VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304688 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-1003011 | redhat_vex | jenkins-plugin-token-macro: Recursive token expansion results in information disclosure and DoS in Token Macro Plugin (SECURITY-1102) | fixed: 83 known affected: 10 | 2026-06-27T01:04:20+00:00 | Vulnerability · Source |
| CVE-2019-1003002 | redhat_vex | jenkins-plugin-pipeline-model-definition: Sandbox Bypass in Pipeline: Declarative | fixed: 83 known affected: 9 known not affected: 5 | 2026-06-27T01:04:16+00:00 | Vulnerability · Source |
| CVE-2019-10246 | redhat_vex | jetty: Directory Listing on Windows reveals Resource Base path | known not affected: 36 | 2026-06-27T00:59:28+00:00 | Vulnerability · Source |
| CVE-2019-1010190 | redhat_vex | mgetty: out-of-bounds read in function putwhitespan() in g3/pbm2g3.c causing denial of service | known affected: 9 | 2026-06-27T00:59:26+00:00 | Vulnerability · Source |
| CVE-2019-1010317 | redhat_vex | wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS | fixed: 31 known not affected: 4 | 2026-06-27T00:59:25+00:00 | Vulnerability · Source |
| CVE-2019-1010301 | redhat_vex | jhead: buffer overflow in gpsinfo.c Line 151 ProcessGpsInfo() causing denial of service | known not affected: 1 | 2026-06-27T00:59:24+00:00 | Vulnerability · Source |
| CVE-2019-1010319 | redhat_vex | wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS | fixed: 31 known not affected: 4 | 2026-06-27T00:59:23+00:00 | Vulnerability · Source |
| CVE-2019-1010302 | redhat_vex | jhead: incorrect access control in iptc.c Line 122 show_IPTC() causing denial of service | known not affected: 1 | 2026-06-27T00:59:23+00:00 | Vulnerability · Source |
| CVE-2019-1010022 | redhat_vex | glibc: stack guard protection bypass | known not affected: 448 | 2026-06-27T00:59:23+00:00 | Vulnerability · Source |
| CVE-2019-1010004 | redhat_vex | sox: OOB read in function read_samples in xa.c:219 causing denial of service | known affected: 6 | 2026-06-27T00:59:19+00:00 | Vulnerability · Source |
| CVE-2019-1010228 | redhat_vex | DCMTK: buffer overflow in DcmRLEDecoder::decompress() leads to possible code execution and denial of service | known not affected: 1 | 2026-06-27T00:59:15+00:00 | Vulnerability · Source |
| CVE-2019-10213 | redhat_vex | openshift: Secret data written to pod logs when operator set at Debug level or higher | fixed: 5 known affected: 6 known not affected: 3 | 2026-06-27T00:59:14+00:00 | Vulnerability · Source |
| CVE-2019-1010006 | redhat_vex | evince: buffer overflow in backend/tiff/tiff-document.c leads to DOS/possible code execution | known affected: 6 known not affected: 13 | 2026-06-27T00:59:14+00:00 | Vulnerability · Source |
| CVE-2019-10320 | redhat_vex | jenkins-credentials-plugin: Certificate file read vulnerability in Credentials Plugin (SECURITY-1322) | fixed: 61 known affected: 8 | 2026-06-27T00:59:10+00:00 | Vulnerability · Source |
| CVE-2019-10200 | redhat_vex | openshift: Users with permission to schedule pods on master nodes can access credentials for AWS IAM roles | known affected: 1 | 2026-06-27T00:59:09+00:00 | Vulnerability · Source |
| CVE-2019-10649 | redhat_vex | ImageMagick: memory leak in SVGKeyValuePairs of coders/svg.c that leads to denial of service via crafted image file | known not affected: 15 | 2026-06-27T00:54:56+00:00 | Vulnerability · Source |
| CVE-2019-10650 | redhat_vex | ImageMagick: heap-based buffer over-read in WriteTIFFImage of coders/tiff.c leads to denial of service or information disclosure via crafted image file | fixed: 218 known affected: 8 | 2026-06-27T00:54:55+00:00 | Vulnerability · Source |
| CVE-2019-10678 | redhat_vex | domoticz: insecure argument options neglected to be categorised | known not affected: 1 | 2026-06-27T00:54:54+00:00 | Vulnerability · Source |
| CVE-2019-10337 | redhat_vex | jenkins-plugin-token-macro: XML External Entity processing the ${XML} macro | fixed: 28 known affected: 8 | 2026-06-27T00:54:52+00:00 | Vulnerability · Source |
| CVE-2019-11070 | redhat_vex | webkitgtk: HTTP proxy setting deanonymization information disclosure | fixed: 984 known affected: 9 | 2026-06-27T00:54:47+00:00 | Vulnerability · Source |
| CVE-2019-11072 | redhat_vex | lighttpd: signed integer overflow causing denial of service | known not affected: 1 | 2026-06-27T00:54:46+00:00 | Vulnerability · Source |
| CVE-2019-10903 | redhat_vex | wireshark: DCERPC SPOOLSS dissector crash (wnpa-sec-2019-18) | known affected: 4 | 2026-06-27T00:54:41+00:00 | Vulnerability · Source |
| CVE-2019-10871 | redhat_vex | poppler: heap-based buffer over-read in function PSOutputDev::checkPageSlice in PSOutputDev.cc | fixed: 322 known not affected: 11 | 2026-06-27T00:54:35+00:00 | Vulnerability · Source |
| CVE-2019-10328 | redhat_vex | jenkins-plugin-workflow-remote-loader: Unsafe Script Security whitelist entry in Pipeline Remote Loader Plugin (SECURITY-921) | fixed: 63 known affected: 8 known not affected: 251 | 2026-06-27T00:54:24+00:00 | Vulnerability · Source |
