VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
300779 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2012-5839 | redhat_vex | Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105) | fixed: 160 | 2026-06-27T13:08:51+00:00 | Vulnerability · Source |
| CVE-2012-6607 | redhat_vex | augeas: symlink attack on a .augsave file | known not affected: 11 | 2026-06-27T13:04:40+00:00 | Vulnerability · Source |
| CVE-2012-6619 | redhat_vex | mongodb: memory over-read via incorrect BSON object length | fixed: 86 known affected: 3 known not affected: 1818 | 2026-06-27T13:04:37+00:00 | Vulnerability · Source |
| CVE-2012-6119 | redhat_vex | Candlepin: Re-enable manifest signature checking | fixed: 39 | 2026-06-27T13:04:35+00:00 | Vulnerability · Source |
| CVE-2012-6685 | redhat_vex | rubygem-nokogiri: XML eXternal Entity (XXE) flaw | fixed: 311 known affected: 12 | 2026-06-27T13:04:31+00:00 | Vulnerability · Source |
| CVE-2012-6074 | redhat_vex | Jenkins: cross-site scripting vulnerability | fixed: 69 | 2026-06-27T13:04:30+00:00 | Vulnerability · Source |
| CVE-2012-6072 | redhat_vex | Jenkins: HTTP response splitting | fixed: 69 | 2026-06-27T13:04:27+00:00 | Vulnerability · Source |
| CVE-2012-6711 | redhat_vex | bash: heap-based buffer overflow during echo of unsupported characters | known affected: 3 known not affected: 7 | 2026-06-27T13:04:26+00:00 | Vulnerability · Source |
| CVE-2012-6662 | redhat_vex | jquery-ui: XSS vulnerability in default content in Tooltip widget | fixed: 104 known affected: 18 | 2026-06-27T13:04:22+00:00 | Vulnerability · Source |
| CVE-2012-6073 | redhat_vex | Jenkins: open redirect | fixed: 69 | 2026-06-27T13:04:21+00:00 | Vulnerability · Source |
| CVE-2012-6116 | redhat_vex | Candlepin: bootstrap RPM deploys CA certificate file with mode 666 | fixed: 58 | 2026-06-27T13:04:18+00:00 | Vulnerability · Source |
| CVE-2012-6149 | redhat_vex | (spacewalk-java): XSS in system.addNote XML-RPC call due improper sanitization of note's subject and content | fixed: 42 | 2026-06-27T13:04:16+00:00 | Vulnerability · Source |
| CVE-2025-3879 | redhat_vex | vault: Vault’s Azure Authentication Method bound_location Restriction Could be Bypassed on Login | known affected: 4 | 2026-06-27T13:01:01+00:00 | Vulnerability · Source |
| CVE-2013-0164 | redhat_vex | openshift-origin-port-proxy: openshift-port-proxy-cfg lockwrap() tmp file creation | fixed: 69 | 2026-06-27T12:59:37+00:00 | Vulnerability · Source |
| CVE-2013-0221 | redhat_vex | coreutils: segfault in "sort -d" and "sort -M" with long line input | fixed: 31 known affected: 1 | 2026-06-27T12:59:35+00:00 | Vulnerability · Source |
| CVE-2013-0223 | redhat_vex | coreutils: segfault in "join -i" with long line input | fixed: 31 known affected: 1 | 2026-06-27T12:59:32+00:00 | Vulnerability · Source |
| CVE-2013-0222 | redhat_vex | coreutils: segfault in uniq with long line input | fixed: 31 known affected: 1 | 2026-06-27T12:59:31+00:00 | Vulnerability · Source |
| CVE-2013-0262 | redhat_vex | rubygem-rack: Path sanitization information disclosure | fixed: 12 known not affected: 3 | 2026-06-27T12:59:30+00:00 | Vulnerability · Source |
| CVE-2013-0186 | redhat_vex | EVM: Stored XSS | fixed: 36 | 2026-06-27T12:59:27+00:00 | Vulnerability · Source |
| CVE-2013-0185 | redhat_vex | EVM: CSRF | fixed: 445 | 2026-06-27T12:59:25+00:00 | Vulnerability · Source |
| CVE-2013-0196 | redhat_vex | OpenShift Enterprise and Online vulnerable to CSRF attack with REST API | fixed: 483 | 2026-06-27T12:59:21+00:00 | Vulnerability · Source |
| CVE-2013-0158 | redhat_vex | jenkins: remote unauthenticated retrieval of master cryptographic key (Jenkins Security Advisory 2013-01-04) | fixed: 69 | 2026-06-27T12:59:19+00:00 | Vulnerability · Source |
| CVE-2013-0329 | redhat_vex | jenkins: cross-site request forgery (CSRF) protection mechanism bypass | fixed: 12 | 2026-06-27T12:54:46+00:00 | Vulnerability · Source |
| CVE-2013-0331 | redhat_vex | jenkins: denial of service attack by feeding a carefully crafted payload to Jenkins | fixed: 12 | 2026-06-27T12:54:44+00:00 | Vulnerability · Source |
| CVE-2013-0327 | redhat_vex | jenkins: cross-site request forgery (CSRF) on Jenkins master | fixed: 12 | 2026-06-27T12:54:42+00:00 | Vulnerability · Source |
