VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290270 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-10210 | redhat_vex | postgresql: Windows installer writes superuser password to unprotected temporary file | known not affected: 110 | 2026-08-04T21:49:59+00:00 | Vulnerability · Source |
| CVE-2018-20200 | redhat_vex | okhttp: certificate pinning bypass | known not affected: 15 | 2026-08-04T21:49:58+00:00 | Vulnerability · Source |
| CVE-2018-7161 | redhat_vex | nodejs: denial of service (DoS) by causing a node server providing an http2 server to crash | fixed: 62 known not affected: 26 | 2026-08-04T21:49:54+00:00 | Vulnerability · Source |
| CVE-2018-17244 | redhat_vex | elasticsearch: Information Exposure due to improper set request headers | known affected: 1 known not affected: 23 | 2026-08-04T21:49:52+00:00 | Vulnerability · Source |
| CVE-2019-10172 | redhat_vex | jackson-mapper-asl: XML external entity similar to CVE-2016-3720 | fixed: 1402 known affected: 19 | 2026-08-04T21:49:45+00:00 | Vulnerability · Source |
| CVE-2018-17199 | redhat_vex | httpd: mod_session_cookie does not respect expiry time | fixed: 646 known not affected: 20 | 2026-08-04T21:49:35+00:00 | Vulnerability · Source |
| CVE-2019-10211 | redhat_vex | postgresql: Windows installer bundled OpenSSL executes code from unprotected directory | known not affected: 110 | 2026-08-04T21:49:33+00:00 | Vulnerability · Source |
| CVE-2019-10208 | redhat_vex | postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution | fixed: 1129 known affected: 15 known not affected: 6 | 2026-08-04T21:48:40+00:00 | Vulnerability · Source |
| CVE-2019-10072 | redhat_vex | tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199 | fixed: 84 known affected: 3 known not affected: 15 | 2026-08-04T21:48:40+00:00 | Vulnerability · Source |
| CVE-2018-8010 | redhat_vex | solr: XML external entity expansion in config files allows attackers to read arbitrary files | known affected: 3 known not affected: 5 | 2026-08-04T21:48:36+00:00 | Vulnerability · Source |
| CVE-2018-7162 | redhat_vex | nodejs: denial of service (DoS) by causing a node process which provides an http server supporting TLS server to crash | known not affected: 31 | 2026-08-04T21:48:30+00:00 | Vulnerability · Source |
| CVE-2018-8026 | redhat_vex | solr: XML external entity expansion in config files allows for arbitrary file read | known not affected: 8 | 2026-08-04T21:48:28+00:00 | Vulnerability · Source |
| CVE-2019-12401 | redhat_vex | solr: XML resource consumption attack via update handler | known affected: 2 known not affected: 2 | 2026-08-04T21:48:07+00:00 | Vulnerability · Source |
| CVE-2018-17197 | redhat_vex | tika: Infinite loop in SQLite3Parser resulting in a denial of service | known affected: 5 known not affected: 1 | 2026-08-04T21:48:03+00:00 | Vulnerability · Source |
| CVE-2018-7164 | redhat_vex | nodejs: uncontrolled memory consumption when using the net.Socket as a stream | known not affected: 30 | 2026-08-04T21:48:01+00:00 | Vulnerability · Source |
| CVE-2019-0210 | redhat_vex | thrift: Out-of-bounds read related to TJSONProtocol or TSimpleJSONProtocol | fixed: 1203 known affected: 39 known not affected: 32 | 2026-08-04T21:47:54+00:00 | Vulnerability · Source |
| CVE-2019-12418 | redhat_vex | tomcat: local privilege escalation | fixed: 106 known affected: 16 known not affected: 20 | 2026-08-04T21:47:51+00:00 | Vulnerability · Source |
| CVE-2018-7489 | redhat_vex | jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries | fixed: 666 known affected: 29 known not affected: 3 | 2026-08-04T21:47:47+00:00 | Vulnerability · Source |
| CVE-2018-8027 | redhat_vex | camel-core: XXE in XSD validation processor | known affected: 6 known not affected: 4 | 2026-08-04T21:47:42+00:00 | Vulnerability · Source |
| CVE-2018-7166 | redhat_vex | nodejs: Unintentional exposure of uninitialized memory | fixed: 81 known not affected: 65 | 2026-08-04T21:47:38+00:00 | Vulnerability · Source |
| CVE-2020-11987 | redhat_vex | batik: SSRF due to improper input validation by the NodePickerPanel | fixed: 1 known affected: 17 known not affected: 2 | 2026-08-04T21:47:33+00:00 | Vulnerability · Source |
| CVE-2019-2692 | redhat_vex | mysql-connector-java: privilege escalation in MySQL connector | fixed: 1 known affected: 4 known not affected: 3 | 2026-08-04T21:47:32+00:00 | Vulnerability · Source |
| CVE-2019-14893 | redhat_vex | jackson-databind: Serialization gadgets in classes of the xalan package | fixed: 313 known affected: 23 known not affected: 7 | 2026-08-04T21:47:28+00:00 | Vulnerability · Source |
| CVE-2020-13943 | redhat_vex | tomcat: Apache Tomcat HTTP/2 Request mix-up | fixed: 31 known affected: 19 known not affected: 22 | 2026-08-04T21:47:25+00:00 | Vulnerability · Source |
| CVE-2019-14900 | redhat_vex | hibernate: SQL injection issue in Hibernate ORM | fixed: 644 known affected: 9 known not affected: 11 | 2026-08-04T21:47:19+00:00 | Vulnerability · Source |
| CVE-2020-17049 | redhat_vex | Kerberos: delegation constrain bypass in S4U2Proxy | fixed: 446 known affected: 8 known not affected: 143 | 2026-08-04T21:47:14+00:00 | Vulnerability · Source |
