VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290342 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-0264 | redhat_vex | Camel: XXE via XPath expression evaluation | fixed: 5 known affected: 2 | 2026-08-04T22:00:24+00:00 | Vulnerability · Source |
| CVE-2015-0286 | redhat_vex | openssl: invalid pointer use in ASN1_TYPE_cmp() | fixed: 159 known affected: 5 known not affected: 9 | 2026-08-04T22:00:19+00:00 | Vulnerability · Source |
| CVE-2015-0207 | redhat_vex | openssl: DTLS segmentation fault in DTLSv1_listen | known not affected: 25 | 2026-08-04T22:00:16+00:00 | Vulnerability · Source |
| CVE-2015-3193 | redhat_vex | OpenSSL: BN_mod_exp may produce incorrect results on x86_64 | known not affected: 19 | 2026-08-04T22:00:14+00:00 | Vulnerability · Source |
| CVE-2015-5253 | redhat_vex | apache-cxf: SAML SSO processing is vulnerable to wrapping attack | fixed: 1 known affected: 2 known not affected: 1 | 2026-08-04T22:00:08+00:00 | Vulnerability · Source |
| CVE-2015-1787 | redhat_vex | openssl: segmentation fault in client authentication with empty CKE and DHE | known not affected: 24 | 2026-08-04T22:00:06+00:00 | Vulnerability · Source |
| CVE-2015-1545 | redhat_vex | openldap: slapd crashes on search with deref control and empty attr list | known not affected: 16 | 2026-08-04T22:00:04+00:00 | Vulnerability · Source |
| CVE-2015-2328 | redhat_vex | pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20) | fixed: 327 known affected: 62 known not affected: 38 | 2026-08-04T22:00:01+00:00 | Vulnerability · Source |
| CVE-2015-5073 | redhat_vex | pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18) | fixed: 415 known affected: 67 known not affected: 23 | 2026-08-04T22:00:01+00:00 | Vulnerability · Source |
| CVE-2015-0208 | redhat_vex | openssl: segmentation fault for invalid PSS parameters | known not affected: 25 | 2026-08-04T21:59:59+00:00 | Vulnerability · Source |
| CVE-2015-2327 | redhat_vex | pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19) | fixed: 333 known affected: 67 known not affected: 33 | 2026-08-04T21:59:51+00:00 | Vulnerability · Source |
| CVE-2015-3254 | redhat_vex | thrift: Infinite recursion via vectors involving the skip function | fixed: 3 known affected: 3 known not affected: 1 | 2026-08-04T21:59:51+00:00 | Vulnerability · Source |
| CVE-2015-0263 | redhat_vex | Camel: XXE in via SAXSource expansion | fixed: 5 known affected: 2 | 2026-08-04T21:59:48+00:00 | Vulnerability · Source |
| CVE-2015-1788 | redhat_vex | OpenSSL: Malformed ECParameters causes infinite loop | known not affected: 22 | 2026-08-04T21:59:47+00:00 | Vulnerability · Source |
| CVE-2014-9970 | redhat_vex | jasypt: Vulnerable to timing attack against the password hash comparison | fixed: 121 known affected: 3 known not affected: 2 under investigation: 1 | 2026-08-04T21:59:29+00:00 | Vulnerability · Source |
| CVE-2015-3217 | redhat_vex | pcre: stack overflow caused by mishandled group empty match (8.38/11) | fixed: 415 known affected: 73 known not affected: 17 | 2026-08-04T21:59:24+00:00 | Vulnerability · Source |
| CVE-2015-1789 | redhat_vex | OpenSSL: out-of-bounds read in X509_cmp_time | fixed: 195 known affected: 6 known not affected: 4 | 2026-08-04T21:59:18+00:00 | Vulnerability · Source |
| CVE-2015-5348 | redhat_vex | Camel: Java object deserialisation in Jetty/Servlet | fixed: 1 known affected: 3 known not affected: 2 | 2026-08-04T21:59:16+00:00 | Vulnerability · Source |
| CVE-2015-0206 | redhat_vex | openssl: DTLS memory leak in dtls1_buffer_record | fixed: 144 known affected: 1 known not affected: 9 | 2026-08-04T21:59:12+00:00 | Vulnerability · Source |
| CVE-2016-4979 | redhat_vex | httpd: X509 client certificate authentication bypass using HTTP/2 | fixed: 80 known not affected: 32 | 2026-08-04T21:58:48+00:00 | Vulnerability · Source |
| CVE-2016-1000031 | redhat_vex | FileUpload: DiskFileItem file manipulation | known not affected: 22 | 2026-08-04T21:58:47+00:00 | Vulnerability · Source |
| CVE-2016-5422 | redhat_vex | JON3: privilege escalation via improper authorization | fixed: 1 | 2026-08-04T21:58:45+00:00 | Vulnerability · Source |
| CVE-2016-6303 | redhat_vex | openssl: Integer overflow in MDC2_Update() | known not affected: 22 | 2026-08-04T21:58:44+00:00 | Vulnerability · Source |
| CVE-2016-4800 | redhat_vex | jetty: path normalization | known not affected: 84 | 2026-08-04T21:58:41+00:00 | Vulnerability · Source |
| CVE-2015-8391 | redhat_vex | pcre: inefficient posix character class syntax check (8.38/16) | fixed: 415 known affected: 62 known not affected: 28 | 2026-08-04T21:58:40+00:00 | Vulnerability · Source |
