VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-14332 | redhat_vex | firefox: Memory safety bugs fixed in Firefox 146 and Thunderbird 146 | known not affected: 12 | 2026-06-29T23:29:55+00:00 | Vulnerability · Source |
| CVE-2025-14331 | redhat_vex | firefox: thunderbird: Same-origin policy bypass in the Request Handling component | fixed: 320 known affected: 8 | 2026-06-29T23:29:53+00:00 | Vulnerability · Source |
| CVE-2025-14330 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component | fixed: 320 known affected: 8 | 2026-06-29T23:29:50+00:00 | Vulnerability · Source |
| CVE-2025-14329 | redhat_vex | firefox: thunderbird: Privilege escalation in the Netmonitor component | fixed: 320 known affected: 8 | 2026-06-29T23:29:47+00:00 | Vulnerability · Source |
| CVE-2025-14328 | redhat_vex | firefox: thunderbird: Privilege escalation in the Netmonitor component | fixed: 320 known affected: 8 | 2026-06-29T23:29:46+00:00 | Vulnerability · Source |
| CVE-2025-14326 | redhat_vex | firefox: Use-after-free in the Audio/Video: GMP component | known not affected: 12 | 2026-06-29T23:29:45+00:00 | Vulnerability · Source |
| CVE-2025-13945 | redhat_vex | wireshark: Improperly Controlled Sequential Memory Allocation in Wireshark | known affected: 8 known not affected: 12 | 2026-06-29T23:29:36+00:00 | Vulnerability · Source |
| CVE-2025-13946 | redhat_vex | wireshark: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark | known affected: 12 known not affected: 8 | 2026-06-29T23:29:35+00:00 | Vulnerability · Source |
| CVE-2025-13836 | redhat_vex | cpython: Excessive read buffering DoS in http.client | fixed: 643 known affected: 4 known not affected: 159 | 2026-06-29T23:29:30+00:00 | Vulnerability · Source |
| CVE-2025-13674 | redhat_vex | Wireshark: Wireshark: BPv7 dissector crash leads to denial of service | known affected: 20 | 2026-06-29T23:29:27+00:00 | Vulnerability · Source |
| CVE-2025-13466 | redhat_vex | body-parser: body-parser denial of service | known affected: 167 | 2026-06-29T23:29:22+00:00 | Vulnerability · Source |
| CVE-2025-13020 | redhat_vex | firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component | fixed: 320 known affected: 8 | 2026-06-29T23:29:18+00:00 | Vulnerability · Source |
| CVE-2025-13019 | redhat_vex | firefox: thunderbird: Same-origin policy bypass in the DOM: Workers component | fixed: 320 known affected: 8 | 2026-06-29T23:29:17+00:00 | Vulnerability · Source |
| CVE-2025-13018 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Security component | fixed: 320 known affected: 8 | 2026-06-29T23:29:14+00:00 | Vulnerability · Source |
| CVE-2025-13017 | redhat_vex | firefox: thunderbird: Same-origin policy bypass in the DOM: Notifications component | fixed: 320 known affected: 8 | 2026-06-29T23:29:12+00:00 | Vulnerability · Source |
| CVE-2025-13014 | redhat_vex | firefox: thunderbird: Use-after-free in the Audio/Video component | fixed: 320 known affected: 8 | 2026-06-29T23:29:10+00:00 | Vulnerability · Source |
| CVE-2025-13013 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Core & HTML component | fixed: 320 known affected: 8 | 2026-06-29T23:29:07+00:00 | Vulnerability · Source |
| CVE-2025-12183 | redhat_vex | lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure | fixed: 13 known affected: 19 known not affected: 170 | 2026-06-29T23:28:57+00:00 | Vulnerability · Source |
| CVE-2025-12084 | redhat_vex | cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service | fixed: 1310 known affected: 76 known not affected: 47 | 2026-06-29T23:28:55+00:00 | Vulnerability · Source |
| CVE-2025-11965 | redhat_vex | io.vertx/vertx-core: Eclipse Vert.x Access Control Flaw | fixed: 1 known affected: 43 | 2026-06-29T23:28:49+00:00 | Vulnerability · Source |
| CVE-2025-11719 | redhat_vex | thunderbird: firefox: Use-after-free caused by the native messaging web extension API on Windows | known not affected: 23 | 2026-06-29T23:28:46+00:00 | Vulnerability · Source |
| CVE-2025-11713 | redhat_vex | thunderbird: firefox: Potential user-assisted code execution in “Copy as cURL” command | known not affected: 23 | 2026-06-29T23:28:46+00:00 | Vulnerability · Source |
| CVE-2025-11712 | redhat_vex | thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type | fixed: 264 known affected: 8 | 2026-06-29T23:28:42+00:00 | Vulnerability · Source |
| CVE-2025-11626 | redhat_vex | wireshark: MONGO dissector infinite loop | known affected: 20 | 2026-06-29T23:28:40+00:00 | Vulnerability · Source |
| CVE-2025-11226 | redhat_vex | ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core | known affected: 71 | 2026-06-29T23:28:35+00:00 | Vulnerability · Source |
