VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299876 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-40919 | redhat_vex | authen-digestmd5: Authen::DigestMD5 insecure cnonce generation | known not affected: 1 | 2026-06-27T13:14:43+00:00 | Vulnerability · Source |
| CVE-2012-5509 | redhat_vex | aeolus-configserver: aeolus-configserver-setup /tmp file conductor credentials leak | fixed: 14 | 2026-06-27T13:14:28+00:00 | Vulnerability · Source |
| CVE-2012-5603 | redhat_vex | Katello: lack of authorization in proxies_controller.rb | fixed: 114 | 2026-06-27T13:14:27+00:00 | Vulnerability · Source |
| CVE-2012-5561 | redhat_vex | Katello: /etc/katello/secure/passphrase is world readable | fixed: 78 | 2026-06-27T13:14:24+00:00 | Vulnerability · Source |
| CVE-2012-5515 | redhat_vex | kernel: xen: Several memory hypercall operations allow invalid extent order values | fixed: 61 | 2026-06-27T13:14:19+00:00 | Vulnerability · Source |
| CVE-2012-5513 | redhat_vex | kernel: xen: XENMEM_exchange may overwrite hypervisor memory | fixed: 88 | 2026-06-27T13:13:32+00:00 | Vulnerability · Source |
| CVE-2025-40264 | redhat_vex | kernel: Linux kernel: be2net driver NULL pointer dereference leading to denial of service | known affected: 260 known not affected: 14 | 2026-06-27T13:10:58+00:00 | Vulnerability · Source |
| CVE-2012-5635 | redhat_vex | GlusterFS: insecure temporary file creation | fixed: 80 | 2026-06-27T13:09:59+00:00 | Vulnerability · Source |
| CVE-2012-5667 | redhat_vex | grep: Integer overflow leading to heap-based buffer-overflow when reading large lines | fixed: 22 known not affected: 3 | 2026-06-27T13:09:58+00:00 | Vulnerability · Source |
| CVE-2012-5638 | redhat_vex | sanlock world writable /var/log/sanlock.log | fixed: 86 known affected: 5 | 2026-06-27T13:09:55+00:00 | Vulnerability · Source |
| CVE-2012-5920 | redhat_vex | GWT: unknown XSS flaw | fixed: 1 known affected: 1 | 2026-06-27T13:09:52+00:00 | Vulnerability · Source |
| CVE-2012-5658 | redhat_vex | Origin: rhc-chk.rb password exposure in log files | fixed: 69 | 2026-06-27T13:09:50+00:00 | Vulnerability · Source |
| CVE-2012-5660 | redhat_vex | abrt: Race condition in abrt-action-install-debuginfo | fixed: 298 | 2026-06-27T13:09:41+00:00 | Vulnerability · Source |
| CVE-2012-5841 | redhat_vex | Mozilla: Improper security filtering for cross-origin wrappers (MFSA 2012-100) | fixed: 160 | 2026-06-27T13:09:36+00:00 | Vulnerability · Source |
| CVE-2012-5838 | redhat_vex | Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106) | known not affected: 6 | 2026-06-27T13:09:36+00:00 | Vulnerability · Source |
| CVE-2012-5659 | redhat_vex | abrt: Arbitrary Python code execution due improper sanitization of the PYTHONPATH environment variable by installing debuginfo packages into cache | fixed: 298 | 2026-06-27T13:09:32+00:00 | Vulnerability · Source |
| CVE-2012-5830 | redhat_vex | Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106) | fixed: 160 | 2026-06-27T13:09:31+00:00 | Vulnerability · Source |
| CVE-2012-5840 | redhat_vex | Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105) | fixed: 160 | 2026-06-27T13:09:29+00:00 | Vulnerability · Source |
| CVE-2012-5835 | redhat_vex | Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106) | fixed: 160 | 2026-06-27T13:09:27+00:00 | Vulnerability · Source |
| CVE-2012-5842 | redhat_vex | Mozilla: Miscellaneous memory safety hazards (rv:10.0.11) (MFSA 2012-91) | fixed: 160 | 2026-06-27T13:09:26+00:00 | Vulnerability · Source |
| CVE-2012-5833 | redhat_vex | Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106) | fixed: 160 | 2026-06-27T13:09:21+00:00 | Vulnerability · Source |
| CVE-2012-5829 | redhat_vex | Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105) | fixed: 160 | 2026-06-27T13:09:15+00:00 | Vulnerability · Source |
| CVE-2012-5839 | redhat_vex | Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105) | fixed: 160 | 2026-06-27T13:08:51+00:00 | Vulnerability · Source |
| CVE-2012-6607 | redhat_vex | augeas: symlink attack on a .augsave file | known not affected: 11 | 2026-06-27T13:04:40+00:00 | Vulnerability · Source |
