VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299463 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-1000198 | redhat_vex | tcmu-runner: glfs handler allows local DoS via crafted CheckConfig strings | fixed: 5 known affected: 3 | 2026-05-13T01:38:14+00:00 | Vulnerability · Source |
| CVE-2017-7157 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution | known affected: 16 known not affected: 1 | 2026-05-13T01:38:13+00:00 | Vulnerability · Source |
| CVE-2017-1000159 | redhat_vex | evince: Command injection when exporting to PDF | known affected: 12 known not affected: 1 | 2026-05-13T01:38:13+00:00 | Vulnerability · Source |
| CVE-2017-7156 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution | known affected: 16 known not affected: 1 | 2026-05-13T01:38:06+00:00 | Vulnerability · Source |
| CVE-2017-1000158 | redhat_vex | python: Integer overflow in PyString_DecodeEscape results in heap-base buffer overflow | known affected: 40 known not affected: 8 | 2026-05-13T01:38:02+00:00 | Vulnerability · Source |
| CVE-2017-6966 | redhat_vex | binutils: Use-after-free in target_specific_reloc_handling in readelf | known affected: 7 | 2026-05-13T01:38:00+00:00 | Vulnerability · Source |
| CVE-2017-6965 | redhat_vex | binutils: Heap-based buffer overflow in target_specific_reloc_handling in readelf | known affected: 7 | 2026-05-13T01:37:58+00:00 | Vulnerability · Source |
| CVE-2017-6874 | redhat_vex | kernel: Race condition in kernel/ucount.c | known not affected: 55 | 2026-05-13T01:37:54+00:00 | Vulnerability · Source |
| CVE-2017-6852 | redhat_vex | jasper: Out of bounds heap read in jpc_dec_decodepkt | known affected: 14 | 2026-05-13T01:37:51+00:00 | Vulnerability · Source |
| CVE-2017-6850 | redhat_vex | jasper: uninitialized pointer use in jp2_cdef_destroy() | known not affected: 14 | 2026-05-13T01:37:48+00:00 | Vulnerability · Source |
| CVE-2017-1000061 | redhat_vex | xmlsec1: xmlsec vulnerable to external entity expansion | fixed: 696 known affected: 11 | 2026-05-13T01:37:46+00:00 | Vulnerability · Source |
| CVE-2017-1000056 | redhat_vex | kubernetes: Privilege escalation in the PodSecurityPolicy admission plugin | known affected: 1 known not affected: 20 | 2026-05-13T01:37:43+00:00 | Vulnerability · Source |
| CVE-2017-1000024 | redhat_vex | shotwell: Information disclosure in the web publishing plugins | known not affected: 2 | 2026-05-13T01:37:41+00:00 | Vulnerability · Source |
| CVE-2017-10686 | redhat_vex | nasm: Use-after-free in the detoken() function | known affected: 3 known not affected: 4 | 2026-05-13T01:37:38+00:00 | Vulnerability · Source |
| CVE-2017-10685 | redhat_vex | ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function | known affected: 13 | 2026-05-13T01:37:36+00:00 | Vulnerability · Source |
| CVE-2017-10684 | redhat_vex | ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c | known affected: 6 known not affected: 7 | 2026-05-13T01:37:34+00:00 | Vulnerability · Source |
| CVE-2017-10672 | redhat_vex | perl-XML-LibXML: Use-after-free by controlling the arguments to a replaceChild call | known affected: 3 | 2026-05-13T01:37:31+00:00 | Vulnerability · Source |
| CVE-2017-0889 | redhat_vex | paperclip: SSRF vulnerability in the Paperclip::UriAdapter class | known affected: 1 | 2026-05-13T01:35:31+00:00 | Vulnerability · Source |
| CVE-2017-0553 | redhat_vex | libnl: Integer overflow in nlmsg_reserve() | fixed: 1424 known affected: 9 | 2026-05-13T01:35:26+00:00 | Vulnerability · Source |
| CVE-2017-0641 | redhat_vex | libvpx: Weak limit for frames | known affected: 8 | 2026-05-13T01:35:23+00:00 | Vulnerability · Source |
| CVE-2017-0379 | redhat_vex | libgcrypt: Missing input validation for X25519 curve | known not affected: 10 | 2026-05-13T01:35:19+00:00 | Vulnerability · Source |
| CVE-2016-9963 | redhat_vex | exim: Possible information disclosure to remote atacker | known not affected: 1 | 2026-05-13T01:35:16+00:00 | Vulnerability · Source |
| CVE-2016-9932 | redhat_vex | xen: x86 CMPXCHG8B emulation fails to ignore operand size override (XSA-200) | known affected: 1 | 2026-05-13T01:35:15+00:00 | Vulnerability · Source |
| CVE-2016-9818 | redhat_vex | xen: ARM guests may induce host asynchronous abort (XSA-201) | known affected: 1 | 2026-05-13T01:35:12+00:00 | Vulnerability · Source |
