VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-5800 | redhat_vex | chromium-browser: CSP bypass with blob URL | fixed: 14 | 2026-06-28T12:00:39+00:00 | Vulnerability · Source |
| CVE-2020-29509 | redhat_vex | go: encoding/xml: XML attribute instability | known affected: 16 known not affected: 91 | 2026-06-28T12:00:39+00:00 | Vulnerability · Source |
| CVE-2019-5794 | redhat_vex | chromium-browser: Security UI spoofing | fixed: 14 | 2026-06-28T12:00:38+00:00 | Vulnerability · Source |
| CVE-2019-5793 | redhat_vex | chromium-browser: Excessive permissions for private API in Extensions | fixed: 14 | 2026-06-28T12:00:38+00:00 | Vulnerability · Source |
| CVE-2022-4139 | redhat_vex | kernel: i915: Incorrect GPU TLB flush can lead to random memory access | fixed: 935 known not affected: 46 | 2026-06-28T12:00:37+00:00 | Vulnerability · Source |
| CVE-2019-5761 | redhat_vex | chromium-browser: Use after free in SwiftShader | fixed: 12 | 2026-06-28T12:00:37+00:00 | Vulnerability · Source |
| CVE-2021-0129 | redhat_vex | kernel: Improper access control in BlueZ may allow information disclosure vulnerability. | fixed: 150 known affected: 28 known not affected: 121 | 2026-06-28T12:00:37+00:00 | Vulnerability · Source |
| CVE-2019-5765 | redhat_vex | chromium-browser: Insufficient policy enforcement in the browser | fixed: 12 | 2026-06-28T12:00:37+00:00 | Vulnerability · Source |
| CVE-2004-1018 | redhat_vex | security flaw | fixed: 336 | 2026-06-28T11:59:20+00:00 | Vulnerability · Source |
| CVE-2004-0940 | redhat_vex | httpd mod_include SSI overflow | fixed: 6 | 2026-06-28T11:59:19+00:00 | Vulnerability · Source |
| CVE-2004-0837 | redhat_vex | security flaw | fixed: 5 | 2026-06-28T11:59:18+00:00 | Vulnerability · Source |
| CVE-2019-13565 | redhat_vex | openldap: ACL restrictions bypass due to sasl_ssf value being set permanently | known affected: 16 known not affected: 7 | 2026-06-28T11:59:14+00:00 | Vulnerability · Source |
| CVE-2021-20194 | redhat_vex | kernel: heap overflow in __cgroup_bpf_run_filter_getsockopt() | fixed: 150 known affected: 1 known not affected: 149 | 2026-06-28T11:59:11+00:00 | Vulnerability · Source |
| CVE-2020-14305 | redhat_vex | kernel: memory corruption in Voice over IP nf_conntrack_h323 module | fixed: 204 known affected: 1 known not affected: 79 | 2026-06-28T11:59:11+00:00 | Vulnerability · Source |
| CVE-2020-27831 | redhat_vex | quay: email notifications authorization bypass | fixed: 6 | 2026-06-28T11:59:10+00:00 | Vulnerability · Source |
| CVE-2020-3702 | redhat_vex | kernel: ath9k: information disclosure via specifically timed and handcrafted traffic | known affected: 91 known not affected: 106 | 2026-06-28T11:59:10+00:00 | Vulnerability · Source |
| CVE-2026-54651 | redhat_vex | pypdf: python-pypdf: pypdf: Denial of Service via crafted PDF | known affected: 11 | 2026-06-28T11:59:08+00:00 | Vulnerability · Source |
| CVE-2019-3459 | redhat_vex | kernel: Heap address information leak while using L2CAP_GET_CONF_OPT | fixed: 383 known affected: 27 | 2026-06-28T11:59:07+00:00 | Vulnerability · Source |
| CVE-2026-31433 | redhat_vex | kernel: ksmbd: fix potencial OOB in get_file_all_info() for compound requests | known not affected: 274 | 2026-06-28T11:59:07+00:00 | Vulnerability · Source |
| CVE-2015-0318 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T11:59:06+00:00 | Vulnerability · Source |
| CVE-2015-3091 | redhat_vex | flash-plugin: information leaks leading to ASLR bypass (APSB15-09) | fixed: 5 | 2026-06-28T11:59:05+00:00 | Vulnerability · Source |
| CVE-2020-10725 | redhat_vex | dpdk: librte_vhost Malicious guest could cause segfault by sending invalid Virtio descriptor | fixed: 63 known not affected: 155 | 2026-06-28T11:59:04+00:00 | Vulnerability · Source |
| CVE-2020-36048 | redhat_vex | yarnpkg-socket.io/engine.io: allows attackers to cause a denial of service (resource consumption) via a POST request to the long polling transport | known affected: 2 | 2026-06-28T11:59:04+00:00 | Vulnerability · Source |
| CVE-2020-35517 | redhat_vex | QEMU: virtiofsd: potential privileged host device access from guest | fixed: 2701 known affected: 34 known not affected: 27 | 2026-06-28T11:59:03+00:00 | Vulnerability · Source |
| CVE-2020-26116 | redhat_vex | python: CRLF injection via HTTP request method in httplib/http.client | fixed: 1105 known affected: 17 known not affected: 34 | 2026-06-28T11:58:58+00:00 | Vulnerability · Source |
| CVE-2026-8559 | redhat_vex | chromium-browser: chromium-browser: Integer overflow in Internationalization | known not affected: 1 | 2026-06-28T11:58:57+00:00 | Vulnerability · Source |
