VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
223077 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-2610 | redhat_vex | jenkins: Persisted cross-site scripting vulnerability in search suggestions (SECURITY-388) | under investigation: 3 | 2026-06-30T11:39:01+00:00 | Vulnerability · Source |
| CVE-2017-2607 | redhat_vex | jenkins: Persisted cross-site scripting vulnerability in console notes (SECURITY-382) | under investigation: 3 | 2026-06-30T11:39:00+00:00 | Vulnerability · Source |
| CVE-2017-2609 | redhat_vex | jenkins: Information disclosure vulnerability in search suggestions (SECURITY-385) | under investigation: 3 | 2026-06-30T11:38:59+00:00 | Vulnerability · Source |
| CVE-2017-2606 | redhat_vex | jenkins: Internal API allowed access to item names that should not be visible (SECURITY-380) | under investigation: 3 | 2026-06-30T11:38:55+00:00 | Vulnerability · Source |
| CVE-2017-2604 | redhat_vex | jenkins: Low privilege users were able to act on administrative monitors (SECURITY-371) | under investigation: 3 | 2026-06-30T11:38:52+00:00 | Vulnerability · Source |
| CVE-2017-2601 | redhat_vex | jenkins: Persisted cross-site scripting vulnerability in parameter names and descriptions (SECURITY-353) | under investigation: 3 | 2026-06-30T11:38:51+00:00 | Vulnerability · Source |
| CVE-2017-2600 | redhat_vex | jenkins: Node monitor data could be viewed by low privilege users (SECURITY-343) | under investigation: 3 | 2026-06-30T11:38:50+00:00 | Vulnerability · Source |
| CVE-2017-2599 | redhat_vex | jenkins: Items could be created with same name as existing item (SECURITY-321) | under investigation: 3 | 2026-06-30T11:38:46+00:00 | Vulnerability · Source |
| CVE-2017-2598 | redhat_vex | jenkins: Use of AES ECB block cipher mode without IV for encrypting secrets (SECURITY-304) | under investigation: 3 | 2026-06-30T11:38:43+00:00 | Vulnerability · Source |
| CVE-2017-2595 | redhat_vex | wildfly: Arbitrary file read via path traversal | fixed: 1598 under investigation: 1 | 2026-06-30T11:38:40+00:00 | Vulnerability · Source |
| CVE-2017-2594 | redhat_vex | hawtio: information Disclosure flaws due to unsafe path traversal | fixed: 2 known affected: 3 | 2026-06-30T11:38:36+00:00 | Vulnerability · Source |
| CVE-2017-2592 | redhat_vex | python-oslo-middleware: CatchErrors leaks sensitive values into error logs | fixed: 7 known not affected: 10 | 2026-06-30T11:38:33+00:00 | Vulnerability · Source |
| CVE-2017-2590 | redhat_vex | ipa: Insufficient permission check for ca-del, ca-disable and ca-enable commands | fixed: 66 known not affected: 7 | 2026-06-30T11:38:29+00:00 | Vulnerability · Source |
| CVE-2017-2582 | redhat_vex | keycloak: SAML request parser replaces special strings with system properties | fixed: 2303 known affected: 3 known not affected: 13 | 2026-06-30T11:38:26+00:00 | Vulnerability · Source |
| CVE-2017-2581 | redhat_vex | netpbm: Out-of-bounds write in writeRasterPbm() function | known affected: 4 known not affected: 4 | 2026-06-30T11:38:24+00:00 | Vulnerability · Source |
| CVE-2017-2580 | redhat_vex | netpbm: Out-of-bounds write of heap data | known affected: 3 known not affected: 5 | 2026-06-30T11:38:22+00:00 | Vulnerability · Source |
| CVE-2016-9605 | redhat_vex | cobbler: Cross site scripting in profile page | known not affected: 1 | 2026-06-30T11:38:20+00:00 | Vulnerability · Source |
| CVE-2016-9595 | redhat_vex | katello-debug: Possible symlink attacks due to use of predictable file names | fixed: 276 | 2026-06-30T11:38:18+00:00 | Vulnerability · Source |
| CVE-2016-9594 | redhat_vex | curl: Unitialized random | known not affected: 20 | 2026-06-30T11:38:16+00:00 | Vulnerability · Source |
| CVE-2016-9592 | redhat_vex | openshift: Failing to detach a volume causes DoS by retrying to perform delete | known not affected: 1 | 2026-06-30T11:38:12+00:00 | Vulnerability · Source |
| CVE-2016-9590 | redhat_vex | puppet-swift: installs config file with world readable permissions | fixed: 6 known not affected: 2 | 2026-06-30T11:38:10+00:00 | Vulnerability · Source |
| CVE-2016-9579 | redhat_vex | ceph: Object Gateway server DoS by sending invalid cross-origin HTTP request | fixed: 188 known not affected: 4 | 2026-06-30T11:38:08+00:00 | Vulnerability · Source |
| CVE-2016-9578 | redhat_vex | spice: Remote DoS via crafted message | fixed: 48 known affected: 1 | 2026-06-30T11:38:06+00:00 | Vulnerability · Source |
| CVE-2016-9577 | redhat_vex | spice: Buffer overflow in main_channel_alloc_msg_rcv_buf when reading large messages | fixed: 48 known affected: 1 | 2026-06-30T11:38:03+00:00 | Vulnerability · Source |
