VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291927 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-12165 | redhat_vex | undertow: improper whitespace parsing leading to potential HTTP request smuggling | fixed: 985 known affected: 1 known not affected: 4 | 2026-08-04T23:14:00+00:00 | Vulnerability · Source |
| CVE-2017-16231 | redhat_vex | pcre: self-recursive call in match() in pcre_exec.c leads to denial of service | known not affected: 108 | 2026-08-04T23:13:56+00:00 | Vulnerability · Source |
| CVE-2016-7055 | redhat_vex | openssl: Carry propagating bug in Montgomery multiplication | fixed: 169 known affected: 3 known not affected: 21 | 2026-08-04T23:13:53+00:00 | Vulnerability · Source |
| CVE-2016-6348 | redhat_vex | RESTEasy: Use of JacksonJsonpInterceptor in RESTEasy can lead to Cross Site Script Inclusion attack | known affected: 26 known not affected: 4 under investigation: 3 | 2026-08-04T23:13:49+00:00 | Vulnerability · Source |
| CVE-2017-7244 | redhat_vex | pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c) | fixed: 1 known affected: 112 known not affected: 7 | 2026-08-04T23:13:46+00:00 | Vulnerability · Source |
| CVE-2017-7245 | redhat_vex | pcre: stack-based buffer overflow write in pcre32_copy_substring | fixed: 1 known affected: 112 known not affected: 7 | 2026-08-04T23:13:43+00:00 | Vulnerability · Source |
| CVE-2017-7246 | redhat_vex | pcre: stack-based buffer overflow write in pcre32_copy_substring | fixed: 1 known affected: 112 known not affected: 7 | 2026-08-04T23:13:39+00:00 | Vulnerability · Source |
| CVE-2017-7376 | redhat_vex | libxml2: Incorrect limit used for port values | known not affected: 23 | 2026-08-04T23:13:38+00:00 | Vulnerability · Source |
| CVE-2018-0735 | redhat_vex | openssl: timing side channel attack in the ECDSA signature generation | fixed: 144 known affected: 6 known not affected: 15 | 2026-08-04T23:13:34+00:00 | Vulnerability · Source |
| CVE-2018-1301 | redhat_vex | httpd: Out of bounds access after failure in reading the HTTP request | fixed: 544 known affected: 11 known not affected: 15 | 2026-08-04T23:13:34+00:00 | Vulnerability · Source |
| CVE-2017-3589 | redhat_vex | mysql-connector-java: Connector/J unspecified vulnerability (CPU Apr 2017) | known affected: 6 known not affected: 1 | 2026-08-04T23:13:32+00:00 | Vulnerability · Source |
| CVE-2018-17189 | redhat_vex | httpd: mod_http2: DoS via slow, unneeded request bodies | fixed: 577 known not affected: 31 | 2026-08-04T23:13:27+00:00 | Vulnerability · Source |
| CVE-2018-1312 | redhat_vex | httpd: Weak Digest auth nonce generation in mod_auth_digest | fixed: 573 known affected: 10 known not affected: 16 | 2026-08-04T23:13:25+00:00 | Vulnerability · Source |
| CVE-2018-1257 | redhat_vex | spring-framework: ReDoS Attack with spring-messaging | fixed: 2 known affected: 3 known not affected: 14 | 2026-08-04T23:13:21+00:00 | Vulnerability · Source |
| CVE-2018-1115 | redhat_vex | postgresql: Too-permissive access control list on function pg_logfile_rotate() | fixed: 540 known affected: 1 known not affected: 89 | 2026-08-04T23:13:19+00:00 | Vulnerability · Source |
| CVE-2018-1302 | redhat_vex | httpd: Use-after-free on HTTP/2 stream shutdown | fixed: 139 known not affected: 45 | 2026-08-04T23:13:14+00:00 | Vulnerability · Source |
| CVE-2018-14618 | redhat_vex | curl: NTLM password overflow via integer overflow | fixed: 409 known affected: 11 known not affected: 7 | 2026-08-04T23:13:13+00:00 | Vulnerability · Source |
| CVE-2018-12122 | redhat_vex | nodejs: Slowloris HTTP Denial of Service | fixed: 206 known affected: 40 known not affected: 15 | 2026-08-04T23:13:09+00:00 | Vulnerability · Source |
| CVE-2018-1272 | redhat_vex | spring-framework: Multipart content pollution | fixed: 2 known affected: 13 known not affected: 26 | 2026-08-04T23:13:07+00:00 | Vulnerability · Source |
| CVE-2019-0221 | redhat_vex | tomcat: XSS in SSI printenv | fixed: 145 known affected: 32 known not affected: 2 | 2026-08-04T23:13:05+00:00 | Vulnerability · Source |
| CVE-2018-5710 | redhat_vex | krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c | known not affected: 28 | 2026-08-04T23:13:04+00:00 | Vulnerability · Source |
| CVE-2019-10209 | redhat_vex | postgresql: Memory disclosure in cross-type comparison for hashed subplan | known not affected: 110 | 2026-08-04T23:13:02+00:00 | Vulnerability · Source |
| CVE-2018-8034 | redhat_vex | tomcat: Host name verification missing in WebSocket client | fixed: 704 known affected: 6 known not affected: 36 | 2026-08-04T23:12:59+00:00 | Vulnerability · Source |
| CVE-2018-9251 | redhat_vex | libxml2: infinite loop in xz_decomp function in xzlib.c | fixed: 45 known not affected: 13 | 2026-08-04T23:12:56+00:00 | Vulnerability · Source |
| CVE-2019-10184 | redhat_vex | undertow: Information leak in requests for directories without trailing slashes | fixed: 509 known affected: 4 known not affected: 2 | 2026-08-04T23:12:52+00:00 | Vulnerability · Source |
