VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296127 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-2627 | redhat_vex | openstack-tripleo-common: sudoers file is too permissive | known affected: 3 known not affected: 4 | 2026-06-30T11:39:24+00:00 | Vulnerability · Source |
| CVE-2017-2625 | redhat_vex | libXdmcp: weak entropy usage for session keys | fixed: 1793 known affected: 3 | 2026-06-30T11:39:23+00:00 | Vulnerability · Source |
| CVE-2017-2623 | redhat_vex | rpm-ostree-client: fails to check gpg package signatures when layering | fixed: 6 | 2026-06-30T11:39:19+00:00 | Vulnerability · Source |
| CVE-2017-2622 | redhat_vex | openstack-mistral: /var/log/mistral/ is world readable | fixed: 8 known not affected: 1 | 2026-06-30T11:39:18+00:00 | Vulnerability · Source |
| CVE-2017-2618 | redhat_vex | kernel: Off-by-one error in selinux_setprocattr (/proc/self/attr/fscreate) | fixed: 207 known not affected: 15 | 2026-06-30T11:39:15+00:00 | Vulnerability · Source |
| CVE-2017-2617 | redhat_vex | Hawtio: Unrestricted file upload leads to RCE | fixed: 2 known affected: 2 under investigation: 1 | 2026-06-30T11:39:13+00:00 | Vulnerability · Source |
| CVE-2017-2616 | redhat_vex | util-linux: Sending SIGKILL to other processes with root privileges via su | fixed: 168 known affected: 1 known not affected: 12 | 2026-06-30T11:39:09+00:00 | Vulnerability · Source |
| CVE-2017-2613 | redhat_vex | jenkins: User creation CSRF using GET by admins (SECURITY-406) | under investigation: 3 | 2026-06-30T11:39:08+00:00 | Vulnerability · Source |
| CVE-2017-2612 | redhat_vex | jenkins: Low privilege users were able to override JDK download credentials (SECURITY-392) | under investigation: 3 | 2026-06-30T11:39:05+00:00 | Vulnerability · Source |
| CVE-2017-2611 | redhat_vex | jenkins: Insufficient permission check for periodic processes (SECURITY-389) | under investigation: 3 | 2026-06-30T11:39:04+00:00 | Vulnerability · Source |
| CVE-2017-2610 | redhat_vex | jenkins: Persisted cross-site scripting vulnerability in search suggestions (SECURITY-388) | under investigation: 3 | 2026-06-30T11:39:01+00:00 | Vulnerability · Source |
| CVE-2017-2607 | redhat_vex | jenkins: Persisted cross-site scripting vulnerability in console notes (SECURITY-382) | under investigation: 3 | 2026-06-30T11:39:00+00:00 | Vulnerability · Source |
| CVE-2017-2609 | redhat_vex | jenkins: Information disclosure vulnerability in search suggestions (SECURITY-385) | under investigation: 3 | 2026-06-30T11:38:59+00:00 | Vulnerability · Source |
| CVE-2017-2606 | redhat_vex | jenkins: Internal API allowed access to item names that should not be visible (SECURITY-380) | under investigation: 3 | 2026-06-30T11:38:55+00:00 | Vulnerability · Source |
| CVE-2017-2604 | redhat_vex | jenkins: Low privilege users were able to act on administrative monitors (SECURITY-371) | under investigation: 3 | 2026-06-30T11:38:52+00:00 | Vulnerability · Source |
| CVE-2017-2601 | redhat_vex | jenkins: Persisted cross-site scripting vulnerability in parameter names and descriptions (SECURITY-353) | under investigation: 3 | 2026-06-30T11:38:51+00:00 | Vulnerability · Source |
| CVE-2017-2600 | redhat_vex | jenkins: Node monitor data could be viewed by low privilege users (SECURITY-343) | under investigation: 3 | 2026-06-30T11:38:50+00:00 | Vulnerability · Source |
| CVE-2017-2599 | redhat_vex | jenkins: Items could be created with same name as existing item (SECURITY-321) | under investigation: 3 | 2026-06-30T11:38:46+00:00 | Vulnerability · Source |
| CVE-2017-2598 | redhat_vex | jenkins: Use of AES ECB block cipher mode without IV for encrypting secrets (SECURITY-304) | under investigation: 3 | 2026-06-30T11:38:43+00:00 | Vulnerability · Source |
| CVE-2017-2595 | redhat_vex | wildfly: Arbitrary file read via path traversal | fixed: 1598 under investigation: 1 | 2026-06-30T11:38:40+00:00 | Vulnerability · Source |
| CVE-2017-2594 | redhat_vex | hawtio: information Disclosure flaws due to unsafe path traversal | fixed: 2 known affected: 3 | 2026-06-30T11:38:36+00:00 | Vulnerability · Source |
| CVE-2017-2590 | redhat_vex | ipa: Insufficient permission check for ca-del, ca-disable and ca-enable commands | fixed: 66 known not affected: 7 | 2026-06-30T11:38:29+00:00 | Vulnerability · Source |
| CVE-2017-2581 | redhat_vex | netpbm: Out-of-bounds write in writeRasterPbm() function | known affected: 4 known not affected: 4 | 2026-06-30T11:38:24+00:00 | Vulnerability · Source |
| CVE-2017-2580 | redhat_vex | netpbm: Out-of-bounds write of heap data | known affected: 3 known not affected: 5 | 2026-06-30T11:38:22+00:00 | Vulnerability · Source |
