GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

VEX records

Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.

Reset

299422 VEX records

API response
Vulnerability Source Title Product status Imported Links
CVE-2019-0231 redhat_vex mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure. fixed: 1318 known affected: 12 2026-05-14T18:23:04+00:00 Vulnerability · Source
CVE-2018-9159 redhat_vex spark: Absolute and relative pathnames allow for unintended static file disclosure fixed: 3 known affected: 2 2026-05-14T18:22:07+00:00 Vulnerability · Source
CVE-2018-8041 redhat_vex camel-mail: path traversal vulnerability fixed: 1 known affected: 3 2026-05-14T18:22:06+00:00 Vulnerability · Source
CVE-2018-3831 redhat_vex elasticsearch: Information exposure via _cluster/settings API fixed: 1 known affected: 6 known not affected: 17 2026-05-14T18:21:51+00:00 Vulnerability · Source
CVE-2018-12440 redhat_vex netty-tcnative-boringssl-static: memory-cache side-channel attack on DSA signatures known affected: 1 known not affected: 1 2026-05-14T18:19:11+00:00 Vulnerability · Source
CVE-2018-11796 redhat_vex tika: Incomplete fix allows for XML entity expansion resulting in denial of service fixed: 1 known affected: 6 known not affected: 5 2026-05-14T18:19:10+00:00 Vulnerability · Source
CVE-2018-11771 redhat_vex apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip fixed: 1 known affected: 14 known not affected: 8 2026-05-14T18:19:03+00:00 Vulnerability · Source
CVE-2018-11761 redhat_vex tika: XML entity expansion vulnerability due to lack of limit configuration known affected: 12 known not affected: 1 2026-05-14T18:18:57+00:00 Vulnerability · Source
CVE-2017-12197 redhat_vex libpam4j: Account check bypass fixed: 7 2026-05-14T18:17:28+00:00 Vulnerability · Source
CVE-2017-9735 redhat_vex jetty: Timing channel attack in util/security/Password.java known affected: 75 2026-05-14T18:17:15+00:00 Vulnerability · Source
CVE-2017-9287 redhat_vex openldap: Double free vulnerability in servers/slapd/back-mdb/search.c fixed: 320 known affected: 10 known not affected: 1 2026-05-14T18:17:12+00:00 Vulnerability · Source
CVE-2017-9233 redhat_vex expat: Inifinite loop due to invalid XML in external entity known affected: 38 2026-05-14T18:17:10+00:00 Vulnerability · Source
CVE-2017-7957 redhat_vex XStream: DoS when unmarshalling void type fixed: 4 known affected: 11 known not affected: 2 under investigation: 1 2026-05-14T18:17:01+00:00 Vulnerability · Source
CVE-2017-5643 redhat_vex camel-core: Validation component vulnerable to SSRF via remote DTDs and XXE fixed: 2 known affected: 6 2026-05-14T18:16:27+00:00 Vulnerability · Source
CVE-2017-5637 redhat_vex zookeeper: Incorrect input validation with wchp/wchc four letter words fixed: 3 known affected: 2 under investigation: 1 2026-05-14T18:16:25+00:00 Vulnerability · Source
CVE-2020-26217 redhat_vex XStream: remote code execution due to insecure XML deserialization when relying on blocklists fixed: 19 known affected: 6 known not affected: 4 2026-05-14T18:15:25+00:00 Vulnerability · Source
CVE-2016-10027 redhat_vex smack: TLS SecurityMode.required bypass via StripTLS attack known affected: 2 2026-05-14T18:12:42+00:00 Vulnerability · Source
CVE-2016-9879 redhat_vex Security: Improper handling of path parameters allows bypassing the security constraint fixed: 2 known affected: 1 under investigation: 2 2026-05-14T18:12:40+00:00 Vulnerability · Source
CVE-2016-9878 redhat_vex Framework: Directory Traversal in the Spring Framework ResourceServlet fixed: 2 known affected: 6 known not affected: 5 under investigation: 2 2026-05-14T18:12:38+00:00 Vulnerability · Source
CVE-2016-8749 redhat_vex camel-jacksonxml: Unmarshalling operation are vulnerable to RCE fixed: 2 known affected: 2 under investigation: 1 2026-05-14T18:12:13+00:00 Vulnerability · Source
CVE-2016-0704 redhat_vex openssl: SSLv2 Bleichenbacher protection overwrites wrong bytes for export ciphers fixed: 785 known affected: 1 under investigation: 4 2026-05-14T18:08:51+00:00 Vulnerability · Source
CVE-2016-0703 redhat_vex openssl: Divide-and-conquer session key recovery in SSLv2 fixed: 785 known affected: 1 under investigation: 4 2026-05-14T18:08:44+00:00 Vulnerability · Source
CVE-2015-8710 redhat_vex libxml2: out-of-bounds memory access when parsing an unclosed HTML comment fixed: 481 known affected: 2 2026-05-14T18:08:34+00:00 Vulnerability · Source