| CVE-2020-10702 | redhat_vex | qemu: weak signature generation in Pointer Authentication support for ARM | fixed: 918 known affected: 22 known not affected: 53 | 2026-06-28T11:58:57+00:00 | Vulnerability · Source |
| CVE-2026-8572 | redhat_vex | chromium-browser: chromium-browser: Insufficient policy enforcement in Network | known not affected: 1 | 2026-06-28T11:58:57+00:00 | Vulnerability · Source |
| CVE-2026-9910 | redhat_vex | chromium-browser: Out of bounds memory access in ANGLE | known not affected: 1 | 2026-06-28T11:58:56+00:00 | Vulnerability · Source |
| CVE-2020-10685 | redhat_vex | Ansible: modules which use files encrypted with vault are not properly cleaned up | fixed: 22 known affected: 10 | 2026-06-28T11:58:56+00:00 | Vulnerability · Source |
| CVE-2026-8540 | redhat_vex | chromium-browser: chromium-browser: Type Confusion in V8 | known not affected: 1 | 2026-06-28T11:58:56+00:00 | Vulnerability · Source |
| CVE-2026-41168 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF with oversized streams | known affected: 10 | 2026-06-28T11:58:55+00:00 | Vulnerability · Source |
| CVE-2020-35513 | redhat_vex | kernel: Nfsd failure to clear umask after processing an open or create | fixed: 185 known affected: 16 known not affected: 68 | 2026-06-28T11:58:54+00:00 | Vulnerability · Source |
| CVE-2020-35504 | redhat_vex | QEMU: NULL pointer dereference in scsi_req_continue() in hw/scsi/scsi-bus.c | known not affected: 110 | 2026-06-28T11:58:53+00:00 | Vulnerability · Source |
| CVE-2026-48843 | redhat_vex | roundcubemail: information disclosure and Server-Side Request Forgery via insufficient CSS sanitization | known not affected: 1 | 2026-06-28T11:58:53+00:00 | Vulnerability · Source |
| CVE-2026-40260 | redhat_vex | pypdf: pypdf: Denial of Service due to memory exhaustion via manipulated XMP metadata | known affected: 10 known not affected: 1 | 2026-06-28T11:58:53+00:00 | Vulnerability · Source |
| CVE-2019-19813 | redhat_vex | kernel: use-after-free in __mutex_lock in kernel/locking/mutex.c | known not affected: 104 | 2026-06-28T11:58:52+00:00 | Vulnerability · Source |
| CVE-2026-31599 | redhat_vex | kernel: media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections | known not affected: 274 | 2026-06-28T11:58:51+00:00 | Vulnerability · Source |
| CVE-2026-7897 | redhat_vex | chromium-browser: chromium-browser: Use after free in Mobile | known not affected: 1 | 2026-06-28T11:58:50+00:00 | Vulnerability · Source |
| CVE-2019-19767 | redhat_vex | kernel: use-after-free in __ext4_expand_extra_isize and ext4_xattr_set_entry related to fs/ext4/inode.c and fs/ext4/super.c | fixed: 379 known affected: 12 known not affected: 16 | 2026-06-28T11:58:50+00:00 | Vulnerability · Source |
| CVE-2014-7926 | redhat_vex | ICU: regexp engine incorrect handling of a zero length quantifier | fixed: 15 known affected: 11 | 2026-06-28T11:58:49+00:00 | Vulnerability · Source |
| CVE-2026-3113 | redhat_vex | Mattermost: Mattermost: Information disclosure via improper permissions on bulk exports | known not affected: 1 | 2026-06-28T11:58:49+00:00 | Vulnerability · Source |
| CVE-2019-20922 | redhat_vex | nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS | fixed: 7 known affected: 9 known not affected: 74 | 2026-06-28T11:58:47+00:00 | Vulnerability · Source |
| CVE-2019-9514 | redhat_vex | HTTP/2: flood using HEADERS frames results in unbounded memory growth | fixed: 1496 known affected: 109 known not affected: 163 | 2026-06-28T11:58:45+00:00 | Vulnerability · Source |
| CVE-2026-31596 | redhat_vex | kernel: ocfs2: handle invalid dinode in ocfs2_group_extend | known not affected: 274 | 2026-06-28T11:58:43+00:00 | Vulnerability · Source |
| CVE-2014-4650 | redhat_vex | python: CGIHTTPServer module does not properly handle URL-encoded path separators in URLs | fixed: 305 known affected: 17 known not affected: 8 | 2026-06-28T11:58:43+00:00 | Vulnerability · Source |
| CVE-2019-19070 | redhat_vex | kernel: A memory leak in the spi_gpio_probe() function in drivers/spi/spi-gpio.c allows for a DoS | known not affected: 104 | 2026-06-28T11:58:42+00:00 | Vulnerability · Source |
| CVE-2019-13704 | redhat_vex | chromium-browser: CSP bypass | fixed: 14 | 2026-06-28T11:58:41+00:00 | Vulnerability · Source |
| CVE-2026-7967 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Navigation | known not affected: 1 | 2026-06-28T11:58:39+00:00 | Vulnerability · Source |
| CVE-2019-18813 | redhat_vex | kernel: memory leak in dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c | known not affected: 93 | 2026-06-28T11:58:39+00:00 | Vulnerability · Source |