VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-62609 | redhat_vex | mlx: MLX has Wild Pointer Dereference in load_gguf() | known not affected: 1 | 2026-06-28T12:01:46+00:00 | Vulnerability · Source |
| CVE-2020-25704 | redhat_vex | kernel: perf_event_parse_addr_filter memory | fixed: 485 known affected: 17 known not affected: 21 | 2026-06-28T12:01:45+00:00 | Vulnerability · Source |
| CVE-2009-2722 | redhat_vex | JDK Multiple unspecified vulnerabilities in Provider class (incorrect fix) | fixed: 66 | 2026-06-28T12:01:45+00:00 | Vulnerability · Source |
| CVE-2023-45863 | redhat_vex | kernel: lib/kobject.c vulnerable to fill_kobj_path out-of-bounds write | fixed: 429 known affected: 53 | 2026-06-28T12:01:45+00:00 | Vulnerability · Source |
| CVE-2026-29057 | redhat_vex | next.js: Next.js: HTTP request smuggling in rewrites | known affected: 18 | 2026-06-28T12:01:44+00:00 | Vulnerability · Source |
| CVE-2020-8286 | redhat_vex | curl: Inferior OCSP verification | fixed: 189 known affected: 6 known not affected: 16 | 2026-06-28T12:01:44+00:00 | Vulnerability · Source |
| CVE-2020-25686 | redhat_vex | dnsmasq: multiple queries forwarded for the same name makes forging replies easier for an off-path attacker | fixed: 180 known affected: 4 known not affected: 107 | 2026-06-28T12:01:43+00:00 | Vulnerability · Source |
| CVE-2020-14304 | redhat_vex | kernel: ethtool when reading eeprom of device could lead to memory leak | known affected: 198 known not affected: 1 | 2026-06-28T12:01:42+00:00 | Vulnerability · Source |
| CVE-2009-1864 | redhat_vex | flash-plugin: multiple code execution flaws (APSB09-10) | fixed: 10 | 2026-06-28T12:01:42+00:00 | Vulnerability · Source |
| CVE-2009-1863 | redhat_vex | flash-plugin: multiple code execution flaws (APSB09-10) | fixed: 10 | 2026-06-28T12:01:42+00:00 | Vulnerability · Source |
| CVE-2020-8285 | redhat_vex | curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used | fixed: 189 known affected: 15 known not affected: 7 | 2026-06-28T12:01:42+00:00 | Vulnerability · Source |
| CVE-2019-13757 | redhat_vex | chromium-browser: Incorrect security UI in Omnibox | fixed: 14 | 2026-06-28T12:01:41+00:00 | Vulnerability · Source |
| CVE-2020-8284 | redhat_vex | curl: FTP PASV command response can cause curl to connect to arbitrary host | fixed: 189 known affected: 15 known not affected: 7 | 2026-06-28T12:01:41+00:00 | Vulnerability · Source |
| CVE-2020-8265 | redhat_vex | nodejs: use-after-free in the TLS implementation | fixed: 242 known not affected: 7 | 2026-06-28T12:01:39+00:00 | Vulnerability · Source |
| CVE-2020-10756 | redhat_vex | QEMU: slirp: networking out-of-bounds read information disclosure vulnerability | fixed: 1861 known affected: 79 known not affected: 39 | 2026-06-28T12:01:38+00:00 | Vulnerability · Source |
| CVE-2022-27950 | redhat_vex | kernel: memory leak in drivers/hid/hid-elo.c | fixed: 279 known not affected: 150 | 2026-06-28T12:01:38+00:00 | Vulnerability · Source |
| CVE-2026-9617 | redhat_vex | postgresql-anonymizer: PostgreSQL Anonymizer: Privilege escalation via malicious column identifier in table creation | known not affected: 1 | 2026-06-28T12:01:37+00:00 | Vulnerability · Source |
| CVE-2026-43915 | redhat_vex | coturn: Coturn: Cross-Site Scripting (XSS) via crafted username in TURN allocation | known not affected: 1 | 2026-06-28T12:01:37+00:00 | Vulnerability · Source |
| CVE-2020-13956 | redhat_vex | apache-httpclient: incorrect handling of malformed authority component in request URIs | fixed: 492 known affected: 25 known not affected: 3 | 2026-06-28T12:01:37+00:00 | Vulnerability · Source |
| CVE-2026-43904 | redhat_vex | OpenImageIO: OpenImageIO: Heap overflow via crafted .pic file can lead to arbitrary code execution | known not affected: 1 | 2026-06-28T12:01:37+00:00 | Vulnerability · Source |
| CVE-2020-8201 | redhat_vex | nodejs: HTTP request smuggling due to CR-to-Hyphen conversion | fixed: 122 known affected: 15 known not affected: 19 | 2026-06-28T12:01:36+00:00 | Vulnerability · Source |
| CVE-2008-5354 | redhat_vex | OpenJDK Privilege escalation in command line applications (6733959) | fixed: 587 | 2026-06-28T12:01:35+00:00 | Vulnerability · Source |
| CVE-2008-5362 | redhat_vex | security flaw | fixed: 10 | 2026-06-28T12:01:35+00:00 | Vulnerability · Source |
| CVE-2008-5340 | redhat_vex | Java WebStart privilege escalation | fixed: 571 | 2026-06-28T12:01:35+00:00 | Vulnerability · Source |
| CVE-2026-43912 | redhat_vex | vaultwarden: Vaultwarden: Unauthorized vault data access via improper organization consistency enforcement | known not affected: 1 | 2026-06-28T12:01:35+00:00 | Vulnerability · Source |
