VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304407 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-1000409 | redhat_vex | jenkins: Session fixation vulnerability on user signup | fixed: 94 known affected: 10 known not affected: 2 | 2026-06-27T03:14:52+00:00 | Vulnerability · Source |
| CVE-2018-1000119 | redhat_vex | rack-protection: Timing attack in authenticity_token.rb | fixed: 2716 known affected: 21 known not affected: 3 | 2026-06-27T03:14:46+00:00 | Vulnerability · Source |
| CVE-2018-1000408 | redhat_vex | jenkins: Ephemeral user record creation | fixed: 94 known affected: 10 known not affected: 2 | 2026-06-27T03:14:46+00:00 | Vulnerability · Source |
| CVE-2018-1000865 | redhat_vex | jenkins-plugin-script-security: Sandbox Bypass in finalize methods | fixed: 83 known affected: 29 | 2026-06-27T03:14:38+00:00 | Vulnerability · Source |
| CVE-2018-1000866 | redhat_vex | jenkins-plugin-script-security: Sandbox Bypass in finalize methods | fixed: 83 known affected: 29 | 2026-06-27T03:14:33+00:00 | Vulnerability · Source |
| CVE-2018-10767 | redhat_vex | libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c | fixed: 8618 known not affected: 2 | 2026-06-27T03:10:30+00:00 | Vulnerability · Source |
| CVE-2018-10768 | redhat_vex | poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF | fixed: 8618 known not affected: 22 | 2026-06-27T03:10:23+00:00 | Vulnerability · Source |
| CVE-2018-1063 | redhat_vex | policycoreutils: Relabelling of symbolic links in /tmp and /var/tmp change the context of their target instead | fixed: 109 known affected: 6 known not affected: 10 | 2026-06-27T03:10:19+00:00 | Vulnerability · Source |
| CVE-2018-10733 | redhat_vex | libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c | fixed: 8618 known not affected: 2 | 2026-06-27T03:10:18+00:00 | Vulnerability · Source |
| CVE-2018-10772 | redhat_vex | exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file | fixed: 164 known not affected: 3 | 2026-06-27T03:10:09+00:00 | Vulnerability · Source |
| CVE-2018-10177 | redhat_vex | ImageMagick: Infinite loop in coders/png.c:ReadOneMNGImage() allows attackers to cause a denial of service via crafted MNG file | fixed: 218 known affected: 9 | 2026-06-27T03:10:06+00:00 | Vulnerability · Source |
| CVE-2018-10119 | redhat_vex | libreoffice: Use-after-free in sdstor/stgstrms.cxx:StgSmallStrm class allows for denial of service with crafted document | fixed: 1024 known affected: 133 known not affected: 174 | 2026-06-27T03:09:57+00:00 | Vulnerability · Source |
| CVE-2018-10657 | redhat_vex | matrix-synapse: Injection of malicious events with a depth size of 2^63-1 can cause a denial of service to making rooms unusable | known not affected: 1 | 2026-06-27T03:09:54+00:00 | Vulnerability · Source |
| CVE-2018-10779 | redhat_vex | libtiff: heap-based buffer over-read in TIFFWriteScanline function in tif_write.c | fixed: 76 known affected: 9 | 2026-06-27T03:05:02+00:00 | Vulnerability · Source |
| CVE-2018-11037 | redhat_vex | exiv2: information leak via a crafted file | fixed: 164 known not affected: 3 | 2026-06-27T03:05:01+00:00 | Vulnerability · Source |
| CVE-2018-10887 | redhat_vex | libgit2: integer overflow leads to out-of-bounds read in git_delta_apply, allowing to read before base array | known not affected: 1 | 2026-06-27T03:04:58+00:00 | Vulnerability · Source |
| CVE-2018-1100 | redhat_vex | zsh: buffer overflow in utils.c:checkmailpath() can lead to local arbitrary code execution | fixed: 85 known affected: 1 known not affected: 3 | 2026-06-27T03:04:58+00:00 | Vulnerability · Source |
| CVE-2018-10888 | redhat_vex | libgit2: an improper input validation leads to an out-of-bound read in git_delta_apply, allowing to read beyond delta limits | known not affected: 1 | 2026-06-27T03:04:54+00:00 | Vulnerability · Source |
| CVE-2018-10804 | redhat_vex | ImageMagick: Memory leak in WriteTIFFImage | fixed: 218 known affected: 9 | 2026-06-27T03:04:51+00:00 | Vulnerability · Source |
| CVE-2018-10805 | redhat_vex | ImageMagick: Memory leak in ReadYCBCRImage | fixed: 218 known affected: 8 known not affected: 1 | 2026-06-27T03:04:50+00:00 | Vulnerability · Source |
| CVE-2018-10866 | redhat_vex | redhat-certification: remove a "system" file without authorization | known affected: 1 known not affected: 1 | 2026-06-27T03:04:46+00:00 | Vulnerability · Source |
| CVE-2018-1083 | redhat_vex | zsh: Stack-based buffer overflow in gen_matches_files() at compctl.c | fixed: 85 known affected: 1 known not affected: 3 | 2026-06-27T03:04:36+00:00 | Vulnerability · Source |
| CVE-2018-10868 | redhat_vex | redhat-certification: billion laugh attack when getting the status of a host | known affected: 1 known not affected: 1 | 2026-06-27T03:04:32+00:00 | Vulnerability · Source |
| CVE-2018-11236 | redhat_vex | glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow | fixed: 162 known affected: 9 known not affected: 220 | 2026-06-27T03:04:27+00:00 | Vulnerability · Source |
