| CVE-2012-2687 | redhat_vex | httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled | fixed: 1256 known affected: 1 | 2026-05-14T15:19:25+00:00 | Vulnerability · Source |
| CVE-2012-0884 | redhat_vex | openssl: CMS and PKCS#7 Bleichenbacher attack | fixed: 306 known affected: 6 | 2026-05-14T15:19:23+00:00 | Vulnerability · Source |
| CVE-2012-0883 | redhat_vex | httpd: insecure handling of LD_LIBRARY_PATH in envvars | fixed: 1 known affected: 1 known not affected: 8 | 2026-05-14T15:19:21+00:00 | Vulnerability · Source |
| CVE-2012-0031 | redhat_vex | httpd: possible crash on shutdown due to flaw in scoreboard handling | fixed: 267 known affected: 1 | 2026-05-14T15:19:19+00:00 | Vulnerability · Source |
| CVE-2011-3607 | redhat_vex | httpd: ap_pregsub Integer overflow to buffer overflow | fixed: 267 known affected: 2 | 2026-05-14T15:18:57+00:00 | Vulnerability · Source |
| CVE-2012-0021 | redhat_vex | httpd: NULL pointer dereference crash in mod_log_config | fixed: 21 known not affected: 8 | 2026-05-14T15:18:56+00:00 | Vulnerability · Source |
| CVE-2011-4415 | redhat_vex | httpd: SetEnvIf resource exhaustion | known affected: 10 | 2026-05-14T15:18:52+00:00 | Vulnerability · Source |
| CVE-2012-2333 | redhat_vex | openssl: record length handling integer underflow | fixed: 306 known affected: 3 known not affected: 2 | 2026-05-14T15:17:41+00:00 | Vulnerability · Source |
| CVE-2012-1165 | redhat_vex | openssl: mime_param_cmp NULL dereference crash | fixed: 306 known affected: 6 | 2026-05-14T15:17:34+00:00 | Vulnerability · Source |
| CVE-2012-0840 | redhat_vex | apr: hash table collisions CPU usage DoS | known affected: 6 | 2026-05-14T15:17:23+00:00 | Vulnerability · Source |
| CVE-2012-0053 | redhat_vex | httpd: cookie exposure due to error responses | fixed: 267 known affected: 2 | 2026-05-14T15:17:20+00:00 | Vulnerability · Source |
| CVE-2011-3368 | redhat_vex | httpd: reverse web proxy vulnerability | fixed: 285 known affected: 1 | 2026-05-14T15:17:17+00:00 | Vulnerability · Source |
| CVE-2011-3348 | redhat_vex | httpd: mod_proxy_ajp remote temporary DoS | fixed: 47 known not affected: 2 | 2026-05-14T15:17:14+00:00 | Vulnerability · Source |
| CVE-2008-0455 | redhat_vex | httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled | fixed: 1256 known affected: 1 | 2026-05-14T15:16:46+00:00 | Vulnerability · Source |
| CVE-2026-31718 | microsoft_vex | ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger | known affected: 1 known not affected: 1 | 2026-05-14T14:38:53+00:00 | Vulnerability · Source |
| CVE-2026-8053 | redhat_vex | FlatBSON Duplicate Field Index Drift | known not affected: 1 | 2026-05-14T08:21:05+00:00 | Vulnerability · Source |