VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290270 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-0263 | redhat_vex | Camel: XXE in via SAXSource expansion | fixed: 5 known affected: 2 | 2026-08-04T21:59:48+00:00 | Vulnerability · Source |
| CVE-2015-1788 | redhat_vex | OpenSSL: Malformed ECParameters causes infinite loop | known not affected: 22 | 2026-08-04T21:59:47+00:00 | Vulnerability · Source |
| CVE-2014-9970 | redhat_vex | jasypt: Vulnerable to timing attack against the password hash comparison | fixed: 121 known affected: 3 known not affected: 2 under investigation: 1 | 2026-08-04T21:59:29+00:00 | Vulnerability · Source |
| CVE-2015-3217 | redhat_vex | pcre: stack overflow caused by mishandled group empty match (8.38/11) | fixed: 415 known affected: 73 known not affected: 17 | 2026-08-04T21:59:24+00:00 | Vulnerability · Source |
| CVE-2015-1789 | redhat_vex | OpenSSL: out-of-bounds read in X509_cmp_time | fixed: 195 known affected: 6 known not affected: 4 | 2026-08-04T21:59:18+00:00 | Vulnerability · Source |
| CVE-2015-5348 | redhat_vex | Camel: Java object deserialisation in Jetty/Servlet | fixed: 1 known affected: 3 known not affected: 2 | 2026-08-04T21:59:16+00:00 | Vulnerability · Source |
| CVE-2015-0206 | redhat_vex | openssl: DTLS memory leak in dtls1_buffer_record | fixed: 144 known affected: 1 known not affected: 9 | 2026-08-04T21:59:12+00:00 | Vulnerability · Source |
| CVE-2016-4979 | redhat_vex | httpd: X509 client certificate authentication bypass using HTTP/2 | fixed: 80 known not affected: 32 | 2026-08-04T21:58:48+00:00 | Vulnerability · Source |
| CVE-2016-1000031 | redhat_vex | FileUpload: DiskFileItem file manipulation | known not affected: 22 | 2026-08-04T21:58:47+00:00 | Vulnerability · Source |
| CVE-2016-5422 | redhat_vex | JON3: privilege escalation via improper authorization | fixed: 1 | 2026-08-04T21:58:45+00:00 | Vulnerability · Source |
| CVE-2016-6303 | redhat_vex | openssl: Integer overflow in MDC2_Update() | known not affected: 22 | 2026-08-04T21:58:44+00:00 | Vulnerability · Source |
| CVE-2016-4800 | redhat_vex | jetty: path normalization | known not affected: 84 | 2026-08-04T21:58:41+00:00 | Vulnerability · Source |
| CVE-2015-8391 | redhat_vex | pcre: inefficient posix character class syntax check (8.38/16) | fixed: 415 known affected: 62 known not affected: 28 | 2026-08-04T21:58:40+00:00 | Vulnerability · Source |
| CVE-2016-2106 | redhat_vex | openssl: EVP_EncryptUpdate overflow | fixed: 275 known affected: 10 known not affected: 1 | 2026-08-04T21:58:39+00:00 | Vulnerability · Source |
| CVE-2016-2179 | redhat_vex | openssl: DTLS memory exhaustion DoS when messages are not removed from fragment buffer | fixed: 151 known affected: 7 known not affected: 4 | 2026-08-04T21:58:32+00:00 | Vulnerability · Source |
| CVE-2015-8389 | redhat_vex | pcre: infinite recursion in JIT compiler when processing certain patterns (8.38/21) | known not affected: 135 | 2026-08-04T21:58:23+00:00 | Vulnerability · Source |
| CVE-2015-7575 | redhat_vex | TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH) | fixed: 1303 known affected: 2 known not affected: 29 | 2026-08-04T21:58:22+00:00 | Vulnerability · Source |
| CVE-2016-2107 | redhat_vex | openssl: Padding oracle in AES-NI CBC MAC check | fixed: 194 known affected: 2 known not affected: 11 | 2026-08-04T21:58:21+00:00 | Vulnerability · Source |
| CVE-2016-3739 | redhat_vex | curl: TLS certificate name check bypass with mbedTLS and PolarSSL | known not affected: 13 | 2026-08-04T21:58:17+00:00 | Vulnerability · Source |
| CVE-2016-5388 | redhat_vex | Tomcat: CGI sets environmental variable based on user supplied Proxy request header | fixed: 163 known affected: 6 under investigation: 1 | 2026-08-04T21:58:07+00:00 | Vulnerability · Source |
| CVE-2016-2181 | redhat_vex | openssl: DTLS replay protection bypass allows DoS against DTLS connection | fixed: 151 known affected: 7 known not affected: 4 | 2026-08-04T21:58:04+00:00 | Vulnerability · Source |
| CVE-2016-0736 | redhat_vex | httpd: Padding Oracle in Apache mod_session_crypto | fixed: 201 known affected: 1 known not affected: 22 | 2026-08-04T21:58:03+00:00 | Vulnerability · Source |
| CVE-2016-5421 | redhat_vex | curl: Use of connection struct after free | fixed: 336 known affected: 9 known not affected: 10 | 2026-08-04T21:58:01+00:00 | Vulnerability · Source |
| CVE-2016-2105 | redhat_vex | openssl: EVP_EncodeUpdate overflow | fixed: 275 known affected: 10 known not affected: 1 | 2026-08-04T21:57:56+00:00 | Vulnerability · Source |
| CVE-2015-8631 | redhat_vex | krb5: Memory leak caused by supplying a null principal name in request | fixed: 158 known affected: 1 known not affected: 1 | 2026-08-04T21:57:53+00:00 | Vulnerability · Source |
