VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299422 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-5180 | redhat_vex | glibc: DNS resolver NULL pointer dereference with crafted record type | fixed: 600 known affected: 8 known not affected: 2 | 2026-05-13T04:13:18+00:00 | Vulnerability · Source |
| CVE-2015-5169 | redhat_vex | struts: XSS vulnerability when devMode is turned on | known not affected: 1 | 2026-05-13T04:13:16+00:00 | Vulnerability · Source |
| CVE-2015-5153 | redhat_vex | Pulp: permissions removal issue when objects deleted | known not affected: 15 | 2026-05-13T04:13:14+00:00 | Vulnerability · Source |
| CVE-2015-5146 | redhat_vex | ntp: ntpd control message crash on crafted NUL-byte in configuration directive (VU#668167) | known affected: 11 known not affected: 1 | 2026-05-13T04:13:12+00:00 | Vulnerability · Source |
| CVE-2015-4165 | redhat_vex | elasticsearch: unspecified arbitrary files modification vulnerability | known affected: 2 | 2026-05-13T04:13:09+00:00 | Vulnerability · Source |
| CVE-2015-3420 | redhat_vex | dovecot: SSL/TLS handshake failures leading to a crash of the login process. | known not affected: 13 | 2026-05-13T04:13:07+00:00 | Vulnerability · Source |
| CVE-2015-3405 | redhat_vex | ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems | fixed: 328 known affected: 1 | 2026-05-13T04:13:05+00:00 | Vulnerability · Source |
| CVE-2015-3248 | redhat_vex | openhpi: world writable /var/lib/openhpi directory | fixed: 198 known affected: 4 | 2026-05-13T04:13:03+00:00 | Vulnerability · Source |
| CVE-2015-3243 | redhat_vex | rsyslog: some log files are created world-readable | known affected: 20 known not affected: 9 | 2026-05-13T04:12:56+00:00 | Vulnerability · Source |
| CVE-2015-3211 | redhat_vex | php: php-fpm package vulnerable to symlink attack | known affected: 141 | 2026-05-13T04:12:53+00:00 | Vulnerability · Source |
| CVE-2015-3171 | redhat_vex | sosreport: temporary file created with world-readable permissions | known not affected: 5 | 2026-05-13T04:12:50+00:00 | Vulnerability · Source |
| CVE-2015-3170 | redhat_vex | selinux-policy: policy package update causes denial of service | known affected: 7 known not affected: 7 | 2026-05-13T04:12:48+00:00 | Vulnerability · Source |
| CVE-2015-3156 | redhat_vex | openstack-trove: multiple insecure /tmp file usage issues | known affected: 2 | 2026-05-13T04:12:46+00:00 | Vulnerability · Source |
| CVE-2015-3149 | redhat_vex | OpenJDK8: insecure hsperfdata temporary file handling, CVE-2015-0383 regression (Hotspot) | fixed: 314 known not affected: 82 | 2026-05-13T04:12:42+00:00 | Vulnerability · Source |
| CVE-2015-3142 | redhat_vex | abrt: abrt-hook-ccpp writes core dumps to existing files owned by others | fixed: 2542 | 2026-05-13T04:12:40+00:00 | Vulnerability · Source |
| CVE-2015-3138 | redhat_vex | tcpdump: denial of service in print-wb.c | known not affected: 4 | 2026-05-13T04:12:36+00:00 | Vulnerability · Source |
| CVE-2015-2687 | redhat_vex | openstack-nova: information leak when live-migration failed | known affected: 3 | 2026-05-13T04:12:33+00:00 | Vulnerability · Source |
| CVE-2015-2675 | redhat_vex | rest: memory corruption when using oauth because of implicit declaration of rest_proxy_call_get_url | fixed: 200 | 2026-05-13T04:12:30+00:00 | Vulnerability · Source |
| CVE-2015-2158 | redhat_vex | pngcrush: pngcrush_measure_idat() off-by-one error | known not affected: 1 | 2026-05-13T04:12:28+00:00 | Vulnerability · Source |
| CVE-2015-2156 | redhat_vex | netty: HttpOnly cookie bypass | known affected: 12 known not affected: 2 | 2026-05-13T04:12:24+00:00 | Vulnerability · Source |
| CVE-2015-1870 | redhat_vex | abrt: default abrt event scripts lead to information disclosure | fixed: 2542 | 2026-05-13T04:12:19+00:00 | Vulnerability · Source |
| CVE-2015-1379 | redhat_vex | socat: possible DoS with fork | known affected: 2 | 2026-05-13T04:12:14+00:00 | Vulnerability · Source |
| CVE-2015-0839 | redhat_vex | hplip: hp-plugin verified binary download with short key ID | known affected: 13 known not affected: 1 | 2026-05-13T04:12:10+00:00 | Vulnerability · Source |
| CVE-2015-0238 | redhat_vex | OpenShift: selinux-policy privilege escalation to reveal process listing | known affected: 1 | 2026-05-13T04:12:08+00:00 | Vulnerability · Source |
