VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299464 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-10987 | redhat_vex | freeradius: Buffer over-read in fr_dhcp_decode_suboptions() | fixed: 284 known not affected: 12 | 2026-05-13T01:12:28+00:00 | Vulnerability · Source |
| CVE-2017-10986 | redhat_vex | freeradius: Infinite read in dhcp_attr2vp() | fixed: 284 known affected: 2 known not affected: 10 | 2026-05-13T01:12:26+00:00 | Vulnerability · Source |
| CVE-2017-10985 | redhat_vex | freeradius: Infinite loop and memory exhaustion with 'concat' attributes | fixed: 284 known not affected: 12 | 2026-05-13T01:12:23+00:00 | Vulnerability · Source |
| CVE-2017-10983 | redhat_vex | freeradius: Out-of-bounds read in fr_dhcp_decode() when decoding option 63 | fixed: 448 known affected: 2 | 2026-05-13T01:12:22+00:00 | Vulnerability · Source |
| CVE-2017-10982 | redhat_vex | freeradius: Out-of-bounds read in fr_dhcp_decode_options() | fixed: 164 known affected: 2 known not affected: 13 | 2026-05-13T01:12:21+00:00 | Vulnerability · Source |
| CVE-2017-10981 | redhat_vex | freeradius: Memory leak in fr_dhcp_decode() | fixed: 164 known affected: 2 known not affected: 13 | 2026-05-13T01:12:20+00:00 | Vulnerability · Source |
| CVE-2017-10980 | redhat_vex | freeradius: Memory leak in decode_tlv() | fixed: 164 known affected: 2 known not affected: 13 | 2026-05-13T01:12:16+00:00 | Vulnerability · Source |
| CVE-2017-10978 | redhat_vex | freeradius: Out-of-bounds read/write due to improper output buffer size check in make_secret() | fixed: 448 known affected: 2 | 2026-05-13T01:12:13+00:00 | Vulnerability · Source |
| CVE-2017-10923 | redhat_vex | xen: arm: vgic: Out-of-bound access when sending SGIs (XSA-225) | known not affected: 1 | 2026-05-13T01:12:11+00:00 | Vulnerability · Source |
| CVE-2017-10919 | redhat_vex | xen: ARM guest disabling interrupt may crash Xen (XSA-223) | known affected: 1 | 2026-05-13T01:12:10+00:00 | Vulnerability · Source |
| CVE-2017-10906 | redhat_vex | fluentd: Escape sequence injection in filter_parser.rb:filter_stream can lead to arbitrary command execution when processing logs | fixed: 2 known affected: 7 | 2026-05-13T01:12:07+00:00 | Vulnerability · Source |
| CVE-2017-10807 | redhat_vex | jabberd: Jabberd before 2.6.1 allows anyone to authenticate using SASLANONYMOUS even when this option is disabled | known affected: 1 | 2026-05-13T01:12:06+00:00 | Vulnerability · Source |
| CVE-2017-10789 | redhat_vex | perl-DBD-MySQL: Possible MITM attack when mysql_ssl=1 | known affected: 5 | 2026-05-13T01:12:05+00:00 | Vulnerability · Source |
| CVE-2017-10788 | redhat_vex | perl-DBD-MySQL: Use-after-free when calling mysql_stmt_error() after mysql_stmt_close() | known affected: 5 | 2026-05-13T01:12:05+00:00 | Vulnerability · Source |
| CVE-2017-9462 | redhat_vex | mercurial: Python debugger accessible to authorized users | fixed: 282 | 2026-05-13T01:08:27+00:00 | Vulnerability · Source |
| CVE-2017-9445 | redhat_vex | systemd: Out-of-bounds write in systemd-resolved due to allocating too small buffer in dns_packet_new | known not affected: 11 | 2026-05-13T01:08:25+00:00 | Vulnerability · Source |
| CVE-2017-9148 | redhat_vex | freeradius: TLS resumption authentication bypass | fixed: 288 known not affected: 12 | 2026-05-13T01:08:23+00:00 | Vulnerability · Source |
| CVE-2017-8905 | redhat_vex | xen: possible memory corruption via failsafe callback (XSA-215) | known affected: 1 | 2026-05-13T01:08:21+00:00 | Vulnerability · Source |
| CVE-2017-8904 | redhat_vex | xen: grant transfer allows PV guest to elevate privileges (XSA-214) | known affected: 1 | 2026-05-13T01:08:20+00:00 | Vulnerability · Source |
| CVE-2017-8903 | redhat_vex | xen: x86: 64bit PV guest breakout via pagetable use-after-mode-change (XSA-213) | known affected: 1 | 2026-05-13T01:08:16+00:00 | Vulnerability · Source |
| CVE-2017-8422 | redhat_vex | kauth: service invoking dbus is not properly checked and allows local privilege escalation | fixed: 312 known not affected: 13 | 2026-05-13T01:08:09+00:00 | Vulnerability · Source |
| CVE-2017-9806 | redhat_vex | libreoffice: Out-of-bounds write in the WW8Fonts::WW8Fonts functionality | known not affected: 316 | 2026-05-13T01:08:08+00:00 | Vulnerability · Source |
| CVE-2017-9800 | redhat_vex | subversion: Command injection through clients via malicious svn+ssh URLs | fixed: 504 known affected: 11 | 2026-05-13T01:08:03+00:00 | Vulnerability · Source |
| CVE-2017-7692 | redhat_vex | squirrelmail: Insufficient escaping of user-supplied data | known affected: 1 | 2026-05-13T01:07:57+00:00 | Vulnerability · Source |
