VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296691 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2008-5341 | redhat_vex | Java Web Start exposes username and the pathname of the JWS cache | fixed: 382 | 2026-06-28T12:00:57+00:00 | Vulnerability · Source |
| CVE-2020-16845 | redhat_vex | golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs | fixed: 681 known affected: 212 known not affected: 1218 | 2026-06-28T12:00:57+00:00 | Vulnerability · Source |
| CVE-2021-22959 | redhat_vex | llhttp: HTTP Request Smuggling due to spaces in headers | fixed: 242 known affected: 1 known not affected: 6 | 2026-06-28T12:00:56+00:00 | Vulnerability · Source |
| CVE-2025-65114 | redhat_vex | Apache Traffic Server: Apache Traffic Server: Request smuggling due to malformed chunked messages | known not affected: 1 | 2026-06-28T12:00:56+00:00 | Vulnerability · Source |
| CVE-2008-3520 | redhat_vex | jasper: multiple integer overflows in jas_alloc calls | fixed: 106 | 2026-06-28T12:00:56+00:00 | Vulnerability · Source |
| CVE-2026-9890 | redhat_vex | chromium-browser: Use after free in XR | known not affected: 1 | 2026-06-28T12:00:55+00:00 | Vulnerability · Source |
| CVE-2021-22918 | redhat_vex | libuv: out-of-bounds read in uv__idna_toascii() can lead to information disclosures or crashes | fixed: 231 known affected: 4 known not affected: 23 | 2026-06-28T12:00:55+00:00 | Vulnerability · Source |
| CVE-2020-36242 | redhat_vex | python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow | fixed: 141 known affected: 13 known not affected: 22 | 2026-06-28T12:00:54+00:00 | Vulnerability · Source |
| CVE-2026-9883 | redhat_vex | chromium-browser: Use after free in Base | known not affected: 1 | 2026-06-28T12:00:54+00:00 | Vulnerability · Source |
| CVE-2018-1109 | redhat_vex | nodejs-braces: Regular Expression Denial of Service (ReDoS) in lib/parsers.js | fixed: 1 known not affected: 15 | 2026-06-28T12:00:54+00:00 | Vulnerability · Source |
| CVE-2026-30246 | redhat_vex | github.com/gofiber/fiber/v3: github.com/gofiber/fiber/v3: Information disclosure due to incorrect cache key generation | known not affected: 1 | 2026-06-28T12:00:52+00:00 | Vulnerability · Source |
| CVE-2025-65965 | redhat_vex | github.com/anchore/grype: Grype credential disclosure vulnerability | known not affected: 1 | 2026-06-28T12:00:51+00:00 | Vulnerability · Source |
| CVE-2019-9022 | redhat_vex | php: memcpy with negative length via crafted DNS response | fixed: 1247 known affected: 32 | 2026-06-28T12:00:48+00:00 | Vulnerability · Source |
| CVE-2019-9020 | redhat_vex | php: Invalid memory access in function xmlrpc_decode() | fixed: 1247 known affected: 87 | 2026-06-28T12:00:48+00:00 | Vulnerability · Source |
| CVE-2026-31606 | redhat_vex | kernel: usb: gadget: f_hid: don't call cdev_init while cdev in use | known not affected: 274 | 2026-06-28T12:00:46+00:00 | Vulnerability · Source |
| CVE-2019-8912 | redhat_vex | kernel: af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr | fixed: 25 known not affected: 103 | 2026-06-28T12:00:45+00:00 | Vulnerability · Source |
| CVE-2019-8980 | redhat_vex | kernel: memory leak in the kernel_read_file function in fs/exec.c allows to cause a denial of service | fixed: 150 known affected: 1 known not affected: 55 | 2026-06-28T12:00:45+00:00 | Vulnerability · Source |
| CVE-2026-31487 | redhat_vex | kernel: spi: use generic driver_override infrastructure | known affected: 260 known not affected: 14 | 2026-06-28T12:00:43+00:00 | Vulnerability · Source |
| CVE-2025-62661 | redhat_vex | mediawiki: thanks: growth experiments: Do permission checking when getting counts of global and local edits, new articles and thanks | known not affected: 1 | 2026-06-28T12:00:43+00:00 | Vulnerability · Source |
| CVE-2019-7090 | redhat_vex | flash-plugin: Information Disclosure vulnerability (APSB19-06) | fixed: 3 | 2026-06-28T12:00:43+00:00 | Vulnerability · Source |
| CVE-2025-60358 | redhat_vex | radare2: radare2 memory leak | known not affected: 1 | 2026-06-28T12:00:43+00:00 | Vulnerability · Source |
| CVE-2019-13714 | redhat_vex | chromium-browser: CSS injection | fixed: 14 | 2026-06-28T12:00:41+00:00 | Vulnerability · Source |
| CVE-2019-11479 | redhat_vex | kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service | fixed: 987 known affected: 1 | 2026-06-28T12:00:41+00:00 | Vulnerability · Source |
| CVE-2026-33256 | redhat_vex | pdns-recursor: unbounded memory allocation by internal web server | known not affected: 1 | 2026-06-28T12:00:39+00:00 | Vulnerability · Source |
