VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299462 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-11310 | redhat_vex | ImageMagick: Memory leak in read_user_chunk_callback function | known affected: 16 | 2026-05-13T01:55:19+00:00 | Vulnerability · Source |
| CVE-2017-11171 | redhat_vex | gnome-session: Bad reference counting in accept_ice_connection() permits resource exhaustion | known affected: 3 known not affected: 6 | 2026-05-13T01:55:17+00:00 | Vulnerability · Source |
| CVE-2017-11188 | redhat_vex | ImageMagick: Resource exhaustion in ReadDPXImage function in coders\dpx.c | known affected: 16 | 2026-05-13T01:55:15+00:00 | Vulnerability · Source |
| CVE-2017-11170 | redhat_vex | ImageMagick: Memory leak in ReadTGAImage function when processing TGA or VST file | known affected: 16 | 2026-05-13T01:55:10+00:00 | Vulnerability · Source |
| CVE-2017-11166 | redhat_vex | ImageMagick: memory leak vulnerability in ReadXWDImage function in coders/xwd.c | fixed: 675 known affected: 8 | 2026-05-13T01:55:06+00:00 | Vulnerability · Source |
| CVE-2017-11142 | redhat_vex | php: Denial-of-Service via injecting long form variables | known affected: 1 known not affected: 118 | 2026-05-13T01:54:56+00:00 | Vulnerability · Source |
| CVE-2017-11141 | redhat_vex | ImageMagick: Memory exhaustion in ReadMATImage function in coders\mat.c | known affected: 16 | 2026-05-13T01:54:53+00:00 | Vulnerability · Source |
| CVE-2017-11113 | redhat_vex | ncurses: Null pointer dereference vulnerability in _nc_parse_entry function | known affected: 13 | 2026-05-13T01:54:51+00:00 | Vulnerability · Source |
| CVE-2017-11112 | redhat_vex | ncurses: Illegal address access in append_acs function | known affected: 13 | 2026-05-13T01:54:49+00:00 | Vulnerability · Source |
| CVE-2017-11109 | redhat_vex | vim: Use-after-free via crafted file | known affected: 13 | 2026-05-13T01:54:47+00:00 | Vulnerability · Source |
| CVE-2017-11108 | redhat_vex | tcpdump: Heap buffer overflow in the EXTRACT_16BITS function | fixed: 55 known affected: 2 | 2026-05-13T01:54:43+00:00 | Vulnerability · Source |
| CVE-2017-10995 | redhat_vex | ImageMagick: Out-of-bounds heap read in mng_get_long function | known affected: 16 | 2026-05-13T01:54:40+00:00 | Vulnerability · Source |
| CVE-2017-10989 | redhat_vex | sqlite: Heap-buffer overflow in the getNodeSize function | known affected: 12 known not affected: 1 under investigation: 3 | 2026-05-13T01:54:37+00:00 | Vulnerability · Source |
| CVE-2017-10966 | redhat_vex | irssi: Use-after-free while updating the internal nick list | known affected: 4 | 2026-05-13T01:54:34+00:00 | Vulnerability · Source |
| CVE-2017-10965 | redhat_vex | irssi: NULL pointer dereference when receiving messages with invalid time stamps | known affected: 4 | 2026-05-13T01:54:32+00:00 | Vulnerability · Source |
| CVE-2017-10928 | redhat_vex | ImageMagick: heap-based buffer over-read in the GetNextToken function | known affected: 16 | 2026-05-13T01:54:29+00:00 | Vulnerability · Source |
| CVE-2017-10911 | redhat_vex | xen: blkif responses leak backend stack data (XSA-216) | known not affected: 60 | 2026-05-13T01:54:27+00:00 | Vulnerability · Source |
| CVE-2017-10810 | redhat_vex | Kernel: virtio-gpu: memory leakage while creating gpu object | known affected: 29 known not affected: 27 | 2026-05-13T01:54:24+00:00 | Vulnerability · Source |
| CVE-2017-10806 | redhat_vex | Qemu: usb-redirect: stack buffer overflow in debug logging | known affected: 46 known not affected: 9 | 2026-05-13T01:54:21+00:00 | Vulnerability · Source |
| CVE-2017-10790 | redhat_vex | libtasn1: NULL pointer dereference in the _asn1_check_identifier function | known affected: 11 | 2026-05-13T01:54:18+00:00 | Vulnerability · Source |
| CVE-2017-10688 | redhat_vex | libtiff: Assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function | known affected: 12 | 2026-05-13T01:54:16+00:00 | Vulnerability · Source |
| CVE-2017-7501 | redhat_vex | rpm: Following symlinks to files when installing packages allows privilege escalation | known affected: 20 | 2026-05-13T01:52:34+00:00 | Vulnerability · Source |
| CVE-2017-5200 | redhat_vex | salt: Salt-api allows arbitrary command execution on a salt-master via Salt's ssh_client | known not affected: 4 | 2026-05-13T01:52:30+00:00 | Vulnerability · Source |
| CVE-2017-5192 | redhat_vex | salt: local_batch client external authentication not respected | known not affected: 4 | 2026-05-13T01:52:29+00:00 | Vulnerability · Source |
| CVE-2016-6809 | redhat_vex | tika: Native deserialization of Java objects in matlab files | known affected: 5 | 2026-05-13T01:52:11+00:00 | Vulnerability · Source |
