VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291864 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-0289 | redhat_vex | openssl: PKCS7 NULL pointer dereference | fixed: 201 known affected: 8 known not affected: 4 | 2026-08-04T23:16:17+00:00 | Vulnerability · Source |
| CVE-2015-1849 | redhat_vex | EAP: LDAP bind password is being logged with TRACE log level | fixed: 439 known affected: 5 | 2026-08-04T23:16:15+00:00 | Vulnerability · Source |
| CVE-2015-0285 | redhat_vex | openssl: handshake with unseeded PRNG | known not affected: 25 | 2026-08-04T23:16:14+00:00 | Vulnerability · Source |
| CVE-2016-2176 | redhat_vex | openssl: EBCDIC overread in X509_NAME_oneline() | known not affected: 23 | 2026-08-04T23:16:11+00:00 | Vulnerability · Source |
| CVE-2015-8387 | redhat_vex | pcre: Integer overflow in subroutine calls (8.38/8) | known affected: 124 known not affected: 11 | 2026-08-04T23:16:08+00:00 | Vulnerability · Source |
| CVE-2016-0798 | redhat_vex | OpenSSL: Avoid memory leak in SRP | known not affected: 20 | 2026-08-04T23:16:05+00:00 | Vulnerability · Source |
| CVE-2016-0702 | redhat_vex | OpenSSL: Side channel attack on modular exponentiation | fixed: 156 known affected: 9 known not affected: 2 | 2026-08-04T23:16:04+00:00 | Vulnerability · Source |
| CVE-2016-2180 | redhat_vex | OpenSSL: OOB read in TS_OBJ_print_bio() | fixed: 151 known not affected: 12 | 2026-08-04T23:16:00+00:00 | Vulnerability · Source |
| CVE-2016-5004 | redhat_vex | xmlrpc: DoS through decompression-bomb attack when Content-Encoding=gzip | known affected: 24 known not affected: 2 | 2026-08-04T23:15:58+00:00 | Vulnerability · Source |
| CVE-2015-8390 | redhat_vex | pcre: uninitialized memory read triggered by malformed posix character class (8.38/22) | known affected: 118 known not affected: 17 | 2026-08-04T23:15:56+00:00 | Vulnerability · Source |
| CVE-2016-5018 | redhat_vex | tomcat: security manager bypass via IntrospectHelper utility function | fixed: 630 known affected: 35 | 2026-08-04T23:15:52+00:00 | Vulnerability · Source |
| CVE-2016-3120 | redhat_vex | krb5: S4U2Self KDC crash when anon is restricted | fixed: 96 known affected: 8 known not affected: 5 | 2026-08-04T23:15:51+00:00 | Vulnerability · Source |
| CVE-2015-8629 | redhat_vex | krb5: xdr_nullstring() doesn't check for terminating null character | fixed: 158 known affected: 1 known not affected: 1 | 2026-08-04T23:15:49+00:00 | Vulnerability · Source |
| CVE-2015-8380 | redhat_vex | pcre: OOB write when pcre_exec() is called with ovecsize of 1 (8.38/10) | known affected: 6 known not affected: 129 | 2026-08-04T23:15:46+00:00 | Vulnerability · Source |
| CVE-2015-8630 | redhat_vex | krb5: krb5 doesn't check for null policy when KADM5_POLICY is set in the mask | fixed: 75 known not affected: 10 | 2026-08-04T23:15:44+00:00 | Vulnerability · Source |
| CVE-2016-5017 | redhat_vex | zookeeper: Buffer overflow vulnerability in C cli shell | known not affected: 6 | 2026-08-04T23:15:42+00:00 | Vulnerability · Source |
| CVE-2016-6307 | redhat_vex | openssl: excessive allocation of memory in tls_get_message_header() | known not affected: 23 | 2026-08-04T23:15:39+00:00 | Vulnerability · Source |
| CVE-2016-0797 | redhat_vex | OpenSSL: BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption | fixed: 199 known affected: 3 known not affected: 2 | 2026-08-04T23:15:38+00:00 | Vulnerability · Source |
| CVE-2016-6345 | redhat_vex | RESTEasy: Insufficient use of random values in RESTEasy async jobs could lead to loss of data confidentiality | known affected: 28 known not affected: 4 under investigation: 1 | 2026-08-04T23:15:34+00:00 | Vulnerability · Source |
| CVE-2016-2842 | redhat_vex | openssl: doapr_outch function does not verify that certain memory allocation succeeds | fixed: 194 known affected: 10 known not affected: 1 | 2026-08-04T23:15:33+00:00 | Vulnerability · Source |
| CVE-2015-8386 | redhat_vex | pcre: Buffer overflow caused by lookbehind assertion (8.38/6) | fixed: 415 known affected: 79 known not affected: 11 | 2026-08-04T23:15:30+00:00 | Vulnerability · Source |
| CVE-2016-0705 | redhat_vex | OpenSSL: Double-free in DSA code | fixed: 248 known affected: 3 known not affected: 8 | 2026-08-04T23:15:26+00:00 | Vulnerability · Source |
| CVE-2015-8394 | redhat_vex | pcre: Integer overflow caused by missing check for certain conditions (8.38/31) | known affected: 124 known not affected: 11 | 2026-08-04T23:15:24+00:00 | Vulnerability · Source |
| CVE-2016-0762 | redhat_vex | tomcat: timing attack in Realm implementation | fixed: 149 known affected: 34 known not affected: 2 | 2026-08-04T23:15:23+00:00 | Vulnerability · Source |
| CVE-2016-3119 | redhat_vex | krb5: null pointer dereference in kadmin | fixed: 96 known affected: 9 known not affected: 1 | 2026-08-04T23:15:14+00:00 | Vulnerability · Source |