| CVE-2016-2106 | redhat_vex | openssl: EVP_EncryptUpdate overflow | fixed: 275 known affected: 10 known not affected: 1 | 2026-08-04T21:58:39+00:00 | Vulnerability · Source |
| CVE-2016-2179 | redhat_vex | openssl: DTLS memory exhaustion DoS when messages are not removed from fragment buffer | fixed: 151 known affected: 7 known not affected: 4 | 2026-08-04T21:58:32+00:00 | Vulnerability · Source |
| CVE-2015-8389 | redhat_vex | pcre: infinite recursion in JIT compiler when processing certain patterns (8.38/21) | known not affected: 135 | 2026-08-04T21:58:23+00:00 | Vulnerability · Source |
| CVE-2015-7575 | redhat_vex | TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH) | fixed: 1303 known affected: 2 known not affected: 29 | 2026-08-04T21:58:22+00:00 | Vulnerability · Source |
| CVE-2016-2107 | redhat_vex | openssl: Padding oracle in AES-NI CBC MAC check | fixed: 194 known affected: 2 known not affected: 11 | 2026-08-04T21:58:21+00:00 | Vulnerability · Source |
| CVE-2016-3739 | redhat_vex | curl: TLS certificate name check bypass with mbedTLS and PolarSSL | known not affected: 13 | 2026-08-04T21:58:17+00:00 | Vulnerability · Source |
| CVE-2016-5388 | redhat_vex | Tomcat: CGI sets environmental variable based on user supplied Proxy request header | fixed: 163 known affected: 6 under investigation: 1 | 2026-08-04T21:58:07+00:00 | Vulnerability · Source |
| CVE-2016-2181 | redhat_vex | openssl: DTLS replay protection bypass allows DoS against DTLS connection | fixed: 151 known affected: 7 known not affected: 4 | 2026-08-04T21:58:04+00:00 | Vulnerability · Source |
| CVE-2016-0736 | redhat_vex | httpd: Padding Oracle in Apache mod_session_crypto | fixed: 201 known affected: 1 known not affected: 22 | 2026-08-04T21:58:03+00:00 | Vulnerability · Source |
| CVE-2016-5421 | redhat_vex | curl: Use of connection struct after free | fixed: 336 known affected: 9 known not affected: 10 | 2026-08-04T21:58:01+00:00 | Vulnerability · Source |
| CVE-2016-2105 | redhat_vex | openssl: EVP_EncodeUpdate overflow | fixed: 275 known affected: 10 known not affected: 1 | 2026-08-04T21:57:56+00:00 | Vulnerability · Source |
| CVE-2015-8631 | redhat_vex | krb5: Memory leak caused by supplying a null principal name in request | fixed: 158 known affected: 1 known not affected: 1 | 2026-08-04T21:57:53+00:00 | Vulnerability · Source |
| CVE-2016-5002 | redhat_vex | xmlrpc: XML external entity vulnerability SSRF via a crafted DTD | fixed: 1 known affected: 24 known not affected: 3 | 2026-08-04T21:57:51+00:00 | Vulnerability · Source |
| CVE-2016-6305 | redhat_vex | openssl: SSL_peek() hang on empty record | known not affected: 23 | 2026-08-04T21:57:49+00:00 | Vulnerability · Source |
| CVE-2016-4472 | redhat_vex | expat: Undefined behavior and pointer overflows | known affected: 25 known not affected: 52 under investigation: 1 | 2026-08-04T21:57:47+00:00 | Vulnerability · Source |
| CVE-2016-4993 | redhat_vex | eap: HTTP header injection / response splitting | fixed: 1039 known not affected: 41 | 2026-08-04T21:57:42+00:00 | Vulnerability · Source |
| CVE-2016-4911 | redhat_vex | openstack-keystone: Incorrect Audit IDs in Keystone Fernet Tokens can result in revocation bypass | known not affected: 13 | 2026-08-04T21:57:40+00:00 | Vulnerability · Source |
| CVE-2016-0701 | redhat_vex | OpenSSL: DH small subgroups | known not affected: 21 | 2026-08-04T21:57:38+00:00 | Vulnerability · Source |
| CVE-2016-2094 | redhat_vex | EAP: HTTPS NIO connector uses no timeout when reading SSL handshake from client | fixed: 481 | 2026-08-04T21:57:34+00:00 | Vulnerability · Source |
| CVE-2016-1546 | redhat_vex | httpd: mod_http2 denial-of-service by thread starvation | fixed: 60 known not affected: 31 | 2026-08-04T21:57:28+00:00 | Vulnerability · Source |
| CVE-2015-8388 | redhat_vex | pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18) | fixed: 415 known affected: 67 known not affected: 23 | 2026-08-04T21:57:25+00:00 | Vulnerability · Source |
| CVE-2016-2161 | redhat_vex | httpd: DoS vulnerability in mod_auth_digest | fixed: 201 known not affected: 23 | 2026-08-04T21:57:22+00:00 | Vulnerability · Source |
| CVE-2026-48990 | redhat_vex | joserfc: joserfc: Resource exhaustion via oversized JSON Web Signature (JWS) payloads | fixed: 11 known not affected: 200 | 2026-08-04T21:57:09+00:00 | Vulnerability · Source |
| CVE-2017-18640 | redhat_vex | snakeyaml: Billion laughs attack via alias feature | fixed: 5 known affected: 6 known not affected: 2 | 2026-08-04T21:57:03+00:00 | Vulnerability · Source |
| CVE-2017-15139 | redhat_vex | openstack-cinder: Data retained after deletion of a ScaleIO volume | fixed: 7 known affected: 10 known not affected: 10 | 2026-08-04T21:56:58+00:00 | Vulnerability · Source |