VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
223081 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-14625 | redhat_vex | kernel: use-after-free Read in vhost_transport_send_pkt | fixed: 230 known not affected: 60 | 2026-06-30T11:33:54+00:00 | Vulnerability · Source |
| CVE-2018-14624 | redhat_vex | 389-ds-base: Server crash through modify command with large DN | fixed: 62 known affected: 4 known not affected: 8 | 2026-06-30T11:33:53+00:00 | Vulnerability · Source |
| CVE-2018-14620 | redhat_vex | openstack-rabbitmq-container: Insecure download of rabbitmq_clusterer during docker build | fixed: 251 known not affected: 1 | 2026-06-30T11:33:48+00:00 | Vulnerability · Source |
| CVE-2018-10937 | redhat_vex | tectonic-console: XSS Vulnerability in K8s API proxy | known not affected: 11 | 2026-06-30T11:33:48+00:00 | Vulnerability · Source |
| CVE-2018-10935 | redhat_vex | 389-ds-base: ldapsearch with server side sort allows users to cause a crash | fixed: 62 known not affected: 12 | 2026-06-30T11:33:44+00:00 | Vulnerability · Source |
| CVE-2018-10934 | redhat_vex | wildfly-core: Cross-site scripting (XSS) in JBoss Management Console | fixed: 663 known affected: 6 known not affected: 4 | 2026-06-30T11:33:43+00:00 | Vulnerability · Source |
| CVE-2018-10924 | redhat_vex | glusterfs: Denial-of-service via fsync(2) in Gluster FUSE client | known not affected: 50 | 2026-06-30T11:33:39+00:00 | Vulnerability · Source |
| CVE-2018-10919 | redhat_vex | samba: Confidential attribute disclosure via substring search | known not affected: 134 | 2026-06-30T11:33:38+00:00 | Vulnerability · Source |
| CVE-2018-10918 | redhat_vex | samba: DsCrackNames on a user without an SPN can trigger NULL-pointer de-reference | known not affected: 134 | 2026-06-30T11:33:34+00:00 | Vulnerability · Source |
| CVE-2018-10917 | redhat_vex | pulp: Improper path parsing leads to overwriting of iso repositories | fixed: 1185 known not affected: 1 | 2026-06-30T11:33:33+00:00 | Vulnerability · Source |
| CVE-2018-10916 | redhat_vex | lftp: particular remote file names may lead to current working directory erased | fixed: 34 known affected: 2 known not affected: 3 | 2026-06-30T11:33:30+00:00 | Vulnerability · Source |
| CVE-2018-10914 | redhat_vex | glusterfs: remote denial of service of gluster volumes via posix_get_file_contents function in posix-helpers.c | fixed: 84 known not affected: 32 | 2026-06-30T11:33:28+00:00 | Vulnerability · Source |
| CVE-2018-10912 | redhat_vex | keycloak: infinite loop in session replacement leading to denial of service | fixed: 2 known affected: 2 known not affected: 2 | 2026-06-30T11:33:26+00:00 | Vulnerability · Source |
| CVE-2018-10911 | redhat_vex | glusterfs: Improper deserialization in dict.c:dict_unserialize() can allow attackers to read arbitrary memory | fixed: 209 known not affected: 10 | 2026-06-30T11:33:24+00:00 | Vulnerability · Source |
| CVE-2018-10908 | redhat_vex | vdsm: calls to qemu-img are not protected by prlimit/ulimit | fixed: 27 known not affected: 27 | 2026-06-30T11:33:21+00:00 | Vulnerability · Source |
| CVE-2018-10906 | redhat_vex | fuse: bypass of the "user_allow_other" restriction when SELinux is active | fixed: 70 known affected: 1 known not affected: 11 | 2026-06-30T11:33:18+00:00 | Vulnerability · Source |
