VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297692 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-7035 | redhat_vex | pacemaker: Privilege escalation due to improper guarding of IPC communication | fixed: 88 | 2026-06-30T11:26:09+00:00 | Vulnerability · Source |
| CVE-2016-5402 | redhat_vex | cfme: RCE via Capacity & Utilization feature | fixed: 15 | 2026-06-30T11:26:08+00:00 | Vulnerability · Source |
| CVE-2016-2123 | redhat_vex | samba: NDR Parsing ndr_pull_dnsp_name Heap-based Buffer Overflow Remote Code Execution Vulnerability (ZDI-CAN-3995) | known not affected: 96 | 2026-06-30T11:26:05+00:00 | Vulnerability · Source |
| CVE-2012-5562 | redhat_vex | rhn-proxy: rhn-satellite: rhn-proxy: Information disclosure via clear-text credential transmission when accessing RHN Satellite | known not affected: 6 | 2026-06-30T11:26:03+00:00 | Vulnerability · Source |
| CVE-2018-14656 | redhat_vex | kernel: Arbitrary Kernel Read into dmesg via Missing Address Check in segfault Handler | known not affected: 104 | 2026-06-30T11:26:01+00:00 | Vulnerability · Source |
| CVE-2018-14651 | redhat_vex | glusterfs: glusterfs server exploitable via symlinks to relative paths | fixed: 72 known not affected: 32 | 2026-06-30T11:25:59+00:00 | Vulnerability · Source |
| CVE-2018-14649 | redhat_vex | ceph-iscsi-cli: rbd-target-api service runs in debug mode allowing for remote command execution | fixed: 10 | 2026-06-30T11:25:56+00:00 | Vulnerability · Source |
| CVE-2018-14645 | redhat_vex | haproxy: Out-of-bounds read in HPACK decoder | fixed: 57 known not affected: 78 | 2026-06-30T11:25:55+00:00 | Vulnerability · Source |
| CVE-2018-14643 | redhat_vex | smart_proxy_dynflow: Authentication bypass in Foreman remote execution feature | fixed: 4 known not affected: 2 | 2026-06-30T11:25:53+00:00 | Vulnerability · Source |
| CVE-2018-14641 | redhat_vex | kernel: a bug in ip_frag_reasm() can cause a crash in ip_do_fragment() | fixed: 26 known not affected: 87 | 2026-06-30T11:25:51+00:00 | Vulnerability · Source |
| CVE-2018-14637 | redhat_vex | keycloak: expiration not validated in SAML broker consumer endpoint | fixed: 7 known affected: 1 known not affected: 1 | 2026-06-30T11:25:50+00:00 | Vulnerability · Source |
| CVE-2018-14634 | redhat_vex | kernel: Integer overflow in Linux's create_elf_tables function | fixed: 910 known not affected: 49 | 2026-06-30T11:25:46+00:00 | Vulnerability · Source |
| CVE-2018-14632 | redhat_vex | atomic-openshift: oc patch with json causes masterapi service crash | fixed: 86 known affected: 60 known not affected: 472 | 2026-06-30T11:25:44+00:00 | Vulnerability · Source |
| CVE-2018-14619 | redhat_vex | kernel: crash (possible privesc) in kernel crypto api. | fixed: 26 known not affected: 76 | 2026-06-30T11:25:42+00:00 | Vulnerability · Source |
| CVE-2018-10933 | redhat_vex | libssh: Authentication Bypass due to improper message callbacks implementation | fixed: 53 known not affected: 16 | 2026-06-30T11:25:40+00:00 | Vulnerability · Source |
| CVE-2018-10931 | redhat_vex | cobbler: CobblerXMLRPCInterface exports all its methods over XMLRPC | fixed: 6 known not affected: 2 | 2026-06-30T11:25:39+00:00 | Vulnerability · Source |
| CVE-2018-10930 | redhat_vex | glusterfs: Files can be renamed outside volume | fixed: 84 known not affected: 32 | 2026-06-30T11:25:37+00:00 | Vulnerability · Source |
