VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
300150 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-66547 | redhat_vex | nextcloud-server: Nextcloud Server users can modify tags on files that do not belong to them | known not affected: 1 | 2026-06-27T13:46:22+00:00 | Vulnerability · Source |
| CVE-2025-66552 | redhat_vex | nextcloud-server: Nextcloud Server admin_audit does not log all actions on files in groupfolders | known not affected: 1 | 2026-06-27T13:46:22+00:00 | Vulnerability · Source |
| CVE-2025-66512 | redhat_vex | nextcloud-server: Nextcloud Server XSS in SVG images when opened outside of Nextcloud | known not affected: 1 | 2026-06-27T13:46:20+00:00 | Vulnerability · Source |
| CVE-2025-66510 | redhat_vex | nextcloud-server: Nextcloud Server Search allowed users to retrieve contact information of other users beyond their contact list | known not affected: 1 | 2026-06-27T13:46:20+00:00 | Vulnerability · Source |
| CVE-2025-66491 | redhat_vex | github.com/traefik/traefik: Traefik has Inverted TLS Verification Logic in its ingress-nginx Provider | known affected: 1 | 2026-06-27T13:46:19+00:00 | Vulnerability · Source |
| CVE-2025-66019 | redhat_vex | pypdf: pypdf manipulated LZWDecode streams can exhaust RAM | known affected: 35 | 2026-06-27T13:46:12+00:00 | Vulnerability · Source |
| CVE-2025-65111 | redhat_vex | github.com/authzed/spicedb: SpiceDB can return incomplete results | known not affected: 1 | 2026-06-27T13:46:04+00:00 | Vulnerability · Source |
| CVE-2025-65516 | redhat_vex | seafile: Seafile cross-site scripting | known not affected: 1 | 2026-06-27T13:46:03+00:00 | Vulnerability · Source |
| CVE-2025-65015 | redhat_vex | joserfc: joserfc: Arbitrarily large JWT payloads in logs via exception messages | known not affected: 1 | 2026-06-27T13:45:57+00:00 | Vulnerability · Source |
| CVE-2012-3378 | redhat_vex | at-spi2-atk: insecure temporary file handling | known not affected: 1 | 2026-06-27T13:45:49+00:00 | Vulnerability · Source |
| CVE-2012-3404 | redhat_vex | glibc: incorrect size calculation in formatted printing can lead to FORTIFY_SOURCE format string protection bypass | fixed: 129 known not affected: 1 | 2026-06-27T13:45:47+00:00 | Vulnerability · Source |
| CVE-2012-3406 | redhat_vex | glibc: printf() unbound alloca() usage in case of positional parameters + many format specs | fixed: 192 | 2026-06-27T13:45:45+00:00 | Vulnerability · Source |
| CVE-2012-2944 | redhat_vex | nut: Heap-based buffer overflow due improper processing of non-printable characters in random network data | known not affected: 1 | 2026-06-27T13:45:44+00:00 | Vulnerability · Source |
| CVE-2012-3367 | redhat_vex | System: CA certificate can be revoked | fixed: 9 | 2026-06-27T13:45:43+00:00 | Vulnerability · Source |
| CVE-2012-3375 | redhat_vex | kernel: epoll: can leak file descriptors when returning -ELOOP | fixed: 104 known affected: 14 | 2026-06-27T13:45:41+00:00 | Vulnerability · Source |
| CVE-2012-3405 | redhat_vex | glibc: incorrect use of extend_alloca() in formatted printing can lead to FORTIFY_SOURCE format string protection bypass | fixed: 129 known not affected: 1 | 2026-06-27T13:44:51+00:00 | Vulnerability · Source |
| CVE-2012-3105 | redhat_vex | Mozilla: Miscellaneous memory safety hazards (rv:13.0/ rv:10.0.5) (MFSA 2012-34) | fixed: 160 | 2026-06-27T13:44:48+00:00 | Vulnerability · Source |
| CVE-2025-64436 | redhat_vex | kubevirt.io/kubevirt: KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes | known affected: 29 | 2026-06-27T13:41:39+00:00 | Vulnerability · Source |
| CVE-2025-64437 | redhat_vex | kubevirt.io/kubevirt: KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes | known affected: 29 | 2026-06-27T13:41:39+00:00 | Vulnerability · Source |
| CVE-2025-64435 | redhat_vex | kubevirt.io/kubevirt: KubeVirt VMI Denial-of-Service Using Pod Impersonation | known affected: 29 | 2026-06-27T13:41:39+00:00 | Vulnerability · Source |
| CVE-2025-64434 | redhat_vex | kubevirt: KubeVirt: API Identity Spoofing Vulnerability | known affected: 1 | 2026-06-27T13:41:38+00:00 | Vulnerability · Source |
| CVE-2025-64433 | redhat_vex | kubevirt.io/kubevirt: KubeVirt Arbitrary Container File Read | known affected: 29 | 2026-06-27T13:41:37+00:00 | Vulnerability · Source |
| CVE-2025-64432 | redhat_vex | kubevirt.io/kubevirt: KubeVirt Authentication Bypass in Kubernetes Aggregation Layer | known affected: 29 | 2026-06-27T13:41:37+00:00 | Vulnerability · Source |
| CVE-2025-64170 | redhat_vex | sudo-rs: sudo-rs: Partial password reveal is possible after timeout | known not affected: 1 | 2026-06-27T13:41:33+00:00 | Vulnerability · Source |