| CVE-2018-10903 | redhat_vex | python-cryptography: GCM tag forgery via truncated tag in finalize_with_tag API | fixed: 10 known affected: 1 known not affected: 8 | 2026-06-30T11:33:17+00:00 | Vulnerability · Source |
| CVE-2018-10894 | redhat_vex | keycloak: auth permitted with expired certs in SAML client | fixed: 8 known affected: 3 | 2026-06-30T11:33:14+00:00 | Vulnerability · Source |
| CVE-2018-10893 | redhat_vex | spice-client: Insufficient encoding checks for LZ can cause different integer/buffer overflows | fixed: 194 known affected: 1 known not affected: 8 | 2026-06-30T11:33:12+00:00 | Vulnerability · Source |
| CVE-2018-10892 | redhat_vex | docker: container breakout without selinux in enforcing mode | fixed: 35 known not affected: 21 | 2026-06-30T11:33:09+00:00 | Vulnerability · Source |
| CVE-2018-10878 | redhat_vex | kernel: out-of-bound write in ext4_init_block_bitmap function with a crafted ext4 image | fixed: 248 known affected: 12 known not affected: 56 | 2026-06-30T11:33:08+00:00 | Vulnerability · Source |
| CVE-2018-10885 | redhat_vex | atomic-openshift: Malicious network-policy can cause Openshift Routing DoS when using ovs-networkpolicy plugin | known affected: 20 | 2026-06-30T11:33:07+00:00 | Vulnerability · Source |
| CVE-2018-10875 | redhat_vex | ansible: ansible.cfg is being read from current working directory allowing possible code execution | fixed: 28 known affected: 7 known not affected: 6 | 2026-06-30T11:33:01+00:00 | Vulnerability · Source |
| CVE-2018-10874 | redhat_vex | ansible: Inventory variables are loaded from current working directory when running ad-hoc command that can lead to code execution | fixed: 28 known affected: 7 known not affected: 6 | 2026-06-30T11:32:59+00:00 | Vulnerability · Source |
| CVE-2018-10872 | redhat_vex | kernel: error in exception handling leads to DoS (CVE-2018-8897 regression) | fixed: 180 known not affected: 77 | 2026-06-30T11:32:55+00:00 | Vulnerability · Source |
| CVE-2018-10871 | redhat_vex | 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default | fixed: 42 known affected: 9 | 2026-06-30T11:32:54+00:00 | Vulnerability · Source |
| CVE-2018-10860 | redhat_vex | perl-Archive-Zip: Directory traversal in Archive::Zip | known affected: 6 known not affected: 3 | 2026-06-30T11:32:50+00:00 | Vulnerability · Source |
| CVE-2018-10858 | redhat_vex | samba: Insufficient input validation in libsmbclient | fixed: 437 known not affected: 52 | 2026-06-30T11:32:49+00:00 | Vulnerability · Source |
| CVE-2018-10856 | redhat_vex | podman: Containers run as non-root users do not drop capabilities | fixed: 7 known not affected: 9 | 2026-06-30T11:32:45+00:00 | Vulnerability · Source |
| CVE-2018-10855 | redhat_vex | ansible: Failed tasks do not honour no_log option allowing for secrets to be disclosed in logs | fixed: 52 known affected: 6 known not affected: 3 | 2026-06-30T11:32:44+00:00 | Vulnerability · Source |
| CVE-2018-10854 | redhat_vex | cloudforms: stored cross-site scripting in Name field | fixed: 28 | 2026-06-30T11:32:40+00:00 | Vulnerability · Source |
| CVE-2018-10853 | redhat_vex | kernel: kvm: guest userspace to guest kernel write | fixed: 530 known not affected: 75 | 2026-06-30T11:32:38+00:00 | Vulnerability · Source |
| CVE-2018-10850 | redhat_vex | 389-ds-base: race condition on reference counter leads to DoS using persistent search | fixed: 62 known affected: 4 known not affected: 8 | 2026-06-30T11:32:35+00:00 | Vulnerability · Source |