| CVE-2018-1101 | redhat_vex | ansible-tower: Privilege escalation flaw allows for organization admins to obtain system privileges | fixed: 69 | 2026-06-27T03:04:22+00:00 | Vulnerability · Source |
| CVE-2018-1104 | redhat_vex | ansible-tower: Remote code execution by users with access to define variables in job templates | fixed: 69 | 2026-06-27T03:04:21+00:00 | Vulnerability · Source |
| CVE-2018-11656 | redhat_vex | ImageMagick: memory leak in ReadDCMImage function in coders/dcm.c | fixed: 218 known affected: 9 | 2026-06-27T02:59:34+00:00 | Vulnerability · Source |
| CVE-2018-11751 | redhat_vex | puppet-agent: Puppet Agent does not properly verify SSL connection when downloading a CRL | fixed: 1251 known affected: 3 known not affected: 9 | 2026-06-27T02:59:30+00:00 | Vulnerability · Source |
| CVE-2018-11627 | redhat_vex | rubygem-sinatra: XSS in the 400 Bad Request page | fixed: 326 known not affected: 30 | 2026-06-27T02:59:22+00:00 | Vulnerability · Source |
| CVE-2018-11712 | redhat_vex | webkitgtk: Improper TLS certificate verification for WebSocket connections | fixed: 8618 known affected: 9 known not affected: 6 | 2026-06-27T02:59:16+00:00 | Vulnerability · Source |
| CVE-2018-11574 | redhat_vex | ppp: Remote client crash in ppp EAP-TLS patch | known affected: 3 known not affected: 8 | 2026-06-27T02:59:10+00:00 | Vulnerability · Source |
| CVE-2018-11713 | redhat_vex | webkitgtk: WebSockets don't use system proxy settings | fixed: 8618 known affected: 9 known not affected: 6 | 2026-06-27T02:59:10+00:00 | Vulnerability · Source |
| CVE-2018-12399 | redhat_vex | firefox: Spoofing of protocol registration notification bar | known affected: 6 | 2026-06-27T02:55:00+00:00 | Vulnerability · Source |
| CVE-2018-12403 | redhat_vex | firefox: mixed content warning is not displayed when HTTPS page loads a favicon over HTTP | known affected: 7 | 2026-06-27T02:54:53+00:00 | Vulnerability · Source |
| CVE-2018-12183 | redhat_vex | edk2: stack overflow in DxeCore leads to privilege escalation | known not affected: 8 | 2026-06-27T02:54:49+00:00 | Vulnerability · Source |
| CVE-2018-12404 | redhat_vex | nss: Cache side-channel variant of the Bleichenbacher attack | fixed: 253 known affected: 14 known not affected: 12 | 2026-06-27T02:54:47+00:00 | Vulnerability · Source |
| CVE-2018-12398 | redhat_vex | firefox: Content Security Policy bypass through stylesheet injection in resource URIs | known affected: 6 | 2026-06-27T02:54:35+00:00 | Vulnerability · Source |
| CVE-2018-12385 | redhat_vex | Mozilla: Crash in TransportSecurityInfo due to cached data | fixed: 93 known not affected: 4 | 2026-06-27T02:54:31+00:00 | Vulnerability · Source |
| CVE-2018-12182 | redhat_vex | edk2: insufficient memory write in SMM service leads to privilege escalation | known not affected: 8 | 2026-06-27T02:54:27+00:00 | Vulnerability · Source |
| CVE-2018-12362 | redhat_vex | Mozilla: Integer overflow in SSSE3 scaler | fixed: 93 known not affected: 2 | 2026-06-27T02:54:25+00:00 | Vulnerability · Source |
| CVE-2018-12393 | redhat_vex | Mozilla: Integer overflow during Unicode conversion while loading JavaScript | fixed: 93 known not affected: 4 | 2026-06-27T02:54:23+00:00 | Vulnerability · Source |
| CVE-2018-12406 | redhat_vex | firefox: memory safety bugs showing evidence of memory corruption leading to run arbitrary code | known not affected: 7 | 2026-06-27T02:54:21+00:00 | Vulnerability · Source |
| CVE-2018-12386 | redhat_vex | Mozilla: type confusion in JavaScript | fixed: 58 known not affected: 4 | 2026-06-27T02:54:16+00:00 | Vulnerability · Source |
| CVE-2018-12178 | redhat_vex | edk2: improper DNS packet size check | known not affected: 6 | 2026-06-27T02:53:42+00:00 | Vulnerability · Source |
| CVE-2018-12648 | redhat_vex | exempi: NULL pointer dereference in WEBP_Support.hpp:WEBP::GetLE32() allows for denial of service | known not affected: 8 | 2026-06-27T02:50:29+00:00 | Vulnerability · Source |
| CVE-2018-13153 | redhat_vex | ImageMagick: memory leak in the XMagickCommand function in MagickCore/animate.c | fixed: 218 known affected: 9 | 2026-06-27T02:50:25+00:00 | Vulnerability · Source |
| CVE-2018-13988 | redhat_vex | poppler: out of bounds read in pdfunite | fixed: 8618 known affected: 11 known not affected: 11 | 2026-06-27T02:50:22+00:00 | Vulnerability · Source |
| CVE-2018-13346 | redhat_vex | mercurial: Missing check for fragment start position in mpatch.c:mpatch_apply() | fixed: 44 known affected: 5 known not affected: 3 | 2026-06-27T02:50:21+00:00 | Vulnerability · Source |
| CVE-2018-14326 | redhat_vex | libmp4v2: Missing check for integer overflow in mp4array.h:Resize() allows for denial of service via crafted MP4 | known not affected: 1 | 2026-06-27T02:50:19+00:00 | Vulnerability · Source |
| CVE-2018-13863 | redhat_vex | nodejs-bson: Regular expression denial of service in decimal128.js | known affected: 3 | 2026-06-27T02:50:16+00:00 | Vulnerability · Source |