VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304624 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-18267 | redhat_vex | poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service | fixed: 8618 known affected: 11 known not affected: 11 | 2026-06-27T04:29:42+00:00 | Vulnerability · Source |
| CVE-2017-18252 | redhat_vex | ImageMagick: assertion failure in MogrifyImageList function in MagickWand/mogrify.c | fixed: 218 known affected: 9 | 2026-06-27T04:29:42+00:00 | Vulnerability · Source |
| CVE-2017-18233 | redhat_vex | exempi: Infinite Loop in Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp | fixed: 54 known not affected: 5 | 2026-06-27T04:29:38+00:00 | Vulnerability · Source |
| CVE-2017-18271 | redhat_vex | ImageMagick: infinite loop in ReadMIFFImage function in coders/miff.c | fixed: 218 known affected: 9 | 2026-06-27T04:29:36+00:00 | Vulnerability · Source |
| CVE-2017-18361 | redhat_vex | python-colander: infinite loop in the URL validator | known not affected: 1 | 2026-06-27T04:29:34+00:00 | Vulnerability · Source |
| CVE-2017-18234 | redhat_vex | exempi: Use after free via a PDF file containing JPEG data | fixed: 54 known affected: 2 known not affected: 3 | 2026-06-27T04:29:32+00:00 | Vulnerability · Source |
| CVE-2017-18206 | redhat_vex | zsh: buffer overrun in symlinks | fixed: 85 known affected: 1 known not affected: 3 | 2026-06-27T04:29:28+00:00 | Vulnerability · Source |
| CVE-2017-18254 | redhat_vex | ImageMagick: memory leak in WriteGIFImage function in coders/gif.c | fixed: 218 known affected: 8 known not affected: 1 | 2026-06-27T04:29:28+00:00 | Vulnerability · Source |
| CVE-2017-18251 | redhat_vex | ImageMagick: memory leak in ReadPCDImage function in coders/pcd.c | fixed: 218 known affected: 9 | 2026-06-27T04:29:25+00:00 | Vulnerability · Source |
| CVE-2017-20189 | redhat_vex | clojure: executes arbitrary code upon deserialization | known not affected: 1 | 2026-06-27T04:29:17+00:00 | Vulnerability · Source |
| CVE-2017-20005 | redhat_vex | nginx: buffer overflow in ngx_gmtime() triggered by 5 digit years | known not affected: 47 | 2026-06-27T04:29:08+00:00 | Vulnerability · Source |
| CVE-2017-2619 | redhat_vex | samba: symlink race permits opening files outside share directory | fixed: 504 known affected: 17 | 2026-06-27T04:23:59+00:00 | Vulnerability · Source |
| CVE-2017-2667 | redhat_vex | rubygem-hammer_cli: no verification of API server's SSL certificate | fixed: 276 known affected: 3 | 2026-06-27T04:23:58+00:00 | Vulnerability · Source |
| CVE-2017-5499 | redhat_vex | jasper: Signed integer overflow in jpc_dequantize() in jpc_dec.c | known affected: 3 known not affected: 14 | 2026-06-27T04:09:03+00:00 | Vulnerability · Source |
| CVE-2017-5332 | redhat_vex | icoutils: Access to unallocated memory possible in extract.c | fixed: 21 | 2026-06-27T04:09:01+00:00 | Vulnerability · Source |
| CVE-2017-5333 | redhat_vex | icoutils: Integer overflow vulnerability in extract.c | fixed: 21 | 2026-06-27T04:08:58+00:00 | Vulnerability · Source |
| CVE-2017-6519 | redhat_vex | avahi: Multicast DNS responds to unicast queries outside of local network | fixed: 292 known affected: 55 | 2026-06-27T03:58:59+00:00 | Vulnerability · Source |
| CVE-2017-7810 | redhat_vex | Mozilla: Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4 (MFSA 2017-22) | fixed: 91 | 2026-06-27T03:42:48+00:00 | Vulnerability · Source |
| CVE-2017-9103 | redhat_vex | adns: pap_mailbox822 does not properly check st from adns__findlabel_next | known not affected: 1 | 2026-06-27T03:33:24+00:00 | Vulnerability · Source |
| CVE-2017-9782 | redhat_vex | jasper: cdef.ents[] heap-based buffer over-read in jp2_decode() | known affected: 16 known not affected: 1 | 2026-06-27T03:24:40+00:00 | Vulnerability · Source |
| CVE-2018-0765 | redhat_vex | dotnet: Improper processing of XML documents can allow a remote attacker to cause a denial of service | known not affected: 3 | 2026-06-27T03:19:16+00:00 | Vulnerability · Source |
| CVE-2018-1000169 | redhat_vex | jenkins: CLI leaked existence of views and agents with attacker-specified names to users without Overall/Read permission (SECURITY-754) | fixed: 974 | 2026-06-27T03:15:34+00:00 | Vulnerability · Source |
| CVE-2018-1000880 | redhat_vex | libarchive: Improper input validation in WARC parser resulting in a denial of service | known affected: 4 known not affected: 8 | 2026-06-27T03:15:31+00:00 | Vulnerability · Source |
| CVE-2018-1000852 | redhat_vex | freerdp: out of bounds read in drdynvc_process_capability_request | fixed: 100 known affected: 5 known not affected: 6 | 2026-06-27T03:15:24+00:00 | Vulnerability · Source |
| CVE-2018-1000410 | redhat_vex | jenkins: Failures to process form submission data could result in secrets being displayed or written to logs | fixed: 94 known affected: 10 known not affected: 2 | 2026-06-27T03:15:20+00:00 | Vulnerability · Source |
| CVE-2018-1000879 | redhat_vex | libarchive: NULL pointer dereference in ACL parser resulting in a denial of service | known affected: 4 known not affected: 8 | 2026-06-27T03:15:16+00:00 | Vulnerability · Source |