| CVE-2018-10845 | redhat_vex | gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant | fixed: 104 known affected: 6 known not affected: 9 | 2026-06-30T11:32:30+00:00 | Vulnerability · Source |
| CVE-2018-10846 | redhat_vex | gnutls: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery | fixed: 104 known affected: 9 known not affected: 6 | 2026-06-30T11:32:30+00:00 | Vulnerability · Source |
| CVE-2018-10844 | redhat_vex | gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls | fixed: 104 known affected: 6 known not affected: 9 | 2026-06-30T11:32:28+00:00 | Vulnerability · Source |
| CVE-2018-10840 | redhat_vex | kernel: Heap-based buffer overflow in fs/ext4/xattr.c:ext4_xattr_set_entry() with crafted ext4 image | fixed: 26 known affected: 15 known not affected: 72 | 2026-06-30T11:32:20+00:00 | Vulnerability · Source |
| CVE-2018-10839 | redhat_vex | QEMU: ne2000: integer overflow leads to buffer overflow issue | fixed: 32 known affected: 50 known not affected: 23 | 2026-06-30T11:32:20+00:00 | Vulnerability · Source |
| CVE-2018-1656 | redhat_vex | JDK: path traversal flaw in the Diagnostic Tooling Framework | fixed: 187 | 2026-06-30T11:32:12+00:00 | Vulnerability · Source |
| CVE-2018-1517 | redhat_vex | JDK: DoS in the java.math component | fixed: 187 | 2026-06-30T11:32:10+00:00 | Vulnerability · Source |
| CVE-2018-1140 | redhat_vex | libldb: LDAP server crash via distinguishedName | known not affected: 26 | 2026-06-30T11:32:04+00:00 | Vulnerability · Source |
| CVE-2018-1139 | redhat_vex | samba: Weak authentication protocol regression | fixed: 429 known not affected: 67 | 2026-06-30T11:32:00+00:00 | Vulnerability · Source |
| CVE-2018-1130 | redhat_vex | kernel: a null pointer dereference in net/dccp/output.c:dccp_write_xmit() leads to a system crash | fixed: 402 known affected: 13 known not affected: 57 | 2026-06-30T11:31:53+00:00 | Vulnerability · Source |
| CVE-2018-1126 | redhat_vex | procps: incorrect integer size in proc/alloc.* leading to truncation / integer overflow issues | fixed: 238 known affected: 1 known not affected: 8 | 2026-06-30T11:31:43+00:00 | Vulnerability · Source |
| CVE-2018-1122 | redhat_vex | procps: Local privilege escalation in top | fixed: 202 known affected: 4 known not affected: 4 | 2026-06-30T11:31:42+00:00 | Vulnerability · Source |
| CVE-2018-1120 | redhat_vex | kernel: fuse-backed file mmap-ed onto process cmdline arguments causes denial of service | fixed: 358 known affected: 15 known not affected: 45 | 2026-06-30T11:31:40+00:00 | Vulnerability · Source |
| CVE-2018-1114 | redhat_vex | undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service | fixed: 225 known affected: 4 known not affected: 2 | 2026-06-30T11:31:29+00:00 | Vulnerability · Source |
| CVE-2018-1103 | redhat_vex | source-to-image: Unsanitized paths in tar.go:ExtractTarStreamFromTarReader() allow malicious containers to overwrite files on the client machine | known affected: 1 | 2026-06-30T11:31:26+00:00 | Vulnerability · Source |
| CVE-2018-1090 | redhat_vex | pulp: sensitive credentials revealed through the API | fixed: 1110 known affected: 1 | 2026-06-30T11:31:20+00:00 | Vulnerability · Source |
| CVE-2018-1086 | redhat_vex | pcs: Debug parameter removal bypass, allowing information disclosure | fixed: 30 known not affected: 5 | 2026-06-30T11:31:18+00:00 | Vulnerability · Source |