| CVE-2016-9605 | redhat_vex | cobbler: Cross site scripting in profile page | known not affected: 1 | 2026-06-30T11:38:20+00:00 | Vulnerability · Source |
| CVE-2016-9595 | redhat_vex | katello-debug: Possible symlink attacks due to use of predictable file names | fixed: 276 | 2026-06-30T11:38:18+00:00 | Vulnerability · Source |
| CVE-2016-9592 | redhat_vex | openshift: Failing to detach a volume causes DoS by retrying to perform delete | known not affected: 1 | 2026-06-30T11:38:12+00:00 | Vulnerability · Source |
| CVE-2016-9590 | redhat_vex | puppet-swift: installs config file with world readable permissions | fixed: 6 known not affected: 2 | 2026-06-30T11:38:10+00:00 | Vulnerability · Source |
| CVE-2016-9579 | redhat_vex | ceph: Object Gateway server DoS by sending invalid cross-origin HTTP request | fixed: 188 known not affected: 4 | 2026-06-30T11:38:08+00:00 | Vulnerability · Source |
| CVE-2016-9578 | redhat_vex | spice: Remote DoS via crafted message | fixed: 48 known affected: 1 | 2026-06-30T11:38:06+00:00 | Vulnerability · Source |
| CVE-2016-9577 | redhat_vex | spice: Buffer overflow in main_channel_alloc_msg_rcv_buf when reading large messages | fixed: 48 known affected: 1 | 2026-06-30T11:38:03+00:00 | Vulnerability · Source |
| CVE-2016-9574 | redhat_vex | nss: Remote DoS during session handshake when using SessionTicket extention and ECDHE-ECDSA | known affected: 13 | 2026-06-30T11:38:01+00:00 | Vulnerability · Source |
| CVE-2016-9042 | redhat_vex | ntp: DoS via origin timestamp check functionality | known not affected: 12 | 2026-06-30T11:37:59+00:00 | Vulnerability · Source |
| CVE-2016-9573 | redhat_vex | openjpeg: heap out-of-bounds read due to insufficient check in imagetopnm() | fixed: 68 known not affected: 4 | 2026-06-30T11:37:58+00:00 | Vulnerability · Source |
| CVE-2016-8707 | redhat_vex | ImageMagick: OOB write in convert utility when deflating TIFF files | known affected: 15 known not affected: 1 | 2026-06-30T11:37:53+00:00 | Vulnerability · Source |
| CVE-2016-8706 | redhat_vex | memcached: SASL authentication remote code execution | fixed: 46 known affected: 1 known not affected: 8 | 2026-06-30T11:37:52+00:00 | Vulnerability · Source |
| CVE-2016-8637 | redhat_vex | dracut: Local information disclosure of initramfs when early cpio is used | known not affected: 18 | 2026-06-30T11:37:48+00:00 | Vulnerability · Source |
| CVE-2016-8648 | redhat_vex | Karaf JMX Console RCE during deserialization | known affected: 2 known not affected: 2 | 2026-06-30T11:37:48+00:00 | Vulnerability · Source |
| CVE-2016-8653 | redhat_vex | Fuse-6: JMX endpoint deserializes untrusted credentials. | known affected: 2 | 2026-06-30T11:37:48+00:00 | Vulnerability · Source |
| CVE-2016-8641 | redhat_vex | nagios: Unsafe ownership change leading to privilege escalation | known affected: 10 known not affected: 1 | 2026-06-30T11:37:44+00:00 | Vulnerability · Source |
| CVE-2016-8639 | redhat_vex | foreman: Stored XSS via organization/location with HTML in name | fixed: 276 known affected: 1 | 2026-06-30T11:37:43+00:00 | Vulnerability · Source |
| CVE-2016-8635 | redhat_vex | nss: small-subgroups attack flaw | fixed: 314 | 2026-06-30T11:37:38+00:00 | Vulnerability · Source |
| CVE-2016-8634 | redhat_vex | foreman: Stored XSS in org/loc wizard | fixed: 276 known affected: 1 | 2026-06-30T11:37:35+00:00 | Vulnerability · Source |
| CVE-2016-8631 | redhat_vex | 3: Router sometimes selects new routes over old routes when determining claimed hostnames | fixed: 11 | 2026-06-30T11:37:34+00:00 | Vulnerability · Source |
| CVE-2016-8628 | redhat_vex | ansible: Command injection by compromised server via fact variables | fixed: 21 known affected: 1 known not affected: 6 | 2026-06-30T11:37:29+00:00 | Vulnerability · Source |
| CVE-2016-8627 | redhat_vex | admin-cli: Potential EAP resource starvation DOS attack via GET requests for server log files | fixed: 1479 | 2026-06-30T11:37:28+00:00 | Vulnerability · Source |
| CVE-2016-8626 | redhat_vex | Ceph: RGW Denial of Service by sending null or specially crafted POST object requests | fixed: 242 known not affected: 3 | 2026-06-30T11:37:25+00:00 | Vulnerability · Source |
| CVE-2016-8625 | redhat_vex | curl: IDNA 2003 makes curl use wrong host | fixed: 337 known affected: 19 | 2026-06-30T11:37:24+00:00 | Vulnerability · Source |
| CVE-2016-8624 | redhat_vex | curl: Invalid URL parsing with '#' | fixed: 337 known affected: 19 | 2026-06-30T11:37:21+00:00 | Vulnerability · Source |
| CVE-2016-8619 | redhat_vex | curl: Double-free in krb5 code | fixed: 337 known affected: 19 | 2026-06-30T11:37:16+00:00 | Vulnerability · Source |