VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
223081 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-2673 | redhat_vex | openstack-keystone: Incorrect role assignment with federated Keystone | fixed: 8 known affected: 1 known not affected: 7 | 2026-06-30T11:27:00+00:00 | Vulnerability · Source |
| CVE-2017-2668 | redhat_vex | 389-ds-base: Remote crash via crafted LDAP messages | fixed: 77 | 2026-06-30T11:26:59+00:00 | Vulnerability · Source |
| CVE-2017-2664 | redhat_vex | CloudForms: lack of RBAC on various methods in web UI | fixed: 28 | 2026-06-30T11:26:55+00:00 | Vulnerability · Source |
| CVE-2017-2646 | redhat_vex | keycloak: DoS via SAML request | known not affected: 1 | 2026-06-30T11:26:54+00:00 | Vulnerability · Source |
| CVE-2017-2637 | redhat_vex | rhosp-director: libvirtd is deployed with no authentication | fixed: 48 known not affected: 1 | 2026-06-30T11:26:51+00:00 | Vulnerability · Source |
| CVE-2017-2630 | redhat_vex | Qemu: nbd: oob stack write in client routine drop_sync | fixed: 11 known not affected: 48 | 2026-06-30T11:26:50+00:00 | Vulnerability · Source |
| CVE-2017-2620 | redhat_vex | Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo | fixed: 142 known affected: 3 known not affected: 1 | 2026-06-30T11:26:46+00:00 | Vulnerability · Source |
| CVE-2017-2615 | redhat_vex | Qemu: display: cirrus: oob access while doing bitblt copy backward mode | fixed: 142 known affected: 3 known not affected: 1 | 2026-06-30T11:26:44+00:00 | Vulnerability · Source |
| CVE-2017-2614 | redhat_vex | rhev-m-4: Fails to validate existing expired passwords when changing a password | fixed: 2 | 2026-06-30T11:26:42+00:00 | Vulnerability · Source |
| CVE-2017-2608 | redhat_vex | jenkins: XStream remote code execution vulnerability (SECURITY-383) | under investigation: 3 | 2026-06-30T11:26:40+00:00 | Vulnerability · Source |
| CVE-2017-2589 | redhat_vex | hawtio: Proxy is sharing cookies among all the clients | fixed: 2 known affected: 2 under investigation: 1 | 2026-06-30T11:26:39+00:00 | Vulnerability · Source |
| CVE-2016-9778 | redhat_vex | bind: assertion failure while handling certain queries using the nxdomain-redirect feature | known not affected: 26 | 2026-06-30T11:26:36+00:00 | Vulnerability · Source |
| CVE-2016-9603 | redhat_vex | Qemu: cirrus: heap buffer overflow via vnc connection | fixed: 128 known affected: 1 known not affected: 3 | 2026-06-30T11:26:34+00:00 | Vulnerability · Source |
| CVE-2016-9587 | redhat_vex | Ansible: Compromised remote hosts can lead to running commands on the Ansible controller | fixed: 51 known affected: 2 | 2026-06-30T11:26:32+00:00 | Vulnerability · Source |
| CVE-2016-9602 | redhat_vex | Qemu: 9p: virtfs allows guest to access host filesystem | known not affected: 69 | 2026-06-30T11:26:32+00:00 | Vulnerability · Source |
| CVE-2016-9599 | redhat_vex | puppet-tripleo: if ssl is enabled, traffic is open on both undercloud and overcloud | fixed: 2 known not affected: 1 | 2026-06-30T11:26:32+00:00 | Vulnerability · Source |
| CVE-2016-8705 | redhat_vex | memcached: Server update remote code execution | fixed: 91 known affected: 3 known not affected: 2 | 2026-06-30T11:26:26+00:00 | Vulnerability · Source |
| CVE-2016-8704 | redhat_vex | memcached: Server append/prepend remote code execution | fixed: 91 known affected: 3 known not affected: 2 | 2026-06-30T11:26:21+00:00 | Vulnerability · Source |
| CVE-2016-8656 | redhat_vex | jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation | fixed: 1493 known affected: 1 | 2026-06-30T11:26:20+00:00 | Vulnerability · Source |
| CVE-2016-8332 | redhat_vex | openjpeg2: JPEG2000 mcc record Code Execution Vulnerability | known not affected: 8 | 2026-06-30T11:26:17+00:00 | Vulnerability · Source |
| CVE-2016-8654 | redhat_vex | jasper: heap-based buffer overflow in QMFB code in JPC codec | fixed: 146 known affected: 3 known not affected: 1 | 2026-06-30T11:26:17+00:00 | Vulnerability · Source |
| CVE-2016-7075 | redhat_vex | 3: API server does not validate client-provided intermediate certificates correctly | fixed: 34 | 2026-06-30T11:26:13+00:00 | Vulnerability · Source |
| CVE-2016-7071 | redhat_vex | CFME: bypass authorization by altering VM ID | fixed: 8 | 2026-06-30T11:26:11+00:00 | Vulnerability · Source |
| CVE-2016-7035 | redhat_vex | pacemaker: Privilege escalation due to improper guarding of IPC communication | fixed: 88 | 2026-06-30T11:26:09+00:00 | Vulnerability · Source |
| CVE-2016-5402 | redhat_vex | cfme: RCE via Capacity & Utilization feature | fixed: 15 | 2026-06-30T11:26:08+00:00 | Vulnerability · Source |
| CVE-2016-2123 | redhat_vex | samba: NDR Parsing ndr_pull_dnsp_name Heap-based Buffer Overflow Remote Code Execution Vulnerability (ZDI-CAN-3995) | known not affected: 96 | 2026-06-30T11:26:05+00:00 | Vulnerability · Source |