| CVE-2016-9816 | redhat_vex | xen: ARM guests may induce host asynchronous abort (XSA-201) | known affected: 1 | 2026-05-13T01:35:11+00:00 | Vulnerability · Source |
| CVE-2016-9817 | redhat_vex | xen: ARM guests may induce host asynchronous abort (XSA-201) | known affected: 1 | 2026-05-13T01:35:11+00:00 | Vulnerability · Source |
| CVE-2016-9815 | redhat_vex | xen: ARM guests may induce host asynchronous abort (XSA-201) | known affected: 1 | 2026-05-13T01:35:06+00:00 | Vulnerability · Source |
| CVE-2016-9639 | redhat_vex | salt: Vulnerable caching provides access to private pillar data | known affected: 4 | 2026-05-13T01:34:52+00:00 | Vulnerability · Source |
| CVE-2016-9584 | redhat_vex | libical: Use-after-free | known affected: 9 known not affected: 5 | 2026-05-13T01:34:50+00:00 | Vulnerability · Source |
| CVE-2016-9453 | redhat_vex | libtiff: Out-of-bounds access in t2p_readwrite_pdf_image_tile() | known affected: 12 | 2026-05-13T01:34:47+00:00 | Vulnerability · Source |
| CVE-2017-4971 | redhat_vex | spring-webflow: Data Binding Expression Vulnerability | known affected: 1 | 2026-05-13T01:34:47+00:00 | Vulnerability · Source |
| CVE-2016-9386 | redhat_vex | xen: x86 null segments not always treated as unusable (XSA-191) | known affected: 1 | 2026-05-13T01:34:20+00:00 | Vulnerability · Source |
| CVE-2016-9385 | redhat_vex | xen: x86 segment base write emulation lacking canonical address checks (XSA-193) | known not affected: 1 | 2026-05-13T01:34:16+00:00 | Vulnerability · Source |
| CVE-2016-9384 | redhat_vex | xen: guest 32-bit ELF symbol table load leaking host data (XSA-194) | known not affected: 1 | 2026-05-13T01:34:10+00:00 | Vulnerability · Source |
| CVE-2016-9382 | redhat_vex | xen: x86 task switch to VM86 mode mis-handled (XSA-192) | known not affected: 1 | 2026-05-13T01:34:08+00:00 | Vulnerability · Source |
| CVE-2016-9380 | redhat_vex | xen: delimiter injection vulnerabilities in pygrub (XSA-198) | known affected: 1 | 2026-05-13T01:33:59+00:00 | Vulnerability · Source |
| CVE-2016-9379 | redhat_vex | xen: delimiter injection vulnerabilities in pygrub (XSA-198) | known affected: 1 | 2026-05-13T01:33:54+00:00 | Vulnerability · Source |
| CVE-2016-9378 | redhat_vex | xen: x86 software interrupt injection mis-handled (XSA-196) | known not affected: 1 | 2026-05-13T01:33:49+00:00 | Vulnerability · Source |
| CVE-2017-3635 | redhat_vex | mysql: C API unspecified vulnerability (CPU Jul 2017) | known not affected: 94 | 2026-05-13T01:33:46+00:00 | Vulnerability · Source |
| CVE-2016-9377 | redhat_vex | xen: x86 software interrupt injection mis-handled (XSA-196) | known not affected: 1 | 2026-05-13T01:33:45+00:00 | Vulnerability · Source |
| CVE-2016-9317 | redhat_vex | gd: Missing check for oversized images in gdImageCreate() | known affected: 10 known not affected: 127 | 2026-05-13T01:33:39+00:00 | Vulnerability · Source |
| CVE-2016-9311 | redhat_vex | ntp: Null pointer dereference when trap service is enabled | fixed: 328 known affected: 1 | 2026-05-13T01:33:34+00:00 | Vulnerability · Source |
| CVE-2016-9310 | redhat_vex | ntp: Mode 6 unauthenticated trap information disclosure and DDoS vector | fixed: 328 known affected: 1 | 2026-05-13T01:33:30+00:00 | Vulnerability · Source |
| CVE-2016-9298 | redhat_vex | ImageMagick: Heap buffer overflow in WaveletDenoiseImage() | known not affected: 16 | 2026-05-13T01:33:24+00:00 | Vulnerability · Source |
| CVE-2016-9279 | redhat_vex | kernel: Use After Free in /dev/fimg2d | known not affected: 55 | 2026-05-13T01:33:22+00:00 | Vulnerability · Source |
| CVE-2017-3329 | redhat_vex | mysql: Server: Thread Pooling unspecified vulnerability (CPU Apr 2017) | known not affected: 74 | 2026-05-13T01:33:20+00:00 | Vulnerability · Source |
| CVE-2016-9278 | redhat_vex | kernel: Kernel Crash on /dev/fimg2d ioctl command | known not affected: 55 | 2026-05-13T01:33:20+00:00 | Vulnerability · Source |
| CVE-2017-3204 | redhat_vex | golang-googlecode-go-crypto: Go SSH library does not verify host keys by default | known not affected: 25 | 2026-05-13T01:33:17+00:00 | Vulnerability · Source |
| CVE-2017-3159 | redhat_vex | camel-snakeyaml: Unmarshalling operation is vulnerable to RCE | fixed: 2 known affected: 1 | 2026-05-13T01:33:10+00:00 | Vulnerability · Source |
| CVE-2017-17997 | redhat_vex | wireshark: Misuse of NULL pointer in MRDISC dissector | known affected: 8 | 2026-05-13T01:32:43+00:00 | Vulnerability · Source |