VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
223082 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-10905 | redhat_vex | cfme: Improper access control in dRuby allows local users to execute arbitrary commands as root | fixed: 32 | 2026-06-30T11:25:18+00:00 | Vulnerability · Source |
| CVE-2018-10904 | redhat_vex | glusterfs: Unsanitized file names in debug/io-stats translator can allow remote attackers to execute arbitrary code | fixed: 84 known not affected: 32 | 2026-06-30T11:25:16+00:00 | Vulnerability · Source |
| CVE-2018-10901 | redhat_vex | kernel: kvm: vmx: host GDT limit corruption | fixed: 369 known not affected: 74 | 2026-06-30T11:25:11+00:00 | Vulnerability · Source |
| CVE-2018-10899 | redhat_vex | jolokia: system-wide CSRF that could lead to Remote Code Execution | fixed: 2 known affected: 9 known not affected: 1 | 2026-06-30T11:25:07+00:00 | Vulnerability · Source |
| CVE-2018-10898 | redhat_vex | openstack-tripleo-heat-templates: Default ODL deployment uses hard coded administrative credentials | fixed: 13 known not affected: 13 | 2026-06-30T11:25:06+00:00 | Vulnerability · Source |
| CVE-2018-10897 | redhat_vex | yum-utils: reposync: improper path validation may lead to directory traversal | fixed: 265 known affected: 1 known not affected: 6 | 2026-06-30T11:25:04+00:00 | Vulnerability · Source |
| CVE-2018-10884 | redhat_vex | ansible-tower: CSRF in awx/api/authentication.py allows for hijacking of the authtoken cookie | known affected: 1 known not affected: 7 | 2026-06-30T11:25:01+00:00 | Vulnerability · Source |
| CVE-2018-10873 | redhat_vex | spice: Missing check in demarshal.py:write_validate_array_item() allows for buffer overflow and denial of service | fixed: 210 known not affected: 4 | 2026-06-30T11:24:57+00:00 | Vulnerability · Source |
| CVE-2018-10870 | redhat_vex | redhat-certification: rhcertStore.py: __saveResultsFile allows to write any file | fixed: 10 known not affected: 1 | 2026-06-30T11:24:56+00:00 | Vulnerability · Source |
| CVE-2018-10869 | redhat_vex | redhat-certification: /download allows to download any file | fixed: 10 known not affected: 1 | 2026-06-30T11:24:54+00:00 | Vulnerability · Source |
| CVE-2018-10843 | redhat_vex | source-to-image: Builder images with assembler-user LABEL set to root allows attackers to execute arbitrary code | fixed: 32 known not affected: 2 | 2026-06-30T11:24:53+00:00 | Vulnerability · Source |
| CVE-2018-10841 | redhat_vex | glusterfs: access trusted peer group via remote-host command | fixed: 69 known not affected: 23 | 2026-06-30T11:24:50+00:00 | Vulnerability · Source |
| CVE-2018-3849 | redhat_vex | cfitsio: Stack-based buffer overflow in ffghtb() allows for potential code execution | known affected: 1 | 2026-06-30T11:24:49+00:00 | Vulnerability · Source |
| CVE-2018-3848 | redhat_vex | cfitsio: Stack-based buffer overflow in ffghbn() allows for potential code execution | known affected: 1 | 2026-06-30T11:24:44+00:00 | Vulnerability · Source |
| CVE-2018-3846 | redhat_vex | cfitsio: Unsafe use of sprintf() can allow a remote unauthenticated attacker to execute arbitrary code | known affected: 2 | 2026-06-30T11:24:43+00:00 | Vulnerability · Source |
| CVE-2018-1417 | redhat_vex | JDK: J9 JVM allows untrusted code running under a security manager to elevate its privileges | fixed: 205 known affected: 1 known not affected: 15 | 2026-06-30T11:24:40+00:00 | Vulnerability · Source |
| CVE-2018-1124 | redhat_vex | procps: Integer overflows leading to heap overflow in file2strvec | fixed: 273 known affected: 1 known not affected: 4 | 2026-06-30T11:24:39+00:00 | Vulnerability · Source |
| CVE-2018-1112 | redhat_vex | glusterfs: auth.allow allows unauthenticated clients to mount gluster volumes (CVE-2018-1088 regression) | fixed: 69 known not affected: 32 | 2026-06-30T11:24:36+00:00 | Vulnerability · Source |
| CVE-2018-1089 | redhat_vex | 389-ds-base: ns-slapd crash via large filter value in ldapsearch | fixed: 101 known not affected: 8 | 2026-06-30T11:24:34+00:00 | Vulnerability · Source |
| CVE-2018-1111 | redhat_vex | dhcp: Command injection vulnerability in the DHCP client NetworkManager integration script | fixed: 399 known not affected: 7 | 2026-06-30T11:24:34+00:00 | Vulnerability · Source |
| CVE-2018-1087 | redhat_vex | Kernel: KVM: error in exception handling leads to wrong debug stack value | fixed: 548 known affected: 2 known not affected: 75 | 2026-06-30T11:24:30+00:00 | Vulnerability · Source |
| CVE-2018-1085 | redhat_vex | openshift-ansible: Incorrectly quoted values in etcd.conf causes disabling of SSL client certificate authentication | fixed: 32 | 2026-06-30T11:24:27+00:00 | Vulnerability · Source |
| CVE-2018-1084 | redhat_vex | corosync: Integer overflow in exec/totemcrypto.c:authenticate_nss_2_3() function | fixed: 44 known affected: 4 known not affected: 9 | 2026-06-30T11:24:25+00:00 | Vulnerability · Source |