| CVE-2025-63938 | redhat_vex | tinyproxy: Tinyproxy integer overflow | known not affected: 1 | 2026-06-27T13:41:32+00:00 | Vulnerability · Source |
| CVE-2025-62875 | redhat_vex | opensmtpd: Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock | known not affected: 1 | 2026-06-27T13:41:30+00:00 | Vulnerability · Source |
| CVE-2025-62513 | redhat_vex | github.com/openbao/openbao/audit: OpenBao leaks HTTPRawBody in Audit Logs | known not affected: 1 | 2026-06-27T13:41:21+00:00 | Vulnerability · Source |
| CVE-2025-62375 | redhat_vex | github.com/in-toto/go-witness: go-witness Improper Verification of AWS EC2 Identity Documents | known affected: 4 | 2026-06-27T13:41:15+00:00 | Vulnerability · Source |
| CVE-2025-62157 | redhat_vex | github.com/argoproj/argo-workflows: Argo Workflows exposes artifact repository credentials | known affected: 11 | 2026-06-27T13:41:08+00:00 | Vulnerability · Source |
| CVE-2025-6211 | redhat_vex | llama-index: llama_index MD5 Hash Collision | known affected: 11 | 2026-06-27T13:41:08+00:00 | Vulnerability · Source |
| CVE-2025-6203 | redhat_vex | github.com/hashicorp/vault: Vault unauthenticated denial of service | known affected: 5 known not affected: 3 | 2026-06-27T13:41:05+00:00 | Vulnerability · Source |
| CVE-2025-61962 | redhat_vex | fetchmail: Fetchmail denial of service | known affected: 6 | 2026-06-27T13:41:02+00:00 | Vulnerability · Source |
| CVE-2025-61765 | redhat_vex | python-socketio: python-socketio code execution (RCE) via pickle deserialization | known not affected: 1 | 2026-06-27T13:40:51+00:00 | Vulnerability · Source |
| CVE-2025-61670 | redhat_vex | wasmtime-c-api: wasmtime-c-api-impl: Wasmtime memory leak in C API | known not affected: 1 | 2026-06-27T13:40:47+00:00 | Vulnerability · Source |
| CVE-2025-61672 | redhat_vex | matrix-synapse: Synapse: Lack of device key validation leads to federation degradation | known not affected: 1 | 2026-06-27T13:40:47+00:00 | Vulnerability · Source |
| CVE-2025-60751 | redhat_vex | geographiclib: GeographicLib buffer overflow | known not affected: 1 | 2026-06-27T13:40:37+00:00 | Vulnerability · Source |
| CVE-2012-3491 | redhat_vex | condor: local users can abort any idle jobs | fixed: 234 | 2026-06-27T13:40:24+00:00 | Vulnerability · Source |
| CVE-2012-3425 | redhat_vex | libpng: Out-of heap-based buffer read by inflating certain PNG images | known affected: 1 known not affected: 4 | 2026-06-27T13:40:21+00:00 | Vulnerability · Source |
| CVE-2012-4417 | redhat_vex | GlusterFS: insecure temporary file creation | fixed: 22 | 2026-06-27T13:40:20+00:00 | Vulnerability · Source |
| CVE-2012-3492 | redhat_vex | condor: lock directories created mode 0777 allow for FS-based authentication challenge bypass | fixed: 234 | 2026-06-27T13:40:19+00:00 | Vulnerability · Source |
| CVE-2012-4444 | redhat_vex | kernel: net: acceptation of overlapping ipv6 fragments | fixed: 235 known not affected: 12 | 2026-06-27T13:40:16+00:00 | Vulnerability · Source |
| CVE-2012-3411 | redhat_vex | libvirt+dnsmasq: DNS configured to answer DNS queries from non-virtual networks | fixed: 118 known affected: 1 | 2026-06-27T13:40:12+00:00 | Vulnerability · Source |
| CVE-2012-3509 | redhat_vex | libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary | known not affected: 50 under investigation: 8 | 2026-06-27T13:40:10+00:00 | Vulnerability · Source |
| CVE-2012-3459 | redhat_vex | cumin: allows for editing internal Condor job attributes | fixed: 234 known affected: 1 | 2026-06-27T13:40:09+00:00 | Vulnerability · Source |
| CVE-2012-3467 | redhat_vex | qpid-cpp-server-cluster: unauthorized broker access caused by the use of NullAuthenticator catch-up shadow connections | fixed: 158 known not affected: 14 | 2026-06-27T13:40:05+00:00 | Vulnerability · Source |
| CVE-2012-3493 | redhat_vex | condor: GIVE_REQUEST_AD leaks privileged ClaimId information | fixed: 234 | 2026-06-27T13:40:04+00:00 | Vulnerability · Source |
| CVE-2012-3480 | redhat_vex | glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines | fixed: 192 | 2026-06-27T13:40:00+00:00 | Vulnerability · Source |
| CVE-2012-4003 | redhat_vex | glpi: XSS and CSRF flaws fixed in in 0.83.3 | known not affected: 1 | 2026-06-27T13:39:57+00:00 | Vulnerability · Source |
| CVE-2012-3986 | redhat_vex | Mozilla: Some DOMWindowUtils methods bypass security checks (MFSA 2012-77) | fixed: 160 | 2026-06-27T13:39:55+00:00 | Vulnerability · Source |
| CVE-2012-4184 | redhat_vex | Mozilla: Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties (MFSA 2012-83) | fixed: 160 | 2026-06-27T13:39:53+00:00 | Vulnerability · Source |