VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
223077 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-15137 | redhat_vex | atomic-openshift: image import whitelist can be bypassed by creating an imagestream or using oc tag | fixed: 986 known affected: 17 known not affected: 14 | 2026-06-30T11:40:55+00:00 | Vulnerability · Source |
| CVE-2017-15123 | redhat_vex | CloudForms: RSS links are accessible without any authentication | known not affected: 2 | 2026-06-30T11:40:52+00:00 | Vulnerability · Source |
| CVE-2017-15119 | redhat_vex | qemu: DoS via large option request | fixed: 46 known affected: 19 known not affected: 19 | 2026-06-30T11:40:50+00:00 | Vulnerability · Source |
| CVE-2017-15101 | redhat_vex | liblouis: incomplete fix for CVE-2014-8184 | fixed: 72 | 2026-06-30T11:40:47+00:00 | Vulnerability · Source |
| CVE-2017-15097 | redhat_vex | postgresql: Start scripts permit database administrator to modify root-owned files | fixed: 586 known affected: 13 under investigation: 3 | 2026-06-30T11:40:44+00:00 | Vulnerability · Source |
| CVE-2017-14461 | redhat_vex | dovecot: Information Leak Vulnerability in rfc822_parse_domain leading to denial-of-service | known affected: 12 known not affected: 7 | 2026-06-30T11:40:43+00:00 | Vulnerability · Source |
| CVE-2017-13098 | redhat_vex | bouncycastle: TLS server vulnerable to Adaptive Chosen Ciphertext attack when using JCE allowing plaintext recovery or MITM attack | known affected: 2 known not affected: 7 | 2026-06-30T11:40:41+00:00 | Vulnerability · Source |
| CVE-2017-12196 | redhat_vex | undertow: Client can use bogus uri in Digest authentication | fixed: 324 known affected: 2 known not affected: 1 | 2026-06-30T11:40:37+00:00 | Vulnerability · Source |
| CVE-2017-12195 | redhat_vex | 3: authentication bypass for elasticsearch with external routes | fixed: 995 | 2026-06-30T11:40:34+00:00 | Vulnerability · Source |
| CVE-2017-12175 | redhat_vex | 6: XSS in discovery rule filter autocomplete functionality | fixed: 1110 | 2026-06-30T11:40:33+00:00 | Vulnerability · Source |
| CVE-2017-12173 | redhat_vex | sssd: unsanitized input when searching in local cache database | fixed: 860 known affected: 1 known not affected: 1 | 2026-06-30T11:40:31+00:00 | Vulnerability · Source |
| CVE-2017-12171 | redhat_vex | httpd: # character matches all IPs | fixed: 62 known not affected: 34 | 2026-06-30T11:40:28+00:00 | Vulnerability · Source |
| CVE-2017-12167 | redhat_vex | EAP-7: Wrong privileges on multiple property files | fixed: 983 | 2026-06-30T11:40:27+00:00 | Vulnerability · Source |
| CVE-2017-12164 | redhat_vex | gdm: lock screen can be circumvented when autologin is set | known not affected: 11 | 2026-06-30T11:40:24+00:00 | Vulnerability · Source |
| CVE-2017-12163 | redhat_vex | Samba: Server memory information leak over SMB1 | fixed: 602 known affected: 1 | 2026-06-30T11:40:24+00:00 | Vulnerability · Source |
| CVE-2017-12151 | redhat_vex | samba: SMB2 connections don't keep encryption across DFS redirects | fixed: 317 known affected: 15 known not affected: 16 | 2026-06-30T11:40:23+00:00 | Vulnerability · Source |
| CVE-2017-12150 | redhat_vex | samba: Some code path don't enforce smb signing, when they should | fixed: 602 known affected: 2 | 2026-06-30T11:40:16+00:00 | Vulnerability · Source |
| CVE-2017-2835 | redhat_vex | freerdp: Out-of-bounds write in rdp_recv_tpkt_pdu | known affected: 12 | 2026-06-30T11:40:15+00:00 | Vulnerability · Source |
| CVE-2017-2820 | redhat_vex | poppler: Integer overflow in the JPEG 2000 image parsing functionality | known not affected: 22 | 2026-06-30T11:40:13+00:00 | Vulnerability · Source |
| CVE-2017-2834 | redhat_vex | freerdp: Out-of-bounds write in license_recv() | known affected: 12 | 2026-06-30T11:40:11+00:00 | Vulnerability · Source |
| CVE-2017-2818 | redhat_vex | poppler: Heap-buffer overflow in the image rendering functionality | known not affected: 22 | 2026-06-30T11:40:09+00:00 | Vulnerability · Source |
| CVE-2017-2814 | redhat_vex | poppler: Heap-buffer overflow in DCTStream::readScan() | known not affected: 22 | 2026-06-30T11:40:06+00:00 | Vulnerability · Source |
| CVE-2017-2674 | redhat_vex | business-central: Multiple stored XSS in task and process filters | fixed: 2 | 2026-06-30T11:40:05+00:00 | Vulnerability · Source |
| CVE-2017-2672 | redhat_vex | foreman: Image password leak | fixed: 276 known affected: 2 | 2026-06-30T11:40:01+00:00 | Vulnerability · Source |
| CVE-2017-2670 | redhat_vex | undertow: IO thread DoS via unclean Websocket closing | fixed: 1119 known affected: 5 | 2026-06-30T11:40:00+00:00 | Vulnerability · Source |
