VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
302237 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2014-3528 | redhat_vex | subversion: credentials leak via MD5 collision | fixed: 259 known affected: 1 | 2026-06-27T10:45:52+00:00 | Vulnerability · Source |
| CVE-2014-3489 | redhat_vex | CFME: Default salt value in miq-password.rb | fixed: 6 | 2026-06-27T10:45:50+00:00 | Vulnerability · Source |
| CVE-2014-3209 | redhat_vex | ldns: ldns-keygen generates keys with world readable permissions | known affected: 8 | 2026-06-27T10:45:50+00:00 | Vulnerability · Source |
| CVE-2014-3467 | redhat_vex | libtasn1: multiple boundary check issues | fixed: 157 known affected: 2 | 2026-06-27T10:45:44+00:00 | Vulnerability · Source |
| CVE-2014-3225 | redhat_vex | cobbler: local file inclusion over remote installs | known affected: 1 | 2026-06-27T10:45:41+00:00 | Vulnerability · Source |
| CVE-2014-3461 | redhat_vex | Qemu: usb: fix up post load checks | fixed: 114 known affected: 2 | 2026-06-27T10:45:35+00:00 | Vulnerability · Source |
| CVE-2014-3468 | redhat_vex | libtasn1: asn1_get_bit_der() can return negative bit length | fixed: 157 known affected: 2 | 2026-06-27T10:45:27+00:00 | Vulnerability · Source |
| CVE-2014-3469 | redhat_vex | libtasn1: asn1_read_value_type() NULL pointer dereference | fixed: 157 known affected: 2 | 2026-06-27T10:45:21+00:00 | Vulnerability · Source |
| CVE-2014-3183 | redhat_vex | Kernel: HID: heap overflow due to lack of bounds checking | known not affected: 44 | 2026-06-27T10:45:16+00:00 | Vulnerability · Source |
| CVE-2014-3496 | redhat_vex | Origin: Command execution as root via downloadable cartridge source-url | fixed: 8 | 2026-06-27T10:45:14+00:00 | Vulnerability · Source |
| CVE-2014-3486 | redhat_vex | CFME: SSH Utility insecure tmp file creation leading to code execution as root | fixed: 6 | 2026-06-27T10:45:11+00:00 | Vulnerability · Source |
| CVE-2014-3466 | redhat_vex | gnutls: insufficient session id length check in _gnutls_read_server_hello (GNUTLS-SA-2014-3) | fixed: 191 known affected: 2 | 2026-06-27T10:45:10+00:00 | Vulnerability · Source |
| CVE-2014-3499 | redhat_vex | docker: systemd socket activation results in privilege escalation | fixed: 2 | 2026-06-27T10:45:06+00:00 | Vulnerability · Source |
| CVE-2014-3602 | redhat_vex | OpenShift: /proc/net/tcp information disclosure | fixed: 938 known affected: 1 | 2026-06-27T10:41:22+00:00 | Vulnerability · Source |
| CVE-2014-3536 | redhat_vex | CFME: RHN account info logged to top_output.log during registration | known affected: 2 | 2026-06-27T10:41:18+00:00 | Vulnerability · Source |
| CVE-2014-3629 | redhat_vex | qpid-cpp: XXE vulnerability causes outgoing HTTP connections | known affected: 26 under investigation: 10 | 2026-06-27T10:41:15+00:00 | Vulnerability · Source |
| CVE-2014-3642 | redhat_vex | CFME: dangerous send method in performance.rb | fixed: 420 | 2026-06-27T10:41:00+00:00 | Vulnerability · Source |
| CVE-2014-3633 | redhat_vex | libvirt: qemu: out-of-bounds read access in qemuDomainGetBlockIoTune() due to invalid index | fixed: 218 known not affected: 1 under investigation: 1 | 2026-06-27T10:40:44+00:00 | Vulnerability · Source |
| CVE-2014-3613 | redhat_vex | curl: incorrect handling of IP addresses in cookie domain | fixed: 111 known affected: 4 | 2026-06-27T10:40:42+00:00 | Vulnerability · Source |
| CVE-2014-3575 | redhat_vex | openoffice: Arbitrary file disclosure via crafted OLE objects | fixed: 615 known affected: 134 | 2026-06-27T10:40:30+00:00 | Vulnerability · Source |
| CVE-2014-3620 | redhat_vex | curl: cookies accepted for TLDs | known not affected: 12 | 2026-06-27T10:40:19+00:00 | Vulnerability · Source |
| CVE-2014-3609 | redhat_vex | squid: assertion failure in Range header processing (SQUID-2014:2) | fixed: 48 known affected: 1 | 2026-06-27T10:40:18+00:00 | Vulnerability · Source |
| CVE-2014-3534 | redhat_vex | kernel: s390: ptrace: insufficient sanitization when setting psw mask | fixed: 144 known not affected: 27 | 2026-06-27T10:40:13+00:00 | Vulnerability · Source |
| CVE-2014-3604 | redhat_vex | SSL: Hostname verification susceptible to MITM attack | fixed: 1 known affected: 1 | 2026-06-27T10:40:11+00:00 | Vulnerability · Source |
