VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290392 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2014-0118 | redhat_vex | httpd: mod_deflate denial of service | fixed: 1170 known affected: 1 known not affected: 1 under investigation: 1 | 2026-08-04T22:02:48+00:00 | Vulnerability · Source |
| CVE-2014-7853 | redhat_vex | Subsystem: Information disclosure via incorrect sensitivity classification of attribute | fixed: 548 known affected: 2 known not affected: 1 | 2026-08-04T22:02:47+00:00 | Vulnerability · Source |
| CVE-2014-5352 | redhat_vex | krb5: gss_process_context_token() incorrectly frees context (MITKRB5-SA-2015-001) | fixed: 151 known affected: 1 known not affected: 2 | 2026-08-04T22:02:43+00:00 | Vulnerability · Source |
| CVE-2014-3569 | redhat_vex | openssl: denial of service in ssl23_get_client_hello function | known not affected: 16 | 2026-08-04T22:02:41+00:00 | Vulnerability · Source |
| CVE-2014-0033 | redhat_vex | tomcat: session fixation still possible with disableURLRewriting enabled | fixed: 23 known affected: 1 known not affected: 34 | 2026-08-04T22:02:39+00:00 | Vulnerability · Source |
| CVE-2014-3512 | redhat_vex | openssl: SRP buffer overrun | known not affected: 26 | 2026-08-04T22:02:36+00:00 | Vulnerability · Source |
| CVE-2014-3567 | redhat_vex | openssl: Invalid TLS/SSL session tickets could cause memory leak leading to server crash | fixed: 151 known not affected: 8 | 2026-08-04T22:02:31+00:00 | Vulnerability · Source |
| CVE-2014-9365 | redhat_vex | python: failure to validate certificates in the HTTP client with TLS (PEP 476) | fixed: 214 known affected: 24 known not affected: 8 | 2026-08-04T22:02:28+00:00 | Vulnerability · Source |
| CVE-2014-3578 | redhat_vex | Framework: Directory traversal | fixed: 4 known affected: 3 known not affected: 1 | 2026-08-04T22:02:26+00:00 | Vulnerability · Source |
| CVE-2014-3625 | redhat_vex | Framework: directory traversal flaw | fixed: 5 known affected: 3 | 2026-08-04T22:02:24+00:00 | Vulnerability · Source |
| CVE-2014-0198 | redhat_vex | openssl: SSL_MODE_RELEASE_BUFFERS NULL pointer dereference in do_ssl3_write() | fixed: 154 known not affected: 14 | 2026-08-04T22:02:22+00:00 | Vulnerability · Source |
| CVE-2014-5355 | redhat_vex | krb5: unauthenticated denial of service in recvauth_common() and others | fixed: 165 known affected: 1 known not affected: 2 | 2026-08-04T22:02:18+00:00 | Vulnerability · Source |
| CVE-2014-0231 | redhat_vex | httpd: mod_cgid denial of service | fixed: 1170 known affected: 1 known not affected: 1 under investigation: 1 | 2026-08-04T22:02:17+00:00 | Vulnerability · Source |
| CVE-2014-0075 | redhat_vex | Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter | fixed: 150 known affected: 5 | 2026-08-04T22:02:15+00:00 | Vulnerability · Source |
| CVE-2014-3584 | redhat_vex | CXF: Denial of Service (DoS) via invalid JAX-RS SAML tokens | fixed: 1 known affected: 5 known not affected: 8 | 2026-08-04T22:02:14+00:00 | Vulnerability · Source |
| CVE-2014-3511 | redhat_vex | openssl: TLS protocol downgrade attack | fixed: 160 known not affected: 10 | 2026-08-04T22:02:10+00:00 | Vulnerability · Source |
| CVE-2014-0050 | redhat_vex | apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream | fixed: 102 known affected: 18 known not affected: 13 under investigation: 1 | 2026-08-04T22:02:05+00:00 | Vulnerability · Source |
| CVE-2014-0227 | redhat_vex | Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter | fixed: 1177 known affected: 11 | 2026-08-04T22:02:03+00:00 | Vulnerability · Source |
| CVE-2013-6430 | redhat_vex | Framework: org.spring.web.util.JavaScriptUtils.javaScriptEscape insufficient escaping of characters | fixed: 2 known affected: 4 | 2026-08-04T22:01:52+00:00 | Vulnerability · Source |
| CVE-2014-3507 | redhat_vex | openssl: DTLS memory leak from zero-length fragments | fixed: 154 known affected: 3 known not affected: 10 | 2026-08-04T22:01:51+00:00 | Vulnerability · Source |
| CVE-2014-0117 | redhat_vex | httpd: mod_proxy denial of service | fixed: 110 known not affected: 20 | 2026-08-04T22:01:48+00:00 | Vulnerability · Source |
| CVE-2014-5139 | redhat_vex | openssl: crash with SRP ciphersuite in Server Hello message | known not affected: 26 | 2026-08-04T22:01:48+00:00 | Vulnerability · Source |
| CVE-2014-3509 | redhat_vex | openssl: race condition in ssl_parse_serverhello_tlsext | fixed: 159 known not affected: 10 | 2026-08-04T22:01:45+00:00 | Vulnerability · Source |
| CVE-2014-9421 | redhat_vex | krb5: kadmind doubly frees partial deserialization results (MITKRB5-SA-2015-001) | fixed: 151 known affected: 1 known not affected: 2 | 2026-08-04T22:01:40+00:00 | Vulnerability · Source |
| CVE-2014-0002 | redhat_vex | Camel: XML eXternal Entity (XXE) flaw in XSLT component | fixed: 8 known affected: 2 | 2026-08-04T22:01:36+00:00 | Vulnerability · Source |