| CVE-2016-6489 | redhat_vex | nettle: RSA/DSA code is vulnerable to cache-timing related attacks | fixed: 150 | 2026-05-13T01:52:08+00:00 | Vulnerability · Source |
| CVE-2016-6341 | redhat_vex | ovirt-engine: DWH_DB_PASSWORD is in cleartext in the log files | known affected: 2 | 2026-05-13T01:52:04+00:00 | Vulnerability · Source |
| CVE-2016-6312 | redhat_vex | httpd: Billion laughs attack regression | known affected: 1 known not affected: 55 | 2026-05-13T01:52:01+00:00 | Vulnerability · Source |
| CVE-2016-6311 | redhat_vex | EAP7: Internal IP address disclosed on redirect when request header Host field is not set | fixed: 847 known not affected: 1 | 2026-05-13T01:51:59+00:00 | Vulnerability · Source |
| CVE-2016-6310 | redhat_vex | ovirt-engine: ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD disclosed in log file | known affected: 2 | 2026-05-13T01:51:57+00:00 | Vulnerability · Source |
| CVE-2016-6209 | redhat_vex | nagios: Reflected XSS vulnerability and possible phishing vector | known affected: 11 | 2026-05-13T01:51:56+00:00 | Vulnerability · Source |
| CVE-2016-5416 | redhat_vex | 389-ds-base: ACI readable by anonymous user | fixed: 150 | 2026-05-13T01:51:53+00:00 | Vulnerability · Source |
| CVE-2016-5414 | redhat_vex | freeipa: incorrect check for SubjectAltNames during CA ACL check | known not affected: 21 | 2026-05-13T01:51:52+00:00 | Vulnerability · Source |
| CVE-2016-5411 | redhat_vex | QCI: creates world readable /var/lib/ovirt-engine/setup/engine-DC-config.py contains sensitive password | known affected: 1 | 2026-05-13T01:51:50+00:00 | Vulnerability · Source |
| CVE-2016-5410 | redhat_vex | firewalld: Firewall configuration can be modified by any logged in user | fixed: 48 | 2026-05-13T01:51:47+00:00 | Vulnerability · Source |
| CVE-2016-5401 | redhat_vex | BPMS: CSRF in business-central | known affected: 2 | 2026-05-13T01:51:45+00:00 | Vulnerability · Source |
| CVE-2016-5391 | redhat_vex | libreswan: IKEv2 bogus proposal lacking DH transform causes pluto daemon restart | known not affected: 3 | 2026-05-13T01:51:41+00:00 | Vulnerability · Source |
| CVE-2016-5322 | redhat_vex | libtiff: Out-of-bounds read in extractContigSamplesBytes() function | known affected: 1 known not affected: 11 | 2026-05-13T01:51:39+00:00 | Vulnerability · Source |
| CVE-2016-5239 | redhat_vex | ImageMagick,GraphicsMagick: Gnuplot delegate vulnerability allowing command injection | fixed: 581 known not affected: 1 | 2026-05-13T01:51:37+00:00 | Vulnerability · Source |
| CVE-2016-5007 | redhat_vex | spring: Path matching inconsistency | known affected: 2 under investigation: 5 | 2026-05-13T01:51:36+00:00 | Vulnerability · Source |
| CVE-2016-4996 | redhat_vex | foreman: inside discovery-debug, the root password is displayed in plaintext | fixed: 296 known affected: 1 | 2026-05-13T01:51:32+00:00 | Vulnerability · Source |
| CVE-2016-4973 | redhat_vex | gcc: Targets using libssp for SSP are missing -D_FORTIFY_SOURCE functionality | known not affected: 85 | 2026-05-13T01:51:31+00:00 | Vulnerability · Source |
| CVE-2016-4970 | redhat_vex | netty: Infinite loop vulnerability when handling renegotiation using SslProvider.OpenSsl | fixed: 4 known affected: 3 known not affected: 17 | 2026-05-13T01:51:27+00:00 | Vulnerability · Source |
| CVE-2016-4912 | redhat_vex | openslp: null pointer dereference in _xrealloc() function | known affected: 8 | 2026-05-13T01:51:25+00:00 | Vulnerability · Source |
| CVE-2016-4457 | redhat_vex | CFME: default certificate used across all installs | fixed: 195 | 2026-05-13T01:51:17+00:00 | Vulnerability · Source |
| CVE-2016-4456 | redhat_vex | gnutls: Environment variable GNUTLS_KEYLOGFILE is obtained via insecure getenv() | known not affected: 15 | 2026-05-13T01:51:16+00:00 | Vulnerability · Source |
| CVE-2016-4455 | redhat_vex | subscription-manager: sensitive world readable files in /var/lib/rhsm/ | fixed: 620 known affected: 1 | 2026-05-13T01:51:14+00:00 | Vulnerability · Source |
| CVE-2016-4445 | redhat_vex | setroubleshoot: insecure use of commands.getstatusoutput in sealert | fixed: 156 known not affected: 1 | 2026-05-13T01:51:11+00:00 | Vulnerability · Source |
| CVE-2016-4434 | redhat_vex | tika: XML External Entity vulnerability | fixed: 3 known affected: 4 known not affected: 1 under investigation: 1 | 2026-05-13T01:51:10+00:00 | Vulnerability · Source |
| CVE-2016-3704 | redhat_vex | pulp: Unsafe use of bash $RANDOM for NSS DB password and seed | fixed: 296 | 2026-05-13T01:51:07+00:00 | Vulnerability · Source |