VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296691 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2008-4818 | redhat_vex | Flash Player XSS | fixed: 10 | 2026-06-28T12:01:34+00:00 | Vulnerability · Source |
| CVE-2026-9984 | redhat_vex | chromium-browser: Use after free in UI | known not affected: 1 | 2026-06-28T12:01:34+00:00 | Vulnerability · Source |
| CVE-2020-35505 | redhat_vex | QEMU: NULL pointer dereference in do_busid_cmd() in hw/scsi/esp.c | known not affected: 110 | 2026-06-28T12:01:33+00:00 | Vulnerability · Source |
| CVE-2020-8177 | redhat_vex | curl: Incorrect argument check can allow remote servers to overwrite local files | fixed: 139 known affected: 6 known not affected: 13 | 2026-06-28T12:01:33+00:00 | Vulnerability · Source |
| CVE-2020-35509 | redhat_vex | keycloak: X509 Direct Grant Auth does not verify certificate timestamp validity | fixed: 10 known not affected: 6 | 2026-06-28T12:01:30+00:00 | Vulnerability · Source |
| CVE-2022-2873 | redhat_vex | kernel: an out-of-bounds vulnerability in i2c-ismt driver | fixed: 475 known affected: 42 | 2026-06-28T12:01:29+00:00 | Vulnerability · Source |
| CVE-2018-20856 | redhat_vex | kernel: Use-after-free in __blk_drain_queue() function in block/blk-core.c | fixed: 602 known not affected: 63 | 2026-06-28T12:01:29+00:00 | Vulnerability · Source |
| CVE-2018-20834 | redhat_vex | nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link | fixed: 76 known not affected: 34 | 2026-06-28T12:01:28+00:00 | Vulnerability · Source |
| CVE-2025-61783 | redhat_vex | social-app-django: Python Social Auth - Django has unsafe account association | known affected: 4 | 2026-06-28T12:01:27+00:00 | Vulnerability · Source |
| CVE-2008-0892 | redhat_vex | Server: shell command injection in CGI replication monitor | fixed: 13 known not affected: 10 | 2026-06-28T12:01:27+00:00 | Vulnerability · Source |
| CVE-2026-43660 | redhat_vex | webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-28T12:01:26+00:00 | Vulnerability · Source |
| CVE-2026-43504 | redhat_vex | Prosody: mod_proxy65: Prosody: Unauthenticated traffic relay due to access control mishandling in mod_proxy65 | known not affected: 1 | 2026-06-28T12:01:25+00:00 | Vulnerability · Source |
| CVE-2026-43506 | redhat_vex | Prosody: Prosody: Denial of Service via memory exhaustion from unauthenticated connections | known not affected: 1 | 2026-06-28T12:01:24+00:00 | Vulnerability · Source |
| CVE-2007-4567 | redhat_vex | kernel: ipv6_hop_jumbo remote system crash | fixed: 193 known not affected: 20 | 2026-06-28T12:01:23+00:00 | Vulnerability · Source |
| CVE-2007-2764 | redhat_vex | kernel: denial of service via unspecified vectors | known affected: 15 known not affected: 89 | 2026-06-28T12:01:22+00:00 | Vulnerability · Source |
| CVE-2008-1654 | redhat_vex | Flash Player cross domain HTTP header flaw | fixed: 10 | 2026-06-28T12:01:22+00:00 | Vulnerability · Source |
| CVE-2026-4359 | redhat_vex | mongo-c-driver: mongo-c-driver: Denial of Service via malformed HTTP response | known not affected: 1 | 2026-06-28T12:01:22+00:00 | Vulnerability · Source |
| CVE-2007-0243 | redhat_vex | java-jre: GIF buffer overflow | fixed: 368 | 2026-06-28T12:01:19+00:00 | Vulnerability · Source |
| CVE-2020-7788 | redhat_vex | nodejs-ini: Prototype pollution via malicious INI file | fixed: 380 known affected: 1 known not affected: 75 | 2026-06-28T12:01:18+00:00 | Vulnerability · Source |
| CVE-2020-12888 | redhat_vex | Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario | fixed: 992 known not affected: 59 | 2026-06-28T12:01:17+00:00 | Vulnerability · Source |
| CVE-2018-21008 | redhat_vex | kernel: use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c | known not affected: 104 | 2026-06-28T12:01:15+00:00 | Vulnerability · Source |
| CVE-2026-29777 | redhat_vex | github.com/traefik/traefik: Traefik: Traffic redirection and hostname bypass via unsanitized input in router rules | known affected: 1 | 2026-06-28T12:01:15+00:00 | Vulnerability · Source |
| CVE-2025-61023 | redhat_vex | virtuoso-opensource: Virtuoso-opensource: Denial of Service in st_compare component via crafted SQL statements | known not affected: 3 | 2026-06-28T12:01:14+00:00 | Vulnerability · Source |
| CVE-2021-36221 | redhat_vex | golang: net/http/httputil: panic due to racy read of persistConn after handler panic | fixed: 1053 known affected: 136 known not affected: 175 | 2026-06-28T12:01:13+00:00 | Vulnerability · Source |
| CVE-2025-32395 | redhat_vex | vite: Vite has an `server.fs.deny` bypass with an invalid `request-target` | known affected: 11 | 2026-06-28T12:01:13+00:00 | Vulnerability · Source |