| CVE-2014-7810 | redhat_vex | Tomcat/JbossWeb: security manager bypass via EL expressions | fixed: 223 known affected: 5 known not affected: 4 under investigation: 3 | 2026-08-04T22:01:35+00:00 | Vulnerability · Source |
| CVE-2014-0225 | redhat_vex | Framework: Information disclosure via SSRF | fixed: 2 known affected: 6 known not affected: 3 | 2026-08-04T22:01:32+00:00 | Vulnerability · Source |
| CVE-2014-8176 | redhat_vex | OpenSSL: Invalid free in DTLS | fixed: 153 known affected: 7 known not affected: 5 | 2026-08-04T22:01:27+00:00 | Vulnerability · Source |
| CVE-2014-3523 | redhat_vex | httpd: WinNT MPM denial of service | fixed: 1 known not affected: 39 | 2026-08-04T22:01:25+00:00 | Vulnerability · Source |
| CVE-2013-6357 | redhat_vex | tomcat5: CSRF vulnerability in Manager application | known affected: 2 known not affected: 3 | 2026-08-04T22:01:25+00:00 | Vulnerability · Source |
| CVE-2014-0093 | redhat_vex | 6: JSM policy not respected by deployed applications | fixed: 321 known not affected: 4 | 2026-08-04T22:01:24+00:00 | Vulnerability · Source |
| CVE-2014-7849 | redhat_vex | Management: Limited RBAC authorization bypass | fixed: 548 known affected: 2 known not affected: 1 | 2026-08-04T22:01:18+00:00 | Vulnerability · Source |
| CVE-2014-7839 | redhat_vex | RESTeasy: External entities expanded by DocumentProvider | fixed: 552 known affected: 24 known not affected: 1 | 2026-08-04T22:01:14+00:00 | Vulnerability · Source |
| CVE-2014-5353 | redhat_vex | krb5: NULL pointer dereference when using a ticket policy name as a password policy name | fixed: 151 known affected: 1 known not affected: 2 | 2026-08-04T22:01:12+00:00 | Vulnerability · Source |
| CVE-2014-0005 | redhat_vex | PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application | fixed: 321 known affected: 5 known not affected: 3 | 2026-08-04T22:01:09+00:00 | Vulnerability · Source |
| CVE-2014-0099 | redhat_vex | Tomcat/JBossWeb: Request smuggling via malicious content length header | fixed: 150 known affected: 5 | 2026-08-04T22:01:05+00:00 | Vulnerability · Source |
| CVE-2014-3490 | redhat_vex | RESTEasy: XXE via parameter entities | fixed: 64 known affected: 7 known not affected: 1 | 2026-08-04T22:00:56+00:00 | Vulnerability · Source |
| CVE-2014-3470 | redhat_vex | openssl: client-side denial of service when using anonymous ECDH | fixed: 154 known not affected: 15 | 2026-08-04T22:00:51+00:00 | Vulnerability · Source |
| CVE-2015-3185 | redhat_vex | httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4 | fixed: 196 known affected: 1 known not affected: 21 | 2026-08-04T22:00:49+00:00 | Vulnerability · Source |
| CVE-2015-2575 | redhat_vex | mysql-connector-java: unspecified vulnerability related to Connector/J (CPU April 2015) | known affected: 5 known not affected: 1 | 2026-08-04T22:00:46+00:00 | Vulnerability · Source |
| CVE-2015-0227 | redhat_vex | wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property | fixed: 1262 known affected: 12 known not affected: 1 | 2026-08-04T22:00:41+00:00 | Vulnerability · Source |
| CVE-2014-9422 | redhat_vex | krb5: kadmind incorrectly validates server principal name (MITKRB5-SA-2015-001) | fixed: 151 known affected: 1 known not affected: 2 | 2026-08-04T22:00:38+00:00 | Vulnerability · Source |
| CVE-2015-0292 | redhat_vex | openssl: integer underflow leading to buffer overflow in base64 decoding | fixed: 201 known affected: 9 known not affected: 3 | 2026-08-04T22:00:35+00:00 | Vulnerability · Source |
| CVE-2014-9769 | redhat_vex | pcre: incorrect nested table jumps when JIT is used (8.36/6) | known not affected: 135 | 2026-08-04T22:00:32+00:00 | Vulnerability · Source |
| CVE-2015-1790 | redhat_vex | OpenSSL: PKCS7 crash with missing EnvelopedContent | fixed: 195 known affected: 7 known not affected: 3 | 2026-08-04T22:00:31+00:00 | Vulnerability · Source |
| CVE-2015-6748 | redhat_vex | jsoup: XSS vulnerability related to incomplete tags at EOF | fixed: 2 known affected: 2 | 2026-08-04T22:00:29+00:00 | Vulnerability · Source |
| CVE-2015-1832 | redhat_vex | Derby: XXE attack possible by using XmlVTI and the XML datatype | known not affected: 3 | 2026-08-04T22:00:28+00:00 | Vulnerability · Source |
| CVE-2015-1833 | redhat_vex | jackrabbit: Jackrabbit WebDAV bundle susceptible to XXE/XEE attack | known not affected: 3 | 2026-08-04T22:00:25+00:00 | Vulnerability · Source |
| CVE-2015-0264 | redhat_vex | Camel: XXE via XPath expression evaluation | fixed: 5 known affected: 2 | 2026-08-04T22:00:24+00:00 | Vulnerability · Source |
| CVE-2015-0286 | redhat_vex | openssl: invalid pointer use in ASN1_TYPE_cmp() | fixed: 159 known affected: 5 known not affected: 9 | 2026-08-04T22:00:19+00:00 | Vulnerability · Source |