VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
223081 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-8615 | redhat_vex | curl: Cookie injection for other servers | fixed: 337 known affected: 19 | 2026-06-30T11:37:12+00:00 | Vulnerability · Source |
| CVE-2016-8614 | redhat_vex | ansible: Improper verification of key fingerprints in apt_key module | known not affected: 10 | 2026-06-30T11:37:10+00:00 | Vulnerability · Source |
| CVE-2016-8613 | redhat_vex | foreman: Stored XSS vulnerability in remote execution plugin | fixed: 276 | 2026-06-30T11:37:06+00:00 | Vulnerability · Source |
| CVE-2016-8609 | redhat_vex | keycloak: account hijacking via auth code fixation | fixed: 1 known not affected: 1 | 2026-06-30T11:37:03+00:00 | Vulnerability · Source |
| CVE-2016-8608 | redhat_vex | Stored XSS in business process editor | fixed: 2 known affected: 2 | 2026-06-30T11:37:02+00:00 | Vulnerability · Source |
| CVE-2016-8339 | redhat_vex | redis: OOB write vulnerability in handling of client-output-buffer-limit option during the CONFIG SET command | known not affected: 18 | 2026-06-30T11:37:00+00:00 | Vulnerability · Source |
| CVE-2016-8331 | redhat_vex | libtiff: FAX IFD Entry Parsing Type Confusion | known affected: 3 known not affected: 9 | 2026-06-30T11:36:59+00:00 | Vulnerability · Source |
| CVE-2016-7076 | redhat_vex | sudo: noexec bypass via wordexp() | fixed: 94 known affected: 1 | 2026-06-30T11:36:55+00:00 | Vulnerability · Source |
| CVE-2016-7070 | redhat_vex | Tower: PostgreSQL privilege escalation in Tower-deployed setups | known not affected: 1 | 2026-06-30T11:36:54+00:00 | Vulnerability · Source |
| CVE-2016-7056 | redhat_vex | openssl: ECDSA P-256 timing attack key recovery | fixed: 218 known affected: 10 known not affected: 8 | 2026-06-30T11:36:48+00:00 | Vulnerability · Source |
| CVE-2016-7043 | redhat_vex | kie-server: Plaintext password storage in kie-server and busitess-central | known affected: 4 | 2026-06-30T11:36:45+00:00 | Vulnerability · Source |
| CVE-2016-7041 | redhat_vex | Workbench: Path traversal vulnerability | fixed: 2 known affected: 2 | 2026-06-30T11:36:44+00:00 | Vulnerability · Source |
| CVE-2016-0750 | redhat_vex | client: unchecked deserialization in marshaller util | fixed: 2 under investigation: 1 | 2026-06-30T11:36:41+00:00 | Vulnerability · Source |
| CVE-2016-6343 | redhat_vex | Dashbuilder: Reflected XSS | fixed: 2 known affected: 1 known not affected: 1 | 2026-06-30T11:36:41+00:00 | Vulnerability · Source |
| CVE-2016-2125 | redhat_vex | samba: Unconditional privilege delegation to Kerberos servers in trusted realms | fixed: 610 known affected: 2 | 2026-06-30T11:36:40+00:00 | Vulnerability · Source |
| CVE-2014-8184 | redhat_vex | liblouis: stack-based buffer overflow in findTable() | fixed: 62 | 2026-06-30T11:36:35+00:00 | Vulnerability · Source |
| CVE-2014-8183 | redhat_vex | foreman: models with a 'belongs_to' association to an Organization do not verify association belongs to that Organization | fixed: 276 | 2026-06-30T11:36:34+00:00 | Vulnerability · Source |
| CVE-2013-1815 | redhat_vex | PackStack: Red Hat OpenStack: PackStack: Unauthorized system modification via insecure answer file creation | known affected: 2 | 2026-06-30T11:36:30+00:00 | Vulnerability · Source |