| CVE-2018-10929 | redhat_vex | glusterfs: Arbitrary file creation on storage server allows for execution of arbitrary code | fixed: 84 known not affected: 32 | 2026-06-30T11:25:35+00:00 | Vulnerability · Source |
| CVE-2018-10928 | redhat_vex | glusterfs: Improper resolution of symlinks allows for privilege escalation | fixed: 84 known not affected: 32 | 2026-06-30T11:25:32+00:00 | Vulnerability · Source |
| CVE-2018-10927 | redhat_vex | glusterfs: File status information leak and denial of service | fixed: 84 known not affected: 32 | 2026-06-30T11:25:31+00:00 | Vulnerability · Source |
| CVE-2018-10926 | redhat_vex | glusterfs: Device files can be created in arbitrary locations | fixed: 84 known not affected: 32 | 2026-06-30T11:25:28+00:00 | Vulnerability · Source |
| CVE-2018-10925 | redhat_vex | postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements | fixed: 673 known affected: 15 known not affected: 53 | 2026-06-30T11:25:27+00:00 | Vulnerability · Source |
| CVE-2018-10923 | redhat_vex | glusterfs: I/O to arbitrary devices on storage server | fixed: 84 known not affected: 32 | 2026-06-30T11:25:24+00:00 | Vulnerability · Source |
| CVE-2018-10915 | redhat_vex | postgresql: Certain host connection parameters defeat client-side security defenses | fixed: 864 known affected: 13 known not affected: 39 | 2026-06-30T11:25:23+00:00 | Vulnerability · Source |
| CVE-2018-10907 | redhat_vex | glusterfs: Stack-based buffer overflow in server-rpc-fops.c allows remote attackers to execute arbitrary code | fixed: 84 known not affected: 32 | 2026-06-30T11:25:20+00:00 | Vulnerability · Source |
| CVE-2018-10905 | redhat_vex | cfme: Improper access control in dRuby allows local users to execute arbitrary commands as root | fixed: 32 | 2026-06-30T11:25:18+00:00 | Vulnerability · Source |
| CVE-2018-10904 | redhat_vex | glusterfs: Unsanitized file names in debug/io-stats translator can allow remote attackers to execute arbitrary code | fixed: 84 known not affected: 32 | 2026-06-30T11:25:16+00:00 | Vulnerability · Source |
| CVE-2018-10901 | redhat_vex | kernel: kvm: vmx: host GDT limit corruption | fixed: 369 known not affected: 74 | 2026-06-30T11:25:11+00:00 | Vulnerability · Source |
| CVE-2018-10898 | redhat_vex | openstack-tripleo-heat-templates: Default ODL deployment uses hard coded administrative credentials | fixed: 13 known not affected: 13 | 2026-06-30T11:25:06+00:00 | Vulnerability · Source |
| CVE-2018-10897 | redhat_vex | yum-utils: reposync: improper path validation may lead to directory traversal | fixed: 265 known affected: 1 known not affected: 6 | 2026-06-30T11:25:04+00:00 | Vulnerability · Source |
| CVE-2018-10884 | redhat_vex | ansible-tower: CSRF in awx/api/authentication.py allows for hijacking of the authtoken cookie | known affected: 1 known not affected: 7 | 2026-06-30T11:25:01+00:00 | Vulnerability · Source |
| CVE-2018-10873 | redhat_vex | spice: Missing check in demarshal.py:write_validate_array_item() allows for buffer overflow and denial of service | fixed: 210 known not affected: 4 | 2026-06-30T11:24:57+00:00 | Vulnerability · Source |
| CVE-2018-10870 | redhat_vex | redhat-certification: rhcertStore.py: __saveResultsFile allows to write any file | fixed: 10 known not affected: 1 | 2026-06-30T11:24:56+00:00 | Vulnerability · Source |
