VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296127 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-7558 | redhat_vex | kernel: Out of bounds read in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() in SCTP stack | fixed: 207 known affected: 16 known not affected: 15 | 2026-06-30T11:30:30+00:00 | Vulnerability · Source |
| CVE-2017-7539 | redhat_vex | Qemu: qemu-nbd crashes due to undefined I/O coroutine | fixed: 58 known not affected: 22 | 2026-06-30T11:30:27+00:00 | Vulnerability · Source |
| CVE-2017-7545 | redhat_vex | jbpmmigration: XXE vulnerability in XmlUtils | fixed: 2 known affected: 1 | 2026-06-30T11:30:26+00:00 | Vulnerability · Source |
| CVE-2017-7538 | redhat_vex | 5: organization name allows XSS | fixed: 60 | 2026-06-30T11:30:25+00:00 | Vulnerability · Source |
| CVE-2017-7537 | redhat_vex | pki-core: mock CMC authentication plugin with hardcoded secret enabled by default | fixed: 56 known not affected: 14 | 2026-06-30T11:30:16+00:00 | Vulnerability · Source |
| CVE-2017-7535 | redhat_vex | foreman: XSS in the manage organization page | known affected: 1 under investigation: 17 | 2026-06-30T11:30:12+00:00 | Vulnerability · Source |
| CVE-2017-7528 | redhat_vex | Tower: X-Forwarded-For header allows internal servers to deploy other systems (using callback) | under investigation: 2 | 2026-06-30T11:30:09+00:00 | Vulnerability · Source |
| CVE-2017-7526 | redhat_vex | libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery | known affected: 10 | 2026-06-30T11:30:07+00:00 | Vulnerability · Source |
| CVE-2017-7518 | redhat_vex | Kernel: KVM: debug exception via syscall emulation | fixed: 191 known not affected: 43 | 2026-06-30T11:30:03+00:00 | Vulnerability · Source |
| CVE-2017-7514 | redhat_vex | SAT 5 XSS in the Failed Systems page | fixed: 672 | 2026-06-30T11:30:02+00:00 | Vulnerability · Source |
| CVE-2017-7513 | redhat_vex | 5: Failure to verify DB hostname against hostname in certificate in PostgreSQL through SSL configuration | known affected: 1 | 2026-06-30T11:30:01+00:00 | Vulnerability · Source |
| CVE-2017-7509 | redhat_vex | 8: Enrolling certificate without certreq field causes CA to crash | fixed: 17 | 2026-06-30T11:29:54+00:00 | Vulnerability · Source |
| CVE-2017-7500 | redhat_vex | rpm: Following symlinks to directories when installing packages allows privilege escalation | known affected: 20 | 2026-06-30T11:29:54+00:00 | Vulnerability · Source |
| CVE-2017-7497 | redhat_vex | CFME: Dialog for creating cloud volumes does not filter cloud tenants CVE-2017-7497 | fixed: 32 | 2026-06-30T11:29:46+00:00 | Vulnerability · Source |
| CVE-2017-7482 | redhat_vex | kernel: net/rxrpc: overflow in decoding of krb5 principal | fixed: 16 known affected: 11 known not affected: 33 | 2026-06-30T11:29:42+00:00 | Vulnerability · Source |
| CVE-2017-7481 | redhat_vex | ansible: Security issue with lookup return not tainting the jinja2 environment | fixed: 54 known affected: 1 known not affected: 3 | 2026-06-30T11:29:36+00:00 | Vulnerability · Source |
| CVE-2017-7470 | redhat_vex | spacewalk-backend: spacewalk-channel can be used by non-admin or disabled users for performing administrative tasks | fixed: 54 | 2026-06-30T11:29:34+00:00 | Vulnerability · Source |
| CVE-2026-27876 | redhat_vex | grafana: grafana-enterprise-plugin: Grafana: Remote arbitrary code execution via chained SQL Expressions and Enterprise plugin attack | known not affected: 21 | 2026-06-30T11:29:20+00:00 | Vulnerability · Source |
| CVE-2024-34351 | redhat_vex | next: Next.js Server-Side Request Forgery in Server Actions | fixed: 1 known affected: 3 known not affected: 2 | 2026-06-30T11:29:17+00:00 | Vulnerability · Source |
| CVE-2018-5740 | redhat_vex | bind: processing of certain records when "deny-answer-aliases" is in use may trigger an assert leading to a denial of service | fixed: 304 known affected: 1 known not affected: 20 | 2026-06-30T11:29:16+00:00 | Vulnerability · Source |
| CVE-2018-5735 | redhat_vex | bind: Assertion failure in validator.c due to incorrect handling of DNSSEC validation | known not affected: 45 | 2026-06-30T11:29:15+00:00 | Vulnerability · Source |
| CVE-2018-5732 | redhat_vex | dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server | fixed: 156 known affected: 1 known not affected: 6 | 2026-06-30T11:29:13+00:00 | Vulnerability · Source |
| CVE-2018-5734 | redhat_vex | bind: A malformed request can trigger an assertion failure in badcache.c | known not affected: 45 | 2026-06-30T11:29:13+00:00 | Vulnerability · Source |
| CVE-2018-5383 | redhat_vex | kernel: Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange | fixed: 76 known affected: 1 known not affected: 41 | 2026-06-30T11:29:12+00:00 | Vulnerability · Source |