| CVE-2016-5002 | redhat_vex | xmlrpc: XML external entity vulnerability SSRF via a crafted DTD | fixed: 1 known affected: 24 known not affected: 3 | 2026-08-04T21:57:51+00:00 | Vulnerability · Source |
| CVE-2016-6305 | redhat_vex | openssl: SSL_peek() hang on empty record | known not affected: 23 | 2026-08-04T21:57:49+00:00 | Vulnerability · Source |
| CVE-2016-4472 | redhat_vex | expat: Undefined behavior and pointer overflows | known affected: 25 known not affected: 52 under investigation: 1 | 2026-08-04T21:57:47+00:00 | Vulnerability · Source |
| CVE-2016-4993 | redhat_vex | eap: HTTP header injection / response splitting | fixed: 1039 known not affected: 41 | 2026-08-04T21:57:42+00:00 | Vulnerability · Source |
| CVE-2016-4911 | redhat_vex | openstack-keystone: Incorrect Audit IDs in Keystone Fernet Tokens can result in revocation bypass | known not affected: 13 | 2026-08-04T21:57:40+00:00 | Vulnerability · Source |
| CVE-2016-0701 | redhat_vex | OpenSSL: DH small subgroups | known not affected: 21 | 2026-08-04T21:57:38+00:00 | Vulnerability · Source |
| CVE-2016-2094 | redhat_vex | EAP: HTTPS NIO connector uses no timeout when reading SSL handshake from client | fixed: 481 | 2026-08-04T21:57:34+00:00 | Vulnerability · Source |
| CVE-2016-1546 | redhat_vex | httpd: mod_http2 denial-of-service by thread starvation | fixed: 60 known not affected: 31 | 2026-08-04T21:57:28+00:00 | Vulnerability · Source |
| CVE-2015-8388 | redhat_vex | pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18) | fixed: 415 known affected: 67 known not affected: 23 | 2026-08-04T21:57:25+00:00 | Vulnerability · Source |
| CVE-2016-2161 | redhat_vex | httpd: DoS vulnerability in mod_auth_digest | fixed: 201 known not affected: 23 | 2026-08-04T21:57:22+00:00 | Vulnerability · Source |
| CVE-2026-48990 | redhat_vex | joserfc: joserfc: Resource exhaustion via oversized JSON Web Signature (JWS) payloads | fixed: 11 known not affected: 200 | 2026-08-04T21:57:09+00:00 | Vulnerability · Source |
| CVE-2017-18640 | redhat_vex | snakeyaml: Billion laughs attack via alias feature | fixed: 5 known affected: 6 known not affected: 2 | 2026-08-04T21:57:03+00:00 | Vulnerability · Source |
| CVE-2017-15139 | redhat_vex | openstack-cinder: Data retained after deletion of a ScaleIO volume | fixed: 7 known affected: 10 known not affected: 10 | 2026-08-04T21:56:58+00:00 | Vulnerability · Source |
| CVE-2016-8739 | redhat_vex | apache-cxf: Atom entity provider of Apache CXF JAX-RS is vulnerable to XXE | fixed: 2 known affected: 3 known not affected: 10 under investigation: 2 | 2026-08-04T21:56:56+00:00 | Vulnerability · Source |
| CVE-2017-14868 | redhat_vex | restlet: XML external entity injection | known not affected: 2 | 2026-08-04T21:56:55+00:00 | Vulnerability · Source |
| CVE-2016-9177 | redhat_vex | Spark: Directory traversal vulnerability in version 2.5 | fixed: 2 known affected: 1 | 2026-08-04T21:56:51+00:00 | Vulnerability · Source |
| CVE-2016-8743 | redhat_vex | httpd: Apache HTTP Request Parsing Whitespace Defects | fixed: 263 known affected: 4 known not affected: 3 | 2026-08-04T21:56:49+00:00 | Vulnerability · Source |
| CVE-2016-8620 | redhat_vex | curl: Glob parser write/read out of bounds | fixed: 336 known affected: 9 known not affected: 11 | 2026-08-04T21:56:48+00:00 | Vulnerability · Source |
| CVE-2017-12624 | redhat_vex | cxf: Improper size validation in message attachment header for JAX-WS and JAX-RS services | fixed: 262 known affected: 7 known not affected: 8 | 2026-08-04T21:56:42+00:00 | Vulnerability · Source |
| CVE-2017-11368 | redhat_vex | krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure | fixed: 117 known affected: 8 known not affected: 4 | 2026-08-04T21:56:40+00:00 | Vulnerability · Source |
| CVE-2017-15088 | redhat_vex | krb5: Buffer overflow in get_matching_data() | known affected: 8 known not affected: 12 | 2026-08-04T21:56:34+00:00 | Vulnerability · Source |
| CVE-2017-1000257 | redhat_vex | curl: IMAP FETCH response out of bounds read | fixed: 400 known affected: 6 known not affected: 9 | 2026-08-04T21:56:32+00:00 | Vulnerability · Source |
| CVE-2016-7052 | redhat_vex | openssl: Missing CRL sanity check | known not affected: 23 | 2026-08-04T21:56:29+00:00 | Vulnerability · Source |
| CVE-2017-3156 | redhat_vex | cxf: CXF OAuth2 Hawk and JOSE MAC Validation code are vulnerable to timing attacks | fixed: 2 known affected: 5 known not affected: 8 under investigation: 1 | 2026-08-04T21:56:28+00:00 | Vulnerability · Source |
| CVE-2017-17740 | redhat_vex | openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service | known affected: 1 known not affected: 24 | 2026-08-04T21:56:26+00:00 | Vulnerability · Source |