| CVE-2018-1070 | redhat_vex | Routing: Malicous Service configuration can bring down routing for an entire shard. | fixed: 32 | 2026-06-30T11:24:21+00:00 | Vulnerability · Source |
| CVE-2018-1079 | redhat_vex | pcs: Privilege escalation via authorized user malicious REST call | fixed: 20 known not affected: 7 | 2026-06-30T11:24:21+00:00 | Vulnerability · Source |
| CVE-2017-7543 | redhat_vex | openstack-neutron: iptables not active after update | fixed: 112 known not affected: 12 | 2026-06-30T11:24:18+00:00 | Vulnerability · Source |
| CVE-2017-7530 | redhat_vex | cfme: Execution of arbitrary methods through filter param | fixed: 16 | 2026-06-30T11:24:16+00:00 | Vulnerability · Source |
| CVE-2017-7466 | redhat_vex | ansible: Arbitrary code execution on control node (incomplete fix for CVE-2016-9587) | fixed: 54 known not affected: 4 | 2026-06-30T11:24:13+00:00 | Vulnerability · Source |
| CVE-2017-7465 | redhat_vex | JBoss: JAXP in EAP 7.0 allows RCE via XSL | fixed: 1 known affected: 1 known not affected: 2 | 2026-06-30T11:24:10+00:00 | Vulnerability · Source |
| CVE-2017-3145 | redhat_vex | bind: Improper fetch cleanup sequencing in the resolver can cause named to crash | fixed: 575 known affected: 1 known not affected: 18 | 2026-06-30T11:24:06+00:00 | Vulnerability · Source |
| CVE-2017-3143 | redhat_vex | bind: An error in TSIG authentication can permit unauthorized dynamic updates | fixed: 264 known affected: 1 known not affected: 1 | 2026-06-30T11:24:06+00:00 | Vulnerability · Source |
| CVE-2017-3141 | redhat_vex | bind: BIND installer on Windows uses an unquoted service path which allows privilege escalation | known not affected: 26 | 2026-06-30T11:24:01+00:00 | Vulnerability · Source |
| CVE-2017-3137 | redhat_vex | bind: Processing a response containing CNAME or DNAME with unusual order can crash resolver | fixed: 511 known affected: 2 | 2026-06-30T11:23:56+00:00 | Vulnerability · Source |
| CVE-2017-2888 | redhat_vex | SDL: Integer overflow while creating a new RGB surface | known not affected: 8 | 2026-06-30T11:23:56+00:00 | Vulnerability · Source |
| CVE-2017-2839 | redhat_vex | freerdp: Rdp Client License Read Challenge Packet Denial of Service | known affected: 12 | 2026-06-30T11:23:51+00:00 | Vulnerability · Source |
| CVE-2017-2838 | redhat_vex | freerdp: Rdp Client License Read Product Info Denial of Service | known affected: 12 | 2026-06-30T11:23:51+00:00 | Vulnerability · Source |
| CVE-2017-2885 | redhat_vex | libsoup: Stack based buffer overflow with HTTP Chunked Encoding | fixed: 47 known not affected: 4 | 2026-06-30T11:23:51+00:00 | Vulnerability · Source |
| CVE-2017-2862 | redhat_vex | gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function | fixed: 8618 known affected: 3 known not affected: 6 | 2026-06-30T11:23:51+00:00 | Vulnerability · Source |
| CVE-2025-6199 | redhat_vex | gdk-pixbuf: Uninitialized Memory Disclosure in GdkPixbuf GIF LZW Decoder | known affected: 28 | 2026-06-30T11:13:25+00:00 | Vulnerability · Source |
| CVE-2025-5918 | redhat_vex | libarchive: Reading past EOF may be triggered for piped file streams | known affected: 21 | 2026-06-30T11:13:21+00:00 | Vulnerability · Source |
| CVE-2025-5917 | redhat_vex | libarchive: Off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c | known affected: 21 | 2026-06-30T11:13:16+00:00 | Vulnerability · Source |
| CVE-2025-5916 | redhat_vex | libarchive: Integer overflow while reading warc files at archive_read_support_format_warc.c | known affected: 21 | 2026-06-30T11:13:14+00:00 | Vulnerability · Source |
| CVE-2025-5915 | redhat_vex | libarchive: Heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c | known affected: 21 | 2026-06-30T11:13:13+00:00 | Vulnerability · Source |
| CVE-2025-4945 | redhat_vex | libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup | fixed: 309 known affected: 3 | 2026-06-30T11:13:12+00:00 | Vulnerability · Source |
| CVE-2025-49178 | redhat_vex | xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore | fixed: 1166 known affected: 9 | 2026-06-30T11:10:44+00:00 | Vulnerability · Source |
| CVE-2025-6021 | redhat_vex | libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 | fixed: 532 known affected: 5 known not affected: 2649 | 2026-06-30T11:10:40+00:00 | Vulnerability · Source |
| CVE-2025-6035 | redhat_vex | gimp: Gimp Integer Overflow | known affected: 11 known not affected: 21 | 2026-06-30T11:10:40+00:00 | Vulnerability · Source |
| CVE-2025-5987 | redhat_vex | libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend | fixed: 110 known affected: 8 known not affected: 107 | 2026-06-30T11:10:35+00:00 | Vulnerability · Source |
| CVE-2025-5962 | redhat_vex | rhel-lightspeed: Improper Access Control in Lightspeed History Management Allows Local Privilege Manipulation | fixed: 6 | 2026-06-30T11:10:35+00:00 | Vulnerability · Source |
| CVE-2025-5449 | redhat_vex | libssh: Integer Overflow in libssh SFTP Server Packet Length Validation Leading to Denial of Service | known not affected: 21 | 2026-06-30T11:10:34+00:00 | Vulnerability · Source |