VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
302147 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2014-3661 | redhat_vex | jenkins: denial of service (SECURITY-87) | fixed: 260 known affected: 1 | 2026-06-27T10:35:55+00:00 | Vulnerability · Source |
| CVE-2014-3679 | redhat_vex | jenkins: lack of access control in the monitoring plug-in (SECURITY-113) | known affected: 2 | 2026-06-27T10:35:51+00:00 | Vulnerability · Source |
| CVE-2014-3657 | redhat_vex | libvirt: domain_conf: domain deadlock DoS | fixed: 218 known affected: 1 known not affected: 1 | 2026-06-27T10:35:48+00:00 | Vulnerability · Source |
| CVE-2014-3693 | redhat_vex | libreoffice: Use-After-Free in socket manager of Impress Remote | fixed: 615 known affected: 133 | 2026-06-27T10:35:45+00:00 | Vulnerability · Source |
| CVE-2014-3678 | redhat_vex | jenkins: cross-site scripting flaws in the monitoring plug-in (SECURITY-113) | fixed: 6 known affected: 1 | 2026-06-27T10:35:41+00:00 | Vulnerability · Source |
| CVE-2014-4039 | redhat_vex | ppc64-diag: multiple temporary file races | fixed: 6 | 2026-06-27T10:35:32+00:00 | Vulnerability · Source |
| CVE-2014-3707 | redhat_vex | curl: incorrect handle duplication after COPYPOSTFIELDS | fixed: 111 known affected: 3 known not affected: 1 | 2026-06-27T10:35:28+00:00 | Vulnerability · Source |
| CVE-2014-3677 | redhat_vex | shim: memory corruption flaw when processing Machine Owner Keys (MOKs) | fixed: 24 | 2026-06-27T10:35:26+00:00 | Vulnerability · Source |
| CVE-2014-3662 | redhat_vex | jenkins: username discovery (SECURITY-110) | fixed: 260 known affected: 1 | 2026-06-27T10:35:24+00:00 | Vulnerability · Source |
| CVE-2014-3664 | redhat_vex | jenkins: directory traversal flaw (SECURITY-131) | fixed: 260 known affected: 1 | 2026-06-27T10:35:19+00:00 | Vulnerability · Source |
| CVE-2014-3999 | redhat_vex | php-horde-Horde-Ldap: connect to LDAP without knowing the password | known not affected: 1 | 2026-06-27T10:35:16+00:00 | Vulnerability · Source |
| CVE-2014-3667 | redhat_vex | jenkins: plug-in code can be downloaded by anyone with read access (SECURITY-155) | fixed: 260 known affected: 1 | 2026-06-27T10:35:16+00:00 | Vulnerability · Source |
| CVE-2014-3663 | redhat_vex | jenkins: job configuration issues (SECURITY-127, SECURITY-128) | fixed: 260 known affected: 1 | 2026-06-27T10:35:13+00:00 | Vulnerability · Source |
| CVE-2014-3681 | redhat_vex | jenkins: cross-site scripting flaw in Jenkins core (SECURITY-143) | fixed: 260 known affected: 1 | 2026-06-27T10:35:11+00:00 | Vulnerability · Source |
| CVE-2014-3645 | redhat_vex | kernel: kvm: vmx: invept vm exit not handled | fixed: 419 known affected: 1 | 2026-06-27T10:35:07+00:00 | Vulnerability · Source |
| CVE-2014-3666 | redhat_vex | jenkins: remote code execution flaw (SECURITY-150) | fixed: 260 under investigation: 1 | 2026-06-27T10:35:03+00:00 | Vulnerability · Source |
| CVE-2014-3683 | redhat_vex | rsyslog: integer overflow in PRI parsing | known not affected: 41 | 2026-06-27T10:35:03+00:00 | Vulnerability · Source |
| CVE-2014-3665 | redhat_vex | jenkins: remote code execution from slaves (SECURITY-144) | fixed: 6 known affected: 1 | 2026-06-27T10:33:35+00:00 | Vulnerability · Source |
| CVE-2014-3691 | redhat_vex | foreman-proxy: failure to verify SSL certificates | fixed: 138 | 2026-06-27T10:33:00+00:00 | Vulnerability · Source |
| CVE-2014-4341 | redhat_vex | krb5: denial of service flaws when handling padding length longer than the plaintext | fixed: 204 | 2026-06-27T10:29:35+00:00 | Vulnerability · Source |
| CVE-2014-4342 | redhat_vex | krb5: denial of service flaws when handling RFC 1964 tokens | fixed: 151 known not affected: 1 | 2026-06-27T10:29:34+00:00 | Vulnerability · Source |
| CVE-2014-4659 | redhat_vex | ansible: information disclosure through incorrect file permission | known not affected: 18 | 2026-06-27T10:29:30+00:00 | Vulnerability · Source |
| CVE-2014-5325 | redhat_vex | dwr: XML external entity injection (JVN#91502163) | known affected: 1 | 2026-06-27T10:25:45+00:00 | Vulnerability · Source |
| CVE-2014-5277 | redhat_vex | docker: fallback to HTTP when HTTPS connections to the registry fail | known affected: 1 | 2026-06-27T10:25:43+00:00 | Vulnerability · Source |
