VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296691 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2013-5818 | redhat_vex | JDK: unspecified vulnerability fixed in 7u45 (Deployment) | fixed: 364 known not affected: 8 | 2026-06-28T11:55:53+00:00 | Vulnerability · Source |
| CVE-2018-25046 | redhat_vex | cloudfoundry/archiver: improper path sanitization can result in files being extracted outside of the target directory | known affected: 1 | 2026-06-28T11:55:52+00:00 | Vulnerability · Source |
| CVE-2019-13692 | redhat_vex | chromium-browser: SOP bypass | fixed: 14 | 2026-06-28T11:55:52+00:00 | Vulnerability · Source |
| CVE-2019-13694 | redhat_vex | chromium-browser: Use-after-free in WebRTC | fixed: 14 | 2026-06-28T11:55:51+00:00 | Vulnerability · Source |
| CVE-2018-16071 | redhat_vex | chromium-browser: Use after free in WebRTC | fixed: 12 | 2026-06-28T11:55:51+00:00 | Vulnerability · Source |
| CVE-2018-2797 | redhat_vex | OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) | fixed: 846 known affected: 8 | 2026-06-28T11:55:50+00:00 | Vulnerability · Source |
| CVE-2013-5817 | redhat_vex | OpenJDK: VersionHelper12 does not honor modifyThreadGroup restriction (JNDI, 8013739) | fixed: 634 | 2026-06-28T11:55:49+00:00 | Vulnerability · Source |
| CVE-2019-13709 | redhat_vex | chromium-browser: File download protection bypass | fixed: 14 | 2026-06-28T11:55:49+00:00 | Vulnerability · Source |
| CVE-2013-6415 | redhat_vex | rubygem-actionpack: number_to_currency XSS | fixed: 37 known affected: 4 known not affected: 4 | 2026-06-28T11:55:49+00:00 | Vulnerability · Source |
| CVE-2018-2790 | redhat_vex | OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) | fixed: 846 known affected: 8 | 2026-06-28T11:55:48+00:00 | Vulnerability · Source |
| CVE-2013-5802 | redhat_vex | OpenJDK: javax.xml.transform.TransformerFactory does not properly honor XMLConstants.FEATURE_SECURE_PROCESSING (JAXP, 8012425) | fixed: 634 | 2026-06-28T11:55:48+00:00 | Vulnerability · Source |
| CVE-2019-13748 | redhat_vex | chromium-browser: Insufficient policy enforcement in developer tools | fixed: 14 | 2026-06-28T11:55:48+00:00 | Vulnerability · Source |
| CVE-2019-13673 | redhat_vex | chromium-browser: Cross-origin information leak using devtools | fixed: 14 | 2026-06-28T11:55:47+00:00 | Vulnerability · Source |
| CVE-2018-2769 | redhat_vex | mysql: Server: Pluggable Auth unspecified vulnerability (CPU Apr 2018) | fixed: 186 known not affected: 105 | 2026-06-28T11:55:46+00:00 | Vulnerability · Source |
| CVE-2019-13683 | redhat_vex | chromium-browser: Exceptions leaked by devtools | fixed: 14 | 2026-06-28T11:55:44+00:00 | Vulnerability · Source |
| CVE-2013-5829 | redhat_vex | OpenJDK: Java2d Disposer security bypass (2D, 8017287) | fixed: 634 | 2026-06-28T11:55:44+00:00 | Vulnerability · Source |
| CVE-2013-5825 | redhat_vex | OpenJDK: XML parsing Denial of Service (JAXP, 8014530) | fixed: 634 | 2026-06-28T11:55:44+00:00 | Vulnerability · Source |
| CVE-2019-13701 | redhat_vex | chromium-browser: URL spoof in navigation | fixed: 14 | 2026-06-28T11:55:43+00:00 | Vulnerability · Source |
| CVE-2019-13758 | redhat_vex | chromium-browser: Insufficient policy enforcement in navigation | fixed: 14 | 2026-06-28T11:55:42+00:00 | Vulnerability · Source |
| CVE-2018-2638 | redhat_vex | JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment) | fixed: 169 | 2026-06-28T11:55:41+00:00 | Vulnerability · Source |
| CVE-2018-2603 | redhat_vex | OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387) | fixed: 856 known affected: 8 | 2026-06-28T11:55:41+00:00 | Vulnerability · Source |
| CVE-2019-13751 | redhat_vex | sqlite: fts3: improve detection of corrupted records | fixed: 89 known affected: 6 known not affected: 7 | 2026-06-28T11:55:40+00:00 | Vulnerability · Source |
| CVE-2013-5331 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-28) | fixed: 5 | 2026-06-28T11:55:39+00:00 | Vulnerability · Source |
| CVE-2020-1748 | redhat_vex | Wildfly: Improper authorization issue in WildFlySecurityManager when using alternative protection domain | fixed: 643 known affected: 10 | 2026-06-28T11:55:39+00:00 | Vulnerability · Source |
| CVE-2011-2097 | redhat_vex | acroread: multiple code execution flaws (APSB11-16) | fixed: 18 | 2026-06-28T11:55:39+00:00 | Vulnerability · Source |
