VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291927 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-14867 | redhat_vex | git: cvsserver command injection | known affected: 49 known not affected: 7 | 2026-08-04T21:56:06+00:00 | Vulnerability · Source |
| CVE-2017-1000487 | redhat_vex | plexus-utils: Mishandled strings in Commandline class allow for command injection | fixed: 2 known affected: 6 known not affected: 12 under investigation: 3 | 2026-08-04T21:56:06+00:00 | Vulnerability · Source |
| CVE-2016-9594 | redhat_vex | curl: Unitialized random | known not affected: 20 | 2026-08-04T21:55:56+00:00 | Vulnerability · Source |
| CVE-2017-15288 | redhat_vex | scala: Privilege escalation in Scala compilation daemon | known affected: 8 known not affected: 7 | 2026-08-04T21:55:53+00:00 | Vulnerability · Source |
| CVE-2017-16012 | redhat_vex | js-jquery: XSS in responses from cross-origin ajax requests | fixed: 2 known affected: 16 known not affected: 1 | 2026-08-04T21:55:51+00:00 | Vulnerability · Source |
| CVE-2017-10140 | redhat_vex | libdb: Reads DB_CONFIG from the current working directory | fixed: 1 known affected: 32 known not affected: 27 under investigation: 1 | 2026-08-04T21:55:46+00:00 | Vulnerability · Source |
| CVE-2017-2582 | redhat_vex | keycloak: SAML request parser replaces special strings with system properties | fixed: 2303 known affected: 3 known not affected: 13 | 2026-08-04T21:55:42+00:00 | Vulnerability · Source |
| CVE-2016-6812 | redhat_vex | apache-cxf: XSS in Apache CXF FormattedServiceListWriter | fixed: 2 known affected: 8 known not affected: 6 under investigation: 1 | 2026-08-04T21:55:40+00:00 | Vulnerability · Source |
| CVE-2016-9606 | redhat_vex | Resteasy: Yaml unmarshalling vulnerable to RCE | fixed: 768 known affected: 2 known not affected: 19 | 2026-08-04T21:55:30+00:00 | Vulnerability · Source |
| CVE-2017-1000099 | redhat_vex | curl: FILE buffer read out of bounds | known not affected: 22 | 2026-08-04T21:55:28+00:00 | Vulnerability · Source |
| CVE-2017-0663 | redhat_vex | libxml2: Heap buffer overflow in xmlAddID | known affected: 15 known not affected: 5 under investigation: 3 | 2026-08-04T21:55:27+00:00 | Vulnerability · Source |
| CVE-2016-6347 | redhat_vex | RESTEasy: Use of the default exception handler in RESTEasy can lead to reflected XSS attack | known affected: 22 known not affected: 9 under investigation: 2 | 2026-08-04T21:55:23+00:00 | Vulnerability · Source |
| CVE-2017-14949 | redhat_vex | restlet: XXE vulnerability in XML extension allows remote attackers to access arbitrary files via a crafted REST API HTTP request | known affected: 2 | 2026-08-04T21:55:20+00:00 | Vulnerability · Source |
| CVE-2017-3731 | redhat_vex | openssl: Truncated packet could crash via OOB read | fixed: 327 known affected: 7 known not affected: 8 | 2026-08-04T21:55:14+00:00 | Vulnerability · Source |
| CVE-2017-7668 | redhat_vex | httpd: ap_find_token() buffer overread | fixed: 228 known not affected: 15 | 2026-08-04T21:55:11+00:00 | Vulnerability · Source |
| CVE-2017-3586 | redhat_vex | mysql-connector-java: Connector/J unspecified vulnerability (CPU Apr 2017) | known affected: 6 known not affected: 1 | 2026-08-04T21:55:10+00:00 | Vulnerability · Source |
