VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304374 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2014-3499 | redhat_vex | docker: systemd socket activation results in privilege escalation | fixed: 2 | 2026-06-27T10:45:06+00:00 | Vulnerability · Source |
| CVE-2014-3602 | redhat_vex | OpenShift: /proc/net/tcp information disclosure | fixed: 938 known affected: 1 | 2026-06-27T10:41:22+00:00 | Vulnerability · Source |
| CVE-2014-3536 | redhat_vex | CFME: RHN account info logged to top_output.log during registration | known affected: 2 | 2026-06-27T10:41:18+00:00 | Vulnerability · Source |
| CVE-2014-3629 | redhat_vex | qpid-cpp: XXE vulnerability causes outgoing HTTP connections | known affected: 26 under investigation: 10 | 2026-06-27T10:41:15+00:00 | Vulnerability · Source |
| CVE-2014-3642 | redhat_vex | CFME: dangerous send method in performance.rb | fixed: 420 | 2026-06-27T10:41:00+00:00 | Vulnerability · Source |
| CVE-2014-3633 | redhat_vex | libvirt: qemu: out-of-bounds read access in qemuDomainGetBlockIoTune() due to invalid index | fixed: 218 known not affected: 1 under investigation: 1 | 2026-06-27T10:40:44+00:00 | Vulnerability · Source |
| CVE-2014-3613 | redhat_vex | curl: incorrect handling of IP addresses in cookie domain | fixed: 111 known affected: 4 | 2026-06-27T10:40:42+00:00 | Vulnerability · Source |
| CVE-2014-3575 | redhat_vex | openoffice: Arbitrary file disclosure via crafted OLE objects | fixed: 615 known affected: 134 | 2026-06-27T10:40:30+00:00 | Vulnerability · Source |
| CVE-2014-3620 | redhat_vex | curl: cookies accepted for TLDs | known not affected: 12 | 2026-06-27T10:40:19+00:00 | Vulnerability · Source |
| CVE-2014-3609 | redhat_vex | squid: assertion failure in Range header processing (SQUID-2014:2) | fixed: 48 known affected: 1 | 2026-06-27T10:40:18+00:00 | Vulnerability · Source |
| CVE-2014-3534 | redhat_vex | kernel: s390: ptrace: insufficient sanitization when setting psw mask | fixed: 144 known not affected: 27 | 2026-06-27T10:40:13+00:00 | Vulnerability · Source |
| CVE-2014-3604 | redhat_vex | SSL: Hostname verification susceptible to MITM attack | fixed: 1 known affected: 1 | 2026-06-27T10:40:11+00:00 | Vulnerability · Source |
| CVE-2014-3618 | redhat_vex | procmail: Heap-overflow in procmail's formail utility when processing specially-crafted email headers | fixed: 51 | 2026-06-27T10:40:05+00:00 | Vulnerability · Source |
| CVE-2014-3562 | redhat_vex | 389-ds: unauthenticated information disclosure | fixed: 70 | 2026-06-27T10:40:00+00:00 | Vulnerability · Source |
| CVE-2014-3535 | redhat_vex | Kernel: netdevice.h: NULL pointer dereference over VxLAN | fixed: 179 known not affected: 30 | 2026-06-27T10:39:58+00:00 | Vulnerability · Source |
| CVE-2014-3612 | redhat_vex | JAAS: LDAPLoginModule allows empty password authentication | fixed: 5 known affected: 2 | 2026-06-27T10:39:55+00:00 | Vulnerability · Source |
| CVE-2014-3611 | redhat_vex | kernel: kvm: PIT timer race condition | fixed: 433 known affected: 1 | 2026-06-27T10:39:53+00:00 | Vulnerability · Source |
| CVE-2014-3634 | redhat_vex | rsyslog: remote syslog PRI vulnerability | fixed: 346 known affected: 4 | 2026-06-27T10:39:52+00:00 | Vulnerability · Source |
| CVE-2014-3560 | redhat_vex | samba: remote code execution in nmbd | fixed: 327 known not affected: 52 | 2026-06-27T10:38:24+00:00 | Vulnerability · Source |
| CVE-2014-3675 | redhat_vex | shim: out-of-bounds memory read flaw in DHCPv6 packet processing | fixed: 24 | 2026-06-27T10:36:18+00:00 | Vulnerability · Source |
| CVE-2014-3692 | redhat_vex | CFME: default fallback password in customization_templates.yml | fixed: 10 | 2026-06-27T10:36:14+00:00 | Vulnerability · Source |
| CVE-2014-4200 | redhat_vex | open-vm-tools: vm-support's diagnostics archive created with world-readable permissions | fixed: 24 known affected: 1 | 2026-06-27T10:36:10+00:00 | Vulnerability · Source |
| CVE-2014-3712 | redhat_vex | Katello: user parameters passed to to_sym | known affected: 9 | 2026-06-27T10:36:10+00:00 | Vulnerability · Source |
| CVE-2014-3916 | redhat_vex | ruby: DoS via long string in str_buf_cat() | known affected: 20 known not affected: 27 | 2026-06-27T10:36:07+00:00 | Vulnerability · Source |
| CVE-2014-3676 | redhat_vex | shim: heap-based buffer overflow flaw in IPv6 address parsing | fixed: 24 | 2026-06-27T10:36:05+00:00 | Vulnerability · Source |
