VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
223081 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-1080 | redhat_vex | pki-core: Mishandled ACL configuration in AAclAuthz.java reverses rules that allow and deny access | fixed: 79 known affected: 14 known not affected: 35 | 2026-06-30T11:31:08+00:00 | Vulnerability · Source |
| CVE-2018-1075 | redhat_vex | ovirt-engine: Unfiltered password when choosing manual db provisioning | fixed: 21 | 2026-06-30T11:31:02+00:00 | Vulnerability · Source |
| CVE-2018-1067 | redhat_vex | undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) | fixed: 231 known affected: 5 known not affected: 38 | 2026-06-30T11:31:00+00:00 | Vulnerability · Source |
| CVE-2018-1061 | redhat_vex | python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib | fixed: 521 known affected: 24 | 2026-06-30T11:30:56+00:00 | Vulnerability · Source |
| CVE-2017-9117 | redhat_vex | libtiff: Heap-based buffer over-read in bmp2tiff | known affected: 12 | 2026-06-30T11:30:52+00:00 | Vulnerability · Source |
| CVE-2017-7562 | redhat_vex | krb5: Authentication bypass by improper validation of certificate EKU and SAN | fixed: 117 known not affected: 12 | 2026-06-30T11:30:43+00:00 | Vulnerability · Source |
| CVE-2025-4404 | redhat_vex | freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA | fixed: 1119 known affected: 7 | 2026-06-30T11:30:32+00:00 | Vulnerability · Source |
| CVE-2017-7558 | redhat_vex | kernel: Out of bounds read in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() in SCTP stack | fixed: 207 known affected: 16 known not affected: 15 | 2026-06-30T11:30:30+00:00 | Vulnerability · Source |
| CVE-2017-7539 | redhat_vex | Qemu: qemu-nbd crashes due to undefined I/O coroutine | fixed: 58 known not affected: 22 | 2026-06-30T11:30:27+00:00 | Vulnerability · Source |
| CVE-2017-7545 | redhat_vex | jbpmmigration: XXE vulnerability in XmlUtils | fixed: 2 known affected: 1 | 2026-06-30T11:30:26+00:00 | Vulnerability · Source |
| CVE-2017-7538 | redhat_vex | 5: organization name allows XSS | fixed: 60 | 2026-06-30T11:30:25+00:00 | Vulnerability · Source |
| CVE-2017-7537 | redhat_vex | pki-core: mock CMC authentication plugin with hardcoded secret enabled by default | fixed: 56 known not affected: 14 | 2026-06-30T11:30:16+00:00 | Vulnerability · Source |
| CVE-2017-7535 | redhat_vex | foreman: XSS in the manage organization page | known affected: 1 under investigation: 17 | 2026-06-30T11:30:12+00:00 | Vulnerability · Source |
| CVE-2017-7528 | redhat_vex | Tower: X-Forwarded-For header allows internal servers to deploy other systems (using callback) | under investigation: 2 | 2026-06-30T11:30:09+00:00 | Vulnerability · Source |
| CVE-2017-7526 | redhat_vex | libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery | known affected: 10 | 2026-06-30T11:30:07+00:00 | Vulnerability · Source |
| CVE-2017-7518 | redhat_vex | Kernel: KVM: debug exception via syscall emulation | fixed: 191 known not affected: 43 | 2026-06-30T11:30:03+00:00 | Vulnerability · Source |
| CVE-2017-7514 | redhat_vex | SAT 5 XSS in the Failed Systems page | fixed: 672 | 2026-06-30T11:30:02+00:00 | Vulnerability · Source |
| CVE-2017-7513 | redhat_vex | 5: Failure to verify DB hostname against hostname in certificate in PostgreSQL through SSL configuration | known affected: 1 | 2026-06-30T11:30:01+00:00 | Vulnerability · Source |
| CVE-2017-7500 | redhat_vex | rpm: Following symlinks to directories when installing packages allows privilege escalation | known affected: 20 | 2026-06-30T11:29:54+00:00 | Vulnerability · Source |
| CVE-2017-7509 | redhat_vex | 8: Enrolling certificate without certreq field causes CA to crash | fixed: 17 | 2026-06-30T11:29:54+00:00 | Vulnerability · Source |
| CVE-2017-7497 | redhat_vex | CFME: Dialog for creating cloud volumes does not filter cloud tenants CVE-2017-7497 | fixed: 32 | 2026-06-30T11:29:46+00:00 | Vulnerability · Source |
| CVE-2017-7482 | redhat_vex | kernel: net/rxrpc: overflow in decoding of krb5 principal | fixed: 16 known affected: 11 known not affected: 33 | 2026-06-30T11:29:42+00:00 | Vulnerability · Source |
| CVE-2017-7481 | redhat_vex | ansible: Security issue with lookup return not tainting the jinja2 environment | fixed: 54 known affected: 1 known not affected: 3 | 2026-06-30T11:29:36+00:00 | Vulnerability · Source |
| CVE-2017-7470 | redhat_vex | spacewalk-backend: spacewalk-channel can be used by non-admin or disabled users for performing administrative tasks | fixed: 54 | 2026-06-30T11:29:34+00:00 | Vulnerability · Source |
| CVE-2017-7468 | redhat_vex | curl: TLS session resumption client cert bypass | known not affected: 20 | 2026-06-30T11:29:29+00:00 | Vulnerability · Source |
| CVE-2026-27876 | redhat_vex | grafana: grafana-enterprise-plugin: Grafana: Remote arbitrary code execution via chained SQL Expressions and Enterprise plugin attack | known not affected: 21 | 2026-06-30T11:29:20+00:00 | Vulnerability · Source |