| CVE-2018-1000654 | redhat_vex | libtasn1: Infinite loop in _asn1_expand_object_id(ptree) leads to memory exhaustion | known affected: 18 | 2026-06-27T03:15:12+00:00 | Vulnerability · Source |
| CVE-2018-1000400 | redhat_vex | cri-o: capabilities are not dropped when switching to a non-root user | fixed: 38 known not affected: 6 | 2026-06-27T03:15:09+00:00 | Vulnerability · Source |
| CVE-2018-1000544 | redhat_vex | rubyzip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file | fixed: 20 known affected: 1 | 2026-06-27T03:15:07+00:00 | Vulnerability · Source |
| CVE-2018-1000997 | redhat_vex | jenkins: Path traversal vulnerability in Stapler allowed accessing internal data | fixed: 94 known affected: 10 known not affected: 2 | 2026-06-27T03:15:03+00:00 | Vulnerability · Source |
| CVE-2018-1000407 | redhat_vex | jenkins: Reflected XSS vulnerability | fixed: 94 known affected: 10 known not affected: 2 | 2026-06-27T03:15:01+00:00 | Vulnerability · Source |
| CVE-2018-1000406 | redhat_vex | jenkins: Arbitrary file write vulnerability using file parameter definitions | fixed: 94 known affected: 10 known not affected: 2 | 2026-06-27T03:14:57+00:00 | Vulnerability · Source |
| CVE-2018-1000409 | redhat_vex | jenkins: Session fixation vulnerability on user signup | fixed: 94 known affected: 10 known not affected: 2 | 2026-06-27T03:14:52+00:00 | Vulnerability · Source |
| CVE-2018-1000119 | redhat_vex | rack-protection: Timing attack in authenticity_token.rb | fixed: 2716 known affected: 21 known not affected: 3 | 2026-06-27T03:14:46+00:00 | Vulnerability · Source |
| CVE-2018-1000408 | redhat_vex | jenkins: Ephemeral user record creation | fixed: 94 known affected: 10 known not affected: 2 | 2026-06-27T03:14:46+00:00 | Vulnerability · Source |
| CVE-2018-1000865 | redhat_vex | jenkins-plugin-script-security: Sandbox Bypass in finalize methods | fixed: 83 known affected: 29 | 2026-06-27T03:14:38+00:00 | Vulnerability · Source |
| CVE-2018-1000866 | redhat_vex | jenkins-plugin-script-security: Sandbox Bypass in finalize methods | fixed: 83 known affected: 29 | 2026-06-27T03:14:33+00:00 | Vulnerability · Source |
| CVE-2018-10767 | redhat_vex | libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c | fixed: 8618 known not affected: 2 | 2026-06-27T03:10:30+00:00 | Vulnerability · Source |
| CVE-2018-10768 | redhat_vex | poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF | fixed: 8618 known not affected: 22 | 2026-06-27T03:10:23+00:00 | Vulnerability · Source |
| CVE-2018-1063 | redhat_vex | policycoreutils: Relabelling of symbolic links in /tmp and /var/tmp change the context of their target instead | fixed: 109 known affected: 6 known not affected: 10 | 2026-06-27T03:10:19+00:00 | Vulnerability · Source |
| CVE-2018-10733 | redhat_vex | libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c | fixed: 8618 known not affected: 2 | 2026-06-27T03:10:18+00:00 | Vulnerability · Source |
| CVE-2018-10772 | redhat_vex | exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file | fixed: 164 known not affected: 3 | 2026-06-27T03:10:09+00:00 | Vulnerability · Source |
| CVE-2018-10177 | redhat_vex | ImageMagick: Infinite loop in coders/png.c:ReadOneMNGImage() allows attackers to cause a denial of service via crafted MNG file | fixed: 218 known affected: 9 | 2026-06-27T03:10:06+00:00 | Vulnerability · Source |
| CVE-2018-10119 | redhat_vex | libreoffice: Use-after-free in sdstor/stgstrms.cxx:StgSmallStrm class allows for denial of service with crafted document | fixed: 1024 known affected: 133 known not affected: 174 | 2026-06-27T03:09:57+00:00 | Vulnerability · Source |
| CVE-2018-10657 | redhat_vex | matrix-synapse: Injection of malicious events with a depth size of 2^63-1 can cause a denial of service to making rooms unusable | known not affected: 1 | 2026-06-27T03:09:54+00:00 | Vulnerability · Source |
| CVE-2018-10779 | redhat_vex | libtiff: heap-based buffer over-read in TIFFWriteScanline function in tif_write.c | fixed: 76 known affected: 9 | 2026-06-27T03:05:02+00:00 | Vulnerability · Source |
| CVE-2018-11037 | redhat_vex | exiv2: information leak via a crafted file | fixed: 164 known not affected: 3 | 2026-06-27T03:05:01+00:00 | Vulnerability · Source |
| CVE-2018-10887 | redhat_vex | libgit2: integer overflow leads to out-of-bounds read in git_delta_apply, allowing to read before base array | known not affected: 1 | 2026-06-27T03:04:58+00:00 | Vulnerability · Source |
| CVE-2018-1100 | redhat_vex | zsh: buffer overflow in utils.c:checkmailpath() can lead to local arbitrary code execution | fixed: 85 known affected: 1 known not affected: 3 | 2026-06-27T03:04:58+00:00 | Vulnerability · Source |
| CVE-2018-10888 | redhat_vex | libgit2: an improper input validation leads to an out-of-bound read in git_delta_apply, allowing to read beyond delta limits | known not affected: 1 | 2026-06-27T03:04:54+00:00 | Vulnerability · Source |