VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304374 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2013-7423 | redhat_vex | glibc: getaddrinfo() writes DNS queries to random file descriptors under high load | fixed: 362 known not affected: 1 | 2026-06-27T11:29:10+00:00 | Vulnerability · Source |
| CVE-2013-7353 | redhat_vex | libpng: integer overflow leading to a heap-based buffer overflow in png_set_unknown_chunks() | known not affected: 12 | 2026-06-27T11:29:08+00:00 | Vulnerability · Source |
| CVE-2013-7098 | redhat_vex | openconnect: heap-based buffer overflow if MTU is increased on reconnection | known not affected: 1 | 2026-06-27T11:29:07+00:00 | Vulnerability · Source |
| CVE-2025-58063 | redhat_vex | github.com/coredns/coredns: CoreDNS Lease ID Confusion | known affected: 2 known not affected: 1 | 2026-06-27T11:26:03+00:00 | Vulnerability · Source |
| CVE-2014-0040 | redhat_vex | openstack-heat-templates: use of HTTP to download signing keys/code | fixed: 2 | 2026-06-27T11:25:10+00:00 | Vulnerability · Source |
| CVE-2014-0084 | redhat_vex | rubygem-openshift-origin-node: cron.daily/cron.weekly denial of service | fixed: 865 known affected: 1 | 2026-06-27T11:25:09+00:00 | Vulnerability · Source |
| CVE-2014-0077 | redhat_vex | kernel: vhost-net: insufficiency in handling of big packets in handle_rx() | fixed: 361 known not affected: 44 | 2026-06-27T11:24:51+00:00 | Vulnerability · Source |
| CVE-2014-0036 | redhat_vex | rubygem-rbovirt: unsafe use of rest-client | known affected: 2 | 2026-06-27T11:24:45+00:00 | Vulnerability · Source |
| CVE-2014-0028 | redhat_vex | libvirt: event registration bypasses domain:getattr ACL | known affected: 33 known not affected: 8 | 2026-06-27T11:24:38+00:00 | Vulnerability · Source |
| CVE-2014-0078 | redhat_vex | CFME: multiple authorization bypass vulnerabilities in CatalogController | fixed: 23 | 2026-06-27T11:24:29+00:00 | Vulnerability · Source |
| CVE-2014-0087 | redhat_vex | CFME: check_privileges logic error resulting in privilege escalation | fixed: 10 | 2026-06-27T11:24:28+00:00 | Vulnerability · Source |
| CVE-2014-0022 | redhat_vex | yum: yum-cron installs unsigned packages | fixed: 4 known not affected: 4 | 2026-06-27T11:24:25+00:00 | Vulnerability · Source |
| CVE-2014-0092 | redhat_vex | gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2) | fixed: 298 known affected: 1 known not affected: 6 | 2026-06-27T11:24:22+00:00 | Vulnerability · Source |
| CVE-2014-0055 | redhat_vex | kernel: vhost-net: insufficient handling of error conditions in get_rx_bufs() | fixed: 179 known not affected: 30 | 2026-06-27T11:24:13+00:00 | Vulnerability · Source |
| CVE-2014-0057 | redhat_vex | CFME: Dangerous send in ServiceController | fixed: 36 | 2026-06-27T11:23:27+00:00 | Vulnerability · Source |
| CVE-2025-3818 | redhat_vex | webpy: webpy web.py db.py PostgresDB._process_insert_query sql injection | known not affected: 1 | 2026-06-27T11:19:46+00:00 | Vulnerability · Source |
| CVE-2014-0148 | redhat_vex | Qemu: vhdx: bounds checking for block_size and logical_sector_size | fixed: 46 known affected: 1 known not affected: 10 | 2026-06-27T11:19:41+00:00 | Vulnerability · Source |
| CVE-2014-0131 | redhat_vex | kernel: net: use-after-free during segmentation with zerocopy | known affected: 31 known not affected: 13 | 2026-06-27T11:19:39+00:00 | Vulnerability · Source |
| CVE-2014-0178 | redhat_vex | samba: Uninitialized memory exposure | fixed: 327 known affected: 1 known not affected: 17 | 2026-06-27T11:19:37+00:00 | Vulnerability · Source |
| CVE-2014-0182 | redhat_vex | qemu: virtio: out-of-bounds buffer write on state load with invalid config_len | fixed: 114 known affected: 2 | 2026-06-27T11:19:34+00:00 | Vulnerability · Source |
| CVE-2014-0135 | redhat_vex | rubygem-kafo: temporary file creation vulnerability when creating /tmp/default_values.yaml | fixed: 16 known affected: 2 known not affected: 1815 | 2026-06-27T11:19:23+00:00 | Vulnerability · Source |
| CVE-2014-0179 | redhat_vex | libvirt: unsafe parsing of XML documents allows libvirt DoS and/or arbitrary file read | fixed: 222 known affected: 1 under investigation: 1 | 2026-06-27T11:19:20+00:00 | Vulnerability · Source |
| CVE-2014-0176 | redhat_vex | CFME: reflected XSS in several places due to missing JavaScript escaping | fixed: 6 | 2026-06-27T11:19:17+00:00 | Vulnerability · Source |
| CVE-2014-0150 | redhat_vex | qemu: virtio-net: buffer overflow in virtio_net_handle_mac() function | fixed: 46 known affected: 2 known not affected: 10 | 2026-06-27T11:19:16+00:00 | Vulnerability · Source |