CVE-2015-8035 redhat_vex libxml2: DoS caused by incorrect error detection during XZ decompression fixed: 267 known affected: 1 known not affected: 6 2026-05-14T18:08:28+00:00 Vulnerability · Source
CVE-2015-7942 redhat_vex libxml2: heap-based buffer overflow in xmlParseConditionalSections() fixed: 481 known affected: 3 2026-05-14T18:08:25+00:00 Vulnerability · Source
CVE-2015-7500 redhat_vex libxml2: Heap buffer overflow in xmlParseMisc fixed: 481 known affected: 2 2026-05-14T18:08:06+00:00 Vulnerability · Source
CVE-2015-7499 redhat_vex libxml2: Heap-based buffer overflow in xmlGROW fixed: 481 known affected: 2 2026-05-14T18:08:01+00:00 Vulnerability · Source
CVE-2015-7498 redhat_vex libxml2: Heap-based buffer overflow in xmlParseXmlDecl fixed: 481 known affected: 2 2026-05-14T18:07:47+00:00 Vulnerability · Source
CVE-2015-7497 redhat_vex libxml2: Heap-based buffer overflow in xmlDictComputeFastQKey fixed: 481 known affected: 2 2026-05-14T18:07:43+00:00 Vulnerability · Source
CVE-2019-14863 redhat_vex angular: Cross-site Scripting (XSS) due to no proper sanitization of xlink:href attributes fixed: 2 2026-05-14T18:05:28+00:00 Vulnerability · Source
CVE-2019-13990 redhat_vex libquartz: XXE attacks via job description fixed: 5 known affected: 3 known not affected: 167 2026-05-14T18:05:18+00:00 Vulnerability · Source
CVE-2019-11272 redhat_vex spring-security-core: mishandling of user passwords allows logging in with a password of NULL fixed: 1 known affected: 3 known not affected: 4 2026-05-14T18:05:01+00:00 Vulnerability · Source
CVE-2015-5344 redhat_vex camel-xstream: Java object de-serialization vulnerability leads to RCE fixed: 1 known affected: 5 2026-05-14T18:02:36+00:00 Vulnerability · Source
CVE-2015-5312 redhat_vex libxml2: CPU exhaustion when processing specially crafted XML input fixed: 481 known affected: 2 2026-05-14T18:02:33+00:00 Vulnerability · Source
CVE-2018-1000850 redhat_vex retrofit: Directory traversal in RequestBuilder allows manipulation of resources fixed: 1 2026-05-14T18:01:33+00:00 Vulnerability · Source
CVE-2018-1000130 redhat_vex jolokia: JMX proxy mode vulnerable to remote code execution fixed: 1 known affected: 10 known not affected: 4 2026-05-14T18:01:29+00:00 Vulnerability · Source
CVE-2018-1295 redhat_vex ignite: Possible Execution of Arbitrary Code Within Deserialization Endpoints fixed: 1 known affected: 3 2026-05-14T18:01:03+00:00 Vulnerability · Source
CVE-2017-7658 redhat_vex jetty: Incorrect header handling fixed: 1 known affected: 78 2026-05-14T18:00:22+00:00 Vulnerability · Source
CVE-2017-7657 redhat_vex jetty: HTTP request smuggling fixed: 2 known affected: 77 2026-05-14T18:00:17+00:00 Vulnerability · Source
CVE-2017-7656 redhat_vex jetty: HTTP request smuggling using the range header fixed: 1 known affected: 79 2026-05-14T18:00:13+00:00 Vulnerability · Source
CVE-2016-6325 redhat_vex tomcat: tomcat writable config files allow privilege escalation fixed: 227 known affected: 3 2026-05-14T17:59:55+00:00 Vulnerability · Source
CVE-2014-8275 redhat_vex openssl: Fix various certificate fingerprint issues fixed: 551 known affected: 7 2026-05-14T17:55:56+00:00 Vulnerability · Source
CVE-2014-3628 redhat_vex solr: Cross-site scripting (XSS) vulnerability via the fieldvaluecache object known affected: 3 2026-05-14T17:55:48+00:00 Vulnerability · Source
CVE-2016-3674 redhat_vex XStream: enabled processing of external entities fixed: 2 known affected: 17 2026-05-14T17:50:41+00:00 Vulnerability · Source
CVE-2015-1546 redhat_vex openldap: slapd crash in valueReturnFilter cleanup known affected: 2 known not affected: 14 2026-05-14T17:50:33+00:00 Vulnerability · Source
CVE-2015-0293 redhat_vex openssl: assertion failure in SSLv2 servers fixed: 788 known affected: 7 2026-05-14T17:50:27+00:00 Vulnerability · Source
CVE-2015-0204 redhat_vex openssl: only allow ephemeral RSA keys in export ciphersuites (FREAK) fixed: 554 known affected: 9 2026-05-14T17:50:01+00:00 Vulnerability · Source
CVE-2014-3570 redhat_vex openssl: Bignum squaring may produce incorrect results fixed: 466 known affected: 9 2026-05-14T17:49:18+00:00 Vulnerability · Source
CVE-2014-3623 redhat_vex CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods fixed: 18 known affected: 10 2026-05-14T17:49:18+00:00 Vulnerability · Source
CVE-2014-3571 redhat_vex openssl: DTLS segmentation fault in dtls1_get_record fixed: 464 known affected: 7 known not affected: 1 2026-05-14T17:49:18+00:00 Vulnerability · Source