VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
306041 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-5819 | redhat_vex | LibRaw: DoS in parse_sinar_ia function in internal/dcraw_common.cpp | fixed: 1086 known not affected: 3 | 2026-06-27T01:34:32+00:00 | Vulnerability · Source |
| CVE-2018-5360 | redhat_vex | LibTIFF: heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c | known affected: 14 | 2026-06-27T01:34:30+00:00 | Vulnerability · Source |
| CVE-2018-5818 | redhat_vex | LibRaw: DoS in parse_rollei function in internal/dcraw_common.cpp | fixed: 1086 known not affected: 3 | 2026-06-27T01:34:27+00:00 | Vulnerability · Source |
| CVE-2018-5815 | redhat_vex | LibRaw: Integer overflow in internal/dcraw_common.cpp:parse_qt() allows for denial of service | known not affected: 7 | 2026-06-27T01:34:25+00:00 | Vulnerability · Source |
| CVE-2018-5816 | redhat_vex | LibRaw: Integer overflow in internal/dcraw_common.cpp:identify() allows for denial of service | known not affected: 7 | 2026-06-27T01:34:18+00:00 | Vulnerability · Source |
| CVE-2018-5388 | redhat_vex | strongswan: integer underflow leads to buffer overflow and denial of service in stroke_socket.c | known affected: 1 | 2026-06-27T01:34:17+00:00 | Vulnerability · Source |
| CVE-2018-5996 | redhat_vex | p7zip: memory corruption in RAR decompression | known not affected: 1 | 2026-06-27T01:34:15+00:00 | Vulnerability · Source |
| CVE-2018-6790 | redhat_vex | kde-workspace: Missing sanitization of notifications allows to leak client IP address via IMG element | fixed: 369 known not affected: 9 | 2026-06-27T01:24:36+00:00 | Vulnerability · Source |
| CVE-2018-7263 | redhat_vex | libmad: Double-free in the mad_decoder_run() function | fixed: 226 | 2026-06-27T01:19:28+00:00 | Vulnerability · Source |
| CVE-2026-56123 | microsoft_vex | socat 1.8.0.0 - 1.8.1.1 Heap Buffer Overflow via SOCKS5 Reply Parser | known affected: 1 | 2026-06-27T01:17:17+00:00 | Vulnerability · Source |
| CVE-2018-7730 | redhat_vex | exempi: Heap-based buffer overflow in PSD_MetaHandler::CacheFileData function in XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp allows for denial of service via crafted XLS file | fixed: 54 known affected: 2 known not affected: 3 | 2026-06-27T01:14:22+00:00 | Vulnerability · Source |
| CVE-2018-9133 | redhat_vex | ImageMagick: excessive iteration in the DecodeLabImage and EncodeLabImage functions in coders/tiff.c | fixed: 218 known affected: 1 known not affected: 8 | 2026-06-27T01:10:18+00:00 | Vulnerability · Source |
| CVE-2018-9306 | redhat_vex | exiv2: out of bounds read in IptcData::printStructure in iptc.c | fixed: 97 known not affected: 8 | 2026-06-27T01:10:15+00:00 | Vulnerability · Source |
| CVE-2018-9305 | redhat_vex | exiv2: out of bounds read in IptcData::printStructure in iptc.c | fixed: 164 known not affected: 3 | 2026-06-27T01:10:13+00:00 | Vulnerability · Source |
| CVE-2018-9303 | redhat_vex | exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp | fixed: 97 known not affected: 8 | 2026-06-27T01:10:10+00:00 | Vulnerability · Source |
| CVE-2018-8804 | redhat_vex | ImageMagick: double free in WriteEPTImage function in coders/ept.c | fixed: 218 known affected: 8 known not affected: 1 | 2026-06-27T01:10:10+00:00 | Vulnerability · Source |
| CVE-2018-9304 | redhat_vex | exiv2: divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp | fixed: 97 known not affected: 8 | 2026-06-27T01:10:09+00:00 | Vulnerability · Source |
