VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290257 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2012-4431 | redhat_vex | Tomcat/JBoss Web - Bypass of CSRF prevention filter | fixed: 55 known affected: 2 known not affected: 15 | 2026-08-04T22:04:57+00:00 | Vulnerability · Source |
| CVE-2012-3544 | redhat_vex | tomcat: Limited DoS in chunked transfer encoding input filter | fixed: 133 known affected: 1 known not affected: 14 | 2026-08-04T22:04:53+00:00 | Vulnerability · Source |
| CVE-2013-4122 | redhat_vex | cyrus-sasl: NULL pointer dereference (DoS) when glibc v.2.17 or FIPS-140 enabled Linux system used | known not affected: 26 | 2026-08-04T22:04:51+00:00 | Vulnerability · Source |
| CVE-2012-5531 | redhat_vex | Portal: Reflected Cross-Site Scripting (XSS) | fixed: 1 known affected: 1 | 2026-08-04T22:04:49+00:00 | Vulnerability · Source |
| CVE-2011-5245 | redhat_vex | RESTEasy: XML eXternal Entity (XXE) flaw | fixed: 53 known affected: 4 known not affected: 10 | 2026-08-04T22:04:49+00:00 | Vulnerability · Source |
| CVE-2013-4352 | redhat_vex | httpd: mod_cache NULL pointer dereference crash | fixed: 110 known affected: 1 known not affected: 20 | 2026-08-04T22:04:42+00:00 | Vulnerability · Source |
| CVE-2011-5063 | redhat_vex | tomcat: Multiple weaknesses in HTTP DIGEST authentication | fixed: 197 known not affected: 12 | 2026-08-04T22:04:38+00:00 | Vulnerability · Source |
| CVE-2012-5886 | redhat_vex | tomcat: three DIGEST authentication implementation issues | fixed: 176 known affected: 4 known not affected: 14 | 2026-08-04T22:04:30+00:00 | Vulnerability · Source |
| CVE-2013-4152 | redhat_vex | Framework: XML External Entity (XXE) injection flaw | fixed: 13 | 2026-08-04T22:03:44+00:00 | Vulnerability · Source |
| CVE-2012-5885 | redhat_vex | tomcat: three DIGEST authentication implementation issues | fixed: 176 known affected: 4 known not affected: 14 | 2026-08-04T22:03:39+00:00 | Vulnerability · Source |
| CVE-2013-4286 | redhat_vex | tomcat: multiple content-length header poisoning flaws | fixed: 461 known affected: 5 | 2026-08-04T22:03:38+00:00 | Vulnerability · Source |
| CVE-2013-4210 | redhat_vex | Remoting: DoS by file descriptor exhaustion | fixed: 17 known affected: 5 known not affected: 5 | 2026-08-04T22:03:34+00:00 | Vulnerability · Source |
| CVE-2012-2733 | redhat_vex | tomcat: HTTP NIO connector OOM DoS via a request with large headers | fixed: 23 known not affected: 17 | 2026-08-04T22:03:20+00:00 | Vulnerability · Source |
| CVE-2012-5783 | redhat_vex | jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name | fixed: 111 known affected: 8 known not affected: 5 | 2026-08-04T22:03:15+00:00 | Vulnerability · Source |
| CVE-2012-4534 | redhat_vex | Tomcat - Denial Of Service when using NIO+SSL+sendfile | fixed: 65 known not affected: 6 | 2026-08-04T22:03:08+00:00 | Vulnerability · Source |
| CVE-2012-0818 | redhat_vex | RESTEasy: XML eXternal Entity (XXE) flaw | fixed: 86 known affected: 3 known not affected: 10 | 2026-08-04T22:03:07+00:00 | Vulnerability · Source |
| CVE-2013-1508 | redhat_vex | GlassFish: Unspecified vulnerability allows remote attackers to affect integrity via vectors related to the REST interface | under investigation: 1 | 2026-08-04T22:03:03+00:00 | Vulnerability · Source |
| CVE-2013-1752 | redhat_vex | python: multiple unbound readline() DoS flaws in python stdlib | fixed: 305 known affected: 27 known not affected: 9 | 2026-08-04T22:03:00+00:00 | Vulnerability · Source |
| CVE-2012-0022 | redhat_vex | tomcat: large number of parameters DoS | fixed: 228 known not affected: 12 | 2026-08-04T22:02:52+00:00 | Vulnerability · Source |
| CVE-2014-0118 | redhat_vex | httpd: mod_deflate denial of service | fixed: 1170 known affected: 1 known not affected: 1 under investigation: 1 | 2026-08-04T22:02:48+00:00 | Vulnerability · Source |
| CVE-2014-7853 | redhat_vex | Subsystem: Information disclosure via incorrect sensitivity classification of attribute | fixed: 548 known affected: 2 known not affected: 1 | 2026-08-04T22:02:47+00:00 | Vulnerability · Source |
| CVE-2014-5352 | redhat_vex | krb5: gss_process_context_token() incorrectly frees context (MITKRB5-SA-2015-001) | fixed: 151 known affected: 1 known not affected: 2 | 2026-08-04T22:02:43+00:00 | Vulnerability · Source |
| CVE-2014-3569 | redhat_vex | openssl: denial of service in ssl23_get_client_hello function | known not affected: 16 | 2026-08-04T22:02:41+00:00 | Vulnerability · Source |
| CVE-2014-0033 | redhat_vex | tomcat: session fixation still possible with disableURLRewriting enabled | fixed: 23 known affected: 1 known not affected: 34 | 2026-08-04T22:02:39+00:00 | Vulnerability · Source |