| CVE-2014-0180 | redhat_vex | CFME: app/controllers/application_controller.rb wait_for_task DoS | fixed: 6 | 2026-06-27T11:19:13+00:00 | Vulnerability · Source |
| CVE-2014-0140 | redhat_vex | CFME: default routes expose controllers and actions | fixed: 420 | 2026-06-27T11:19:11+00:00 | Vulnerability · Source |
| CVE-2014-0189 | redhat_vex | virt-who: plaintext hypervisor passwords in world-readable /etc/sysconfig/virt-who configuration file | fixed: 18 known affected: 1 | 2026-06-27T11:19:08+00:00 | Vulnerability · Source |
| CVE-2014-0184 | redhat_vex | CFME: root password is written to evm.log when entered during VM provisioning | fixed: 6 | 2026-06-27T11:19:06+00:00 | Vulnerability · Source |
| CVE-2014-0144 | redhat_vex | Qemu: block: missing input validation | fixed: 46 known affected: 2 known not affected: 9 | 2026-06-27T11:19:04+00:00 | Vulnerability · Source |
| CVE-2014-0147 | redhat_vex | Qemu: block: possible crash due signed types or logic error | fixed: 46 known affected: 2 known not affected: 9 | 2026-06-27T11:19:00+00:00 | Vulnerability · Source |
| CVE-2014-0137 | redhat_vex | CFME: ReportController SQL injection | fixed: 23 | 2026-06-27T11:18:57+00:00 | Vulnerability · Source |
| CVE-2014-0175 | redhat_vex | mcollective: default password set at install | fixed: 865 known affected: 1 | 2026-06-27T11:18:56+00:00 | Vulnerability · Source |
| CVE-2014-0188 | redhat_vex | OpenShift: openshift-origin-broker plugin allows impersonation | fixed: 8 | 2026-06-27T11:18:22+00:00 | Vulnerability · Source |
| CVE-2014-0239 | redhat_vex | samba: potential DoS in the internal DNS server | known not affected: 63 | 2026-06-27T11:16:10+00:00 | Vulnerability · Source |
| CVE-2014-0222 | redhat_vex | Qemu: qcow1: validate L2 table size to avoid integer overflows | fixed: 114 known affected: 1 | 2026-06-27T11:16:03+00:00 | Vulnerability · Source |
| CVE-2014-0210 | redhat_vex | libXfont: unvalidated length fields when parsing xfs protocol replies | fixed: 136 | 2026-06-27T11:15:55+00:00 | Vulnerability · Source |
| CVE-2014-0241 | redhat_vex | rubygem-hammer_cli_foreman: /etc/hammer/cli.modules.d/foreman.yml is world-readable | fixed: 8 known not affected: 1823 | 2026-06-27T11:15:50+00:00 | Vulnerability · Source |
| CVE-2014-0192 | redhat_vex | Foreman: provisioning templates are world accessible | fixed: 16 known not affected: 1817 | 2026-06-27T11:15:46+00:00 | Vulnerability · Source |
| CVE-2014-0197 | redhat_vex | CFME: CSRF protection vulnerability in referrer header | fixed: 6 | 2026-06-27T11:15:41+00:00 | Vulnerability · Source |
| CVE-2014-0211 | redhat_vex | libXfont: integer overflows calculating memory needs for xfs replies | fixed: 136 | 2026-06-27T11:15:40+00:00 | Vulnerability · Source |
| CVE-2014-0223 | redhat_vex | Qemu: qcow1: validate image size to avoid out-of-bounds memory access | fixed: 114 known affected: 1 | 2026-06-27T11:15:36+00:00 | Vulnerability · Source |
| CVE-2014-0244 | redhat_vex | samba: nmbd denial of service | fixed: 556 known affected: 1 known not affected: 1 | 2026-06-27T11:15:26+00:00 | Vulnerability · Source |
| CVE-2014-0247 | redhat_vex | libreoffice: VBA macros executed unconditionally | fixed: 615 known not affected: 133 | 2026-06-27T11:15:19+00:00 | Vulnerability · Source |
| CVE-2014-0243 | redhat_vex | check-mk: arbitrary file disclosure flaw as root | known not affected: 1 | 2026-06-27T11:14:52+00:00 | Vulnerability · Source |
| CVE-2014-0234 | redhat_vex | openshift-origin-broker: default password creation | fixed: 865 | 2026-06-27T11:14:51+00:00 | Vulnerability · Source |
| CVE-2014-0233 | redhat_vex | OpenShift: downloadable cartridge source url file command execution as root | fixed: 4 known affected: 1 | 2026-06-27T11:14:47+00:00 | Vulnerability · Source |
| CVE-2014-0205 | redhat_vex | kernel: futex: refcount issue in case of requeue | fixed: 297 known not affected: 30 | 2026-06-27T11:14:42+00:00 | Vulnerability · Source |
| CVE-2014-0476 | redhat_vex | chkrootkit: local privilege escalation | known not affected: 1 | 2026-06-27T11:10:23+00:00 | Vulnerability · Source |
| CVE-2014-10071 | redhat_vex | zsh: buffer overflow for very long fds in >& fd syntax | fixed: 45 known affected: 4 known not affected: 3 | 2026-06-27T11:04:43+00:00 | Vulnerability · Source |
| CVE-2014-1492 | redhat_vex | nss: IDNA hostname matching code does not follow RFC 6125 recommendation (MFSA 2014-45) | fixed: 414 | 2026-06-27T11:04:42+00:00 | Vulnerability · Source |