| CVE-2019-0174 | redhat_vex | hw: dram: reading bits in memory without accessing them | known not affected: 32 | 2026-06-27T01:09:56+00:00 | Vulnerability · Source |
| CVE-2018-9252 | redhat_vex | jasper: reachable assertion in jpc_abstorelstepsize() in jpc_enc.c | known affected: 17 | 2026-06-27T01:09:51+00:00 | Vulnerability · Source |
| CVE-2018-9055 | redhat_vex | jasper: reachable assertion in jpc_firstone() in jpc_math.c | known affected: 17 | 2026-06-27T01:09:48+00:00 | Vulnerability · Source |
| CVE-2019-0162 | redhat_vex | hw: dram: spoiler attack | known not affected: 32 | 2026-06-27T01:09:47+00:00 | Vulnerability · Source |
| CVE-2019-0117 | redhat_vex | hw: Intel SGX information leak | fixed: 79 known affected: 1 | 2026-06-27T01:09:46+00:00 | Vulnerability · Source |
| CVE-2018-8787 | redhat_vex | freerdp: Integer overflow leading to heap-based buffer overflow in gdi_Bitmap_Decompress() function | fixed: 82 known affected: 5 known not affected: 6 | 2026-06-27T01:09:44+00:00 | Vulnerability · Source |
| CVE-2019-1003010 | redhat_vex | jenkins-plugin-git: CSRF vulnerability in Git Plugin (SECURITY-1095) | fixed: 83 known affected: 12 known not affected: 2 | 2026-06-27T01:05:00+00:00 | Vulnerability · Source |
| CVE-2019-1003049 | redhat_vex | jenkins: Jenkins accepted cached legacy CLI authentication | fixed: 59 known affected: 10 known not affected: 2 | 2026-06-27T01:04:59+00:00 | Vulnerability · Source |
| CVE-2019-1003003 | redhat_vex | jenkins: cookie crafted using Jenkins script console allows unauthorised access to Jenkins instance | fixed: 83 known affected: 13 known not affected: 2 | 2026-06-27T01:04:55+00:00 | Vulnerability · Source |
| CVE-2019-1003050 | redhat_vex | jenkins: Improper escaping of job URLs in f:validateButton leads to cross-site scripting vulnerability. | fixed: 59 known affected: 10 known not affected: 2 | 2026-06-27T01:04:53+00:00 | Vulnerability · Source |
| CVE-2019-1003013 | redhat_vex | jenkins-plugin-blueocean: XSS vulnerability via user description in Blue Ocean (SECURITY-1204) | fixed: 83 known affected: 12 | 2026-06-27T01:04:47+00:00 | Vulnerability · Source |
| CVE-2019-1003014 | redhat_vex | jenkins-plugin-config-file-provider: Stored XSS vulnerability in Config File Provider Plugin (SECURITY-1253) | fixed: 83 known affected: 6 | 2026-06-27T01:04:45+00:00 | Vulnerability · Source |
| CVE-2019-1003012 | redhat_vex | jenkins-plugin-blueocean: Blue Ocean did not require CSRF tokens (SECURITY-1201) | fixed: 83 known affected: 12 | 2026-06-27T01:04:42+00:00 | Vulnerability · Source |
| CVE-2019-0542 | redhat_vex | xterm.js: Mishandling of special characters allows for remote code execution | fixed: 161 known not affected: 1 | 2026-06-27T01:04:35+00:00 | Vulnerability · Source |
| CVE-2019-1003004 | redhat_vex | jenkins: deleting a user record will does not invalidate existing sessions | fixed: 83 known affected: 13 known not affected: 2 | 2026-06-27T01:04:33+00:00 | Vulnerability · Source |
| CVE-2019-1000014 | redhat_vex | rebar: signing oracle vulnerability in package registry verification resulting in code execution via undetected modified packages. | known not affected: 1 | 2026-06-27T01:04:30+00:00 | Vulnerability · Source |