| CVE-2024-34351 | redhat_vex | next: Next.js Server-Side Request Forgery in Server Actions | fixed: 1 known affected: 3 known not affected: 2 | 2026-06-30T11:29:17+00:00 | Vulnerability · Source |
| CVE-2018-5740 | redhat_vex | bind: processing of certain records when "deny-answer-aliases" is in use may trigger an assert leading to a denial of service | fixed: 304 known affected: 1 known not affected: 20 | 2026-06-30T11:29:16+00:00 | Vulnerability · Source |
| CVE-2018-5735 | redhat_vex | bind: Assertion failure in validator.c due to incorrect handling of DNSSEC validation | known not affected: 45 | 2026-06-30T11:29:15+00:00 | Vulnerability · Source |
| CVE-2018-5732 | redhat_vex | dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server | fixed: 156 known affected: 1 known not affected: 6 | 2026-06-30T11:29:13+00:00 | Vulnerability · Source |
| CVE-2018-5734 | redhat_vex | bind: A malformed request can trigger an assertion failure in badcache.c | known not affected: 45 | 2026-06-30T11:29:13+00:00 | Vulnerability · Source |
| CVE-2018-5383 | redhat_vex | kernel: Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange | fixed: 76 known affected: 1 known not affected: 41 | 2026-06-30T11:29:12+00:00 | Vulnerability · Source |
| CVE-2018-5379 | redhat_vex | quagga: Double free vulnerability in bgpd when processing certain forms of UPDATE message allowing to crash or potentially execute arbitrary code | fixed: 54 known affected: 5 known not affected: 3 | 2026-06-30T11:29:04+00:00 | Vulnerability · Source |
| CVE-2017-7467 | redhat_vex | minicom: Out of bounds write in vt100.c | known affected: 3 | 2026-06-30T11:28:55+00:00 | Vulnerability · Source |
| CVE-2017-7464 | redhat_vex | JBoss: JAXP in EAP 7.0 allows info disclosure via XXE | known affected: 1 known not affected: 2 | 2026-06-30T11:28:53+00:00 | Vulnerability · Source |
| CVE-2017-7463 | redhat_vex | business-central: Reflected XSS in artifact upload error message | fixed: 2 | 2026-06-30T11:28:49+00:00 | Vulnerability · Source |
| CVE-2017-5529 | redhat_vex | jasperreports: Information disclosure vulnerability | known affected: 1 | 2026-06-30T11:28:39+00:00 | Vulnerability · Source |
| CVE-2017-5528 | redhat_vex | jasperrreports: XSS and CSRF vulnerabilities leading to information disclosure | known affected: 1 | 2026-06-30T11:28:33+00:00 | Vulnerability · Source |
| CVE-2017-3144 | redhat_vex | dhcp: omapi code doesn't free socket descriptors when empty message is received allowing denial-of-service | fixed: 92 known not affected: 6 | 2026-06-30T11:28:23+00:00 | Vulnerability · Source |
| CVE-2017-3142 | redhat_vex | bind: An error in TSIG authentication can permit unauthorized zone transfers | fixed: 264 known affected: 1 known not affected: 1 | 2026-06-30T11:28:19+00:00 | Vulnerability · Source |
| CVE-2017-3140 | redhat_vex | bind: Error processing RPZ rules leads to endless loop while handling query | known not affected: 26 | 2026-06-30T11:28:03+00:00 | Vulnerability · Source |
| CVE-2017-3138 | redhat_vex | bind: REQUIRE assertion failure when null command string on control channel is received | known not affected: 26 | 2026-06-30T11:27:52+00:00 | Vulnerability · Source |
| CVE-2017-3135 | redhat_vex | bind: Assertion failure when using DNS64 and RPZ Can Lead to Crash | fixed: 176 known not affected: 9 | 2026-06-30T11:27:47+00:00 | Vulnerability · Source |
| CVE-2017-3136 | redhat_vex | bind: Incorrect error handling causes assertion failure when using DNS64 with "break-dnssec yes;" | fixed: 264 known not affected: 2 | 2026-06-30T11:27:47+00:00 | Vulnerability · Source |
| CVE-2017-2870 | redhat_vex | gdk-pixbuf2: Integer overflow in tiff_image_parse function | known affected: 7 | 2026-06-30T11:27:43+00:00 | Vulnerability · Source |
| CVE-2017-1002101 | redhat_vex | kubernetes: Volume security can be sidestepped with innocent emptyDir and subpath | fixed: 72 known affected: 1 known not affected: 4 | 2026-06-30T11:27:13+00:00 | Vulnerability · Source |
| CVE-2017-15118 | redhat_vex | Qemu: stack buffer overflow in NBD server triggered via long export name | fixed: 46 known affected: 5 known not affected: 43 | 2026-06-30T11:27:09+00:00 | Vulnerability · Source |
| CVE-2017-13090 | redhat_vex | wget: Heap-based buffer overflow in HTTP protocol handling | fixed: 18 known not affected: 3 | 2026-06-30T11:27:08+00:00 | Vulnerability · Source |
| CVE-2017-13089 | redhat_vex | wget: Stack-based buffer overflow in HTTP protocol handling | fixed: 18 known not affected: 3 | 2026-06-30T11:27:05+00:00 | Vulnerability · Source |
| CVE-2017-12148 | redhat_vex | Tower: modification of git hooks in SCM repo via upstream playbook execution | fixed: 18 known affected: 1 | 2026-06-30T11:27:04+00:00 | Vulnerability · Source |