VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
303573 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2013-4415 | redhat_vex | Spacewalk: PAGE_SIZE_LABEL_SELECTED cross-site scripting (XSS) | fixed: 42 | 2026-06-27T12:00:01+00:00 | Vulnerability · Source |
| CVE-2013-4299 | redhat_vex | kernel: dm: dm-snapshot data leak | fixed: 649 known not affected: 17 | 2026-06-27T11:59:55+00:00 | Vulnerability · Source |
| CVE-2013-4342 | redhat_vex | xinetd: ignores user and group directives for tcpmux services | fixed: 38 known not affected: 1 | 2026-06-27T11:59:52+00:00 | Vulnerability · Source |
| CVE-2013-4404 | redhat_vex | cumin: missing authorization checks in forms, charts, and csv export widgets | fixed: 12 | 2026-06-27T11:59:46+00:00 | Vulnerability · Source |
| CVE-2013-4363 | redhat_vex | rubygems: version regex algorithmic complexity vulnerability, incomplete CVE-2013-4287 fix | known not affected: 42 | 2026-06-27T11:59:44+00:00 | Vulnerability · Source |
| CVE-2013-4311 | redhat_vex | libvirt: insecure calling of polkit | fixed: 72 known affected: 1 known not affected: 34 | 2026-06-27T11:59:41+00:00 | Vulnerability · Source |
| CVE-2013-4344 | redhat_vex | qemu: buffer overflow in scsi_target_emulate_report_luns | fixed: 36 known not affected: 11 | 2026-06-27T11:59:38+00:00 | Vulnerability · Source |
| CVE-2013-4408 | redhat_vex | samba: Heap-based buffer overflow due to incorrect DCE-RPC fragment length field check | fixed: 383 known not affected: 31 | 2026-06-27T11:59:14+00:00 | Vulnerability · Source |
| CVE-2013-4348 | redhat_vex | kernel: net: deadloop path in skb_flow_dissect() | fixed: 17 known not affected: 32 | 2026-06-27T11:58:30+00:00 | Vulnerability · Source |
| CVE-2013-4588 | redhat_vex | Kernel: net: ipvs: stack buffer overflow | known not affected: 44 | 2026-06-27T11:55:24+00:00 | Vulnerability · Source |
| CVE-2013-4531 | redhat_vex | qemu: target-arm/machine.c: fix buffer overflow on invalid state load | known not affected: 16 | 2026-06-27T11:55:22+00:00 | Vulnerability · Source |
| CVE-2013-4476 | redhat_vex | samba: world-readable key.pem with Samba 4 AD DC | known not affected: 47 | 2026-06-27T11:55:19+00:00 | Vulnerability · Source |
| CVE-2013-4542 | redhat_vex | qemu: virtio-scsi: buffer overrun on invalid state load | fixed: 114 known affected: 1 known not affected: 1 | 2026-06-27T11:55:16+00:00 | Vulnerability · Source |
| CVE-2013-4536 | redhat_vex | qemu: virtio: insufficient validation of num_sg when mapping | fixed: 114 known affected: 2 | 2026-06-27T11:55:15+00:00 | Vulnerability · Source |
| CVE-2013-4461 | redhat_vex | cumin: filtering table operator not checked, leads to potential SQLi | fixed: 12 | 2026-06-27T11:55:14+00:00 | Vulnerability · Source |
| CVE-2013-4529 | redhat_vex | qemu: hw/pci/pcie_aer.c: buffer overrun on invalid state load | fixed: 68 known not affected: 7 | 2026-06-27T11:55:07+00:00 | Vulnerability · Source |
| CVE-2013-4535 | redhat_vex | qemu: virtio: insufficient validation of num_sg when mapping | fixed: 114 known affected: 2 | 2026-06-27T11:55:02+00:00 | Vulnerability · Source |
| CVE-2013-4475 | redhat_vex | samba: no access check verification on stream files | fixed: 244 known not affected: 31 | 2026-06-27T11:54:57+00:00 | Vulnerability · Source |
| CVE-2013-4541 | redhat_vex | qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load | fixed: 114 known affected: 2 | 2026-06-27T11:54:54+00:00 | Vulnerability · Source |
| CVE-2013-4496 | redhat_vex | samba: Password lockout not enforced for SAMR password changes | fixed: 368 known affected: 1 known not affected: 31 | 2026-06-27T11:54:51+00:00 | Vulnerability · Source |
| CVE-2013-4527 | redhat_vex | qemu: hpet: buffer overrun on invalid state load | fixed: 68 known not affected: 7 | 2026-06-27T11:54:49+00:00 | Vulnerability · Source |
| CVE-2013-4547 | redhat_vex | nginx: security restriction bypass flaw due to whitespace parsing | known not affected: 1 | 2026-06-27T11:54:45+00:00 | Vulnerability · Source |
| CVE-2013-5589 | redhat_vex | cacti: XSS and SQL injection flaws | known not affected: 1 | 2026-06-27T11:49:30+00:00 | Vulnerability · Source |
| CVE-2013-5607 | redhat_vex | nspr: Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103) | fixed: 258 known not affected: 3 | 2026-06-27T11:49:29+00:00 | Vulnerability · Source |
| CVE-2013-4761 | redhat_vex | Puppet: resource_type service code execution | fixed: 16 known affected: 4 | 2026-06-27T11:49:28+00:00 | Vulnerability · Source |