| CVE-2017-2666 | redhat_vex | undertow: HTTP Request smuggling vulnerability due to permitting invalid characters in HTTP requests | fixed: 1117 known affected: 1 known not affected: 1 | 2026-06-30T11:39:56+00:00 | Vulnerability · Source |
| CVE-2017-2665 | redhat_vex | rhscon-core: creates world readable file /etc/skyring/skyring.conf which leaks mongodb password for skyring database | known affected: 1 | 2026-06-30T11:39:55+00:00 | Vulnerability · Source |
| CVE-2017-2663 | redhat_vex | subscription-manager: unsafe dbus interface | known not affected: 19 | 2026-06-30T11:39:52+00:00 | Vulnerability · Source |
| CVE-2017-2654 | redhat_vex | jenkins-email-ext: Emails were sent to addresses not associated with actual users of Jenkins by Mailer Plugin | known not affected: 1 | 2026-06-30T11:39:50+00:00 | Vulnerability · Source |
| CVE-2017-2653 | redhat_vex | CloudForms: UI security issue on Openstack actions | fixed: 8 | 2026-06-30T11:39:47+00:00 | Vulnerability · Source |
| CVE-2017-2651 | redhat_vex | jenkins-mailer-plugin: Emails were sent to addresses not associated with actual users of Jenkins by Mailer Plugin | known not affected: 2 | 2026-06-30T11:39:46+00:00 | Vulnerability · Source |
| CVE-2017-2640 | redhat_vex | pidgin: Out-of-bounds write in purple_markup_unescape_entity triggered by invalid XML | fixed: 115 known affected: 12 | 2026-06-30T11:39:43+00:00 | Vulnerability · Source |
| CVE-2017-2639 | redhat_vex | CloudForms: cloudforms fails to properly check certificates when communicating with RHEV and OpenShift and custom CA | fixed: 179 | 2026-06-30T11:39:42+00:00 | Vulnerability · Source |
| CVE-2017-2635 | redhat_vex | libvirt: Null pointer dereference when updating storage size on empty drives | known not affected: 45 | 2026-06-30T11:39:37+00:00 | Vulnerability · Source |
| CVE-2017-2638 | redhat_vex | infinispan: auth bypass in REST api | fixed: 1 known affected: 1 | 2026-06-30T11:39:37+00:00 | Vulnerability · Source |
| CVE-2017-2634 | redhat_vex | kernel: dccp: crash while sending ipv6 reset packet | fixed: 153 known not affected: 31 | 2026-06-30T11:39:34+00:00 | Vulnerability · Source |
| CVE-2017-2633 | redhat_vex | Qemu: VNC: memory corruption due to unchecked resolution limit | fixed: 70 known affected: 8 known not affected: 30 | 2026-06-30T11:39:33+00:00 | Vulnerability · Source |
| CVE-2017-2632 | redhat_vex | cfme: tenant administrator can create a group with higher permissions | fixed: 8 | 2026-06-30T11:39:29+00:00 | Vulnerability · Source |
| CVE-2017-2629 | redhat_vex | curl: SSL_VERIFYSTATUS ignored | known not affected: 20 | 2026-06-30T11:39:28+00:00 | Vulnerability · Source |
| CVE-2017-2627 | redhat_vex | openstack-tripleo-common: sudoers file is too permissive | known affected: 3 known not affected: 4 | 2026-06-30T11:39:24+00:00 | Vulnerability · Source |
| CVE-2017-2625 | redhat_vex | libXdmcp: weak entropy usage for session keys | fixed: 1793 known affected: 3 | 2026-06-30T11:39:23+00:00 | Vulnerability · Source |
| CVE-2017-2623 | redhat_vex | rpm-ostree-client: fails to check gpg package signatures when layering | fixed: 6 | 2026-06-30T11:39:19+00:00 | Vulnerability · Source |
| CVE-2017-2622 | redhat_vex | openstack-mistral: /var/log/mistral/ is world readable | fixed: 8 known not affected: 1 | 2026-06-30T11:39:18+00:00 | Vulnerability · Source |
| CVE-2017-2621 | redhat_vex | openstack-heat: /var/log/heat/ is world readable | fixed: 14 known not affected: 15 | 2026-06-30T11:39:15+00:00 | Vulnerability · Source |
| CVE-2017-2618 | redhat_vex | kernel: Off-by-one error in selinux_setprocattr (/proc/self/attr/fscreate) | fixed: 207 known not affected: 15 | 2026-06-30T11:39:15+00:00 | Vulnerability · Source |
| CVE-2017-2617 | redhat_vex | Hawtio: Unrestricted file upload leads to RCE | fixed: 2 known affected: 2 under investigation: 1 | 2026-06-30T11:39:13+00:00 | Vulnerability · Source |
| CVE-2017-2616 | redhat_vex | util-linux: Sending SIGKILL to other processes with root privileges via su | fixed: 168 known affected: 1 known not affected: 12 | 2026-06-30T11:39:09+00:00 | Vulnerability · Source |
| CVE-2017-2613 | redhat_vex | jenkins: User creation CSRF using GET by admins (SECURITY-406) | under investigation: 3 | 2026-06-30T11:39:08+00:00 | Vulnerability · Source |
| CVE-2017-2612 | redhat_vex | jenkins: Low privilege users were able to override JDK download credentials (SECURITY-392) | under investigation: 3 | 2026-06-30T11:39:05+00:00 | Vulnerability · Source |
| CVE-2017-2611 | redhat_vex | jenkins: Insufficient permission check for periodic processes (SECURITY-389) | under investigation: 3 | 2026-06-30T11:39:04+00:00 | Vulnerability · Source |