| CVE-2017-5653 | redhat_vex | cxf: CXF JAX-RS XML Security streaming clients do not validate that the service response was signed or encrypted | fixed: 2 known not affected: 13 under investigation: 1 | 2026-08-04T21:55:06+00:00 | Vulnerability · Source |
| CVE-2017-6004 | redhat_vex | pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3) | fixed: 1 known affected: 42 known not affected: 72 | 2026-08-04T21:55:05+00:00 | Vulnerability · Source |
| CVE-2017-7468 | redhat_vex | curl: TLS session resumption client cert bypass | known not affected: 20 | 2026-08-04T21:55:03+00:00 | Vulnerability · Source |
| CVE-2018-1000129 | redhat_vex | jolokia: Cross site scripting in the HTTP servlet | fixed: 3 known affected: 11 known not affected: 4 | 2026-08-04T21:55:01+00:00 | Vulnerability · Source |
| CVE-2017-7659 | redhat_vex | httpd: mod_http2 NULL pointer dereference | fixed: 60 known not affected: 30 | 2026-08-04T21:54:57+00:00 | Vulnerability · Source |
| CVE-2017-7660 | redhat_vex | solr: Insufficient authentization for inter-node communication | known affected: 1 known not affected: 5 | 2026-08-04T21:54:56+00:00 | Vulnerability · Source |
| CVE-2017-3730 | redhat_vex | openssl: Bad (EC)DHE parameters cause a client crash | known not affected: 27 | 2026-08-04T21:54:53+00:00 | Vulnerability · Source |
| CVE-2017-3732 | redhat_vex | openssl: BN_mod_exp may produce incorrect results on x86_64 | fixed: 261 known affected: 3 known not affected: 23 | 2026-08-04T21:54:52+00:00 | Vulnerability · Source |
| CVE-2018-1051 | redhat_vex | resteasy: Unsafe unmarshalling in YamlProvider allows code execution | known affected: 13 known not affected: 22 | 2026-08-04T21:54:49+00:00 | Vulnerability · Source |
| CVE-2017-5662 | redhat_vex | batik: XML external entity processing vulnerability | fixed: 4 known affected: 33 | 2026-08-04T21:54:48+00:00 | Vulnerability · Source |
| CVE-2017-5656 | redhat_vex | cxf: CXF's STSClient uses a flawed way of caching tokens that are associated with delegation tokens | fixed: 3 known affected: 1 known not affected: 13 under investigation: 1 | 2026-08-04T21:54:48+00:00 | Vulnerability · Source |
| CVE-2017-7674 | redhat_vex | tomcat: Vary header not added by CORS filter leading to cache poisoning | fixed: 115 known affected: 14 known not affected: 23 under investigation: 2 | 2026-08-04T21:54:37+00:00 | Vulnerability · Source |
| CVE-2018-1000844 | redhat_vex | retrofit: XML external entity processing vulnerability in JAXB | known not affected: 1 | 2026-08-04T21:54:37+00:00 | Vulnerability · Source |
| CVE-2017-7464 | redhat_vex | JBoss: JAXP in EAP 7.0 allows info disclosure via XXE | known affected: 1 known not affected: 2 | 2026-08-04T21:53:44+00:00 | Vulnerability · Source |
| CVE-2017-9502 | redhat_vex | curl: URL file scheme drive letter buffer overflow | known not affected: 16 | 2026-08-04T21:53:42+00:00 | Vulnerability · Source |
| CVE-2017-3163 | redhat_vex | solr: Directory traversal via Index Replication HTTP API | fixed: 436 known affected: 2 known not affected: 2 under investigation: 1 | 2026-08-04T21:53:42+00:00 | Vulnerability · Source |
| CVE-2017-7492 | redhat_vex | REJECTED CVE-2017-7492 SourceProvider in RestEasy-jaxrs is vulnerable to XXE | known affected: 1 known not affected: 1 | 2026-08-04T21:53:39+00:00 | Vulnerability · Source |
| CVE-2017-7562 | redhat_vex | krb5: Authentication bypass by improper validation of certificate EKU and SAN | fixed: 117 known not affected: 12 | 2026-08-04T21:53:36+00:00 | Vulnerability · Source |