| CVE-2013-5604 | redhat_vex | Mozilla: Access violation with XSLT and uninitialized data (MFSA 2013-95) | fixed: 160 | 2026-06-27T11:49:26+00:00 | Vulnerability · Source |
| CVE-2013-4852 | redhat_vex | putty: Integer overflow, leading to heap-based buffer overflow during SSH handshake | known not affected: 1 | 2026-06-27T11:49:26+00:00 | Vulnerability · Source |
| CVE-2013-5595 | redhat_vex | Mozilla: Improperly initialized memory and overflows in some JavaScript functions (MFSA 2013-96) | fixed: 160 | 2026-06-27T11:49:26+00:00 | Vulnerability · Source |
| CVE-2013-5606 | redhat_vex | nss: CERT_VerifyCert returns SECSuccess (saying certificate is good) even for bad certificates (MFSA 2013-103) | fixed: 259 known not affected: 6 | 2026-06-27T11:49:21+00:00 | Vulnerability · Source |
| CVE-2013-4956 | redhat_vex | Puppet: Local Privilege Escalation/Arbitrary Code Execution | fixed: 16 known not affected: 3 | 2026-06-27T11:49:21+00:00 | Vulnerability · Source |
| CVE-2013-5573 | redhat_vex | jenkins: default markup formatter permits offsite-bound forms (SECURITY-88) | fixed: 6 known affected: 1 | 2026-06-27T11:49:19+00:00 | Vulnerability · Source |
| CVE-2013-5590 | redhat_vex | Mozilla: Miscellaneous memory safety hazards (rv:17.0.10) (MFSA 2013-93) | fixed: 160 | 2026-06-27T11:49:19+00:00 | Vulnerability · Source |
| CVE-2013-5600 | redhat_vex | Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100) | fixed: 160 | 2026-06-27T11:49:15+00:00 | Vulnerability · Source |
| CVE-2013-5588 | redhat_vex | cacti: XSS and SQL injection flaws | known not affected: 1 | 2026-06-27T11:49:15+00:00 | Vulnerability · Source |
| CVE-2013-5599 | redhat_vex | Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100) | fixed: 160 | 2026-06-27T11:49:13+00:00 | Vulnerability · Source |
| CVE-2013-5602 | redhat_vex | Mozilla: Memory corruption in workers (MFSA 2013-101) | fixed: 160 | 2026-06-27T11:49:00+00:00 | Vulnerability · Source |
| CVE-2013-5601 | redhat_vex | Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100) | fixed: 160 | 2026-06-27T11:48:45+00:00 | Vulnerability · Source |
| CVE-2013-5605 | redhat_vex | nss: Null_Cipher() does not respect maxOutputLen (MFSA 2013-103) | fixed: 505 known not affected: 6 | 2026-06-27T11:48:18+00:00 | Vulnerability · Source |
| CVE-2013-5597 | redhat_vex | Mozilla: Use-after-free when updating offline cache (MFSA 2013-98) | fixed: 160 | 2026-06-27T11:48:05+00:00 | Vulnerability · Source |
| CVE-2013-6372 | redhat_vex | Jenkins: insecure storage of passwords in Subversion plugin (SECURITY-58) | fixed: 6 known affected: 1 | 2026-06-27T11:40:04+00:00 | Vulnerability · Source |
| CVE-2013-6490 | redhat_vex | pidgin: Heap-based buffer overflow in SIMPLE protocol plugin | fixed: 116 known not affected: 10 | 2026-06-27T11:39:57+00:00 | Vulnerability · Source |
| CVE-2013-6412 | redhat_vex | augeas: incorrect permissions set on newly created files | fixed: 65 known not affected: 7 | 2026-06-27T11:39:48+00:00 | Vulnerability · Source |
| CVE-2013-6399 | redhat_vex | qemu: virtio: buffer overrun on incoming migration | fixed: 114 known affected: 2 | 2026-06-27T11:39:35+00:00 | Vulnerability · Source |
| CVE-2013-6435 | redhat_vex | rpm: race condition during the installation process | fixed: 421 | 2026-06-27T11:39:30+00:00 | Vulnerability · Source |
| CVE-2013-6367 | redhat_vex | kvm: division by zero in apic_get_tmcct() | fixed: 277 known affected: 1 known not affected: 44 | 2026-06-27T11:39:28+00:00 | Vulnerability · Source |
| CVE-2013-6439 | redhat_vex | candlepin: insecure authentication enabled by default | fixed: 4 known not affected: 3 | 2026-06-27T11:38:50+00:00 | Vulnerability · Source |
| CVE-2013-6478 | redhat_vex | pidgin: DoS when rendering long URLs | fixed: 116 known not affected: 10 | 2026-06-27T11:35:40+00:00 | Vulnerability · Source |
| CVE-2013-7072 | redhat_vex | monitorix: HTTP server 'handle_request()' session fixation & XSS vulnerabilities | known not affected: 1 | 2026-06-27T11:35:38+00:00 | Vulnerability · Source |
| CVE-2013-6457 | redhat_vex | libvirt: avoid crashing if calling 'virsh numatune' on an inactive domain (libxl) | known not affected: 41 | 2026-06-27T11:35:36+00:00 | Vulnerability · Source |
| CVE-2013-6443 | redhat_vex | CFME: GET request CSRF vulnerability | fixed: 10 | 2026-06-27T11:35:34+00:00 | Vulnerability · Source |