| CVE-2019-3826 | redhat_vex | prometheus: Stored DOM cross-site scripting (XSS) attack via crafted URL | fixed: 83 known affected: 6 known not affected: 2 | 2026-08-04T21:47:04+00:00 | Vulnerability · Source |
| CVE-2020-14350 | redhat_vex | postgresql: Uncontrolled search path element in CREATE EXTENSION | fixed: 1403 known affected: 27 known not affected: 25 | 2026-08-04T21:47:02+00:00 | Vulnerability · Source |
| CVE-2020-14299 | redhat_vex | picketbox: JBoss EAP reload to admin-only mode allows authentication bypass | fixed: 371 known affected: 11 known not affected: 3 | 2026-08-04T21:46:55+00:00 | Vulnerability · Source |
| CVE-2019-7611 | redhat_vex | elasticsearch: Improper permission issue when attaching a new name to an index | fixed: 2 known affected: 18 known not affected: 3 | 2026-08-04T21:46:54+00:00 | Vulnerability · Source |
| CVE-2019-12423 | redhat_vex | cxf: OpenId Connect token service does not properly validate the clientId | fixed: 1403 known affected: 6 known not affected: 3 | 2026-08-04T21:46:32+00:00 | Vulnerability · Source |
| CVE-2020-14349 | redhat_vex | postgresql: Uncontrolled search path element in logical replication | fixed: 905 known affected: 1 known not affected: 88 | 2026-08-04T21:46:29+00:00 | Vulnerability · Source |
| CVE-2020-13959 | redhat_vex | velocity: XSS in the default error page for VelocityView | known affected: 6 known not affected: 30 | 2026-08-04T21:46:26+00:00 | Vulnerability · Source |
| CVE-2020-12692 | redhat_vex | openstack-keystone: failure to check signature TTL of the EC2 credential auth method | fixed: 12 known affected: 8 known not affected: 1 | 2026-08-04T21:46:24+00:00 | Vulnerability · Source |
| CVE-2019-25160 | redhat_vex | kernel: out-of-bounds memory accesses in netlabel | fixed: 120 known affected: 30 known not affected: 136 | 2026-08-04T21:46:21+00:00 | Vulnerability · Source |
| CVE-2019-20454 | redhat_vex | pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode | fixed: 371 known affected: 21 known not affected: 177 | 2026-08-04T21:46:16+00:00 | Vulnerability · Source |
| CVE-2019-14439 | redhat_vex | jackson-databind: Polymorphic typing issue related to logback/JNDI | fixed: 2 known affected: 18 known not affected: 14 | 2026-08-04T21:46:13+00:00 | Vulnerability · Source |
| CVE-2020-10683 | redhat_vex | dom4j: XML External Entity vulnerability in default SAX parser | fixed: 643 known affected: 29 known not affected: 5 | 2026-08-04T21:46:11+00:00 | Vulnerability · Source |
| CVE-2020-14297 | redhat_vex | wildfly: Some EJB transaction objects may get accumulated causing Denial of Service | fixed: 893 known affected: 8 known not affected: 3 | 2026-08-04T21:46:09+00:00 | Vulnerability · Source |
| CVE-2020-11979 | redhat_vex | ant: insecure temporary file | fixed: 49 known affected: 52 known not affected: 185 | 2026-08-04T21:46:07+00:00 | Vulnerability · Source |
| CVE-2020-14319 | redhat_vex | amq-on: CSRF (in graphQL requests) | fixed: 1 | 2026-08-04T21:46:05+00:00 | Vulnerability · Source |
| CVE-2020-14307 | redhat_vex | wildfly: EJB SessionOpenInvocations may not be removed properly after a response is received causing Denial of Service | fixed: 892 known affected: 8 known not affected: 3 | 2026-08-04T21:45:56+00:00 | Vulnerability · Source |
| CVE-2019-13509 | redhat_vex | docker: Docker Engine in debug mode may sometimes add secrets to the debug log leading to information disclosure | known affected: 1 known not affected: 1 | 2026-08-04T21:45:52+00:00 | Vulnerability · Source |
| CVE-2020-11996 | redhat_vex | tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS | fixed: 63 known affected: 10 known not affected: 25 | 2026-08-04T21:45:48+00:00 | Vulnerability · Source |
| CVE-2019-17632 | redhat_vex | jetty: generation of default unhandled error response content does not escape exception messages in stacktraces included in error output | known affected: 3 known not affected: 76 | 2026-08-04T21:45:46+00:00 | Vulnerability · Source |
| CVE-2020-13946 | redhat_vex | cassandra: allows manipulation of the RMI registry to perform a MITM attack and capture user names and passwords used to access the JMX interface | fixed: 1 known affected: 2 | 2026-08-04T21:45:39+00:00 | Vulnerability · Source |
| CVE-2020-10663 | redhat_vex | rubygem-json: Unsafe object creation vulnerability in JSON | fixed: 804 known affected: 46 known not affected: 65 | 2026-08-04T21:45:26+00:00 | Vulnerability · Source |
| CVE-2020-1695 | redhat_vex | resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class | fixed: 1226 known affected: 29 known not affected: 2 | 2026-08-04T21:45:21+00:00 | Vulnerability · Source |
| CVE-2019-17566 | redhat_vex | batik: SSRF via "xlink:href" | fixed: 3 known affected: 20 known not affected: 6 | 2026-08-04T21:45:17+00:00 | Vulnerability · Source |
| CVE-2020-11988 | redhat_vex | xmlgraphics-commons: SSRF due to improper input validation by the XMPParser | fixed: 3 known affected: 8 known not affected: 7 | 2026-08-04T21:45:14+00:00 | Vulnerability · Source |