| CVE-2014-3512 | redhat_vex | openssl: SRP buffer overrun | known not affected: 26 | 2026-08-04T22:02:36+00:00 | Vulnerability · Source |
| CVE-2014-3567 | redhat_vex | openssl: Invalid TLS/SSL session tickets could cause memory leak leading to server crash | fixed: 151 known not affected: 8 | 2026-08-04T22:02:31+00:00 | Vulnerability · Source |
| CVE-2014-9365 | redhat_vex | python: failure to validate certificates in the HTTP client with TLS (PEP 476) | fixed: 214 known affected: 24 known not affected: 8 | 2026-08-04T22:02:28+00:00 | Vulnerability · Source |
| CVE-2014-3578 | redhat_vex | Framework: Directory traversal | fixed: 4 known affected: 3 known not affected: 1 | 2026-08-04T22:02:26+00:00 | Vulnerability · Source |
| CVE-2014-3625 | redhat_vex | Framework: directory traversal flaw | fixed: 5 known affected: 3 | 2026-08-04T22:02:24+00:00 | Vulnerability · Source |
| CVE-2014-0198 | redhat_vex | openssl: SSL_MODE_RELEASE_BUFFERS NULL pointer dereference in do_ssl3_write() | fixed: 154 known not affected: 14 | 2026-08-04T22:02:22+00:00 | Vulnerability · Source |
| CVE-2014-5355 | redhat_vex | krb5: unauthenticated denial of service in recvauth_common() and others | fixed: 165 known affected: 1 known not affected: 2 | 2026-08-04T22:02:18+00:00 | Vulnerability · Source |
| CVE-2014-0231 | redhat_vex | httpd: mod_cgid denial of service | fixed: 1170 known affected: 1 known not affected: 1 under investigation: 1 | 2026-08-04T22:02:17+00:00 | Vulnerability · Source |
| CVE-2014-0075 | redhat_vex | Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter | fixed: 150 known affected: 5 | 2026-08-04T22:02:15+00:00 | Vulnerability · Source |
| CVE-2014-3584 | redhat_vex | CXF: Denial of Service (DoS) via invalid JAX-RS SAML tokens | fixed: 1 known affected: 5 known not affected: 8 | 2026-08-04T22:02:14+00:00 | Vulnerability · Source |
| CVE-2014-3511 | redhat_vex | openssl: TLS protocol downgrade attack | fixed: 160 known not affected: 10 | 2026-08-04T22:02:10+00:00 | Vulnerability · Source |
| CVE-2014-0050 | redhat_vex | apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream | fixed: 102 known affected: 18 known not affected: 13 under investigation: 1 | 2026-08-04T22:02:05+00:00 | Vulnerability · Source |
| CVE-2014-0227 | redhat_vex | Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter | fixed: 1177 known affected: 11 | 2026-08-04T22:02:03+00:00 | Vulnerability · Source |
| CVE-2013-6430 | redhat_vex | Framework: org.spring.web.util.JavaScriptUtils.javaScriptEscape insufficient escaping of characters | fixed: 2 known affected: 4 | 2026-08-04T22:01:52+00:00 | Vulnerability · Source |
| CVE-2014-3507 | redhat_vex | openssl: DTLS memory leak from zero-length fragments | fixed: 154 known affected: 3 known not affected: 10 | 2026-08-04T22:01:51+00:00 | Vulnerability · Source |
| CVE-2014-0117 | redhat_vex | httpd: mod_proxy denial of service | fixed: 110 known not affected: 20 | 2026-08-04T22:01:48+00:00 | Vulnerability · Source |
| CVE-2014-5139 | redhat_vex | openssl: crash with SRP ciphersuite in Server Hello message | known not affected: 26 | 2026-08-04T22:01:48+00:00 | Vulnerability · Source |
| CVE-2014-3509 | redhat_vex | openssl: race condition in ssl_parse_serverhello_tlsext | fixed: 159 known not affected: 10 | 2026-08-04T22:01:45+00:00 | Vulnerability · Source |
| CVE-2014-9421 | redhat_vex | krb5: kadmind doubly frees partial deserialization results (MITKRB5-SA-2015-001) | fixed: 151 known affected: 1 known not affected: 2 | 2026-08-04T22:01:40+00:00 | Vulnerability · Source |
| CVE-2014-0002 | redhat_vex | Camel: XML eXternal Entity (XXE) flaw in XSLT component | fixed: 8 known affected: 2 | 2026-08-04T22:01:36+00:00 | Vulnerability · Source |
| CVE-2014-7810 | redhat_vex | Tomcat/JbossWeb: security manager bypass via EL expressions | fixed: 223 known affected: 5 known not affected: 4 under investigation: 3 | 2026-08-04T22:01:35+00:00 | Vulnerability · Source |
| CVE-2014-0225 | redhat_vex | Framework: Information disclosure via SSRF | fixed: 2 known affected: 6 known not affected: 3 | 2026-08-04T22:01:32+00:00 | Vulnerability · Source |
| CVE-2014-8176 | redhat_vex | OpenSSL: Invalid free in DTLS | fixed: 153 known affected: 7 known not affected: 5 | 2026-08-04T22:01:27+00:00 | Vulnerability · Source |
| CVE-2014-3523 | redhat_vex | httpd: WinNT MPM denial of service | fixed: 1 known not affected: 39 | 2026-08-04T22:01:25+00:00 | Vulnerability · Source |
| CVE-2013-6357 | redhat_vex | tomcat5: CSRF vulnerability in Manager application | known affected: 2 known not affected: 3 | 2026-08-04T22:01:25+00:00 | Vulnerability · Source |
| CVE-2014-0093 | redhat_vex | 6: JSM policy not respected by deployed applications | fixed: 321 known not affected: 4 | 2026-08-04T22:01:24+00:00 | Vulnerability · Source |