VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299462 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-3113 | redhat_vex | ovirt-engine: Reflected XSS when submitting config file for VNC/SPICE Connection | known affected: 1 | 2026-05-13T01:51:06+00:00 | Vulnerability · Source |
| CVE-2016-3104 | redhat_vex | mongodb: Unauthenticated remote DoS via memory exhaustion | known affected: 25 | 2026-05-13T01:50:53+00:00 | Vulnerability · Source |
| CVE-2016-3076 | redhat_vex | python-pillow: buffer overflow in Jpeg2kEncode.c | known not affected: 13 | 2026-05-13T01:50:51+00:00 | Vulnerability · Source |
| CVE-2016-2379 | redhat_vex | pidgin: Eavesdropping hashed password when logging | known affected: 22 | 2026-05-13T01:50:49+00:00 | Vulnerability · Source |
| CVE-2016-2126 | redhat_vex | samba: Flaws in Kerberos PAC validation can trigger privilege elevation | fixed: 2126 known affected: 2 | 2026-05-13T01:50:45+00:00 | Vulnerability · Source |
| CVE-2016-2104 | redhat_vex | 5: stored and reflected XSS vulnerabilities | fixed: 7 | 2026-05-13T01:50:43+00:00 | Vulnerability · Source |
| CVE-2016-1908 | redhat_vex | openssh: possible fallback from untrusted to trusted X11 forwarding | fixed: 608 known affected: 1 | 2026-05-13T01:50:42+00:00 | Vulnerability · Source |
| CVE-2017-3157 | redhat_vex | libreoffice: Arbitrary file disclosure in Calc and Writer | fixed: 3670 | 2026-05-13T01:49:59+00:00 | Vulnerability · Source |
| CVE-2017-1000362 | redhat_vex | jenkins: Re-key admin monitor leaves behind unencrypted credentials in upgraded installations (SECURITY-376) | under investigation: 3 | 2026-05-13T01:49:51+00:00 | Vulnerability · Source |
| CVE-2017-1000189 | redhat_vex | nodejs-ejs: Denial of Service via renderFile() by overriding localNames | known not affected: 2 | 2026-05-13T01:49:49+00:00 | Vulnerability · Source |
| CVE-2017-1000188 | redhat_vex | nodejs-ejs: Cross-site scripting via ejs.renderFile() | known not affected: 2 | 2026-05-13T01:49:48+00:00 | Vulnerability · Source |
| CVE-2017-1000044 | redhat_vex | gtk-vnc: Incorrect boundaries check when updating framebuffer | known affected: 4 known not affected: 14 | 2026-05-13T01:49:46+00:00 | Vulnerability · Source |
| CVE-2017-1000098 | redhat_vex | golang: net/http: multipart ReadForm close file after copy | fixed: 13 known affected: 7 known not affected: 2 | 2026-05-13T01:49:46+00:00 | Vulnerability · Source |
| CVE-2015-7543 | redhat_vex | arts,kdelibs3: Use of mktemp(3) allows attacker to hijack the IPC | known affected: 7 | 2026-05-13T01:49:01+00:00 | Vulnerability · Source |
| CVE-2015-7529 | redhat_vex | sos: Usage of predictable temporary files allows privilege escalation | fixed: 16 known affected: 2 known not affected: 1 | 2026-05-13T01:48:58+00:00 | Vulnerability · Source |
| CVE-2015-7514 | redhat_vex | openstack-ironic: Ironic does not honor clean steps | known not affected: 13 | 2026-05-13T01:48:56+00:00 | Vulnerability · Source |
| CVE-2015-7510 | redhat_vex | systemd: Stack overflow in nss-mymachines | known not affected: 11 | 2026-05-13T01:48:55+00:00 | Vulnerability · Source |
| CVE-2015-7316 | redhat_vex | plone: URL checking method prone to XSS | known affected: 3 | 2026-05-13T01:48:53+00:00 | Vulnerability · Source |
| CVE-2015-7315 | redhat_vex | plone: Unauthorized user creation | known affected: 3 | 2026-05-13T01:48:50+00:00 | Vulnerability · Source |
| CVE-2015-6941 | redhat_vex | salt: win_useradd module and salt-cloud display passwords in debug log | known affected: 2 | 2026-05-13T01:48:49+00:00 | Vulnerability · Source |
| CVE-2015-5740 | redhat_vex | golang: HTTP request smuggling in net/http library | fixed: 7 known affected: 5 | 2026-05-13T01:48:47+00:00 | Vulnerability · Source |
| CVE-2015-5739 | redhat_vex | golang: HTTP request smuggling in net/http library | fixed: 7 known affected: 5 | 2026-05-13T01:48:45+00:00 | Vulnerability · Source |
| CVE-2015-5300 | redhat_vex | ntp: MITM attacker can force ntpd to make a step larger than the panic threshold | fixed: 278 known affected: 1 | 2026-05-13T01:48:43+00:00 | Vulnerability · Source |
| CVE-2015-5293 | redhat_vex | RHEV: When "boot protocol" is set to None on an interface, interface still gets IPv6 address | known affected: 1 | 2026-05-13T01:48:41+00:00 | Vulnerability · Source |
| CVE-2015-5244 | redhat_vex | mod_nss: incorrect ciphersuite parsing | known not affected: 23 | 2026-05-13T01:48:37+00:00 | Vulnerability · Source |