| CVE-2017-3737 | redhat_vex | openssl: Read/write after SSL object in error state | fixed: 279 known affected: 3 known not affected: 23 | 2026-08-04T21:53:35+00:00 | Vulnerability · Source |
| CVE-2017-5648 | redhat_vex | tomcat: Calls to application listeners did not use the appropriate facade object | fixed: 115 known affected: 6 known not affected: 37 | 2026-08-04T21:53:27+00:00 | Vulnerability · Source |
| CVE-2018-1000873 | redhat_vex | jackson-modules-java8: DoS due to an Improper Input Validation | fixed: 1 known affected: 5 known not affected: 24 | 2026-08-04T21:53:25+00:00 | Vulnerability · Source |
| CVE-2018-1047 | redhat_vex | undertow: Path traversal in ServletResourceManager class | fixed: 226 known affected: 5 known not affected: 3 | 2026-08-04T21:53:24+00:00 | Vulnerability · Source |
| CVE-2017-7375 | redhat_vex | libxml2: Missing validation for external entities in xmlParsePEReference | known affected: 18 known not affected: 5 | 2026-08-04T21:53:23+00:00 | Vulnerability · Source |
| CVE-2018-1052 | redhat_vex | postgresql: Memory disclosure in table partitioning | known not affected: 110 | 2026-08-04T21:53:20+00:00 | Vulnerability · Source |
| CVE-2017-8399 | redhat_vex | pcre2: Stack-based buffer overflow in pcre2_match.c | known not affected: 118 | 2026-08-04T21:53:19+00:00 | Vulnerability · Source |
| CVE-2017-9798 | redhat_vex | httpd: Use-after-free by limiting unregistered HTTP method (Optionsbleed) | fixed: 796 known affected: 12 known not affected: 1 under investigation: 1 | 2026-08-04T21:53:10+00:00 | Vulnerability · Source |
| CVE-2017-7186 | redhat_vex | pcre: Invalid Unicode property lookup (8.41/7, 10.24/2) | fixed: 1 known affected: 10 known not affected: 110 | 2026-08-04T21:53:08+00:00 | Vulnerability · Source |
| CVE-2018-10237 | redhat_vex | guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service | fixed: 1878 known affected: 24 known not affected: 18 | 2026-08-04T21:53:07+00:00 | Vulnerability · Source |
| CVE-2017-3736 | redhat_vex | openssl: bn_sqrx8x_internal carry bug on x86_64 | fixed: 371 known affected: 2 known not affected: 13 under investigation: 4 | 2026-08-04T21:53:00+00:00 | Vulnerability · Source |
| CVE-2018-0500 | redhat_vex | curl: Heap-based buffer overflow in Curl_smtp_escape_eob() when uploading data over SMTP | fixed: 1 known not affected: 26 | 2026-08-04T21:52:55+00:00 | Vulnerability · Source |
| CVE-2017-7561 | redhat_vex | resteasy: Vary header not added by CORS filter leading to cache poisoning | fixed: 453 known affected: 2 known not affected: 5 | 2026-08-04T21:52:51+00:00 | Vulnerability · Source |
| CVE-2018-0733 | redhat_vex | openssl: Implementation bug in PA-RISC CRYPTO_memcmp function allows attackers to forge authenticated messages in a reduced number of attempts | known not affected: 29 | 2026-08-04T21:52:48+00:00 | Vulnerability · Source |
| CVE-2018-1053 | redhat_vex | postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask | fixed: 427 known affected: 25 known not affected: 68 | 2026-08-04T21:52:43+00:00 | Vulnerability · Source |
| CVE-2018-14635 | redhat_vex | openstack-neutron: A router interface out of subnet IP range results in a denial of service | fixed: 35 known affected: 62 known not affected: 12 | 2026-08-04T21:52:40+00:00 | Vulnerability · Source |