| CVE-2018-10869 | redhat_vex | redhat-certification: /download allows to download any file | fixed: 10 known not affected: 1 | 2026-06-30T11:24:54+00:00 | Vulnerability · Source |
| CVE-2018-10843 | redhat_vex | source-to-image: Builder images with assembler-user LABEL set to root allows attackers to execute arbitrary code | fixed: 32 known not affected: 2 | 2026-06-30T11:24:53+00:00 | Vulnerability · Source |
| CVE-2018-10841 | redhat_vex | glusterfs: access trusted peer group via remote-host command | fixed: 69 known not affected: 23 | 2026-06-30T11:24:50+00:00 | Vulnerability · Source |
| CVE-2018-3849 | redhat_vex | cfitsio: Stack-based buffer overflow in ffghtb() allows for potential code execution | known affected: 1 | 2026-06-30T11:24:49+00:00 | Vulnerability · Source |
| CVE-2018-3848 | redhat_vex | cfitsio: Stack-based buffer overflow in ffghbn() allows for potential code execution | known affected: 1 | 2026-06-30T11:24:44+00:00 | Vulnerability · Source |
| CVE-2018-3846 | redhat_vex | cfitsio: Unsafe use of sprintf() can allow a remote unauthenticated attacker to execute arbitrary code | known affected: 2 | 2026-06-30T11:24:43+00:00 | Vulnerability · Source |
| CVE-2018-1417 | redhat_vex | JDK: J9 JVM allows untrusted code running under a security manager to elevate its privileges | fixed: 205 known affected: 1 known not affected: 15 | 2026-06-30T11:24:40+00:00 | Vulnerability · Source |
| CVE-2018-1124 | redhat_vex | procps: Integer overflows leading to heap overflow in file2strvec | fixed: 273 known affected: 1 known not affected: 4 | 2026-06-30T11:24:39+00:00 | Vulnerability · Source |
| CVE-2018-1112 | redhat_vex | glusterfs: auth.allow allows unauthenticated clients to mount gluster volumes (CVE-2018-1088 regression) | fixed: 69 known not affected: 32 | 2026-06-30T11:24:36+00:00 | Vulnerability · Source |
| CVE-2018-1111 | redhat_vex | dhcp: Command injection vulnerability in the DHCP client NetworkManager integration script | fixed: 399 known not affected: 7 | 2026-06-30T11:24:34+00:00 | Vulnerability · Source |
| CVE-2018-1089 | redhat_vex | 389-ds-base: ns-slapd crash via large filter value in ldapsearch | fixed: 101 known not affected: 8 | 2026-06-30T11:24:34+00:00 | Vulnerability · Source |
| CVE-2018-1087 | redhat_vex | Kernel: KVM: error in exception handling leads to wrong debug stack value | fixed: 548 known affected: 2 known not affected: 75 | 2026-06-30T11:24:30+00:00 | Vulnerability · Source |
| CVE-2018-1085 | redhat_vex | openshift-ansible: Incorrectly quoted values in etcd.conf causes disabling of SSL client certificate authentication | fixed: 32 | 2026-06-30T11:24:27+00:00 | Vulnerability · Source |
| CVE-2018-1084 | redhat_vex | corosync: Integer overflow in exec/totemcrypto.c:authenticate_nss_2_3() function | fixed: 44 known affected: 4 known not affected: 9 | 2026-06-30T11:24:25+00:00 | Vulnerability · Source |
| CVE-2018-1079 | redhat_vex | pcs: Privilege escalation via authorized user malicious REST call | fixed: 20 known not affected: 7 | 2026-06-30T11:24:21+00:00 | Vulnerability · Source |
| CVE-2018-1070 | redhat_vex | Routing: Malicous Service configuration can bring down routing for an entire shard. | fixed: 32 | 2026-06-30T11:24:21+00:00 | Vulnerability · Source |
| CVE-2017-7543 | redhat_vex | openstack-neutron: iptables not active after update | fixed: 112 known not affected: 12 | 2026-06-30T11:24:18+00:00 | Vulnerability · Source |