VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2021-22931 | redhat_vex | nodejs: Improper handling of untypical characters in domain names | fixed: 194 known affected: 1 known not affected: 26 | 2026-06-28T12:04:11+00:00 | Vulnerability · Source |
| CVE-2012-3342 | redhat_vex | JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment) | fixed: 313 known affected: 1 known not affected: 8 | 2026-06-28T12:04:11+00:00 | Vulnerability · Source |
| CVE-2012-2696 | redhat_vex | rhev: backend allows unprivileged queries | fixed: 13 known affected: 1 | 2026-06-28T12:04:10+00:00 | Vulnerability · Source |
| CVE-2026-31625 | redhat_vex | kernel: HID: alps: fix NULL pointer dereference in alps_raw_event() | known affected: 260 known not affected: 14 | 2026-06-28T12:04:09+00:00 | Vulnerability · Source |
| CVE-2020-2654 | redhat_vex | OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037) | fixed: 961 known affected: 1 | 2026-06-28T12:04:09+00:00 | Vulnerability · Source |
| CVE-2021-22930 | redhat_vex | nodejs: Use-after-free on close http2 on stream canceling | fixed: 194 known affected: 1 known not affected: 26 | 2026-06-28T12:04:08+00:00 | Vulnerability · Source |
| CVE-2026-3389 | redhat_vex | squirrel: Squirrel: Denial of Service via null pointer dereference | known not affected: 1 | 2026-06-28T12:04:08+00:00 | Vulnerability · Source |
| CVE-2020-13361 | redhat_vex | QEMU: es1370: OOB access due to incorrect frame count leads to DoS | known affected: 7 known not affected: 86 | 2026-06-28T12:04:08+00:00 | Vulnerability · Source |
| CVE-2021-22925 | redhat_vex | curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure | fixed: 45 known affected: 22 known not affected: 6 | 2026-06-28T12:04:06+00:00 | Vulnerability · Source |
| CVE-2021-22876 | redhat_vex | curl: Leak of authentication credentials in URL via automatic Referer | fixed: 204 known affected: 17 known not affected: 6 | 2026-06-28T12:04:06+00:00 | Vulnerability · Source |
| CVE-2026-8014 | redhat_vex | chromium-browser: Inappropriate implementation in Preload | known not affected: 1 | 2026-06-28T12:04:04+00:00 | Vulnerability · Source |
| CVE-2019-2973 | redhat_vex | OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505) | fixed: 901 | 2026-06-28T12:04:04+00:00 | Vulnerability · Source |
| CVE-2025-71309 | redhat_vex | kernel: fs/ntfs3: fix deadlock in ni_read_folio_cmpr | known not affected: 274 | 2026-06-28T12:04:03+00:00 | Vulnerability · Source |
| CVE-2019-2789 | redhat_vex | mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) | fixed: 291 known not affected: 112 | 2026-06-28T12:04:03+00:00 | Vulnerability · Source |
| CVE-2025-71308 | redhat_vex | kernel: accel/amdxdna: Fix potential NULL pointer dereference in context cleanup | known not affected: 274 | 2026-06-28T12:04:02+00:00 | Vulnerability · Source |
| CVE-2026-8022 | redhat_vex | chromium-browser: Inappropriate implementation in MHTML | known not affected: 1 | 2026-06-28T12:04:02+00:00 | Vulnerability · Source |
| CVE-2020-2584 | redhat_vex | mysql: Server: Options unspecified vulnerability (CPU Jan 2020) | fixed: 337 known not affected: 92 | 2026-06-28T12:04:01+00:00 | Vulnerability · Source |
| CVE-2025-53861 | redhat_vex | aap: Sensitive Cookie(s) Set Without Security Flags | known not affected: 1 | 2026-06-28T12:04:00+00:00 | Vulnerability · Source |
| CVE-2019-2811 | redhat_vex | mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) | fixed: 291 known not affected: 112 | 2026-06-28T12:03:59+00:00 | Vulnerability · Source |
| CVE-2020-2593 | redhat_vex | OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548) | fixed: 965 | 2026-06-28T12:03:59+00:00 | Vulnerability · Source |
| CVE-2026-31619 | redhat_vex | kernel: ALSA: fireworks: bound device-supplied status before string array lookup | known affected: 260 known not affected: 14 | 2026-06-28T12:03:57+00:00 | Vulnerability · Source |
| CVE-2018-19985 | redhat_vex | kernel: oob memory read in hso_probe in drivers/net/usb/hso.c | fixed: 361 known affected: 30 known not affected: 13 | 2026-06-28T12:03:56+00:00 | Vulnerability · Source |
| CVE-2020-25639 | redhat_vex | kernel: NULL pointer dereference via nouveau ioctl can lead to DoS | known affected: 48 known not affected: 162 | 2026-06-28T12:03:55+00:00 | Vulnerability · Source |
| CVE-2019-2762 | redhat_vex | OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) | fixed: 1023 | 2026-06-28T12:03:55+00:00 | Vulnerability · Source |
