VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-5842 | redhat_vex | chromium-browser: Use-after-free in Blink | fixed: 14 | 2026-06-28T11:57:44+00:00 | Vulnerability · Source |
| CVE-2013-1487 | redhat_vex | JDK: unspecified vulnerability fixed in 6u41 and 7u15 (Deployment) | fixed: 313 known not affected: 8 | 2026-06-28T11:57:44+00:00 | Vulnerability · Source |
| CVE-2013-1690 | redhat_vex | Mozilla: Execution of unmapped memory through onreadystatechange event (MFSA 2013-53) | fixed: 140 known affected: 1 | 2026-06-28T11:57:44+00:00 | Vulnerability · Source |
| CVE-2013-0762 | redhat_vex | Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02) | fixed: 140 known affected: 1 | 2026-06-28T11:57:43+00:00 | Vulnerability · Source |
| CVE-2018-6041 | redhat_vex | chromium-browser: url spoof in navigation | fixed: 12 | 2026-06-28T11:57:43+00:00 | Vulnerability · Source |
| CVE-2019-5821 | redhat_vex | chromium-browser: Integer overflow in PDFium | fixed: 14 | 2026-06-28T11:57:43+00:00 | Vulnerability · Source |
| CVE-2018-6045 | redhat_vex | chromium-browser: insufficient isolation of devtools from extensions | fixed: 12 | 2026-06-28T11:57:43+00:00 | Vulnerability · Source |
| CVE-2019-5792 | redhat_vex | chromium-browser: Integer overflow in PDFium | fixed: 14 | 2026-06-28T11:57:42+00:00 | Vulnerability · Source |
| CVE-2020-27661 | redhat_vex | QEMU: divide by zero in dwc2_handle_packet() in hw/usb/hcd-dwc2.c | known not affected: 111 | 2026-06-28T11:57:42+00:00 | Vulnerability · Source |
| CVE-2019-5763 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in V8 | fixed: 12 | 2026-06-28T11:57:41+00:00 | Vulnerability · Source |
| CVE-2015-8401 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:57:41+00:00 | Vulnerability · Source |
| CVE-2018-1107 | redhat_vex | nodejs-is-my-json-valid: ReDoS when validating JSON fields with email format | fixed: 1 known affected: 2 known not affected: 12 | 2026-06-28T11:57:41+00:00 | Vulnerability · Source |
| CVE-2007-3698 | redhat_vex | Java Secure Socket Extension Does Not Correctly Process SSL/TLS Handshake Requests Resulting in a Denial of Service (DoS) Condition | fixed: 309 | 2026-06-28T11:57:40+00:00 | Vulnerability · Source |
| CVE-2018-6034 | redhat_vex | chromium-browser: integer overflow in blink | fixed: 12 | 2026-06-28T11:57:39+00:00 | Vulnerability · Source |
| CVE-2018-6033 | redhat_vex | chromium-browser: race when opening downloaded files | fixed: 12 | 2026-06-28T11:57:39+00:00 | Vulnerability · Source |
| CVE-2026-25210 | redhat_vex | libexpat: libexpat: Information disclosure and data integrity issues due to integer overflow in buffer reallocation | known not affected: 21 | 2026-06-28T11:57:39+00:00 | Vulnerability · Source |
| CVE-2020-27170 | redhat_vex | kernel: Speculation on pointer arithmetic against bpf_context pointer | fixed: 185 known affected: 64 known not affected: 120 | 2026-06-28T11:57:39+00:00 | Vulnerability · Source |
| CVE-2020-27171 | redhat_vex | kernel: Integer underflow when restricting speculative pointer arithmetic | known affected: 76 known not affected: 121 | 2026-06-28T11:57:38+00:00 | Vulnerability · Source |
| CVE-2019-13659 | redhat_vex | chromium-browser: URL spoof | fixed: 14 | 2026-06-28T11:57:37+00:00 | Vulnerability · Source |
| CVE-2026-31484 | redhat_vex | kernel: io_uring/fdinfo: fix OOB read in SQE_MIXED wrap check | known not affected: 274 | 2026-06-28T11:57:37+00:00 | Vulnerability · Source |
| CVE-2019-5108 | redhat_vex | kernel: triggering AP to send IAPP location updates for stations before the required authentication process has completed can lead to DoS | fixed: 382 known affected: 27 | 2026-06-28T11:57:36+00:00 | Vulnerability · Source |
| CVE-2020-27152 | redhat_vex | Kernel: KVM: host stack overflow due to lazy update IOAPIC | fixed: 150 known not affected: 56 | 2026-06-28T11:57:32+00:00 | Vulnerability · Source |
| CVE-2026-53663 | redhat_vex | react-router: @remix-run/server-runtime: React Router: Insufficient CSRF protection allows integrity impact | known affected: 30 known not affected: 194 | 2026-06-28T11:57:31+00:00 | Vulnerability · Source |
| CVE-2019-1352 | redhat_vex | git: Files inside the .git directory may be overwritten during cloning via NTFS Alternate Data Streams | fixed: 262 known not affected: 32 | 2026-06-28T11:57:30+00:00 | Vulnerability · Source |
| CVE-2020-26560 | redhat_vex | kernel: impersonation attack in Bluetooth Mesh Provisioning | known affected: 27 known not affected: 197 | 2026-06-28T11:57:28+00:00 | Vulnerability · Source |