| CVE-2015-0234 | redhat_vex | 10.x: multiple /tmp/ file vulnerabilities | known not affected: 10 | 2026-05-13T04:12:06+00:00 | Vulnerability · Source |
| CVE-2015-0233 | redhat_vex | 389-admin: multiple /tmp/ file vulnerabilities | known affected: 2 | 2026-05-13T04:12:02+00:00 | Vulnerability · Source |
| CVE-2015-0210 | redhat_vex | wpa_supplicant: broken certificate subject check | known not affected: 5 | 2026-05-13T04:12:00+00:00 | Vulnerability · Source |
| CVE-2014-9939 | redhat_vex | binutils: buffer overflow in ihex.c | known affected: 7 | 2026-05-13T04:11:56+00:00 | Vulnerability · Source |
| CVE-2014-9645 | redhat_vex | busybox: unprivileged arbitrary module load via basename abuse | known affected: 5 | 2026-05-13T04:11:52+00:00 | Vulnerability · Source |
| CVE-2014-9637 | redhat_vex | patch: local denial of service with a crafted patch | known affected: 5 | 2026-05-13T04:11:50+00:00 | Vulnerability · Source |
| CVE-2014-9635 | redhat_vex | Tomcat: failure to set httponly flag on cookies | known affected: 1 | 2026-05-13T04:11:48+00:00 | Vulnerability · Source |
| CVE-2014-9634 | redhat_vex | Tomcat: failure to set secure flag on cookies | known affected: 1 | 2026-05-13T04:11:44+00:00 | Vulnerability · Source |
| CVE-2014-9092 | redhat_vex | libjpeg-turbo: denial of service via specially-crafted JPEG file | known affected: 11 | 2026-05-13T04:11:42+00:00 | Vulnerability · Source |
| CVE-2014-8716 | redhat_vex | ImageMagick: out-of-bounds memory error in JPEG decoder | known affected: 16 known not affected: 1 | 2026-05-13T04:11:39+00:00 | Vulnerability · Source |
| CVE-2014-8562 | redhat_vex | ImageMagick: out-of-bounds memory error in DCM decode | known affected: 17 | 2026-05-13T04:11:37+00:00 | Vulnerability · Source |
| CVE-2014-8355 | redhat_vex | ImageMagick: out-of-bounds memory access in PCX parser | known affected: 16 known not affected: 1 | 2026-05-13T04:11:32+00:00 | Vulnerability · Source |
| CVE-2014-8354 | redhat_vex | ImageMagick: out-of-bounds memory access in resize code | known affected: 17 | 2026-05-13T04:11:29+00:00 | Vulnerability · Source |
| CVE-2014-8180 | redhat_vex | 6: mongodb accessible by local users without authentication resulting in Denial of Service | known affected: 4 | 2026-05-13T04:11:27+00:00 | Vulnerability · Source |
| CVE-2014-8127 | redhat_vex | libtiff: out-of-bounds read with malformed TIFF image in multiple tools | fixed: 448 known affected: 1 | 2026-05-13T04:11:24+00:00 | Vulnerability · Source |
| CVE-2014-7813 | redhat_vex | CFME: rails .to_sym symbol DoS | known affected: 2 | 2026-05-13T04:11:21+00:00 | Vulnerability · Source |
| CVE-2014-3498 | redhat_vex | ansible: Potential untrusted template execution | known not affected: 3 | 2026-05-13T04:11:18+00:00 | Vulnerability · Source |
| CVE-2014-2277 | redhat_vex | perltidy: insecure temporary file creation | known affected: 1 known not affected: 1 | 2026-05-13T04:11:13+00:00 | Vulnerability · Source |
| CVE-2014-1235 | redhat_vex | graphviz: buffer overflow in yyerror() due to improper fix for CVE-2014-0978 | known not affected: 27 | 2026-05-13T04:11:11+00:00 | Vulnerability · Source |
| CVE-2014-0219 | redhat_vex | Karaf: denial of service via shutdown port | known not affected: 3 | 2026-05-13T04:11:07+00:00 | Vulnerability · Source |
| CVE-2014-0146 | redhat_vex | Qemu: qcow2: NULL dereference in qcow2_open() error path | fixed: 48 known affected: 2 known not affected: 9 | 2026-05-13T04:11:04+00:00 | Vulnerability · Source |
| CVE-2014-0142 | redhat_vex | qemu: crash by possible division by zero | fixed: 48 known affected: 2 known not affected: 9 | 2026-05-13T04:11:01+00:00 | Vulnerability · Source |
| CVE-2011-5320 | redhat_vex | glibc: scanf implementation crashes on certain inputs | known affected: 9 known not affected: 8 | 2026-05-13T04:10:53+00:00 | Vulnerability · Source |
| CVE-2016-10152 | redhat_vex | hesiod: Use of hard-coded unsafe configuration if configuration file cannot be opened | known affected: 5 | 2026-05-13T04:10:48+00:00 | Vulnerability · Source |
| CVE-2016-0764 | redhat_vex | NetworkManager: Race condition allowing info leak | fixed: 1416 known affected: 6 known not affected: 1 | 2026-05-13T04:10:43+00:00 | Vulnerability · Source |
| CVE-2016-0726 | redhat_vex | nagios: Configured administrative account with fixed password and no IP restriction as default | known affected: 10 | 2026-05-13T04:10:38+00:00 | Vulnerability · Source |