| CVE-2019-10392 | redhat_vex | jenkins-git-client-plugin: OS command injection via 'git ls-remote' | fixed: 133 | 2026-06-27T00:53:55+00:00 | Vulnerability · Source |
| CVE-2019-11640 | redhat_vex | recutils: Multiple security issues | known not affected: 1 | 2026-06-27T00:49:35+00:00 | Vulnerability · Source |
| CVE-2019-11459 | redhat_vex | evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail() | fixed: 1120 known affected: 6 | 2026-06-27T00:49:35+00:00 | Vulnerability · Source |
| CVE-2019-11470 | redhat_vex | ImageMagick: denial of service in cineon parsing component | fixed: 218 known affected: 8 | 2026-06-27T00:49:33+00:00 | Vulnerability · Source |
| CVE-2019-11472 | redhat_vex | ImageMagick: denial of service in ReadXWDImage in coders/xwd.c in the XWD image parsing component | fixed: 218 known affected: 8 | 2026-06-27T00:49:32+00:00 | Vulnerability · Source |
| CVE-2019-11639 | redhat_vex | recutils: Multiple security issues | known not affected: 1 | 2026-06-27T00:49:32+00:00 | Vulnerability · Source |
| CVE-2019-11638 | redhat_vex | recutils: Multiple security issues | known not affected: 1 | 2026-06-27T00:49:31+00:00 | Vulnerability · Source |
| CVE-2019-11637 | redhat_vex | recutils: Multiple security issues | known not affected: 1 | 2026-06-27T00:49:31+00:00 | Vulnerability · Source |
| CVE-2019-11727 | redhat_vex | nss: PKCS#1 v1.5 signatures can be used for TLS 1.3 | fixed: 332 known affected: 7 | 2026-06-27T00:49:30+00:00 | Vulnerability · Source |
| CVE-2019-11597 | redhat_vex | ImageMagick: heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c leading to DoS or information disclosure | fixed: 218 known affected: 8 | 2026-06-27T00:49:15+00:00 | Vulnerability · Source |
| CVE-2019-11694 | redhat_vex | Mozilla: Uninitialized memory leakage in Windows sandbox | known not affected: 12 | 2026-06-27T00:49:13+00:00 | Vulnerability · Source |
| CVE-2019-11733 | redhat_vex | firefox: stored passwords in 'Saved Logins' can be copied without master password entry | fixed: 64 | 2026-06-27T00:49:13+00:00 | Vulnerability · Source |
| CVE-2019-11253 | redhat_vex | kubernetes: YAML parsing vulnerable to "Billion Laughs" attack, allowing for remote denial of service | fixed: 113 known affected: 3 known not affected: 6 | 2026-06-27T00:49:10+00:00 | Vulnerability · Source |
| CVE-2019-11598 | redhat_vex | ImageMagick: heap-based buffer over-read in the function WritePNMImage of coders/pnm.c leading to DoS or information disclosure | fixed: 218 known affected: 7 known not affected: 1 | 2026-06-27T00:49:09+00:00 | Vulnerability · Source |
| CVE-2019-12110 | redhat_vex | miniupnp: null-pointer dereference in upnpredirect.c causing denial of service | known not affected: 1 | 2026-06-27T00:45:01+00:00 | Vulnerability · Source |
| CVE-2019-12214 | redhat_vex | freeimage: out-of-bounds access in function j2k_read_ppm_v3 in j2k.c | known not affected: 1 | 2026-06-27T00:45:01+00:00 | Vulnerability · Source |
| CVE-2019-11756 | redhat_vex | nss: Use-after-free in sftk_FreeSession due to improper refcounting | fixed: 561 known affected: 7 | 2026-06-27T00:44:54+00:00 | Vulnerability · Source |
| CVE-2019-12108 | redhat_vex | miniupnp: null-pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for int_port causing denial of service | known not affected: 1 | 2026-06-27T00:44:54+00:00 | Vulnerability · Source |
| CVE-2019-12111 | redhat_vex | miniupnpd: null pointer dereference in copyIPv6IfDifferent in pcpserver.c causing denial of service | known not affected: 1 | 2026-06-27T00:44:51+00:00 | Vulnerability · Source |
| CVE-2019-12109 | redhat_vex | miniupnp: null-pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for rem_port causing denial of service | known not affected: 1 | 2026-06-27T00:44:48+00:00 | Vulnerability · Source |
| CVE-2019-12293 | redhat_vex | poppler: heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc | fixed: 322 known affected: 11 | 2026-06-27T00:44:48+00:00 | Vulnerability · Source |
| CVE-2019-12447 | redhat_vex | gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c | fixed: 773 known affected: 13 known not affected: 8 | 2026-06-27T00:44:44+00:00 | Vulnerability · Source |
| CVE-2019-12420 | redhat_vex | spamassassin: crafted email message can lead to DoS | fixed: 28 known affected: 2 | 2026-06-27T00:44:33+00:00 | Vulnerability · Source |
| CVE-2019-11745 | redhat_vex | nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate | fixed: 571 known affected: 1 known not affected: 14 | 2026-06-27T00:43:35+00:00 | Vulnerability · Source |
| CVE-2019-13113 | redhat_vex | exiv2: invalid data location in CRW image file causing denial of service | fixed: 97 known affected: 8 | 2026-06-27T00:40:34+00:00 | Vulnerability · Source |
| CVE-2019-12790 | redhat_vex | radare2: heap-based buffer over-read in function r_egg_lang_parsechar in egg_lang.c | known not affected: 1 | 2026-06-27T00:40:34+00:00 | Vulnerability · Source |