| CVE-2007-3922 | redhat_vex | Vulnerability in the Java Runtime Environment May Allow an Untrusted Applet to Circumvent Network Access Restrictions | fixed: 170 | 2026-06-28T12:01:11+00:00 | Vulnerability · Source |
| CVE-2015-8935 | redhat_vex | php: HTTP response splitting in header() function | fixed: 451 known affected: 84 | 2026-06-28T12:01:10+00:00 | Vulnerability · Source |
| CVE-2020-11725 | redhat_vex | kernel: improper handling of private_size*count multiplication due to count=info->owner typo | known not affected: 104 | 2026-06-28T12:01:10+00:00 | Vulnerability · Source |
| CVE-2025-2783 | redhat_vex | mojo: chromium: chromium Mojo on Windows | known not affected: 1 | 2026-06-28T12:01:09+00:00 | Vulnerability · Source |
| CVE-2020-7211 | redhat_vex | QEMU: Slirp: potential directory traversal using relative paths via tftp server on Windows host | fixed: 4 known not affected: 122 | 2026-06-28T12:01:08+00:00 | Vulnerability · Source |
| CVE-2018-2633 | redhat_vex | OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606) | fixed: 856 known affected: 8 | 2026-06-28T12:01:07+00:00 | Vulnerability · Source |
| CVE-2019-13164 | redhat_vex | Qemu: qemu-bridge-helper ACL can be bypassed when names are too long | known affected: 75 known not affected: 8 | 2026-06-28T12:01:06+00:00 | Vulnerability · Source |
| CVE-2025-71290 | redhat_vex | kernel: misc: ti_fpc202: fix a potential memory leak in probe function | known not affected: 274 | 2026-06-28T12:01:06+00:00 | Vulnerability · Source |
| CVE-2020-10732 | redhat_vex | kernel: uninitialized kernel data leak in userspace coredumps | fixed: 354 known affected: 43 | 2026-06-28T12:01:06+00:00 | Vulnerability · Source |
| CVE-2004-0835 | redhat_vex | security flaw | fixed: 5 | 2026-06-28T12:01:03+00:00 | Vulnerability · Source |
| CVE-2021-3602 | redhat_vex | buildah: Host environment variables leaked in build container when using chroot isolation | fixed: 648 known affected: 17 known not affected: 14 | 2026-06-28T12:01:03+00:00 | Vulnerability · Source |
| CVE-2018-20836 | redhat_vex | kernel: race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c leads to use-after-free | fixed: 441 known affected: 43 known not affected: 53 | 2026-06-28T12:01:03+00:00 | Vulnerability · Source |
| CVE-2021-22940 | redhat_vex | nodejs: Use-after-free on close http2 on stream canceling | fixed: 194 known affected: 1 known not affected: 26 | 2026-06-28T12:01:03+00:00 | Vulnerability · Source |
| CVE-2021-34552 | redhat_vex | python-pillow: Buffer overflow in image convert function | fixed: 22 known affected: 7 known not affected: 9 | 2026-06-28T12:01:02+00:00 | Vulnerability · Source |
| CVE-2026-27854 | redhat_vex | DNSdist: DNSdist: Denial of Service due to use-after-free vulnerability in Lua | known not affected: 1 | 2026-06-28T12:01:02+00:00 | Vulnerability · Source |
| CVE-2021-34558 | redhat_vex | golang: crypto/tls: certificate of wrong type is causing TLS client to panic | fixed: 1167 known affected: 156 known not affected: 818 | 2026-06-28T12:01:02+00:00 | Vulnerability · Source |
| CVE-2021-22883 | redhat_vex | nodejs: HTTP2 'unknownProtocol' cause DoS by resource exhaustion | fixed: 354 known affected: 1 known not affected: 6 | 2026-06-28T12:01:02+00:00 | Vulnerability · Source |
| CVE-2019-13233 | redhat_vex | kernel: use-after-free in arch/x86/lib/insn-eval.c | fixed: 592 known affected: 12 known not affected: 37 | 2026-06-28T12:01:02+00:00 | Vulnerability · Source |
| CVE-2025-6011 | redhat_vex | github.com/hashicorp/vault: Vault Userpass Authentication Timing Vulnerability | known affected: 10 | 2026-06-28T12:01:00+00:00 | Vulnerability · Source |
| CVE-2020-5311 | redhat_vex | python-pillow: out-of-bounds write in expandrow in libImaging/SgiRleDecode.c | fixed: 43 known affected: 1 known not affected: 12 | 2026-06-28T12:01:00+00:00 | Vulnerability · Source |
| CVE-2026-9875 | redhat_vex | chromium-browser: Out of bounds read in WebGL | known not affected: 1 | 2026-06-28T12:00:59+00:00 | Vulnerability · Source |
| CVE-2008-5345 | redhat_vex | JRE allows unauthorized file access and connections to localhost | fixed: 587 | 2026-06-28T12:00:59+00:00 | Vulnerability · Source |
| CVE-2021-27292 | redhat_vex | nodejs-ua-parser-js: ReDoS via malicious User-Agent header | fixed: 36 known affected: 15 known not affected: 460 | 2026-06-28T12:00:59+00:00 | Vulnerability · Source |
| CVE-2008-5346 | redhat_vex | JRE allows unauthorized memory read access via a crafted ZIP file | fixed: 391 | 2026-06-28T12:00:58+00:00 | Vulnerability · Source |
| CVE-2025-25209 | redhat_vex | RHCL: sharedSecretRef Can Be Used To Leak Secrets Severity | known affected: 1 | 2026-06-28T12:00:57+00:00 | Vulnerability · Source |