| CVE-2018-5709 | redhat_vex | krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c | known not affected: 28 | 2026-08-04T23:12:52+00:00 | Vulnerability · Source |
| CVE-2019-7614 | redhat_vex | elasticsearch: Race condition in response headers on systems with multiple submitting requests | known affected: 20 known not affected: 1 | 2026-08-04T23:12:48+00:00 | Vulnerability · Source |
| CVE-2020-1698 | redhat_vex | keycloak: Password leak by logged exception in HttpMethod class | fixed: 3 known affected: 5 known not affected: 2 | 2026-08-04T23:12:46+00:00 | Vulnerability · Source |
| CVE-2020-15250 | redhat_vex | junit4: TemporaryFolder is shared between all users across system which could result in information disclosure | fixed: 1 known affected: 8 known not affected: 17 | 2026-08-04T23:12:42+00:00 | Vulnerability · Source |
| CVE-2019-25162 | redhat_vex | kernel: use after free in i2c | fixed: 709 known affected: 22 known not affected: 50 | 2026-08-04T23:12:40+00:00 | Vulnerability · Source |
| CVE-2019-5427 | redhat_vex | c3p0: loading XML configuration leads to denial of service | fixed: 1 known affected: 8 known not affected: 4 | 2026-08-04T23:12:38+00:00 | Vulnerability · Source |
| CVE-2019-1543 | redhat_vex | openssl: ChaCha20-Poly1305 with long nonces | fixed: 34 known not affected: 28 | 2026-08-04T23:12:35+00:00 | Vulnerability · Source |
| CVE-2019-7619 | redhat_vex | elasticsearch: Username disclosure in API Key service | known affected: 1 known not affected: 20 | 2026-08-04T23:12:34+00:00 | Vulnerability · Source |
| CVE-2019-17563 | redhat_vex | tomcat: Session fixation when using FORM authentication | fixed: 229 known affected: 17 known not affected: 8 | 2026-08-04T23:12:31+00:00 | Vulnerability · Source |
| CVE-2019-2708 | redhat_vex | libdb: Denial of service in the Data Store component | fixed: 156 known affected: 26 | 2026-08-04T23:12:27+00:00 | Vulnerability · Source |
| CVE-2019-17569 | redhat_vex | tomcat: Regression in handling of Transfer-Encoding header allows for HTTP request smuggling | fixed: 45 known affected: 5 known not affected: 31 | 2026-08-04T23:12:25+00:00 | Vulnerability · Source |
| CVE-2019-1552 | redhat_vex | openssl: Insecure path defaults vulnerability in mingw builds | known not affected: 24 | 2026-08-04T23:12:23+00:00 | Vulnerability · Source |
| CVE-2020-1934 | redhat_vex | httpd: mod_proxy_ftp use of uninitialized value | fixed: 257 known affected: 17 known not affected: 3 | 2026-08-04T23:12:19+00:00 | Vulnerability · Source |
| CVE-2020-2934 | redhat_vex | mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete | fixed: 3 known affected: 5 known not affected: 5 | 2026-08-04T23:12:14+00:00 | Vulnerability · Source |
| CVE-2020-7019 | redhat_vex | elasticsearch: scrolling search can leak fields that should be hidden allowing access restriction bypass | known not affected: 7 | 2026-08-04T23:12:14+00:00 | Vulnerability · Source |
| CVE-2020-29582 | redhat_vex | kotlin: vulnerable Java API was used for temporary file and folder creation which could result in information disclosure | fixed: 3 known affected: 1 known not affected: 1 | 2026-08-04T23:12:11+00:00 | Vulnerability · Source |
| CVE-2020-7021 | redhat_vex | elasticsearch: Information disclosure via audit logging with emit_request_body option enabled | known affected: 3 known not affected: 5 | 2026-08-04T23:12:08+00:00 | Vulnerability · Source |
| CVE-2020-2933 | redhat_vex | mysql-connector-java: allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized partial DoS | fixed: 2 known affected: 6 known not affected: 5 | 2026-08-04T23:12:07+00:00 | Vulnerability · Source |
| CVE-2020-1729 | redhat_vex | SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader | fixed: 1399 known affected: 1 known not affected: 2 | 2026-08-04T23:12:04+00:00 | Vulnerability · Source |
| CVE-2020-1720 | redhat_vex | postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks | fixed: 1483 known not affected: 32 | 2026-08-04T23:12:00+00:00 | Vulnerability · Source |
| CVE-2020-8908 | redhat_vex | guava: local information disclosure via temporary directory created with unsafe permissions | fixed: 298 known affected: 45 known not affected: 1489 | 2026-08-04T23:11:57+00:00 | Vulnerability · Source |
| CVE-2020-1935 | redhat_vex | tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling | fixed: 349 known affected: 17 known not affected: 2 | 2026-08-04T23:11:56+00:00 | Vulnerability · Source |
| CVE-2020-2875 | redhat_vex | mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete | fixed: 3 known affected: 5 known not affected: 5 | 2026-08-04T23:11:54+00:00 | Vulnerability · Source |
| CVE-2021-21639 | redhat_vex | jenkins: lack of type validation in agent related REST API | fixed: 4 known affected: 2 known not affected: 421 | 2026-08-04T23:11:48+00:00 | Vulnerability · Source |
| CVE-2021-22134 | redhat_vex | elasticsearch: requests do not properly apply security permissions when executing a query against a recently updated document | known not affected: 11 | 2026-08-04T23:11:45+00:00 | Vulnerability · Source |