VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
302237 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2014-3999 | redhat_vex | php-horde-Horde-Ldap: connect to LDAP without knowing the password | known not affected: 1 | 2026-06-27T10:35:16+00:00 | Vulnerability · Source |
| CVE-2014-3667 | redhat_vex | jenkins: plug-in code can be downloaded by anyone with read access (SECURITY-155) | fixed: 260 known affected: 1 | 2026-06-27T10:35:16+00:00 | Vulnerability · Source |
| CVE-2014-3663 | redhat_vex | jenkins: job configuration issues (SECURITY-127, SECURITY-128) | fixed: 260 known affected: 1 | 2026-06-27T10:35:13+00:00 | Vulnerability · Source |
| CVE-2014-3681 | redhat_vex | jenkins: cross-site scripting flaw in Jenkins core (SECURITY-143) | fixed: 260 known affected: 1 | 2026-06-27T10:35:11+00:00 | Vulnerability · Source |
| CVE-2014-3645 | redhat_vex | kernel: kvm: vmx: invept vm exit not handled | fixed: 419 known affected: 1 | 2026-06-27T10:35:07+00:00 | Vulnerability · Source |
| CVE-2014-3666 | redhat_vex | jenkins: remote code execution flaw (SECURITY-150) | fixed: 260 under investigation: 1 | 2026-06-27T10:35:03+00:00 | Vulnerability · Source |
| CVE-2014-3683 | redhat_vex | rsyslog: integer overflow in PRI parsing | known not affected: 41 | 2026-06-27T10:35:03+00:00 | Vulnerability · Source |
| CVE-2014-3665 | redhat_vex | jenkins: remote code execution from slaves (SECURITY-144) | fixed: 6 known affected: 1 | 2026-06-27T10:33:35+00:00 | Vulnerability · Source |
| CVE-2014-3691 | redhat_vex | foreman-proxy: failure to verify SSL certificates | fixed: 138 | 2026-06-27T10:33:00+00:00 | Vulnerability · Source |
| CVE-2014-4341 | redhat_vex | krb5: denial of service flaws when handling padding length longer than the plaintext | fixed: 204 | 2026-06-27T10:29:35+00:00 | Vulnerability · Source |
| CVE-2014-4342 | redhat_vex | krb5: denial of service flaws when handling RFC 1964 tokens | fixed: 151 known not affected: 1 | 2026-06-27T10:29:34+00:00 | Vulnerability · Source |
| CVE-2014-4659 | redhat_vex | ansible: information disclosure through incorrect file permission | known not affected: 18 | 2026-06-27T10:29:30+00:00 | Vulnerability · Source |
| CVE-2014-5325 | redhat_vex | dwr: XML external entity injection (JVN#91502163) | known affected: 1 | 2026-06-27T10:25:45+00:00 | Vulnerability · Source |
| CVE-2014-5277 | redhat_vex | docker: fallback to HTTP when HTTPS connections to the registry fail | known affected: 1 | 2026-06-27T10:25:43+00:00 | Vulnerability · Source |
| CVE-2014-6051 | redhat_vex | libvncserver: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling | fixed: 96 known not affected: 21 | 2026-06-27T10:25:40+00:00 | Vulnerability · Source |
| CVE-2014-6272 | redhat_vex | libevent: potential heap overflow in buffer/bufferevent APIs | known affected: 22 known not affected: 10 | 2026-06-27T10:25:38+00:00 | Vulnerability · Source |
| CVE-2014-5177 | redhat_vex | libvirt: unsafe parsing of XML documents allows libvirt DoS and/or arbitrary file read | fixed: 150 known affected: 7 under investigation: 1 | 2026-06-27T10:25:32+00:00 | Vulnerability · Source |
| CVE-2014-5444 | redhat_vex | geary: failure to handle certificate errors | known not affected: 1 | 2026-06-27T10:25:30+00:00 | Vulnerability · Source |
| CVE-2014-5326 | redhat_vex | dwr: cross-site scripting flaw (JVN#52422792) | known affected: 1 | 2026-06-27T10:25:30+00:00 | Vulnerability · Source |
| CVE-2014-5339 | redhat_vex | check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4 | fixed: 213 | 2026-06-27T10:25:28+00:00 | Vulnerability · Source |
| CVE-2014-5119 | redhat_vex | glibc: off-by-one error leading to a heap-based buffer overflow flaw in __gconv_translit_find() | fixed: 473 | 2026-06-27T10:25:25+00:00 | Vulnerability · Source |
| CVE-2014-5338 | redhat_vex | check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4 | fixed: 213 | 2026-06-27T10:25:20+00:00 | Vulnerability · Source |
| CVE-2014-5340 | redhat_vex | check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4 | fixed: 213 | 2026-06-27T10:23:55+00:00 | Vulnerability · Source |
| CVE-2025-8863 | redhat_vex | yugabytedb: YugabyteDB information exposure | known affected: 2 | 2026-06-27T10:20:34+00:00 | Vulnerability · Source |