| CVE-2013-0334 | redhat_vex | rubygem-bundler: 'bundle install' may install a gem from a source other than expected | fixed: 24 known affected: 11 | 2026-06-27T12:54:42+00:00 | Vulnerability · Source |
| CVE-2013-0330 | redhat_vex | jenkins: cause building jobs without direct access | fixed: 12 | 2026-06-27T12:54:40+00:00 | Vulnerability · Source |
| CVE-2013-0328 | redhat_vex | jenkins: XSS | fixed: 12 | 2026-06-27T12:54:35+00:00 | Vulnerability · Source |
| CVE-2013-0311 | redhat_vex | kernel: vhost: fix length for cross region descriptor | fixed: 329 known not affected: 13 | 2026-06-27T12:54:27+00:00 | Vulnerability · Source |
| CVE-2013-0791 | redhat_vex | Mozilla: Out-of-bounds array read in CERT_DecodeCertPackage (MFSA 2013-40) | fixed: 305 | 2026-06-27T12:50:16+00:00 | Vulnerability · Source |
| CVE-2013-0785 | redhat_vex | bugzilla: XSS and information leak flaws fixed in 3.6.13/4.0.10/4.2.5/4.4rc2 | known not affected: 1 | 2026-06-27T12:50:10+00:00 | Vulnerability · Source |
| CVE-2013-0786 | redhat_vex | bugzilla: XSS and information leak flaws fixed in 3.6.13/4.0.10/4.2.5/4.4rc2 | known not affected: 1 | 2026-06-27T12:50:06+00:00 | Vulnerability · Source |
| CVE-2013-0771 | redhat_vex | Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02) | known not affected: 6 | 2026-06-27T12:50:00+00:00 | Vulnerability · Source |
| CVE-2013-0743 | redhat_vex | nss: Dis-trust TURKTRUST mis-issued *.google.com certificate | fixed: 178 known affected: 1 known not affected: 2 | 2026-06-27T12:49:56+00:00 | Vulnerability · Source |
| CVE-2013-0761 | redhat_vex | Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02) | known not affected: 6 | 2026-06-27T12:49:49+00:00 | Vulnerability · Source |
| CVE-2013-0763 | redhat_vex | Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02) | known not affected: 6 | 2026-06-27T12:49:45+00:00 | Vulnerability · Source |
| CVE-2013-0779 | redhat_vex | Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28) | known not affected: 6 | 2026-06-27T12:49:44+00:00 | Vulnerability · Source |
| CVE-2013-0778 | redhat_vex | Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28) | known not affected: 6 | 2026-06-27T12:49:39+00:00 | Vulnerability · Source |
| CVE-2013-0760 | redhat_vex | Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02) | known not affected: 6 | 2026-06-27T12:49:34+00:00 | Vulnerability · Source |
| CVE-2013-10031 | redhat_vex | Plack-Middleware-Session: Plack-Middleware-Session: HMAC comparison timing attack vulnerability | known not affected: 1 | 2026-06-27T12:49:14+00:00 | Vulnerability · Source |
| CVE-2013-0777 | redhat_vex | Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28) | known not affected: 6 | 2026-06-27T12:48:42+00:00 | Vulnerability · Source |
| CVE-2013-0781 | redhat_vex | Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28) | known not affected: 6 | 2026-06-27T12:48:29+00:00 | Vulnerability · Source |
| CVE-2013-1619 | redhat_vex | gnutls: TLS CBC padding timing attack (lucky-13) | fixed: 105 known affected: 1 | 2026-06-27T12:45:09+00:00 | Vulnerability · Source |
| CVE-2013-1620 | redhat_vex | nss: TLS CBC padding timing attack | fixed: 305 | 2026-06-27T12:45:06+00:00 | Vulnerability · Source |
| CVE-2013-1591 | redhat_vex | pixman: stack-based buffer overflow | fixed: 47 known not affected: 1 | 2026-06-27T12:44:57+00:00 | Vulnerability · Source |
| CVE-2013-1739 | redhat_vex | nss: Avoid uninitialized data read in the event of a decryption failure | fixed: 258 known not affected: 6 | 2026-06-27T12:40:59+00:00 | Vulnerability · Source |
| CVE-2013-1808 | redhat_vex | stapler-adjunct-zeroclipboard: XSS via copying XSS payload into buffer | fixed: 492 known not affected: 1 | 2026-06-27T12:40:54+00:00 | Vulnerability · Source |
| CVE-2013-1741 | redhat_vex | nss: Integer truncation in certificate parsing (MFSA 2013-103) | fixed: 258 known not affected: 6 | 2026-06-27T12:40:39+00:00 | Vulnerability · Source |
| CVE-2013-1740 | redhat_vex | nss: false start PR_Recv information disclosure security issue | fixed: 226 known not affected: 6 | 2026-06-27T12:40:36+00:00 | Vulnerability · Source |
| CVE-2013-1798 | redhat_vex | kernel: kvm: out-of-bounds access in ioapic indirect register reads | fixed: 336 known affected: 1 known not affected: 13 | 2026-06-27T12:40:08+00:00 | Vulnerability · Source |