| CVE-2019-5800 | redhat_vex | chromium-browser: CSP bypass with blob URL | fixed: 14 | 2026-06-28T12:00:39+00:00 | Vulnerability · Source |
| CVE-2020-29509 | redhat_vex | go: encoding/xml: XML attribute instability | known affected: 16 known not affected: 91 | 2026-06-28T12:00:39+00:00 | Vulnerability · Source |
| CVE-2019-5794 | redhat_vex | chromium-browser: Security UI spoofing | fixed: 14 | 2026-06-28T12:00:38+00:00 | Vulnerability · Source |
| CVE-2019-5793 | redhat_vex | chromium-browser: Excessive permissions for private API in Extensions | fixed: 14 | 2026-06-28T12:00:38+00:00 | Vulnerability · Source |
| CVE-2022-4139 | redhat_vex | kernel: i915: Incorrect GPU TLB flush can lead to random memory access | fixed: 935 known not affected: 46 | 2026-06-28T12:00:37+00:00 | Vulnerability · Source |
| CVE-2019-5761 | redhat_vex | chromium-browser: Use after free in SwiftShader | fixed: 12 | 2026-06-28T12:00:37+00:00 | Vulnerability · Source |
| CVE-2021-0129 | redhat_vex | kernel: Improper access control in BlueZ may allow information disclosure vulnerability. | fixed: 150 known affected: 28 known not affected: 121 | 2026-06-28T12:00:37+00:00 | Vulnerability · Source |
| CVE-2019-5765 | redhat_vex | chromium-browser: Insufficient policy enforcement in the browser | fixed: 12 | 2026-06-28T12:00:37+00:00 | Vulnerability · Source |
| CVE-2004-1018 | redhat_vex | security flaw | fixed: 336 | 2026-06-28T11:59:20+00:00 | Vulnerability · Source |
| CVE-2004-0940 | redhat_vex | httpd mod_include SSI overflow | fixed: 6 | 2026-06-28T11:59:19+00:00 | Vulnerability · Source |
| CVE-2004-0837 | redhat_vex | security flaw | fixed: 5 | 2026-06-28T11:59:18+00:00 | Vulnerability · Source |
| CVE-2019-13565 | redhat_vex | openldap: ACL restrictions bypass due to sasl_ssf value being set permanently | known affected: 16 known not affected: 7 | 2026-06-28T11:59:14+00:00 | Vulnerability · Source |
| CVE-2021-20194 | redhat_vex | kernel: heap overflow in __cgroup_bpf_run_filter_getsockopt() | fixed: 150 known affected: 1 known not affected: 149 | 2026-06-28T11:59:11+00:00 | Vulnerability · Source |
| CVE-2020-14305 | redhat_vex | kernel: memory corruption in Voice over IP nf_conntrack_h323 module | fixed: 204 known affected: 1 known not affected: 79 | 2026-06-28T11:59:11+00:00 | Vulnerability · Source |
| CVE-2020-27831 | redhat_vex | quay: email notifications authorization bypass | fixed: 6 | 2026-06-28T11:59:10+00:00 | Vulnerability · Source |
| CVE-2020-3702 | redhat_vex | kernel: ath9k: information disclosure via specifically timed and handcrafted traffic | known affected: 91 known not affected: 106 | 2026-06-28T11:59:10+00:00 | Vulnerability · Source |
| CVE-2026-54651 | redhat_vex | pypdf: python-pypdf: pypdf: Denial of Service via crafted PDF | known affected: 11 | 2026-06-28T11:59:08+00:00 | Vulnerability · Source |
| CVE-2019-3459 | redhat_vex | kernel: Heap address information leak while using L2CAP_GET_CONF_OPT | fixed: 383 known affected: 27 | 2026-06-28T11:59:07+00:00 | Vulnerability · Source |
| CVE-2026-31433 | redhat_vex | kernel: ksmbd: fix potencial OOB in get_file_all_info() for compound requests | known not affected: 274 | 2026-06-28T11:59:07+00:00 | Vulnerability · Source |
| CVE-2015-0318 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T11:59:06+00:00 | Vulnerability · Source |
| CVE-2015-3091 | redhat_vex | flash-plugin: information leaks leading to ASLR bypass (APSB15-09) | fixed: 5 | 2026-06-28T11:59:05+00:00 | Vulnerability · Source |
| CVE-2020-10725 | redhat_vex | dpdk: librte_vhost Malicious guest could cause segfault by sending invalid Virtio descriptor | fixed: 63 known not affected: 155 | 2026-06-28T11:59:04+00:00 | Vulnerability · Source |
| CVE-2020-36048 | redhat_vex | yarnpkg-socket.io/engine.io: allows attackers to cause a denial of service (resource consumption) via a POST request to the long polling transport | known affected: 2 | 2026-06-28T11:59:04+00:00 | Vulnerability · Source |
| CVE-2020-35517 | redhat_vex | QEMU: virtiofsd: potential privileged host device access from guest | fixed: 2701 known affected: 34 known not affected: 27 | 2026-06-28T11:59:03+00:00 | Vulnerability · Source |
| CVE-2020-26116 | redhat_vex | python: CRLF injection via HTTP request method in httplib/http.client | fixed: 1105 known affected: 17 known not affected: 34 | 2026-06-28T11:58:58+00:00 | Vulnerability · Source |
| CVE-2026-8559 | redhat_vex | chromium-browser: chromium-browser: Integer overflow in Internationalization | known not affected: 1 | 2026-06-28T11:58:57+00:00 | Vulnerability · Source |