| CVE-2008-5361 | redhat_vex | security flaw | fixed: 10 | 2026-06-28T12:01:35+00:00 | Vulnerability · Source |
| CVE-2008-4818 | redhat_vex | Flash Player XSS | fixed: 10 | 2026-06-28T12:01:34+00:00 | Vulnerability · Source |
| CVE-2026-9984 | redhat_vex | chromium-browser: Use after free in UI | known not affected: 1 | 2026-06-28T12:01:34+00:00 | Vulnerability · Source |
| CVE-2020-35505 | redhat_vex | QEMU: NULL pointer dereference in do_busid_cmd() in hw/scsi/esp.c | known not affected: 110 | 2026-06-28T12:01:33+00:00 | Vulnerability · Source |
| CVE-2020-8177 | redhat_vex | curl: Incorrect argument check can allow remote servers to overwrite local files | fixed: 139 known affected: 6 known not affected: 13 | 2026-06-28T12:01:33+00:00 | Vulnerability · Source |
| CVE-2020-35509 | redhat_vex | keycloak: X509 Direct Grant Auth does not verify certificate timestamp validity | fixed: 10 known not affected: 6 | 2026-06-28T12:01:30+00:00 | Vulnerability · Source |
| CVE-2022-2873 | redhat_vex | kernel: an out-of-bounds vulnerability in i2c-ismt driver | fixed: 475 known affected: 42 | 2026-06-28T12:01:29+00:00 | Vulnerability · Source |
| CVE-2018-20856 | redhat_vex | kernel: Use-after-free in __blk_drain_queue() function in block/blk-core.c | fixed: 602 known not affected: 63 | 2026-06-28T12:01:29+00:00 | Vulnerability · Source |
| CVE-2018-20834 | redhat_vex | nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link | fixed: 76 known not affected: 34 | 2026-06-28T12:01:28+00:00 | Vulnerability · Source |
| CVE-2025-61783 | redhat_vex | social-app-django: Python Social Auth - Django has unsafe account association | known affected: 4 | 2026-06-28T12:01:27+00:00 | Vulnerability · Source |
| CVE-2008-0892 | redhat_vex | Server: shell command injection in CGI replication monitor | fixed: 13 known not affected: 10 | 2026-06-28T12:01:27+00:00 | Vulnerability · Source |
| CVE-2026-43660 | redhat_vex | webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-28T12:01:26+00:00 | Vulnerability · Source |
| CVE-2026-43504 | redhat_vex | Prosody: mod_proxy65: Prosody: Unauthenticated traffic relay due to access control mishandling in mod_proxy65 | known not affected: 1 | 2026-06-28T12:01:25+00:00 | Vulnerability · Source |
| CVE-2026-43506 | redhat_vex | Prosody: Prosody: Denial of Service via memory exhaustion from unauthenticated connections | known not affected: 1 | 2026-06-28T12:01:24+00:00 | Vulnerability · Source |
| CVE-2007-4567 | redhat_vex | kernel: ipv6_hop_jumbo remote system crash | fixed: 193 known not affected: 20 | 2026-06-28T12:01:23+00:00 | Vulnerability · Source |
| CVE-2007-2764 | redhat_vex | kernel: denial of service via unspecified vectors | known affected: 15 known not affected: 89 | 2026-06-28T12:01:22+00:00 | Vulnerability · Source |
| CVE-2008-1654 | redhat_vex | Flash Player cross domain HTTP header flaw | fixed: 10 | 2026-06-28T12:01:22+00:00 | Vulnerability · Source |
| CVE-2026-4359 | redhat_vex | mongo-c-driver: mongo-c-driver: Denial of Service via malformed HTTP response | known not affected: 1 | 2026-06-28T12:01:22+00:00 | Vulnerability · Source |
| CVE-2007-0243 | redhat_vex | java-jre: GIF buffer overflow | fixed: 368 | 2026-06-28T12:01:19+00:00 | Vulnerability · Source |
| CVE-2020-7788 | redhat_vex | nodejs-ini: Prototype pollution via malicious INI file | fixed: 380 known affected: 1 known not affected: 75 | 2026-06-28T12:01:18+00:00 | Vulnerability · Source |
| CVE-2020-12888 | redhat_vex | Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario | fixed: 992 known not affected: 59 | 2026-06-28T12:01:17+00:00 | Vulnerability · Source |
| CVE-2018-21008 | redhat_vex | kernel: use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c | known not affected: 104 | 2026-06-28T12:01:15+00:00 | Vulnerability · Source |
| CVE-2026-29777 | redhat_vex | github.com/traefik/traefik: Traefik: Traffic redirection and hostname bypass via unsanitized input in router rules | known affected: 1 | 2026-06-28T12:01:15+00:00 | Vulnerability · Source |
| CVE-2025-61023 | redhat_vex | virtuoso-opensource: Virtuoso-opensource: Denial of Service in st_compare component via crafted SQL statements | known not affected: 3 | 2026-06-28T12:01:14+00:00 | Vulnerability · Source |
| CVE-2021-36221 | redhat_vex | golang: net/http/httputil: panic due to racy read of persistConn after handler panic | fixed: 1053 known affected: 136 known not affected: 175 | 2026-06-28T12:01:13+00:00 | Vulnerability · Source |