| CVE-2013-0270 | redhat_vex | keystone: OpenStack Keystone: Denial of Service via large HTTP request with long tenant name | known affected: 10 | 2026-06-30T11:36:29+00:00 | Vulnerability · Source |
| CVE-2013-0266 | redhat_vex | puppetlabs-cinder: PackStack: OpenStack: puppetlabs-cinder: Information disclosure of OpenStack administrative passwords due to world-readable configuration files. | known affected: 2 | 2026-06-30T11:36:26+00:00 | Vulnerability · Source |
| CVE-2013-0261 | redhat_vex | PackStack: PackStack: Arbitrary File Overwrite via Symlink Attack | known affected: 2 | 2026-06-30T11:36:25+00:00 | Vulnerability · Source |
| CVE-2012-5571 | redhat_vex | OpenStack Keystone: OpenStack Keystone: Authorization bypass via improper EC2 token handling | known affected: 10 | 2026-06-30T11:36:21+00:00 | Vulnerability · Source |
| CVE-2012-4550 | redhat_vex | JBoss Enterprise Application Platform: JBoss EAP: JBEAP: JBoss Enterprise Application Platform: Unauthorized EJB access via authorization module bypass | fixed: 1010 known not affected: 3 | 2026-06-30T11:36:20+00:00 | Vulnerability · Source |
| CVE-2012-4549 | redhat_vex | JBoss Enterprise Application Platform: org.jboss.as.ejb3: JBoss Enterprise Application Platform: Access restriction bypass via improper EJB method authorization | fixed: 1010 known not affected: 3 | 2026-06-30T11:36:15+00:00 | Vulnerability · Source |
| CVE-2012-0059 | redhat_vex | Spacewalk-backend: Spacewalk-backend: Information Disclosure via cleartext passwords in error messages | known affected: 8 | 2026-06-30T11:36:12+00:00 | Vulnerability · Source |
| CVE-2011-3344 | redhat_vex | spacewalk: Spacewalk: Cross-site scripting via URI in Lookup Login/Password form | known affected: 8 | 2026-06-30T11:36:11+00:00 | Vulnerability · Source |
| CVE-2011-2927 | redhat_vex | Spacewalk: Spacewalk and Red Hat Network Satellite: Cross-site scripting vulnerability via Search forms | known affected: 8 | 2026-06-30T11:36:10+00:00 | Vulnerability · Source |
| CVE-2011-1594 | redhat_vex | Spacewalk: Spacewalk: Open redirect vulnerability enables phishing attacks via URL parameter | known affected: 8 | 2026-06-30T11:36:07+00:00 | Vulnerability · Source |
| CVE-2011-2920 | redhat_vex | Spacewalk: Spacewalk: Cross-site scripting vulnerability allows arbitrary web script execution. | known affected: 8 | 2026-06-30T11:36:07+00:00 | Vulnerability · Source |
| CVE-2009-4139 | redhat_vex | spacewalk-java: spacewalk: Red Hat Network Satellite: Spacewalk Java: Privilege escalation via cross-site request forgery | known affected: 2 | 2026-06-30T11:36:05+00:00 | Vulnerability · Source |
| CVE-2018-1002100 | redhat_vex | kubernetes: Kubectl copy doesn't check for paths outside of it's destination directory | fixed: 38 known affected: 1 known not affected: 36 | 2026-06-30T11:34:46+00:00 | Vulnerability · Source |
| CVE-2018-14661 | redhat_vex | glusterfs: features/locks translator passes an user-controlled string to snprintf without a proper format string resulting in a denial of service | fixed: 80 known not affected: 32 | 2026-06-30T11:34:45+00:00 | Vulnerability · Source |
| CVE-2018-14660 | redhat_vex | glusterfs: Repeat use of "GF_META_LOCK_KEY" xattr allows for memory exhaustion | fixed: 80 known not affected: 32 | 2026-06-30T11:34:42+00:00 | Vulnerability · Source |
| CVE-2018-14659 | redhat_vex | glusterfs: Unlimited file creation via "GF_XATTR_IOSTATS_DUMP_KEY" xattr allows for denial of service | fixed: 80 known not affected: 32 | 2026-06-30T11:34:39+00:00 | Vulnerability · Source |
