VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299463 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-8061 | redhat_vex | kernel: dvb-usb-firmware.c interacts incorrectly with the CONFIG_VMAP_STACK option | known not affected: 55 | 2026-05-13T01:40:40+00:00 | Vulnerability · Source |
| CVE-2017-8039 | redhat_vex | spring-webflow: Data Binding Expression Vulnerability in Spring Web Flow | known affected: 1 | 2026-05-13T01:40:38+00:00 | Vulnerability · Source |
| CVE-2017-7979 | redhat_vex | kernel: cookie feature in packet action API implementation mishandles tb nlattr array | known not affected: 55 | 2026-05-13T01:40:37+00:00 | Vulnerability · Source |
| CVE-2017-7975 | redhat_vex | jbig2dec: Integer overflow in jbig2_build_huffman_table allows OOB write | known affected: 8 known not affected: 6 under investigation: 1 | 2026-05-13T01:40:35+00:00 | Vulnerability · Source |
| CVE-2017-7948 | redhat_vex | ghostscript: Integer overflow in the mark_curve function | known not affected: 15 | 2026-05-13T01:40:34+00:00 | Vulnerability · Source |
| CVE-2017-7882 | redhat_vex | libreoffice: Heap-buffer-overflow in HWPFile::TagsRead | known not affected: 316 | 2026-05-13T01:40:27+00:00 | Vulnerability · Source |
| CVE-2026-41636 | microsoft_vex | Apache Thrift: Node.js skip() recursion | fixed: 1 known affected: 2 | 2026-05-13T01:40:27+00:00 | Vulnerability · Source |
| CVE-2017-7870 | redhat_vex | libreoffice: Heap-buffer-overflow in tools::Polygon::Insert | fixed: 1660 known affected: 133 | 2026-05-13T01:40:25+00:00 | Vulnerability · Source |
| CVE-2017-7867 | redhat_vex | icu: Heap-buffer overflow in utext_setNativeIndex function | known affected: 13 | 2026-05-13T01:40:24+00:00 | Vulnerability · Source |
| CVE-2017-7869 | redhat_vex | gnutls: Out-of-bounds write related to the cdk_pkt_read function (GNUTLS-SA-2017-3) | fixed: 276 known affected: 9 | 2026-05-13T01:40:21+00:00 | Vulnerability · Source |
| CVE-2026-41605 | microsoft_vex | Apache Thrift: Swift Compact Protocol integer overflow | fixed: 1 known affected: 2 | 2026-05-13T01:40:21+00:00 | Vulnerability · Source |
| CVE-2017-7864 | redhat_vex | freetype: heap-based buffer overflow related to the tt_size_reset function | known not affected: 12 | 2026-05-13T01:40:19+00:00 | Vulnerability · Source |
| CVE-2017-7858 | redhat_vex | freetype: out-of-bounds write related to the TT_Get_MM_Var and sfnt_init_face functions | known not affected: 12 | 2026-05-13T01:40:18+00:00 | Vulnerability · Source |
| CVE-2017-7857 | redhat_vex | freetype: heap-based buffer overflow related to the TT_Get_MM_Var function | known not affected: 12 | 2026-05-13T01:40:16+00:00 | Vulnerability · Source |
| CVE-2017-7856 | redhat_vex | libreoffice: Heap-buffer-overflow in SVMConverter::ImplConvertFromSVM1 | known not affected: 316 | 2026-05-13T01:40:13+00:00 | Vulnerability · Source |
| CVE-2026-41603 | microsoft_vex | Apache Thrift: Java TSSLTransportFactory hostname verification | fixed: 1 known affected: 1 | 2026-05-13T01:40:12+00:00 | Vulnerability · Source |
| CVE-2017-7748 | redhat_vex | wireshark: WSP dissector infinite loop (wnpa-sec-2017-21) | known affected: 8 | 2026-05-13T01:40:11+00:00 | Vulnerability · Source |
| CVE-2017-7747 | redhat_vex | wireshark: PacketBB dissector crash (wnpa-sec-2017-18) | known affected: 8 | 2026-05-13T01:40:09+00:00 | Vulnerability · Source |
| CVE-2017-7746 | redhat_vex | wireshark: SLSK dissector long loop (wnpa-sec-2017-19) | known affected: 8 | 2026-05-13T01:40:06+00:00 | Vulnerability · Source |
| CVE-2017-7745 | redhat_vex | wireshark: SIGCOMP dissector infinite loop (wnpa-sec-2017-20) | known affected: 8 | 2026-05-13T01:40:04+00:00 | Vulnerability · Source |
| CVE-2017-7705 | redhat_vex | wireshark: RPCoRDMA dissector infinite loop (wnpa-sec-2017-15) | known affected: 8 | 2026-05-13T01:40:02+00:00 | Vulnerability · Source |
| CVE-2017-7704 | redhat_vex | wireshark: DOF dissector infinite loop (wnpa-sec-2017-17) | known affected: 8 | 2026-05-13T01:39:59+00:00 | Vulnerability · Source |
| CVE-2017-7703 | redhat_vex | wireshark: IMAP dissector crash (wnpa-sec-2017-12) | known affected: 8 | 2026-05-13T01:39:57+00:00 | Vulnerability · Source |
| CVE-2017-7702 | redhat_vex | wireshark: WBXML dissector infinite loop (wnpa-sec-2017-13) | known affected: 8 | 2026-05-13T01:39:55+00:00 | Vulnerability · Source |
| CVE-2017-7701 | redhat_vex | wireshark: BGP dissector infinite loop (wnpa-sec-2017-16) | known affected: 8 | 2026-05-13T01:39:53+00:00 | Vulnerability · Source |
| CVE-2017-7700 | redhat_vex | wireshark: NetScaler file parser infinite loop (wnpa-sec-2017-14) | known affected: 8 | 2026-05-13T01:39:50+00:00 | Vulnerability · Source |