| CVE-2014-6439 | redhat_vex | Elasticsearch: CSRF via insecure CORS default configuration | known affected: 1 under investigation: 1 | 2026-06-27T10:20:13+00:00 | Vulnerability · Source |
| CVE-2014-7144 | redhat_vex | python-keystoneclient: TLS certificate verification disabled | fixed: 9 known affected: 4 | 2026-06-27T10:19:51+00:00 | Vulnerability · Source |
| CVE-2014-6425 | redhat_vex | wireshark: CUPS dissector crash (wnpa-sec-2014-15) | fixed: 128 | 2026-06-27T10:19:39+00:00 | Vulnerability · Source |
| CVE-2014-7203 | redhat_vex | zeromq: CurveZMQ does not mandate replay attack detection | known not affected: 1 | 2026-06-27T10:19:37+00:00 | Vulnerability · Source |
| CVE-2025-57753 | redhat_vex | vite-plugin-static-copy: vite-plugin-static-copy fpath traversal | known affected: 1 | 2026-06-27T10:16:42+00:00 | Vulnerability · Source |
| CVE-2025-55551 | redhat_vex | torch: PyTorch denial of service | known affected: 42 | 2026-06-27T10:15:09+00:00 | Vulnerability · Source |
| CVE-2014-7300 | redhat_vex | gnome-shell: lockscreen bypass with printscreen key | fixed: 187 | 2026-06-27T10:15:03+00:00 | Vulnerability · Source |
| CVE-2014-7819 | redhat_vex | rubygem-sprockets: arbitrary file existence disclosure | fixed: 70 known affected: 8 | 2026-06-27T10:15:00+00:00 | Vulnerability · Source |
| CVE-2014-7829 | redhat_vex | rubygem-actionpack: incomplete fix for CVE-2014-7818, arbitrary file existence disclosure | known affected: 10 | 2026-06-27T10:14:59+00:00 | Vulnerability · Source |
| CVE-2014-7823 | redhat_vex | libvirt: dumpxml: information leak with migratable flag | fixed: 218 known not affected: 1 under investigation: 1 | 2026-06-27T10:14:58+00:00 | Vulnerability · Source |
| CVE-2014-7818 | redhat_vex | rubygem-actionpack: arbitrary file existence disclosure | known affected: 10 | 2026-06-27T10:14:54+00:00 | Vulnerability · Source |
| CVE-2014-7811 | redhat_vex | Spacewalk: multiple XSS | fixed: 493 | 2026-06-27T10:14:53+00:00 | Vulnerability · Source |
| CVE-2014-7850 | redhat_vex | freeipa: XSS flaw can be used to escalate privileges | known affected: 14 known not affected: 7 | 2026-06-27T10:14:51+00:00 | Vulnerability · Source |
| CVE-2014-7828 | redhat_vex | freeipa: password not required when OTP in use | known not affected: 21 | 2026-06-27T10:14:45+00:00 | Vulnerability · Source |
| CVE-2014-7814 | redhat_vex | CFME: REST API SQL Injection | fixed: 10 | 2026-06-27T10:14:34+00:00 | Vulnerability · Source |
| CVE-2014-7812 | redhat_vex | Spacewalk: XSS in system-group | fixed: 493 | 2026-06-27T10:14:33+00:00 | Vulnerability · Source |
| CVE-2014-8092 | redhat_vex | xorg-x11-server: integer overflow in X11 core protocol requests when calculating memory needs for requests | fixed: 217 | 2026-06-27T10:14:30+00:00 | Vulnerability · Source |
| CVE-2014-7272 | redhat_vex | sddm: several local privileges escalation issues | known not affected: 1 | 2026-06-27T10:14:27+00:00 | Vulnerability · Source |
| CVE-2014-7816 | redhat_vex | Undertow: Information disclosure via directory traversal | known not affected: 1 | 2026-06-27T10:13:18+00:00 | Vulnerability · Source |
| CVE-2014-7284 | redhat_vex | kernel: randomness degradation due to bug in net_get_random_once() | known not affected: 44 | 2026-06-27T10:12:54+00:00 | Vulnerability · Source |
| CVE-2014-8151 | redhat_vex | curl: certificate check bypass when built with DarwinSSL as TLS backend | known not affected: 9 | 2026-06-27T10:11:11+00:00 | Vulnerability · Source |
| CVE-2014-8139 | redhat_vex | unzip: CRC32 verification heap-based buffer overread (oCERT-2014-011) | fixed: 41 known affected: 1 | 2026-06-27T10:11:08+00:00 | Vulnerability · Source |
| CVE-2014-8131 | redhat_vex | libvirt: deadlock and segfault in qemuConnectGetAllDomainStats | known not affected: 40 under investigation: 1 | 2026-06-27T10:11:06+00:00 | Vulnerability · Source |
| CVE-2014-8122 | redhat_vex | Weld: Limited information disclosure via stale thread state | fixed: 552 known affected: 7 | 2026-06-27T10:11:02+00:00 | Vulnerability · Source |
| CVE-2014-8140 | redhat_vex | unzip: out-of-bounds write issue in test_compr_eb() (oCERT-2014-011) | fixed: 41 known affected: 1 | 2026-06-27T10:10:58+00:00 | Vulnerability · Source |
| CVE-2014-8146 | redhat_vex | icu: heap overflow via incorrect isolateCount | known affected: 13 | 2026-06-27T10:10:55+00:00 | Vulnerability · Source |