| CVE-2012-6619 | redhat_vex | mongodb: memory over-read via incorrect BSON object length | fixed: 86 known affected: 3 known not affected: 1818 | 2026-06-27T13:04:37+00:00 | Vulnerability · Source |
| CVE-2012-6119 | redhat_vex | Candlepin: Re-enable manifest signature checking | fixed: 39 | 2026-06-27T13:04:35+00:00 | Vulnerability · Source |
| CVE-2012-6685 | redhat_vex | rubygem-nokogiri: XML eXternal Entity (XXE) flaw | fixed: 311 known affected: 12 | 2026-06-27T13:04:31+00:00 | Vulnerability · Source |
| CVE-2012-6074 | redhat_vex | Jenkins: cross-site scripting vulnerability | fixed: 69 | 2026-06-27T13:04:30+00:00 | Vulnerability · Source |
| CVE-2012-6072 | redhat_vex | Jenkins: HTTP response splitting | fixed: 69 | 2026-06-27T13:04:27+00:00 | Vulnerability · Source |
| CVE-2012-6711 | redhat_vex | bash: heap-based buffer overflow during echo of unsupported characters | known affected: 3 known not affected: 7 | 2026-06-27T13:04:26+00:00 | Vulnerability · Source |
| CVE-2012-6662 | redhat_vex | jquery-ui: XSS vulnerability in default content in Tooltip widget | fixed: 104 known affected: 18 | 2026-06-27T13:04:22+00:00 | Vulnerability · Source |
| CVE-2012-6073 | redhat_vex | Jenkins: open redirect | fixed: 69 | 2026-06-27T13:04:21+00:00 | Vulnerability · Source |
| CVE-2012-6116 | redhat_vex | Candlepin: bootstrap RPM deploys CA certificate file with mode 666 | fixed: 58 | 2026-06-27T13:04:18+00:00 | Vulnerability · Source |
| CVE-2012-6149 | redhat_vex | (spacewalk-java): XSS in system.addNote XML-RPC call due improper sanitization of note's subject and content | fixed: 42 | 2026-06-27T13:04:16+00:00 | Vulnerability · Source |
| CVE-2025-3879 | redhat_vex | vault: Vault’s Azure Authentication Method bound_location Restriction Could be Bypassed on Login | known affected: 4 | 2026-06-27T13:01:01+00:00 | Vulnerability · Source |
| CVE-2013-0164 | redhat_vex | openshift-origin-port-proxy: openshift-port-proxy-cfg lockwrap() tmp file creation | fixed: 69 | 2026-06-27T12:59:37+00:00 | Vulnerability · Source |
| CVE-2013-0221 | redhat_vex | coreutils: segfault in "sort -d" and "sort -M" with long line input | fixed: 31 known affected: 1 | 2026-06-27T12:59:35+00:00 | Vulnerability · Source |
| CVE-2013-0223 | redhat_vex | coreutils: segfault in "join -i" with long line input | fixed: 31 known affected: 1 | 2026-06-27T12:59:32+00:00 | Vulnerability · Source |
| CVE-2013-0222 | redhat_vex | coreutils: segfault in uniq with long line input | fixed: 31 known affected: 1 | 2026-06-27T12:59:31+00:00 | Vulnerability · Source |
| CVE-2013-0262 | redhat_vex | rubygem-rack: Path sanitization information disclosure | fixed: 12 known not affected: 3 | 2026-06-27T12:59:30+00:00 | Vulnerability · Source |
| CVE-2013-0186 | redhat_vex | EVM: Stored XSS | fixed: 36 | 2026-06-27T12:59:27+00:00 | Vulnerability · Source |
| CVE-2013-0185 | redhat_vex | EVM: CSRF | fixed: 445 | 2026-06-27T12:59:25+00:00 | Vulnerability · Source |
| CVE-2013-0196 | redhat_vex | OpenShift Enterprise and Online vulnerable to CSRF attack with REST API | fixed: 483 | 2026-06-27T12:59:21+00:00 | Vulnerability · Source |
| CVE-2013-0158 | redhat_vex | jenkins: remote unauthenticated retrieval of master cryptographic key (Jenkins Security Advisory 2013-01-04) | fixed: 69 | 2026-06-27T12:59:19+00:00 | Vulnerability · Source |
| CVE-2013-0329 | redhat_vex | jenkins: cross-site request forgery (CSRF) protection mechanism bypass | fixed: 12 | 2026-06-27T12:54:46+00:00 | Vulnerability · Source |
| CVE-2013-0331 | redhat_vex | jenkins: denial of service attack by feeding a carefully crafted payload to Jenkins | fixed: 12 | 2026-06-27T12:54:44+00:00 | Vulnerability · Source |
| CVE-2013-0327 | redhat_vex | jenkins: cross-site request forgery (CSRF) on Jenkins master | fixed: 12 | 2026-06-27T12:54:42+00:00 | Vulnerability · Source |
| CVE-2013-0334 | redhat_vex | rubygem-bundler: 'bundle install' may install a gem from a source other than expected | fixed: 24 known affected: 11 | 2026-06-27T12:54:42+00:00 | Vulnerability · Source |
| CVE-2013-0330 | redhat_vex | jenkins: cause building jobs without direct access | fixed: 12 | 2026-06-27T12:54:40+00:00 | Vulnerability · Source |
| CVE-2013-0328 | redhat_vex | jenkins: XSS | fixed: 12 | 2026-06-27T12:54:35+00:00 | Vulnerability · Source |