| CVE-2015-5232 | redhat_vex | opa-ff: various /tmp races | known affected: 7 | 2026-05-13T01:48:36+00:00 | Vulnerability · Source |
| CVE-2015-5221 | redhat_vex | jasper: use-after-free and double-free flaws in mif_process_cmpt() | fixed: 496 known not affected: 1 | 2026-05-13T01:48:33+00:00 | Vulnerability · Source |
| CVE-2015-5203 | redhat_vex | jasper: integer overflow in jas_image_cmpt_create() | fixed: 496 known affected: 4 | 2026-05-13T01:48:33+00:00 | Vulnerability · Source |
| CVE-2015-5179 | redhat_vex | FreeIPA: non-printable characters aren't checked in every case of user data | under investigation: 21 | 2026-05-13T01:48:31+00:00 | Vulnerability · Source |
| CVE-2015-5186 | redhat_vex | Audit: log terminal emulator escape sequences handling | known affected: 15 | 2026-05-13T01:48:29+00:00 | Vulnerability · Source |
| CVE-2015-5177 | redhat_vex | openslp: double free in SLPDProcessMessage() | known not affected: 8 | 2026-05-13T01:48:26+00:00 | Vulnerability · Source |
| CVE-2015-5069 | redhat_vex | wesnoth: authentication information disclosure | known not affected: 1 | 2026-05-13T01:48:24+00:00 | Vulnerability · Source |
| CVE-2015-5164 | redhat_vex | Satellite6: python pickle() processing problem in pulp | known affected: 1 | 2026-05-13T01:48:22+00:00 | Vulnerability · Source |
| CVE-2015-5070 | redhat_vex | wesnoth: authentication information disclosure | known not affected: 1 | 2026-05-13T01:48:20+00:00 | Vulnerability · Source |
| CVE-2015-4680 | redhat_vex | freeradius: insufficent CRL application | known affected: 25 | 2026-05-13T01:48:19+00:00 | Vulnerability · Source |
| CVE-2015-4646 | redhat_vex | squashfs-tools: stack overflow in read_fragment_table_4 due to fix for CVE-2015-4645 | known affected: 3 | 2026-05-13T01:48:17+00:00 | Vulnerability · Source |
| CVE-2015-4645 | redhat_vex | squashfs-tools: integer overflow in read_fragment_table_4 | known affected: 3 | 2026-05-13T01:48:15+00:00 | Vulnerability · Source |
| CVE-2015-4035 | redhat_vex | xzgrep: incorrect parsing of filenames containing a semicolon | known affected: 5 known not affected: 6 | 2026-05-13T01:48:13+00:00 | Vulnerability · Source |
| CVE-2015-4017 | redhat_vex | salt: Certificates are not verified when connecting to server with certain modules | known affected: 2 | 2026-05-13T01:48:12+00:00 | Vulnerability · Source |
| CVE-2015-3278 | redhat_vex | nss_compat_ossl: incorrect multi-keyword mode cipherstring parsing | known affected: 4 | 2026-05-13T01:48:10+00:00 | Vulnerability · Source |
| CVE-2015-3277 | redhat_vex | mod_nss: incorrect multi-keyword mode cipherstring parsing | known not affected: 5 | 2026-05-13T01:48:08+00:00 | Vulnerability · Source |
| CVE-2015-3206 | redhat_vex | python-kerberos: checkPassword() does not verify KDC authenticity | known affected: 3 | 2026-05-13T01:48:05+00:00 | Vulnerability · Source |
| CVE-2015-2330 | redhat_vex | webkitgtk: TLS certificate late verification | known affected: 5 known not affected: 4 | 2026-05-13T01:48:04+00:00 | Vulnerability · Source |
| CVE-2015-1839 | redhat_vex | salt: insecure /tmp file handling in salt/modules/chef.py | known not affected: 1 | 2026-05-13T01:48:03+00:00 | Vulnerability · Source |
| CVE-2015-1838 | redhat_vex | salt: insecure /tmp file handling in salt/modules/serverdensity_device.py | known not affected: 1 | 2026-05-13T01:48:02+00:00 | Vulnerability · Source |
| CVE-2015-1820 | redhat_vex | rubygem-rest-client: session fixation vulnerability Set-Cookie headers present in an HTTP 30x redirection responses | fixed: 1544 known affected: 13 | 2026-05-13T01:47:57+00:00 | Vulnerability · Source |
| CVE-2015-1783 | redhat_vex | lasso: use of uninitialized value leading to a crash | known affected: 3 known not affected: 4 | 2026-05-13T01:47:53+00:00 | Vulnerability · Source |
| CVE-2015-1395 | redhat_vex | patch: directory traversal via file rename | known affected: 2 known not affected: 3 | 2026-05-13T01:47:51+00:00 | Vulnerability · Source |
| CVE-2015-1336 | redhat_vex | man-db: TOCTOU bug when processing catman pages | known not affected: 1 | 2026-05-13T01:47:49+00:00 | Vulnerability · Source |
| CVE-2015-0296 | redhat_vex | texlive rpm scriptlet allows unprivileged user to delete arbitrary files | known not affected: 562 | 2026-05-13T01:47:46+00:00 | Vulnerability · Source |