| CVE-2014-3618 | redhat_vex | procmail: Heap-overflow in procmail's formail utility when processing specially-crafted email headers | fixed: 51 | 2026-06-27T10:40:05+00:00 | Vulnerability · Source |
| CVE-2014-3562 | redhat_vex | 389-ds: unauthenticated information disclosure | fixed: 70 | 2026-06-27T10:40:00+00:00 | Vulnerability · Source |
| CVE-2014-3535 | redhat_vex | Kernel: netdevice.h: NULL pointer dereference over VxLAN | fixed: 179 known not affected: 30 | 2026-06-27T10:39:58+00:00 | Vulnerability · Source |
| CVE-2014-3612 | redhat_vex | JAAS: LDAPLoginModule allows empty password authentication | fixed: 5 known affected: 2 | 2026-06-27T10:39:55+00:00 | Vulnerability · Source |
| CVE-2014-3611 | redhat_vex | kernel: kvm: PIT timer race condition | fixed: 433 known affected: 1 | 2026-06-27T10:39:53+00:00 | Vulnerability · Source |
| CVE-2014-3634 | redhat_vex | rsyslog: remote syslog PRI vulnerability | fixed: 346 known affected: 4 | 2026-06-27T10:39:52+00:00 | Vulnerability · Source |
| CVE-2014-3560 | redhat_vex | samba: remote code execution in nmbd | fixed: 327 known not affected: 52 | 2026-06-27T10:38:24+00:00 | Vulnerability · Source |
| CVE-2014-3675 | redhat_vex | shim: out-of-bounds memory read flaw in DHCPv6 packet processing | fixed: 24 | 2026-06-27T10:36:18+00:00 | Vulnerability · Source |
| CVE-2014-3692 | redhat_vex | CFME: default fallback password in customization_templates.yml | fixed: 10 | 2026-06-27T10:36:14+00:00 | Vulnerability · Source |
| CVE-2014-4200 | redhat_vex | open-vm-tools: vm-support's diagnostics archive created with world-readable permissions | fixed: 24 known affected: 1 | 2026-06-27T10:36:10+00:00 | Vulnerability · Source |
| CVE-2014-3712 | redhat_vex | Katello: user parameters passed to to_sym | known affected: 9 | 2026-06-27T10:36:10+00:00 | Vulnerability · Source |
| CVE-2014-3916 | redhat_vex | ruby: DoS via long string in str_buf_cat() | known affected: 20 known not affected: 27 | 2026-06-27T10:36:07+00:00 | Vulnerability · Source |
| CVE-2014-3676 | redhat_vex | shim: heap-based buffer overflow flaw in IPv6 address parsing | fixed: 24 | 2026-06-27T10:36:05+00:00 | Vulnerability · Source |
| CVE-2014-3646 | redhat_vex | kernel: kvm: vmx: invvpid vm exit not handled | fixed: 419 known affected: 1 | 2026-06-27T10:36:03+00:00 | Vulnerability · Source |
| CVE-2014-4038 | redhat_vex | ppc64-diag: multiple temporary file races | fixed: 6 | 2026-06-27T10:36:01+00:00 | Vulnerability · Source |
| CVE-2014-3674 | redhat_vex | Enterprise: gears fail to properly isolate network traffic | fixed: 938 | 2026-06-27T10:35:55+00:00 | Vulnerability · Source |
| CVE-2014-3661 | redhat_vex | jenkins: denial of service (SECURITY-87) | fixed: 260 known affected: 1 | 2026-06-27T10:35:55+00:00 | Vulnerability · Source |
| CVE-2014-3679 | redhat_vex | jenkins: lack of access control in the monitoring plug-in (SECURITY-113) | known affected: 2 | 2026-06-27T10:35:51+00:00 | Vulnerability · Source |
| CVE-2014-3657 | redhat_vex | libvirt: domain_conf: domain deadlock DoS | fixed: 218 known affected: 1 known not affected: 1 | 2026-06-27T10:35:48+00:00 | Vulnerability · Source |
| CVE-2014-3693 | redhat_vex | libreoffice: Use-After-Free in socket manager of Impress Remote | fixed: 615 known affected: 133 | 2026-06-27T10:35:45+00:00 | Vulnerability · Source |
| CVE-2014-3678 | redhat_vex | jenkins: cross-site scripting flaws in the monitoring plug-in (SECURITY-113) | fixed: 6 known affected: 1 | 2026-06-27T10:35:41+00:00 | Vulnerability · Source |
| CVE-2014-4039 | redhat_vex | ppc64-diag: multiple temporary file races | fixed: 6 | 2026-06-27T10:35:32+00:00 | Vulnerability · Source |
| CVE-2014-3707 | redhat_vex | curl: incorrect handle duplication after COPYPOSTFIELDS | fixed: 111 known affected: 3 known not affected: 1 | 2026-06-27T10:35:28+00:00 | Vulnerability · Source |
| CVE-2014-3677 | redhat_vex | shim: memory corruption flaw when processing Machine Owner Keys (MOKs) | fixed: 24 | 2026-06-27T10:35:26+00:00 | Vulnerability · Source |
| CVE-2014-3662 | redhat_vex | jenkins: username discovery (SECURITY-110) | fixed: 260 known affected: 1 | 2026-06-27T10:35:24+00:00 | Vulnerability · Source |
| CVE-2014-3664 | redhat_vex | jenkins: directory traversal flaw (SECURITY-131) | fixed: 260 known affected: 1 | 2026-06-27T10:35:19+00:00 | Vulnerability · Source |