| CVE-2014-6051 | redhat_vex | libvncserver: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling | fixed: 96 known not affected: 21 | 2026-06-27T10:25:40+00:00 | Vulnerability · Source |
| CVE-2014-6272 | redhat_vex | libevent: potential heap overflow in buffer/bufferevent APIs | known affected: 22 known not affected: 10 | 2026-06-27T10:25:38+00:00 | Vulnerability · Source |
| CVE-2014-5177 | redhat_vex | libvirt: unsafe parsing of XML documents allows libvirt DoS and/or arbitrary file read | fixed: 150 known affected: 7 under investigation: 1 | 2026-06-27T10:25:32+00:00 | Vulnerability · Source |
| CVE-2014-5444 | redhat_vex | geary: failure to handle certificate errors | known not affected: 1 | 2026-06-27T10:25:30+00:00 | Vulnerability · Source |
| CVE-2014-5326 | redhat_vex | dwr: cross-site scripting flaw (JVN#52422792) | known affected: 1 | 2026-06-27T10:25:30+00:00 | Vulnerability · Source |
| CVE-2014-5339 | redhat_vex | check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4 | fixed: 213 | 2026-06-27T10:25:28+00:00 | Vulnerability · Source |
| CVE-2014-5119 | redhat_vex | glibc: off-by-one error leading to a heap-based buffer overflow flaw in __gconv_translit_find() | fixed: 473 | 2026-06-27T10:25:25+00:00 | Vulnerability · Source |
| CVE-2014-5338 | redhat_vex | check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4 | fixed: 213 | 2026-06-27T10:25:20+00:00 | Vulnerability · Source |
| CVE-2014-5340 | redhat_vex | check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4 | fixed: 213 | 2026-06-27T10:23:55+00:00 | Vulnerability · Source |
| CVE-2025-8863 | redhat_vex | yugabytedb: YugabyteDB information exposure | known affected: 2 | 2026-06-27T10:20:34+00:00 | Vulnerability · Source |
| CVE-2014-6439 | redhat_vex | Elasticsearch: CSRF via insecure CORS default configuration | known affected: 1 under investigation: 1 | 2026-06-27T10:20:13+00:00 | Vulnerability · Source |
| CVE-2014-7144 | redhat_vex | python-keystoneclient: TLS certificate verification disabled | fixed: 9 known affected: 4 | 2026-06-27T10:19:51+00:00 | Vulnerability · Source |
| CVE-2014-6425 | redhat_vex | wireshark: CUPS dissector crash (wnpa-sec-2014-15) | fixed: 128 | 2026-06-27T10:19:39+00:00 | Vulnerability · Source |
| CVE-2014-7203 | redhat_vex | zeromq: CurveZMQ does not mandate replay attack detection | known not affected: 1 | 2026-06-27T10:19:37+00:00 | Vulnerability · Source |
| CVE-2025-57753 | redhat_vex | vite-plugin-static-copy: vite-plugin-static-copy fpath traversal | known affected: 1 | 2026-06-27T10:16:42+00:00 | Vulnerability · Source |
| CVE-2025-55551 | redhat_vex | torch: PyTorch denial of service | known affected: 42 | 2026-06-27T10:15:09+00:00 | Vulnerability · Source |
| CVE-2014-7300 | redhat_vex | gnome-shell: lockscreen bypass with printscreen key | fixed: 187 | 2026-06-27T10:15:03+00:00 | Vulnerability · Source |
| CVE-2014-7819 | redhat_vex | rubygem-sprockets: arbitrary file existence disclosure | fixed: 70 known affected: 8 | 2026-06-27T10:15:00+00:00 | Vulnerability · Source |
| CVE-2014-7829 | redhat_vex | rubygem-actionpack: incomplete fix for CVE-2014-7818, arbitrary file existence disclosure | known affected: 10 | 2026-06-27T10:14:59+00:00 | Vulnerability · Source |
| CVE-2014-7823 | redhat_vex | libvirt: dumpxml: information leak with migratable flag | fixed: 218 known not affected: 1 under investigation: 1 | 2026-06-27T10:14:58+00:00 | Vulnerability · Source |
| CVE-2014-7818 | redhat_vex | rubygem-actionpack: arbitrary file existence disclosure | known affected: 10 | 2026-06-27T10:14:54+00:00 | Vulnerability · Source |
| CVE-2014-7811 | redhat_vex | Spacewalk: multiple XSS | fixed: 493 | 2026-06-27T10:14:53+00:00 | Vulnerability · Source |
| CVE-2014-7850 | redhat_vex | freeipa: XSS flaw can be used to escalate privileges | known affected: 14 known not affected: 7 | 2026-06-27T10:14:51+00:00 | Vulnerability · Source |
| CVE-2014-7828 | redhat_vex | freeipa: password not required when OTP in use | known not affected: 21 | 2026-06-27T10:14:45+00:00 | Vulnerability · Source |
| CVE-2014-7814 | redhat_vex | CFME: REST API SQL Injection | fixed: 10 | 2026-06-27T10:14:34+00:00 | Vulnerability · Source |
| CVE-2014-7812 | redhat_vex | Spacewalk: XSS in system-group | fixed: 493 | 2026-06-27T10:14:33+00:00 | Vulnerability · Source |