| CVE-2025-71311 | redhat_vex | kernel: fs/ntfs3: Initialize new folios before use | known not affected: 274 | 2026-06-28T12:03:54+00:00 | Vulnerability · Source |
| CVE-2012-2037 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-14) | fixed: 5 | 2026-06-28T12:03:52+00:00 | Vulnerability · Source |
| CVE-2019-2580 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2019) | fixed: 291 known not affected: 123 | 2026-06-28T12:03:52+00:00 | Vulnerability · Source |
| CVE-2019-2596 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019) | fixed: 291 known not affected: 123 | 2026-06-28T12:03:52+00:00 | Vulnerability · Source |
| CVE-2012-2038 | redhat_vex | flash-plugin: information disclosure flaw (APSB12-14) | fixed: 5 | 2026-06-28T12:03:51+00:00 | Vulnerability · Source |
| CVE-2012-2034 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-14) | fixed: 5 | 2026-06-28T12:03:50+00:00 | Vulnerability · Source |
| CVE-2025-71312 | redhat_vex | kernel: fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super() | known not affected: 274 | 2026-06-28T12:03:50+00:00 | Vulnerability · Source |
| CVE-2026-29184 | redhat_vex | @backstage/plugin-scaffolder-backend: Backstage Scaffolder Backend: Information disclosure via malicious template bypassing log redaction | known affected: 2 | 2026-06-28T12:03:49+00:00 | Vulnerability · Source |
| CVE-2019-3865 | redhat_vex | quay: Stored XSS in super user function | known affected: 1 known not affected: 1 | 2026-06-28T12:03:49+00:00 | Vulnerability · Source |
| CVE-2014-9584 | redhat_vex | kernel: isofs: unchecked printing of ER records | fixed: 372 known affected: 1 | 2026-06-28T12:03:48+00:00 | Vulnerability · Source |
| CVE-2014-8892 | redhat_vex | JDK: unspecified partial Java sandbox bypass fixed in Feb 2015 update | fixed: 388 | 2026-06-28T12:03:47+00:00 | Vulnerability · Source |
| CVE-2026-31616 | redhat_vex | kernel: usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() | known not affected: 274 | 2026-06-28T12:03:47+00:00 | Vulnerability · Source |
| CVE-2026-3062 | redhat_vex | chromium-browser: Out of bounds read and write in Tint | known not affected: 1 | 2026-06-28T12:03:47+00:00 | Vulnerability · Source |
| CVE-2026-31964 | redhat_vex | htslib: HTSlib: Denial of Service via NULL pointer dereference in CRAM decoding | known not affected: 1 | 2026-06-28T12:03:46+00:00 | Vulnerability · Source |
| CVE-2026-27898 | redhat_vex | vaultwarden: Vaultwarden: Information disclosure via API partial update | known not affected: 1 | 2026-06-28T12:03:46+00:00 | Vulnerability · Source |
| CVE-2014-8106 | redhat_vex | qemu: cirrus: insufficient blit region checks | fixed: 135 known affected: 1 | 2026-06-28T12:03:46+00:00 | Vulnerability · Source |
| CVE-2012-1717 | redhat_vex | OpenJDK: insecure temporary file permissions (JRE, 7143606) | fixed: 584 known affected: 2 | 2026-06-28T12:03:46+00:00 | Vulnerability · Source |
| CVE-2020-25673 | redhat_vex | kernel: non-blocking socket in llcp_sock_connect() | known not affected: 210 | 2026-06-28T12:03:46+00:00 | Vulnerability · Source |
| CVE-2019-2449 | redhat_vex | JDK: unspecified vulnerability fixed in 8u201 (Deployment) | fixed: 114 | 2026-06-28T12:03:45+00:00 | Vulnerability · Source |
| CVE-2014-6520 | redhat_vex | mysql: unspecified vulnerability related to SERVER:DDL (CPU October 2014) | fixed: 278 under investigation: 9 | 2026-06-28T12:03:44+00:00 | Vulnerability · Source |
| CVE-2020-13791 | redhat_vex | QEMU: ati-vga: OOB access while reading PCI configuration may lead to DoS | known not affected: 93 | 2026-06-28T12:03:44+00:00 | Vulnerability · Source |
| CVE-2012-0756 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-03) | fixed: 5 | 2026-06-28T12:03:43+00:00 | Vulnerability · Source |
| CVE-2014-6271 | redhat_vex | bash: specially-crafted environment variables can be used to inject shell commands | fixed: 164 | 2026-06-28T12:03:43+00:00 | Vulnerability · Source |
| CVE-2025-71223 | redhat_vex | kernel: smb/server: fix refcount leak in smb2_open() | known affected: 76 known not affected: 198 | 2026-06-28T12:03:42+00:00 | Vulnerability · Source |
| CVE-2026-35359 | redhat_vex | rust-coreutils: cp: information disclosure via Time-of-Check to Time-of-Use symlink swap | known not affected: 1 | 2026-06-28T12:03:41+00:00 | Vulnerability · Source |
| CVE-2019-20810 | redhat_vex | kernel: go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for a failure path, which causes a memory leak | known not affected: 104 | 2026-06-28T12:03:37+00:00 | Vulnerability · Source |