| CVE-2017-8281 | redhat_vex | kernel: use after free in the recvmmsg exit path | known not affected: 56 | 2026-05-13T01:07:56+00:00 | Vulnerability · Source |
| CVE-2017-7675 | redhat_vex | tomcat: Security Constraint Bypass | known not affected: 2 | 2026-05-13T01:07:50+00:00 | Vulnerability · Source |
| CVE-2017-7555 | redhat_vex | augeas: Improper handling of escaped strings leading to memory corruption | fixed: 280 known affected: 11 | 2026-05-13T01:07:49+00:00 | Vulnerability · Source |
| CVE-2017-7540 | redhat_vex | rubygem-safemode: Bypassing the whitelist of safe commands via block_pass | known affected: 3 | 2026-05-13T01:07:48+00:00 | Vulnerability · Source |
| CVE-2017-7502 | redhat_vex | nss: Null pointer dereference when handling empty SSLv2 messages | fixed: 609 known affected: 1 | 2026-05-13T01:07:39+00:00 | Vulnerability · Source |
| CVE-2017-7476 | redhat_vex | gnulib: Out-of-bounds write by setting a large TZ variable | known not affected: 5 | 2026-05-13T01:07:37+00:00 | Vulnerability · Source |
| CVE-2017-7474 | redhat_vex | keycloak-connect: auth token validity check ignored | fixed: 1 known affected: 1 | 2026-05-13T01:07:35+00:00 | Vulnerability · Source |
| CVE-2017-1000367 | redhat_vex | sudo: Privilege escalation in via improper get_process_ttyname() parsing | fixed: 319 | 2026-05-13T01:07:32+00:00 | Vulnerability · Source |
| CVE-2017-1000366 | redhat_vex | glibc: heap/stack gap jumping via unbounded stack allocations | fixed: 1479 known affected: 1 | 2026-05-13T01:07:29+00:00 | Vulnerability · Source |
| CVE-2017-1000357 | redhat_vex | opendaylight: odl-l2switch-switch feature does not handle closed-stream error | known not affected: 4 | 2026-05-13T01:07:27+00:00 | Vulnerability · Source |
| CVE-2017-1000250 | redhat_vex | bluez: Out-of-bounds heap read in service_search_attr_req function | fixed: 514 known affected: 1 | 2026-05-13T01:07:24+00:00 | Vulnerability · Source |
| CVE-2017-1000249 | redhat_vex | file: Stack-based buffer overflow in do_bid_note() | known not affected: 187 | 2026-05-13T01:07:18+00:00 | Vulnerability · Source |
| CVE-2017-7228 | redhat_vex | xen: x86: broken check in memory_exchange() permits PV guest breakout (XSA-212) | known affected: 1 | 2026-05-13T01:07:16+00:00 | Vulnerability · Source |
| CVE-2017-1000116 | redhat_vex | mercurial: command injection on clients through malicious ssh URLs | fixed: 150 known affected: 5 | 2026-05-13T01:07:14+00:00 | Vulnerability · Source |
| CVE-2017-1000115 | redhat_vex | Mercurial: pathaudit: path traversal via symlink | fixed: 150 known affected: 5 | 2026-05-13T01:07:13+00:00 | Vulnerability · Source |
| CVE-2017-1000096 | redhat_vex | jenkins-plugin-workflow-cps: Arbitrary code execution due to incomplete sandbox protection (SECURITY-551) | fixed: 46 known affected: 2 | 2026-05-13T01:07:07+00:00 | Vulnerability · Source |
| CVE-2017-1000095 | redhat_vex | jenkins-plugin-script-security: Unsafe methods in the default whitelist (SECURITY-538) | fixed: 2 known affected: 1 known not affected: 892 | 2026-05-13T01:07:05+00:00 | Vulnerability · Source |
| CVE-2017-1000083 | redhat_vex | evince: command injection via filename in tar-compressed comics archive | fixed: 246 known not affected: 6 | 2026-05-13T01:07:01+00:00 | Vulnerability · Source |
| CVE-2017-1000034 | redhat_vex | akka-actor: Java deserialization issue in the Remoting component | known affected: 4 known not affected: 1 | 2026-05-13T01:06:58+00:00 | Vulnerability · Source |
| CVE-2017-10125 | redhat_vex | JDK: unspecified vulnerability fixed in 7u151 and 8u141 (Deployment) | known not affected: 27 | 2026-05-13T01:06:40+00:00 | Vulnerability · Source |
| CVE-2016-9962 | redhat_vex | docker: insecure opening of file-descriptor allows privilege escalation | fixed: 17 | 2026-05-13T01:05:55+00:00 | Vulnerability · Source |
| CVE-2016-9637 | redhat_vex | Xen: qemu ioport out-of-bounds array access (XSA-199) | fixed: 52 known not affected: 47 | 2026-05-13T01:05:39+00:00 | Vulnerability · Source |
| CVE-2016-9560 | redhat_vex | jasper: stack-based buffer overflow in jpc_dec_tileinit() | fixed: 496 known affected: 4 | 2026-05-13T01:05:22+00:00 | Vulnerability · Source |
| CVE-2017-5051 | redhat_vex | chromium-browser: multiple out of bounds writes in chunkdemuxer | known affected: 2 | 2026-05-13T01:05:20+00:00 | Vulnerability · Source |
| CVE-2017-5050 | redhat_vex | chromium-browser: multiple out of bounds writes in chunkdemuxer | known affected: 2 | 2026-05-13T01:05:18+00:00 | Vulnerability · Source |
| CVE-2017-5049 | redhat_vex | chromium-browser: multiple out of bounds writes in chunkdemuxer | known affected: 2 | 2026-05-13T01:05:15+00:00 | Vulnerability · Source |