VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290275 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-1052 | redhat_vex | postgresql: Memory disclosure in table partitioning | known not affected: 110 | 2026-08-04T21:53:20+00:00 | Vulnerability · Source |
| CVE-2017-8399 | redhat_vex | pcre2: Stack-based buffer overflow in pcre2_match.c | known not affected: 118 | 2026-08-04T21:53:19+00:00 | Vulnerability · Source |
| CVE-2017-9798 | redhat_vex | httpd: Use-after-free by limiting unregistered HTTP method (Optionsbleed) | fixed: 796 known affected: 12 known not affected: 1 under investigation: 1 | 2026-08-04T21:53:10+00:00 | Vulnerability · Source |
| CVE-2017-7186 | redhat_vex | pcre: Invalid Unicode property lookup (8.41/7, 10.24/2) | fixed: 1 known affected: 10 known not affected: 110 | 2026-08-04T21:53:08+00:00 | Vulnerability · Source |
| CVE-2018-10237 | redhat_vex | guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service | fixed: 1878 known affected: 24 known not affected: 18 | 2026-08-04T21:53:07+00:00 | Vulnerability · Source |
| CVE-2017-3736 | redhat_vex | openssl: bn_sqrx8x_internal carry bug on x86_64 | fixed: 371 known affected: 2 known not affected: 13 under investigation: 4 | 2026-08-04T21:53:00+00:00 | Vulnerability · Source |
| CVE-2018-0500 | redhat_vex | curl: Heap-based buffer overflow in Curl_smtp_escape_eob() when uploading data over SMTP | fixed: 1 known not affected: 26 | 2026-08-04T21:52:55+00:00 | Vulnerability · Source |
| CVE-2017-7561 | redhat_vex | resteasy: Vary header not added by CORS filter leading to cache poisoning | fixed: 453 known affected: 2 known not affected: 5 | 2026-08-04T21:52:51+00:00 | Vulnerability · Source |
| CVE-2018-0733 | redhat_vex | openssl: Implementation bug in PA-RISC CRYPTO_memcmp function allows attackers to forge authenticated messages in a reduced number of attempts | known not affected: 29 | 2026-08-04T21:52:48+00:00 | Vulnerability · Source |
| CVE-2018-1053 | redhat_vex | postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask | fixed: 427 known affected: 25 known not affected: 68 | 2026-08-04T21:52:43+00:00 | Vulnerability · Source |
| CVE-2018-14635 | redhat_vex | openstack-neutron: A router interface out of subnet IP range results in a denial of service | fixed: 35 known affected: 62 known not affected: 12 | 2026-08-04T21:52:40+00:00 | Vulnerability · Source |
| CVE-2018-14636 | redhat_vex | openstack-neutron: eavesdropping private traffic due to trunk ports after live migration | known affected: 82 known not affected: 1 | 2026-08-04T21:52:37+00:00 | Vulnerability · Source |
| CVE-2018-11760 | redhat_vex | spark: local priviledge escalation when using PySpark | known affected: 1 known not affected: 1 | 2026-08-04T21:52:34+00:00 | Vulnerability · Source |
| CVE-2018-1315 | redhat_vex | hive: 'COPY FROM FTP' feature allows malicious FTP server to write arbitrary files to the cluster | known not affected: 1 | 2026-08-04T21:52:32+00:00 | Vulnerability · Source |
| CVE-2018-1259 | redhat_vex | spring-data-commons: XXE with Spring Data’s XMLBeam integration | fixed: 2 known not affected: 3 | 2026-08-04T21:52:30+00:00 | Vulnerability · Source |
| CVE-2018-1333 | redhat_vex | httpd: mod_http2: Too much time allocated to workers, possibly leading to DoS | fixed: 475 known not affected: 31 | 2026-08-04T21:52:28+00:00 | Vulnerability · Source |
| CVE-2018-1196 | redhat_vex | Boot: Symlink privilege escalation attack via launch script | known not affected: 2 | 2026-08-04T21:52:27+00:00 | Vulnerability · Source |
| CVE-2018-14404 | redhat_vex | libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c | fixed: 135 known affected: 9 known not affected: 1 | 2026-08-04T21:52:22+00:00 | Vulnerability · Source |
| CVE-2018-1303 | redhat_vex | httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause DoS | fixed: 544 known affected: 6 known not affected: 28 | 2026-08-04T21:52:19+00:00 | Vulnerability · Source |
| CVE-2018-15664 | redhat_vex | docker: symlink-exchange race attacks in docker cp | fixed: 37 known affected: 40 known not affected: 1 | 2026-08-04T21:52:17+00:00 | Vulnerability · Source |
| CVE-2018-12538 | redhat_vex | jetty: HttpSessions access/hijack in the FileSystem's storage for the FileSessionDataStore. | known not affected: 77 | 2026-08-04T21:52:15+00:00 | Vulnerability · Source |
| CVE-2018-1338 | redhat_vex | tika: Infinite loop in BPGParser can allow remote attacker to cause a denial of service | fixed: 1 known affected: 2 known not affected: 10 | 2026-08-04T21:52:13+00:00 | Vulnerability · Source |
| CVE-2018-1258 | redhat_vex | spring-security-core: Unauthorized Access with Spring Security Method Security | fixed: 1 known not affected: 3 | 2026-08-04T21:52:11+00:00 | Vulnerability · Source |
| CVE-2018-11218 | redhat_vex | redis: Heap corruption in lua_cmsgpack.c | fixed: 34 known affected: 12 known not affected: 6 | 2026-08-04T21:52:10+00:00 | Vulnerability · Source |
| CVE-2018-12453 | redhat_vex | redis: type confusion in the xgroupCommand function in t_stream.c | known not affected: 24 | 2026-08-04T21:52:09+00:00 | Vulnerability · Source |