| CVE-2019-10054 | redhat_vex | suricata: invalid memory access in function process_reply_record_v3 leads to denial of service | known not affected: 1 | 2026-06-27T01:04:30+00:00 | Vulnerability · Source |
| CVE-2019-1003000 | redhat_vex | jenkins-plugin-script-security: Sandbox Bypass in Script Security Plugin | fixed: 83 known affected: 12 known not affected: 2 | 2026-06-27T01:04:25+00:00 | Vulnerability · Source |
| CVE-2019-1003001 | redhat_vex | jenkins-plugin-workflow-cps: Sandbox Bypass in Pipeline: Groovy Plugin | fixed: 83 known affected: 12 known not affected: 2 | 2026-06-27T01:04:24+00:00 | Vulnerability · Source |
| CVE-2019-1003011 | redhat_vex | jenkins-plugin-token-macro: Recursive token expansion results in information disclosure and DoS in Token Macro Plugin (SECURITY-1102) | fixed: 83 known affected: 10 | 2026-06-27T01:04:20+00:00 | Vulnerability · Source |
| CVE-2019-1003002 | redhat_vex | jenkins-plugin-pipeline-model-definition: Sandbox Bypass in Pipeline: Declarative | fixed: 83 known affected: 9 known not affected: 5 | 2026-06-27T01:04:16+00:00 | Vulnerability · Source |
| CVE-2019-10246 | redhat_vex | jetty: Directory Listing on Windows reveals Resource Base path | known not affected: 36 | 2026-06-27T00:59:28+00:00 | Vulnerability · Source |
| CVE-2019-1010190 | redhat_vex | mgetty: out-of-bounds read in function putwhitespan() in g3/pbm2g3.c causing denial of service | known affected: 9 | 2026-06-27T00:59:26+00:00 | Vulnerability · Source |
| CVE-2019-1010317 | redhat_vex | wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS | fixed: 31 known not affected: 4 | 2026-06-27T00:59:25+00:00 | Vulnerability · Source |
| CVE-2019-1010301 | redhat_vex | jhead: buffer overflow in gpsinfo.c Line 151 ProcessGpsInfo() causing denial of service | known not affected: 1 | 2026-06-27T00:59:24+00:00 | Vulnerability · Source |
| CVE-2019-1010319 | redhat_vex | wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS | fixed: 31 known not affected: 4 | 2026-06-27T00:59:23+00:00 | Vulnerability · Source |
| CVE-2019-1010302 | redhat_vex | jhead: incorrect access control in iptc.c Line 122 show_IPTC() causing denial of service | known not affected: 1 | 2026-06-27T00:59:23+00:00 | Vulnerability · Source |
| CVE-2019-1010022 | redhat_vex | glibc: stack guard protection bypass | known not affected: 448 | 2026-06-27T00:59:23+00:00 | Vulnerability · Source |
| CVE-2019-1010004 | redhat_vex | sox: OOB read in function read_samples in xa.c:219 causing denial of service | known affected: 6 | 2026-06-27T00:59:19+00:00 | Vulnerability · Source |
| CVE-2019-1010228 | redhat_vex | DCMTK: buffer overflow in DcmRLEDecoder::decompress() leads to possible code execution and denial of service | known not affected: 1 | 2026-06-27T00:59:15+00:00 | Vulnerability · Source |
| CVE-2019-10213 | redhat_vex | openshift: Secret data written to pod logs when operator set at Debug level or higher | fixed: 5 known affected: 6 known not affected: 3 | 2026-06-27T00:59:14+00:00 | Vulnerability · Source |
| CVE-2019-1010006 | redhat_vex | evince: buffer overflow in backend/tiff/tiff-document.c leads to DOS/possible code execution | known affected: 6 known not affected: 13 | 2026-06-27T00:59:14+00:00 | Vulnerability · Source |
| CVE-2019-10320 | redhat_vex | jenkins-credentials-plugin: Certificate file read vulnerability in Credentials Plugin (SECURITY-1322) | fixed: 61 known affected: 8 | 2026-06-27T00:59:10+00:00 | Vulnerability · Source |