| CVE-2014-3646 | redhat_vex | kernel: kvm: vmx: invvpid vm exit not handled | fixed: 419 known affected: 1 | 2026-06-27T10:36:03+00:00 | Vulnerability · Source |
| CVE-2014-4038 | redhat_vex | ppc64-diag: multiple temporary file races | fixed: 6 | 2026-06-27T10:36:01+00:00 | Vulnerability · Source |
| CVE-2014-3674 | redhat_vex | Enterprise: gears fail to properly isolate network traffic | fixed: 938 | 2026-06-27T10:35:55+00:00 | Vulnerability · Source |
| CVE-2014-3661 | redhat_vex | jenkins: denial of service (SECURITY-87) | fixed: 260 known affected: 1 | 2026-06-27T10:35:55+00:00 | Vulnerability · Source |
| CVE-2014-3679 | redhat_vex | jenkins: lack of access control in the monitoring plug-in (SECURITY-113) | known affected: 2 | 2026-06-27T10:35:51+00:00 | Vulnerability · Source |
| CVE-2014-3657 | redhat_vex | libvirt: domain_conf: domain deadlock DoS | fixed: 218 known affected: 1 known not affected: 1 | 2026-06-27T10:35:48+00:00 | Vulnerability · Source |
| CVE-2014-3693 | redhat_vex | libreoffice: Use-After-Free in socket manager of Impress Remote | fixed: 615 known affected: 133 | 2026-06-27T10:35:45+00:00 | Vulnerability · Source |
| CVE-2014-3678 | redhat_vex | jenkins: cross-site scripting flaws in the monitoring plug-in (SECURITY-113) | fixed: 6 known affected: 1 | 2026-06-27T10:35:41+00:00 | Vulnerability · Source |
| CVE-2014-4039 | redhat_vex | ppc64-diag: multiple temporary file races | fixed: 6 | 2026-06-27T10:35:32+00:00 | Vulnerability · Source |
| CVE-2014-3707 | redhat_vex | curl: incorrect handle duplication after COPYPOSTFIELDS | fixed: 111 known affected: 3 known not affected: 1 | 2026-06-27T10:35:28+00:00 | Vulnerability · Source |
| CVE-2014-3677 | redhat_vex | shim: memory corruption flaw when processing Machine Owner Keys (MOKs) | fixed: 24 | 2026-06-27T10:35:26+00:00 | Vulnerability · Source |
| CVE-2014-3662 | redhat_vex | jenkins: username discovery (SECURITY-110) | fixed: 260 known affected: 1 | 2026-06-27T10:35:24+00:00 | Vulnerability · Source |
| CVE-2014-3664 | redhat_vex | jenkins: directory traversal flaw (SECURITY-131) | fixed: 260 known affected: 1 | 2026-06-27T10:35:19+00:00 | Vulnerability · Source |
| CVE-2014-3999 | redhat_vex | php-horde-Horde-Ldap: connect to LDAP without knowing the password | known not affected: 1 | 2026-06-27T10:35:16+00:00 | Vulnerability · Source |
| CVE-2014-3667 | redhat_vex | jenkins: plug-in code can be downloaded by anyone with read access (SECURITY-155) | fixed: 260 known affected: 1 | 2026-06-27T10:35:16+00:00 | Vulnerability · Source |
| CVE-2014-3663 | redhat_vex | jenkins: job configuration issues (SECURITY-127, SECURITY-128) | fixed: 260 known affected: 1 | 2026-06-27T10:35:13+00:00 | Vulnerability · Source |
| CVE-2014-3681 | redhat_vex | jenkins: cross-site scripting flaw in Jenkins core (SECURITY-143) | fixed: 260 known affected: 1 | 2026-06-27T10:35:11+00:00 | Vulnerability · Source |
| CVE-2014-3645 | redhat_vex | kernel: kvm: vmx: invept vm exit not handled | fixed: 419 known affected: 1 | 2026-06-27T10:35:07+00:00 | Vulnerability · Source |
| CVE-2014-3666 | redhat_vex | jenkins: remote code execution flaw (SECURITY-150) | fixed: 260 under investigation: 1 | 2026-06-27T10:35:03+00:00 | Vulnerability · Source |
| CVE-2014-3683 | redhat_vex | rsyslog: integer overflow in PRI parsing | known not affected: 41 | 2026-06-27T10:35:03+00:00 | Vulnerability · Source |
| CVE-2014-3665 | redhat_vex | jenkins: remote code execution from slaves (SECURITY-144) | fixed: 6 known affected: 1 | 2026-06-27T10:33:35+00:00 | Vulnerability · Source |
| CVE-2014-3691 | redhat_vex | foreman-proxy: failure to verify SSL certificates | fixed: 138 | 2026-06-27T10:33:00+00:00 | Vulnerability · Source |
| CVE-2014-4341 | redhat_vex | krb5: denial of service flaws when handling padding length longer than the plaintext | fixed: 204 | 2026-06-27T10:29:35+00:00 | Vulnerability · Source |
| CVE-2014-4342 | redhat_vex | krb5: denial of service flaws when handling RFC 1964 tokens | fixed: 151 known not affected: 1 | 2026-06-27T10:29:34+00:00 | Vulnerability · Source |
| CVE-2014-4659 | redhat_vex | ansible: information disclosure through incorrect file permission | known not affected: 18 | 2026-06-27T10:29:30+00:00 | Vulnerability · Source |