| CVE-2026-4603 | redhat_vex | jsrsasign: jsrsasign: Cryptographic operations impacted by division by zero via malicious JSON Web Key | known affected: 4 | 2026-06-28T11:57:28+00:00 | Vulnerability · Source |
| CVE-2020-14302 | redhat_vex | keycloak: reusable "state" parameter at redirect_uri endpoint enables possibility of replay attacks | fixed: 10 known not affected: 5 | 2026-06-28T11:57:27+00:00 | Vulnerability · Source |
| CVE-2019-1349 | redhat_vex | git: Recursive submodule cloning allows using git directory twice with synonymous directory name written in .git/ | fixed: 262 known affected: 19 known not affected: 19 | 2026-06-28T11:57:26+00:00 | Vulnerability · Source |
| CVE-2025-66221 | redhat_vex | Werkzeug: Werkzeug: Denial of service via Windows device names in path segments | known not affected: 1 | 2026-06-28T11:57:25+00:00 | Vulnerability · Source |
| CVE-2020-26556 | redhat_vex | kernel: malleable commitment Bluetooth Mesh Provisioning | known affected: 27 known not affected: 197 | 2026-06-28T11:57:24+00:00 | Vulnerability · Source |
| CVE-2020-26555 | redhat_vex | kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack | fixed: 429 known affected: 69 known not affected: 31 | 2026-06-28T11:57:23+00:00 | Vulnerability · Source |
| CVE-2025-64716 | redhat_vex | anubis: XSS via redirect parameter | known not affected: 1 | 2026-06-28T11:57:22+00:00 | Vulnerability · Source |
| CVE-2020-26311 | redhat_vex | Useragent: GHSL-2020-312: Regular Expression Denial of Service (ReDoS) in useragent | known not affected: 2 | 2026-06-28T11:57:22+00:00 | Vulnerability · Source |
| CVE-2015-8050 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:57:21+00:00 | Vulnerability · Source |
| CVE-2020-26146 | redhat_vex | kernel: reassembling encrypted fragments with non-consecutive packet numbers | fixed: 150 known affected: 150 | 2026-06-28T11:57:21+00:00 | Vulnerability · Source |
| CVE-2018-5712 | redhat_vex | php: Reflected XSS on PHAR 404 page | fixed: 931 known affected: 59 known not affected: 48 | 2026-06-28T11:57:21+00:00 | Vulnerability · Source |
| CVE-2020-26144 | redhat_vex | kernel: accepting unencrypted A-MSDU frames that start with RFC1042 header | fixed: 150 known affected: 150 | 2026-06-28T11:57:20+00:00 | Vulnerability · Source |
| CVE-2020-26137 | redhat_vex | python-urllib3: CRLF injection via HTTP request method | fixed: 502 known affected: 6 known not affected: 134 | 2026-06-28T11:57:20+00:00 | Vulnerability · Source |
| CVE-2019-11041 | redhat_vex | php: Heap buffer over-read in exif_scan_thumbnail() | fixed: 1062 known affected: 118 known not affected: 30 | 2026-06-28T11:57:19+00:00 | Vulnerability · Source |
| CVE-2020-25743 | redhat_vex | QEMU: ide: null pointer dereference while cancelling i/o operation | known affected: 72 known not affected: 22 | 2026-06-28T11:57:19+00:00 | Vulnerability · Source |
| CVE-2020-25742 | redhat_vex | QEMU: scsi: lsi: null pointer dereference during memory move | known not affected: 84 | 2026-06-28T11:57:18+00:00 | Vulnerability · Source |
| CVE-2020-25741 | redhat_vex | QEMU: fdc: null pointer dereference during r/w data transfer | known affected: 79 known not affected: 32 | 2026-06-28T11:57:18+00:00 | Vulnerability · Source |
| CVE-2020-25641 | redhat_vex | kernel: soft-lockups in iov_iter_copy_from_user_atomic() could result in DoS | fixed: 448 known affected: 16 known not affected: 42 | 2026-06-28T11:57:18+00:00 | Vulnerability · Source |
| CVE-2012-0876 | redhat_vex | expat: hash table collisions CPU usage DoS | fixed: 81 known affected: 8 | 2026-06-28T11:57:17+00:00 | Vulnerability · Source |
| CVE-2019-2991 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) | fixed: 337 known not affected: 109 | 2026-06-28T11:57:16+00:00 | Vulnerability · Source |
| CVE-2020-25717 | redhat_vex | samba: Active Directory (AD) domain user could become root on domain members | fixed: 1273 known affected: 29 known not affected: 47 | 2026-06-28T11:57:15+00:00 | Vulnerability · Source |
| CVE-2004-0595 | redhat_vex | security flaw | fixed: 122 | 2026-06-28T11:57:15+00:00 | Vulnerability · Source |
| CVE-2015-1257 | redhat_vex | chromium-browser: Container-overflow in SVG. | fixed: 12 | 2026-06-28T11:57:13+00:00 | Vulnerability · Source |
| CVE-2019-2957 | redhat_vex | mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019) | fixed: 337 known not affected: 109 | 2026-06-28T11:57:12+00:00 | Vulnerability · Source |
| CVE-2019-10199 | redhat_vex | keycloak: CSRF check missing in My Resources functionality in the Account Console | fixed: 3 known affected: 5 | 2026-06-28T11:57:12+00:00 | Vulnerability · Source |