| CVE-2025-48431 | microsoft_vex | Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error. | fixed: 1 known affected: 2 | 2026-05-13T01:39:49+00:00 | Vulnerability · Source |
| CVE-2017-7556 | redhat_vex | Hawtio: CSRF flaw via jolokia | known affected: 3 known not affected: 1 | 2026-05-13T01:39:41+00:00 | Vulnerability · Source |
| CVE-2017-7551 | redhat_vex | 389-ds-base: Password brute-force possible for locked account due to different return codes | fixed: 144 known affected: 4 | 2026-05-13T01:39:31+00:00 | Vulnerability · Source |
| CVE-2017-7550 | redhat_vex | ansible: jenkins_plugin module exposes passwords in remote host logs | fixed: 3 known affected: 10 known not affected: 3 under investigation: 1 | 2026-05-13T01:39:30+00:00 | Vulnerability · Source |
| CVE-2017-7524 | redhat_vex | tpm2-tools: Sending password in plaintext for HMAC generation on server | known affected: 1 | 2026-05-13T01:39:11+00:00 | Vulnerability · Source |
| CVE-2017-7505 | redhat_vex | foreman: Users with user management permission assigned to organization can manage user objects outside of the organization | known affected: 1 under investigation: 17 | 2026-05-13T01:39:09+00:00 | Vulnerability · Source |
| CVE-2017-7507 | redhat_vex | gnutls: Crash upon receiving well-formed status_request extension | fixed: 276 known not affected: 9 | 2026-05-13T01:39:08+00:00 | Vulnerability · Source |
| CVE-2017-7503 | redhat_vex | EAP: XXE issue in TransformerFactory | fixed: 1 known affected: 1 | 2026-05-13T01:39:04+00:00 | Vulnerability · Source |
| CVE-2017-7493 | redhat_vex | Qemu: 9pfs: guest privilege escalation in virtfs mapped-file mode | known not affected: 54 | 2026-05-13T01:39:02+00:00 | Vulnerability · Source |
| CVE-2017-7488 | redhat_vex | authconfig: Information leak when SSSD is used for authentication against remote server | fixed: 80 known not affected: 3 | 2026-05-13T01:39:00+00:00 | Vulnerability · Source |
| CVE-2017-1002100 | redhat_vex | kubernetes: Incorrect default access permissions for Persistent Volumes | known affected: 1 known not affected: 1 | 2026-05-13T01:38:57+00:00 | Vulnerability · Source |
| CVE-2017-1000406 | redhat_vex | opendaylight: Previous password continues to work after password change | known affected: 4 known not affected: 3 | 2026-05-13T01:38:56+00:00 | Vulnerability · Source |
| CVE-2017-7395 | redhat_vex | tigervnc: Integer overflow in SMsgReader::readClientCutText | fixed: 490 known affected: 5 | 2026-05-13T01:38:48+00:00 | Vulnerability · Source |
| CVE-2017-7394 | redhat_vex | tigervnc: Server crash via long usernames | fixed: 490 known affected: 5 | 2026-05-13T01:38:47+00:00 | Vulnerability · Source |
| CVE-2017-7393 | redhat_vex | tigervnc: Double free via crafted fences | fixed: 490 known not affected: 5 | 2026-05-13T01:38:44+00:00 | Vulnerability · Source |
| CVE-2017-1000368 | redhat_vex | sudo: Privilege escalation via improper get_process_ttyname() parsing (insufficient fix for CVE-2017-1000367) | fixed: 319 | 2026-05-13T01:38:40+00:00 | Vulnerability · Source |
| CVE-2017-1000363 | redhat_vex | kernel: Out-of-bounds write in lp_setup in drivers/char/lp.c | known not affected: 55 | 2026-05-13T01:38:39+00:00 | Vulnerability · Source |
| CVE-2017-7275 | redhat_vex | ImageMagick: Memory allocation failure in AcquireMagickMemory (incomplete fix for CVE-2016-8866) | known affected: 16 | 2026-05-13T01:38:37+00:00 | Vulnerability · Source |
| CVE-2017-1000255 | redhat_vex | kernel: Arbitrary stack overwrite causing oops via crafted signal frame | fixed: 102 known not affected: 55 | 2026-05-13T01:38:37+00:00 | Vulnerability · Source |
| CVE-2017-1000232 | redhat_vex | ldns: Memory corruption in ldns_str2rdf_long_str | known not affected: 8 | 2026-05-13T01:38:30+00:00 | Vulnerability · Source |
| CVE-2017-7234 | redhat_vex | python-django: Open redirect vulnerability in django.views.static.serve() | known affected: 6 known not affected: 34 | 2026-05-13T01:38:27+00:00 | Vulnerability · Source |
| CVE-2017-1000231 | redhat_vex | ldns: Memory corruption in ldns_rr_new_frm_fp_l | known affected: 8 | 2026-05-13T01:38:22+00:00 | Vulnerability · Source |
| CVE-2017-1000201 | redhat_vex | tcmu-runner: UnregisterHandler dbus method in tcmu-runner daemon for non-existing handler causes DoS | fixed: 5 known affected: 3 | 2026-05-13T01:38:19+00:00 | Vulnerability · Source |
| CVE-2017-1000200 | redhat_vex | tcmu-runner: UnregisterHandler D-Bus method in tcmu-runner daemon for internal handler causes DoS | fixed: 5 known affected: 3 | 2026-05-13T01:38:18+00:00 | Vulnerability · Source |