| CVE-2018-11219 | redhat_vex | redis: Integer overflow in lua_struct.c:b_unpack() | fixed: 34 known affected: 12 known not affected: 6 | 2026-08-04T21:52:05+00:00 | Vulnerability · Source |
| CVE-2018-1271 | redhat_vex | spring-framework: Directory traversal vulnerability with static resources on Windows filesystems | fixed: 3 known affected: 8 known not affected: 28 | 2026-08-04T21:52:02+00:00 | Vulnerability · Source |
| CVE-2018-11233 | redhat_vex | git: path sanity check in is_ntfs_dotgit() can read arbitrary memory | fixed: 134 known affected: 1 known not affected: 56 | 2026-08-04T21:51:57+00:00 | Vulnerability · Source |
| CVE-2018-12121 | redhat_vex | nodejs: Denial of Service with large HTTP headers | fixed: 278 known affected: 37 known not affected: 15 | 2026-08-04T21:51:54+00:00 | Vulnerability · Source |
| CVE-2018-1067 | redhat_vex | undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) | fixed: 231 known affected: 5 known not affected: 50 | 2026-08-04T21:51:52+00:00 | Vulnerability · Source |
| CVE-2018-11768 | redhat_vex | hadoop: user/group information corruption through fsimage storing and reading | known affected: 6 known not affected: 2 | 2026-08-04T21:51:51+00:00 | Vulnerability · Source |
| CVE-2018-12120 | redhat_vex | nodejs: Debugger port 5858 listens on any interface by default | known affected: 40 known not affected: 25 | 2026-08-04T21:51:51+00:00 | Vulnerability · Source |
| CVE-2018-11770 | redhat_vex | spark: Missing authentication allows users to run driver programs via the REST API | known not affected: 2 | 2026-08-04T21:51:46+00:00 | Vulnerability · Source |
| CVE-2018-1320 | redhat_vex | thrift: SASL negotiation isComplete validation bypass in the org.apache.thrift.transport.TSaslTransport class | fixed: 1 known affected: 7 known not affected: 29 | 2026-08-04T21:51:45+00:00 | Vulnerability · Source |
| CVE-2018-12545 | redhat_vex | jetty: large settings frames causing denial of service | known affected: 74 known not affected: 3 | 2026-08-04T21:51:40+00:00 | Vulnerability · Source |
| CVE-2018-11784 | redhat_vex | tomcat: Open redirect in default servlet | fixed: 226 known affected: 8 known not affected: 37 | 2026-08-04T21:51:35+00:00 | Vulnerability · Source |
| CVE-2018-14720 | redhat_vex | jackson-databind: exfiltration/XXE in some JDK classes | fixed: 424 known affected: 25 known not affected: 160 | 2026-08-04T21:51:33+00:00 | Vulnerability · Source |
| CVE-2018-14721 | redhat_vex | jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class | fixed: 424 known affected: 19 known not affected: 166 | 2026-08-04T21:51:30+00:00 | Vulnerability · Source |
| CVE-2018-14335 | redhat_vex | h2: Information Exposure due to insecure handling of permissions in the backup | fixed: 1 known affected: 15 known not affected: 2 | 2026-08-04T21:51:29+00:00 | Vulnerability · Source |
| CVE-2018-1305 | redhat_vex | tomcat: Late application of security constraints can lead to resource exposure for unauthorised users | fixed: 129 known affected: 4 known not affected: 37 | 2026-08-04T21:51:25+00:00 | Vulnerability · Source |
| CVE-2018-11763 | redhat_vex | httpd: DoS for HTTP/2 connections by continuous SETTINGS frames | fixed: 475 known affected: 1 known not affected: 42 | 2026-08-04T21:51:24+00:00 | Vulnerability · Source |
| CVE-2018-1058 | redhat_vex | postgresql: Uncontrolled search path element in pg_dump and other client applications | fixed: 427 known affected: 51 known not affected: 41 | 2026-08-04T21:51:21+00:00 | Vulnerability · Source |
| CVE-2018-11762 | redhat_vex | tika: Zip Slip vulnerability in tika-app | known affected: 5 known not affected: 8 | 2026-08-04T21:51:17+00:00 | Vulnerability · Source |
| CVE-2018-12116 | redhat_vex | nodejs: HTTP request splitting | fixed: 76 known affected: 40 known not affected: 20 | 2026-08-04T21:51:15+00:00 | Vulnerability · Source |
| CVE-2018-1339 | redhat_vex | tika: Infinite loop in ChmParser can allow remote attacker to cause a denial of service | fixed: 1 known affected: 3 known not affected: 9 | 2026-08-04T21:51:15+00:00 | Vulnerability · Source |
| CVE-2018-1304 | redhat_vex | tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources | fixed: 565 known affected: 5 known not affected: 35 | 2026-08-04T21:51:11+00:00 | Vulnerability · Source |
| CVE-2018-1284 | redhat_vex | hive: Mishandled input in UDFXPathUtil.java allows users to access arbitrary files via crafted XML | known affected: 1 | 2026-08-04T21:51:11+00:00 | Vulnerability · Source |
| CVE-2018-1283 | redhat_vex | httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications | fixed: 544 known not affected: 34 | 2026-08-04T21:51:08+00:00 | Vulnerability · Source |
| CVE-2019-12406 | redhat_vex | cxf: does not restrict the number of message attachments | fixed: 4 known affected: 6 known not affected: 4 | 2026-08-04T21:50:23+00:00 | Vulnerability · Source |
| CVE-2019-10164 | redhat_vex | postgresql: Stack-based buffer overflow via setting a password | fixed: 525 known not affected: 93 | 2026-08-04T21:50:17+00:00 | Vulnerability · Source |