| CVE-2018-14658 | redhat_vex | keycloak: Open Redirect in Login and Logout | fixed: 7 known affected: 2 | 2026-06-30T11:34:36+00:00 | Vulnerability · Source |
| CVE-2018-14655 | redhat_vex | keycloak: XSS-Vulnerability with response_mode=form_post | fixed: 7 known affected: 2 | 2026-06-30T11:34:35+00:00 | Vulnerability · Source |
| CVE-2018-14654 | redhat_vex | glusterfs: "features/index" translator can create arbitrary, empty files | fixed: 80 known not affected: 32 | 2026-06-30T11:34:31+00:00 | Vulnerability · Source |
| CVE-2018-14653 | redhat_vex | glusterfs: Heap-based buffer overflow via "gf_getspec_req" RPC message | fixed: 80 known not affected: 32 | 2026-06-30T11:34:29+00:00 | Vulnerability · Source |
| CVE-2018-14650 | redhat_vex | sos-collector: incorrect permissions set on newly created files | fixed: 10 | 2026-06-30T11:34:27+00:00 | Vulnerability · Source |
| CVE-2018-14652 | redhat_vex | glusterfs: Buffer overflow in "features/locks" translator allows for denial of service | fixed: 80 known not affected: 32 | 2026-06-30T11:34:25+00:00 | Vulnerability · Source |
| CVE-2018-14648 | redhat_vex | 389-ds-base: Mishandled search requests in servers/slapd/search.c:do_search() allows for denial of service | fixed: 92 known affected: 4 known not affected: 8 | 2026-06-30T11:34:20+00:00 | Vulnerability · Source |
| CVE-2018-14647 | redhat_vex | python: Missing salt initialization in _elementtree.c module | fixed: 570 known affected: 16 known not affected: 50 | 2026-06-30T11:34:18+00:00 | Vulnerability · Source |
| CVE-2018-14646 | redhat_vex | kernel: NULL pointer dereference in af_netlink.c:__netlink_ns_capable() allows for denial of service | fixed: 302 known affected: 12 known not affected: 79 | 2026-06-30T11:34:15+00:00 | Vulnerability · Source |
| CVE-2018-14642 | redhat_vex | undertow: Infoleak in some circumstances where Undertow can serve data from a random buffer | fixed: 599 known affected: 4 known not affected: 3 | 2026-06-30T11:34:13+00:00 | Vulnerability · Source |
| CVE-2018-14638 | redhat_vex | 389-ds-base: Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly | fixed: 62 known affected: 4 known not affected: 8 | 2026-06-30T11:34:12+00:00 | Vulnerability · Source |
| CVE-2018-14636 | redhat_vex | openstack-neutron: eavesdropping private traffic due to trunk ports after live migration | known affected: 82 known not affected: 1 | 2026-06-30T11:34:10+00:00 | Vulnerability · Source |
| CVE-2018-14635 | redhat_vex | openstack-neutron: A router interface out of subnet IP range results in a denial of service | fixed: 35 known affected: 62 known not affected: 12 | 2026-06-30T11:34:07+00:00 | Vulnerability · Source |
| CVE-2018-14633 | redhat_vex | kernel: stack-based buffer overflow in chap_server_compute_md5() in iscsi target | fixed: 302 known affected: 28 known not affected: 47 | 2026-06-30T11:34:04+00:00 | Vulnerability · Source |
| CVE-2018-14629 | redhat_vex | samba: Unprivileged adding of CNAME record causing loop in AD LDAP server | known not affected: 134 | 2026-06-30T11:34:02+00:00 | Vulnerability · Source |
| CVE-2018-14627 | redhat_vex | JBoss/WildFly: iiop does not honour strict transport confidentiality | fixed: 222 known affected: 2 | 2026-06-30T11:33:58+00:00 | Vulnerability · Source |