| CVE-2025-11149 | redhat_vex | node-static: node-static denial of service | known not affected: 9 | 2026-06-29T23:28:35+00:00 | Vulnerability · Source |
| CVE-2025-10543 | redhat_vex | paho.mqtt.golang: paho.mqtt.golang: Integer Overflow in UTF-8 String Encoding | known affected: 25 | 2026-06-29T23:28:16+00:00 | Vulnerability · Source |
| CVE-2025-10533 | redhat_vex | firefox: thunderbird: Integer overflow in the SVG component | fixed: 264 known affected: 8 | 2026-06-29T23:28:16+00:00 | Vulnerability · Source |
| CVE-2025-10532 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component | fixed: 264 known affected: 8 | 2026-06-29T23:28:12+00:00 | Vulnerability · Source |
| CVE-2025-10531 | redhat_vex | firefox: Mitigation bypass in the Web Compatibility: Tooling component | known not affected: 12 | 2026-06-29T23:28:11+00:00 | Vulnerability · Source |
| CVE-2025-10530 | redhat_vex | firefox: Spoofing issue in the WebAuthn component in Firefox for Android | known not affected: 12 | 2026-06-29T23:28:08+00:00 | Vulnerability · Source |
| CVE-2025-10529 | redhat_vex | firefox: thunderbird: Same-origin policy bypass in the Layout component | fixed: 264 known affected: 8 | 2026-06-29T23:28:07+00:00 | Vulnerability · Source |
| CVE-2025-1861 | redhat_vex | php: Stream HTTP wrapper truncates redirect location to 1024 bytes | fixed: 1775 known affected: 54 | 2026-06-29T23:28:02+00:00 | Vulnerability · Source |
| CVE-2025-1736 | redhat_vex | php: Stream HTTP wrapper header check might omit basic auth header | fixed: 1775 known affected: 54 | 2026-06-29T23:27:58+00:00 | Vulnerability · Source |
| CVE-2025-1735 | redhat_vex | php: pgsql extension does not check for errors during escaping | fixed: 1115 known affected: 106 | 2026-06-29T23:27:53+00:00 | Vulnerability · Source |
| CVE-2025-1734 | redhat_vex | php: Streams HTTP wrapper does not fail for headers with invalid name and no colon | fixed: 1775 known affected: 54 | 2026-06-29T23:27:50+00:00 | Vulnerability · Source |
| CVE-2025-1647 | redhat_vex | bootstrap: Bootstrap XSS Vulnerability | known affected: 271 | 2026-06-29T23:27:49+00:00 | Vulnerability · Source |
| CVE-2025-1219 | redhat_vex | php: libxml streams use wrong content-type header when requesting a redirected resource | fixed: 1775 known affected: 54 | 2026-06-29T23:27:34+00:00 | Vulnerability · Source |
| CVE-2025-1217 | redhat_vex | php: Header parser of http stream wrapper does not handle folded headers | fixed: 1775 known affected: 54 | 2026-06-29T23:27:30+00:00 | Vulnerability · Source |
| CVE-2025-1182 | redhat_vex | binutils: GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption | known not affected: 61 | 2026-06-29T23:27:29+00:00 | Vulnerability · Source |
| CVE-2025-1181 | redhat_vex | binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption | known not affected: 61 | 2026-06-29T23:27:26+00:00 | Vulnerability · Source |
| CVE-2025-1179 | redhat_vex | binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption | known affected: 4 known not affected: 57 | 2026-06-29T23:27:25+00:00 | Vulnerability · Source |
| CVE-2025-1178 | redhat_vex | binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption | known affected: 4 known not affected: 57 | 2026-06-29T23:27:23+00:00 | Vulnerability · Source |
| CVE-2025-1176 | redhat_vex | binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow | known not affected: 61 | 2026-06-29T23:27:20+00:00 | Vulnerability · Source |
| CVE-2024-9264 | redhat_vex | grafana: Command injection and local file inclusion via SQL Expressions | known not affected: 23 | 2026-06-29T23:25:47+00:00 | Vulnerability · Source |
| CVE-2025-0840 | redhat_vex | binutils: GNU Binutils objdump.c disassemble_bytes stack-based overflow | known affected: 4 known not affected: 57 | 2026-06-29T23:25:00+00:00 | Vulnerability · Source |
| CVE-2025-0716 | redhat_vex | angular: AngularJS improper sanitization in SVG '<image>' element | known affected: 65 known not affected: 4 | 2026-06-29T23:24:58+00:00 | Vulnerability · Source |
| CVE-2025-0514 | redhat_vex | libreoffice: Executable hyperlink Windows path targets executed unconditionally on activation | known not affected: 670 | 2026-06-29T23:24:33+00:00 | Vulnerability · Source |
| CVE-2024-8096 | redhat_vex | curl: OCSP stapling bypass with GnuTLS | known affected: 5 known not affected: 21 | 2026-06-29T23:24:05+00:00 | Vulnerability · Source |
| CVE-2023-53076 | redhat_vex | kernel: bpf: Adjust insufficient default bpf_jit_limit | known affected: 184 known not affected: 90 | 2026-06-29T23:18:34+00:00 | Vulnerability · Source |