| CVE-2016-9574 | redhat_vex | nss: Remote DoS during session handshake when using SessionTicket extention and ECDHE-ECDSA | known affected: 13 | 2026-06-30T11:38:01+00:00 | Vulnerability · Source |
| CVE-2016-9042 | redhat_vex | ntp: DoS via origin timestamp check functionality | known not affected: 12 | 2026-06-30T11:37:59+00:00 | Vulnerability · Source |
| CVE-2016-9573 | redhat_vex | openjpeg: heap out-of-bounds read due to insufficient check in imagetopnm() | fixed: 68 known not affected: 4 | 2026-06-30T11:37:58+00:00 | Vulnerability · Source |
| CVE-2016-8707 | redhat_vex | ImageMagick: OOB write in convert utility when deflating TIFF files | known affected: 15 known not affected: 1 | 2026-06-30T11:37:53+00:00 | Vulnerability · Source |
| CVE-2016-8706 | redhat_vex | memcached: SASL authentication remote code execution | fixed: 46 known affected: 1 known not affected: 8 | 2026-06-30T11:37:52+00:00 | Vulnerability · Source |
| CVE-2016-8637 | redhat_vex | dracut: Local information disclosure of initramfs when early cpio is used | known not affected: 18 | 2026-06-30T11:37:48+00:00 | Vulnerability · Source |
| CVE-2016-8653 | redhat_vex | Fuse-6: JMX endpoint deserializes untrusted credentials. | known affected: 2 | 2026-06-30T11:37:48+00:00 | Vulnerability · Source |
| CVE-2016-8648 | redhat_vex | Karaf JMX Console RCE during deserialization | known affected: 2 known not affected: 2 | 2026-06-30T11:37:48+00:00 | Vulnerability · Source |
| CVE-2016-8641 | redhat_vex | nagios: Unsafe ownership change leading to privilege escalation | known affected: 10 known not affected: 1 | 2026-06-30T11:37:44+00:00 | Vulnerability · Source |
| CVE-2016-8639 | redhat_vex | foreman: Stored XSS via organization/location with HTML in name | fixed: 276 known affected: 1 | 2026-06-30T11:37:43+00:00 | Vulnerability · Source |
| CVE-2016-8635 | redhat_vex | nss: small-subgroups attack flaw | fixed: 314 | 2026-06-30T11:37:38+00:00 | Vulnerability · Source |
| CVE-2016-8634 | redhat_vex | foreman: Stored XSS in org/loc wizard | fixed: 276 known affected: 1 | 2026-06-30T11:37:35+00:00 | Vulnerability · Source |
| CVE-2016-8631 | redhat_vex | 3: Router sometimes selects new routes over old routes when determining claimed hostnames | fixed: 11 | 2026-06-30T11:37:34+00:00 | Vulnerability · Source |
| CVE-2016-8628 | redhat_vex | ansible: Command injection by compromised server via fact variables | fixed: 21 known affected: 1 known not affected: 6 | 2026-06-30T11:37:29+00:00 | Vulnerability · Source |
| CVE-2016-8627 | redhat_vex | admin-cli: Potential EAP resource starvation DOS attack via GET requests for server log files | fixed: 1479 | 2026-06-30T11:37:28+00:00 | Vulnerability · Source |
| CVE-2016-8626 | redhat_vex | Ceph: RGW Denial of Service by sending null or specially crafted POST object requests | fixed: 242 known not affected: 3 | 2026-06-30T11:37:25+00:00 | Vulnerability · Source |
| CVE-2016-8625 | redhat_vex | curl: IDNA 2003 makes curl use wrong host | fixed: 337 known affected: 19 | 2026-06-30T11:37:24+00:00 | Vulnerability · Source |
| CVE-2016-8624 | redhat_vex | curl: Invalid URL parsing with '#' | fixed: 337 known affected: 19 | 2026-06-30T11:37:21+00:00 | Vulnerability · Source |
| CVE-2016-8620 | redhat_vex | curl: Glob parser write/read out of bounds | fixed: 336 known affected: 9 known not affected: 11 | 2026-06-30T11:37:20+00:00 | Vulnerability · Source |
| CVE-2016-8619 | redhat_vex | curl: Double-free in krb5 code | fixed: 337 known affected: 19 | 2026-06-30T11:37:16+00:00 | Vulnerability · Source |
| CVE-2016-8618 | redhat_vex | curl: Double-free in curl_maprintf | fixed: 337 known affected: 19 | 2026-06-30T11:37:15+00:00 | Vulnerability · Source |
| CVE-2016-8617 | redhat_vex | curl: Out-of-bounds write via unchecked multiplication | fixed: 337 known affected: 19 | 2026-06-30T11:37:13+00:00 | Vulnerability · Source |
| CVE-2016-8615 | redhat_vex | curl: Cookie injection for other servers | fixed: 337 known affected: 19 | 2026-06-30T11:37:12+00:00 | Vulnerability · Source |
| CVE-2016-8614 | redhat_vex | ansible: Improper verification of key fingerprints in apt_key module | known not affected: 10 | 2026-06-30T11:37:10+00:00 | Vulnerability · Source |
| CVE-2016-8613 | redhat_vex | foreman: Stored XSS vulnerability in remote execution plugin | fixed: 276 | 2026-06-30T11:37:06+00:00 | Vulnerability · Source |
| CVE-2016-8609 | redhat_vex | keycloak: account hijacking via auth code fixation | fixed: 1 known not affected: 1 | 2026-06-30T11:37:03+00:00 | Vulnerability · Source |