| CVE-2019-13696 | redhat_vex | chromium-browser: Use-after-free in V8 | fixed: 14 | 2026-06-28T11:55:38+00:00 | Vulnerability · Source |
| CVE-2020-1745 | redhat_vex | undertow: AJP File Read/Inclusion Vulnerability | fixed: 1455 known affected: 5 known not affected: 23 | 2026-06-28T11:55:38+00:00 | Vulnerability · Source |
| CVE-2013-3345 | redhat_vex | flash-plugin: Multiple code execution flaws (APSB13-17) | fixed: 4 | 2026-06-28T11:55:38+00:00 | Vulnerability · Source |
| CVE-2013-5330 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-26) | fixed: 5 | 2026-06-28T11:55:38+00:00 | Vulnerability · Source |
| CVE-2013-3347 | redhat_vex | flash-plugin: Multiple code execution flaws (APSB13-17) | fixed: 4 | 2026-06-28T11:55:38+00:00 | Vulnerability · Source |
| CVE-2019-13713 | redhat_vex | chromium-browser: Cross-origin data leak | fixed: 14 | 2026-06-28T11:55:37+00:00 | Vulnerability · Source |
| CVE-2020-1744 | redhat_vex | keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP | fixed: 12 known affected: 2 known not affected: 1 | 2026-06-28T11:55:36+00:00 | Vulnerability · Source |
| CVE-2026-4710 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component | fixed: 320 known affected: 8 | 2026-06-28T11:55:36+00:00 | Vulnerability · Source |
| CVE-2019-13711 | redhat_vex | chromium-browser: Cross-context information leak | fixed: 14 | 2026-06-28T11:55:36+00:00 | Vulnerability · Source |
| CVE-2018-2565 | redhat_vex | mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2018) | fixed: 63 known not affected: 105 | 2026-06-28T11:55:35+00:00 | Vulnerability · Source |
| CVE-2018-14662 | redhat_vex | ceph: authenticated user with read only permissions can steal dm-crypt / LUKS key | fixed: 147 known affected: 22 known not affected: 15 | 2026-06-28T11:55:35+00:00 | Vulnerability · Source |
| CVE-2013-3344 | redhat_vex | flash-plugin: Multiple code execution flaws (APSB13-17) | fixed: 4 | 2026-06-28T11:55:35+00:00 | Vulnerability · Source |
| CVE-2019-17056 | redhat_vex | kernel: unprivileged access to llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC socket type. | known not affected: 93 | 2026-06-28T11:55:34+00:00 | Vulnerability · Source |
| CVE-2019-13666 | redhat_vex | chromium-browser: Side channel using storage size estimate | fixed: 14 | 2026-06-28T11:55:34+00:00 | Vulnerability · Source |
| CVE-2009-1868 | redhat_vex | flash-plugin: multiple code execution flaws (APSB09-10) | fixed: 10 | 2026-06-28T11:55:33+00:00 | Vulnerability · Source |
| CVE-2013-3009 | redhat_vex | JDK: Unspecified security fixes (July 2013) | fixed: 278 | 2026-06-28T11:55:33+00:00 | Vulnerability · Source |
| CVE-2019-13677 | redhat_vex | chromium-browser: Chrome web store origin needs to be isolated | fixed: 14 | 2026-06-28T11:55:32+00:00 | Vulnerability · Source |
| CVE-2020-14365 | redhat_vex | ansible: dnf module install packages with no GPG signature | fixed: 16 known affected: 11 | 2026-06-28T11:55:32+00:00 | Vulnerability · Source |
| CVE-2019-13732 | redhat_vex | chromium-browser: Use after free in WebAudio | fixed: 14 | 2026-06-28T11:55:32+00:00 | Vulnerability · Source |
| CVE-2018-2582 | redhat_vex | OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962) | fixed: 566 known affected: 9 known not affected: 14 | 2026-06-28T11:55:32+00:00 | Vulnerability · Source |
| CVE-2018-2647 | redhat_vex | mysql: Server: Replication unspecified vulnerability (CPU Jan 2018) | fixed: 133 known not affected: 96 | 2026-06-28T11:55:31+00:00 | Vulnerability · Source |
| CVE-2026-31590 | redhat_vex | kernel: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION | known affected: 232 known not affected: 42 | 2026-06-28T11:55:31+00:00 | Vulnerability · Source |
| CVE-2018-2583 | redhat_vex | mysql: Stored Procedure unspecified vulnerability (CPU Jan 2018) | fixed: 133 known not affected: 96 | 2026-06-28T11:55:30+00:00 | Vulnerability · Source |
| CVE-2013-2450 | redhat_vex | OpenJDK: ObjectStreamClass circular reference denial of service (Serialization, 8000638) | fixed: 555 | 2026-06-28T11:55:29+00:00 | Vulnerability · Source |
| CVE-2019-16994 | redhat_vex | kernel: Memory leak in sit_init_net() in net/ipv6/sit.c | fixed: 358 known affected: 43 | 2026-06-28T11:55:29+00:00 | Vulnerability · Source |