| CVE-2018-5379 | redhat_vex | quagga: Double free vulnerability in bgpd when processing certain forms of UPDATE message allowing to crash or potentially execute arbitrary code | fixed: 54 known affected: 5 known not affected: 3 | 2026-06-30T11:29:04+00:00 | Vulnerability · Source |
| CVE-2017-7467 | redhat_vex | minicom: Out of bounds write in vt100.c | known affected: 3 | 2026-06-30T11:28:55+00:00 | Vulnerability · Source |
| CVE-2017-7463 | redhat_vex | business-central: Reflected XSS in artifact upload error message | fixed: 2 | 2026-06-30T11:28:49+00:00 | Vulnerability · Source |
| CVE-2017-5529 | redhat_vex | jasperreports: Information disclosure vulnerability | known affected: 1 | 2026-06-30T11:28:39+00:00 | Vulnerability · Source |
| CVE-2017-5528 | redhat_vex | jasperrreports: XSS and CSRF vulnerabilities leading to information disclosure | known affected: 1 | 2026-06-30T11:28:33+00:00 | Vulnerability · Source |
| CVE-2017-3144 | redhat_vex | dhcp: omapi code doesn't free socket descriptors when empty message is received allowing denial-of-service | fixed: 92 known not affected: 6 | 2026-06-30T11:28:23+00:00 | Vulnerability · Source |
| CVE-2017-3142 | redhat_vex | bind: An error in TSIG authentication can permit unauthorized zone transfers | fixed: 264 known affected: 1 known not affected: 1 | 2026-06-30T11:28:19+00:00 | Vulnerability · Source |
| CVE-2017-3140 | redhat_vex | bind: Error processing RPZ rules leads to endless loop while handling query | known not affected: 26 | 2026-06-30T11:28:03+00:00 | Vulnerability · Source |
| CVE-2017-3138 | redhat_vex | bind: REQUIRE assertion failure when null command string on control channel is received | known not affected: 26 | 2026-06-30T11:27:52+00:00 | Vulnerability · Source |
| CVE-2017-3136 | redhat_vex | bind: Incorrect error handling causes assertion failure when using DNS64 with "break-dnssec yes;" | fixed: 264 known not affected: 2 | 2026-06-30T11:27:47+00:00 | Vulnerability · Source |
| CVE-2017-3135 | redhat_vex | bind: Assertion failure when using DNS64 and RPZ Can Lead to Crash | fixed: 176 known not affected: 9 | 2026-06-30T11:27:47+00:00 | Vulnerability · Source |
| CVE-2017-2870 | redhat_vex | gdk-pixbuf2: Integer overflow in tiff_image_parse function | known affected: 7 | 2026-06-30T11:27:43+00:00 | Vulnerability · Source |
| CVE-2017-1002101 | redhat_vex | kubernetes: Volume security can be sidestepped with innocent emptyDir and subpath | fixed: 72 known affected: 1 known not affected: 4 | 2026-06-30T11:27:13+00:00 | Vulnerability · Source |
| CVE-2017-15118 | redhat_vex | Qemu: stack buffer overflow in NBD server triggered via long export name | fixed: 46 known affected: 5 known not affected: 43 | 2026-06-30T11:27:09+00:00 | Vulnerability · Source |
| CVE-2017-13090 | redhat_vex | wget: Heap-based buffer overflow in HTTP protocol handling | fixed: 18 known not affected: 3 | 2026-06-30T11:27:08+00:00 | Vulnerability · Source |
| CVE-2017-13089 | redhat_vex | wget: Stack-based buffer overflow in HTTP protocol handling | fixed: 18 known not affected: 3 | 2026-06-30T11:27:05+00:00 | Vulnerability · Source |
| CVE-2017-12148 | redhat_vex | Tower: modification of git hooks in SCM repo via upstream playbook execution | fixed: 18 known affected: 1 | 2026-06-30T11:27:04+00:00 | Vulnerability · Source |
| CVE-2017-2668 | redhat_vex | 389-ds-base: Remote crash via crafted LDAP messages | fixed: 77 | 2026-06-30T11:26:59+00:00 | Vulnerability · Source |
| CVE-2017-2664 | redhat_vex | CloudForms: lack of RBAC on various methods in web UI | fixed: 28 | 2026-06-30T11:26:55+00:00 | Vulnerability · Source |
| CVE-2017-2646 | redhat_vex | keycloak: DoS via SAML request | known not affected: 1 | 2026-06-30T11:26:54+00:00 | Vulnerability · Source |
| CVE-2017-2637 | redhat_vex | rhosp-director: libvirtd is deployed with no authentication | fixed: 48 known not affected: 1 | 2026-06-30T11:26:51+00:00 | Vulnerability · Source |
| CVE-2017-2630 | redhat_vex | Qemu: nbd: oob stack write in client routine drop_sync | fixed: 11 known not affected: 48 | 2026-06-30T11:26:50+00:00 | Vulnerability · Source |
| CVE-2017-2620 | redhat_vex | Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo | fixed: 142 known affected: 3 known not affected: 1 | 2026-06-30T11:26:46+00:00 | Vulnerability · Source |
| CVE-2017-2615 | redhat_vex | Qemu: display: cirrus: oob access while doing bitblt copy backward mode | fixed: 142 known affected: 3 known not affected: 1 | 2026-06-30T11:26:44+00:00 | Vulnerability · Source |
| CVE-2017-2614 | redhat_vex | rhev-m-4: Fails to validate existing expired passwords when changing a password | fixed: 2 | 2026-06-30T11:26:42+00:00 | Vulnerability · Source |
| CVE-2017-2608 | redhat_vex | jenkins: XStream remote code execution vulnerability (SECURITY-383) | under investigation: 3 | 2026-06-30T11:26:40+00:00 | Vulnerability · Source |