| CVE-2016-2109 | redhat_vex | openssl: ASN.1 BIO handling of large amounts of data | fixed: 195 known affected: 11 known not affected: 2 | 2026-08-04T23:15:12+00:00 | Vulnerability · Source |
| CVE-2016-15026 | redhat_vex | dd-plist: XXE attack | known not affected: 10 | 2026-08-04T23:15:07+00:00 | Vulnerability · Source |
| CVE-2016-6308 | redhat_vex | openssl: excessive allocation of memory in dtls1_preprocess_fragment() | known not affected: 23 | 2026-08-04T23:15:04+00:00 | Vulnerability · Source |
| CVE-2016-8740 | redhat_vex | httpd: Incomplete handling of LimitRequestFields directive in mod_http2 | fixed: 123 known not affected: 32 | 2026-08-04T23:15:01+00:00 | Vulnerability · Source |
| CVE-2016-6797 | redhat_vex | tomcat: unrestricted access to global resources | fixed: 149 known affected: 34 known not affected: 2 | 2026-08-04T23:14:59+00:00 | Vulnerability · Source |
| CVE-2017-14159 | redhat_vex | openldap: Privilege escalation via PID file manipulation | known not affected: 19 | 2026-08-04T23:14:55+00:00 | Vulnerability · Source |
| CVE-2016-6796 | redhat_vex | tomcat: security manager bypass via JSP Servlet config parameters | fixed: 630 known affected: 34 known not affected: 1 | 2026-08-04T23:14:49+00:00 | Vulnerability · Source |
| CVE-2017-15706 | redhat_vex | tomcat: Incorrect documentation of CGI Servlet search algorithm may lead to misconfiguration | known not affected: 56 | 2026-08-04T23:14:46+00:00 | Vulnerability · Source |
| CVE-2016-9843 | redhat_vex | zlib: Big-endian out-of-bounds pointer | fixed: 482 known not affected: 18 | 2026-08-04T23:14:43+00:00 | Vulnerability · Source |
| CVE-2016-9586 | redhat_vex | curl: printf floating point buffer overflow | fixed: 336 known affected: 18 known not affected: 1 | 2026-08-04T23:14:40+00:00 | Vulnerability · Source |
| CVE-2016-9841 | redhat_vex | zlib: Out-of-bounds pointer arithmetic in inffast.c | fixed: 482 known not affected: 18 | 2026-08-04T23:14:36+00:00 | Vulnerability · Source |
| CVE-2017-11164 | redhat_vex | pcre: OP_KETRMAX feature in the match function in pcre_exec.c | known affected: 114 known not affected: 6 | 2026-08-04T23:14:31+00:00 | Vulnerability · Source |
| CVE-2017-15715 | redhat_vex | httpd: <FilesMatch> bypass with a trailing newline in the file name | fixed: 544 known affected: 9 known not affected: 17 | 2026-08-04T23:14:26+00:00 | Vulnerability · Source |
| CVE-2016-6794 | redhat_vex | tomcat: system property disclosure | fixed: 149 known affected: 34 known not affected: 2 | 2026-08-04T23:14:17+00:00 | Vulnerability · Source |
| CVE-2016-9842 | redhat_vex | zlib: Undefined left shift of negative number | fixed: 482 known not affected: 18 | 2026-08-04T23:14:15+00:00 | Vulnerability · Source |
| CVE-2017-1000101 | redhat_vex | curl: URL globbing out of bounds read | fixed: 336 known affected: 10 known not affected: 15 | 2026-08-04T23:14:11+00:00 | Vulnerability · Source |
| CVE-2017-15709 | redhat_vex | activemq-openwire-generator: Information Exposure in ActiveMQ | known affected: 1 known not affected: 1 | 2026-08-04T23:14:07+00:00 | Vulnerability · Source |
| CVE-2017-18258 | redhat_vex | libxml2: Unrestricted memory usage in xz_head() function in xzlib.c | fixed: 79 known affected: 4 known not affected: 11 | 2026-08-04T23:14:03+00:00 | Vulnerability · Source |
| CVE-2017-12165 | redhat_vex | undertow: improper whitespace parsing leading to potential HTTP request smuggling | fixed: 985 known affected: 1 known not affected: 4 | 2026-08-04T23:14:00+00:00 | Vulnerability · Source |
| CVE-2017-16231 | redhat_vex | pcre: self-recursive call in match() in pcre_exec.c leads to denial of service | known not affected: 108 | 2026-08-04T23:13:56+00:00 | Vulnerability · Source |
| CVE-2016-7055 | redhat_vex | openssl: Carry propagating bug in Montgomery multiplication | fixed: 169 known affected: 3 known not affected: 21 | 2026-08-04T23:13:53+00:00 | Vulnerability · Source |
| CVE-2016-6348 | redhat_vex | RESTEasy: Use of JacksonJsonpInterceptor in RESTEasy can lead to Cross Site Script Inclusion attack | known affected: 26 known not affected: 4 under investigation: 3 | 2026-08-04T23:13:49+00:00 | Vulnerability · Source |
| CVE-2017-7244 | redhat_vex | pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c) | fixed: 1 known affected: 112 known not affected: 7 | 2026-08-04T23:13:46+00:00 | Vulnerability · Source |
| CVE-2017-7245 | redhat_vex | pcre: stack-based buffer overflow write in pcre32_copy_substring | fixed: 1 known affected: 112 known not affected: 7 | 2026-08-04T23:13:43+00:00 | Vulnerability · Source |
| CVE-2017-7246 | redhat_vex | pcre: stack-based buffer overflow write in pcre32_copy_substring | fixed: 1 known affected: 112 known not affected: 7 | 2026-08-04T23:13:39+00:00 | Vulnerability · Source |