| CVE-2012-5562 | redhat_vex | rhn-proxy: rhn-satellite: rhn-proxy: Information disclosure via clear-text credential transmission when accessing RHN Satellite | known not affected: 6 | 2026-06-30T11:26:03+00:00 | Vulnerability · Source |
| CVE-2018-14656 | redhat_vex | kernel: Arbitrary Kernel Read into dmesg via Missing Address Check in segfault Handler | known not affected: 104 | 2026-06-30T11:26:01+00:00 | Vulnerability · Source |
| CVE-2018-14651 | redhat_vex | glusterfs: glusterfs server exploitable via symlinks to relative paths | fixed: 72 known not affected: 32 | 2026-06-30T11:25:59+00:00 | Vulnerability · Source |
| CVE-2018-14649 | redhat_vex | ceph-iscsi-cli: rbd-target-api service runs in debug mode allowing for remote command execution | fixed: 10 | 2026-06-30T11:25:56+00:00 | Vulnerability · Source |
| CVE-2018-14645 | redhat_vex | haproxy: Out-of-bounds read in HPACK decoder | fixed: 57 known not affected: 78 | 2026-06-30T11:25:55+00:00 | Vulnerability · Source |
| CVE-2018-14643 | redhat_vex | smart_proxy_dynflow: Authentication bypass in Foreman remote execution feature | fixed: 4 known not affected: 2 | 2026-06-30T11:25:53+00:00 | Vulnerability · Source |
| CVE-2018-14641 | redhat_vex | kernel: a bug in ip_frag_reasm() can cause a crash in ip_do_fragment() | fixed: 26 known not affected: 87 | 2026-06-30T11:25:51+00:00 | Vulnerability · Source |
| CVE-2018-14637 | redhat_vex | keycloak: expiration not validated in SAML broker consumer endpoint | fixed: 7 known affected: 1 known not affected: 1 | 2026-06-30T11:25:50+00:00 | Vulnerability · Source |
| CVE-2018-14634 | redhat_vex | kernel: Integer overflow in Linux's create_elf_tables function | fixed: 910 known not affected: 49 | 2026-06-30T11:25:46+00:00 | Vulnerability · Source |
| CVE-2018-14632 | redhat_vex | atomic-openshift: oc patch with json causes masterapi service crash | fixed: 86 known affected: 60 known not affected: 472 | 2026-06-30T11:25:44+00:00 | Vulnerability · Source |
| CVE-2018-14619 | redhat_vex | kernel: crash (possible privesc) in kernel crypto api. | fixed: 26 known not affected: 76 | 2026-06-30T11:25:42+00:00 | Vulnerability · Source |
| CVE-2018-10933 | redhat_vex | libssh: Authentication Bypass due to improper message callbacks implementation | fixed: 53 known not affected: 16 | 2026-06-30T11:25:40+00:00 | Vulnerability · Source |
| CVE-2018-10931 | redhat_vex | cobbler: CobblerXMLRPCInterface exports all its methods over XMLRPC | fixed: 6 known not affected: 2 | 2026-06-30T11:25:39+00:00 | Vulnerability · Source |
| CVE-2018-10930 | redhat_vex | glusterfs: Files can be renamed outside volume | fixed: 84 known not affected: 32 | 2026-06-30T11:25:37+00:00 | Vulnerability · Source |
| CVE-2018-10929 | redhat_vex | glusterfs: Arbitrary file creation on storage server allows for execution of arbitrary code | fixed: 84 known not affected: 32 | 2026-06-30T11:25:35+00:00 | Vulnerability · Source |
| CVE-2018-10928 | redhat_vex | glusterfs: Improper resolution of symlinks allows for privilege escalation | fixed: 84 known not affected: 32 | 2026-06-30T11:25:32+00:00 | Vulnerability · Source |
| CVE-2018-10927 | redhat_vex | glusterfs: File status information leak and denial of service | fixed: 84 known not affected: 32 | 2026-06-30T11:25:31+00:00 | Vulnerability · Source |
| CVE-2018-10926 | redhat_vex | glusterfs: Device files can be created in arbitrary locations | fixed: 84 known not affected: 32 | 2026-06-30T11:25:28+00:00 | Vulnerability · Source |
| CVE-2018-10925 | redhat_vex | postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements | fixed: 673 known affected: 15 known not affected: 53 | 2026-06-30T11:25:27+00:00 | Vulnerability · Source |
| CVE-2018-10923 | redhat_vex | glusterfs: I/O to arbitrary devices on storage server | fixed: 84 known not affected: 32 | 2026-06-30T11:25:24+00:00 | Vulnerability · Source |
| CVE-2018-10915 | redhat_vex | postgresql: Certain host connection parameters defeat client-side security defenses | fixed: 864 known affected: 13 known not affected: 39 | 2026-06-30T11:25:23+00:00 | Vulnerability · Source |
| CVE-2018-10907 | redhat_vex | glusterfs: Stack-based buffer overflow in server-rpc-fops.c allows remote attackers to execute arbitrary code | fixed: 84 known not affected: 32 | 2026-06-30T11:25:20+00:00 | Vulnerability · Source |
| CVE-2018-10905 | redhat_vex | cfme: Improper access control in dRuby allows local users to execute arbitrary commands as root | fixed: 32 | 2026-06-30T11:25:18+00:00 | Vulnerability · Source |
| CVE-2018-10904 | redhat_vex | glusterfs: Unsanitized file names in debug/io-stats translator can allow remote attackers to execute arbitrary code | fixed: 84 known not affected: 32 | 2026-06-30T11:25:16+00:00 | Vulnerability · Source |