VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2014-0428 | redhat_vex | OpenJDK: insufficient security checks in IIOP streams (CORBA, 8025767) | fixed: 690 known not affected: 21 | 2026-06-28T11:57:11+00:00 | Vulnerability · Source |
| CVE-2015-0319 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T11:57:10+00:00 | Vulnerability · Source |
| CVE-2020-25685 | redhat_vex | dnsmasq: loose query name check in reply_query() makes forging replies easier for an off-path attacker | fixed: 180 known affected: 4 known not affected: 107 | 2026-06-28T11:57:10+00:00 | Vulnerability · Source |
| CVE-2022-28893 | redhat_vex | kernel: use after free in SUNRPC subsystem | fixed: 475 known affected: 42 | 2026-06-28T11:57:10+00:00 | Vulnerability · Source |
| CVE-2026-33599 | redhat_vex | dnsdist: out-of-bounds read in service discovery | known not affected: 1 | 2026-06-28T11:57:09+00:00 | Vulnerability · Source |
| CVE-2014-9767 | redhat_vex | php: ZipArchive:: extractTo allows for directory traversal when creating directories | fixed: 251 known affected: 109 known not affected: 1 | 2026-06-28T11:57:09+00:00 | Vulnerability · Source |
| CVE-2019-2830 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019) | fixed: 291 known not affected: 112 | 2026-06-28T11:57:08+00:00 | Vulnerability · Source |
| CVE-2026-31412 | redhat_vex | kernel: usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() | known not affected: 274 | 2026-06-28T11:57:08+00:00 | Vulnerability · Source |
| CVE-2019-2785 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jul 2019) | fixed: 291 known not affected: 112 | 2026-06-28T11:57:06+00:00 | Vulnerability · Source |
| CVE-2019-2769 | redhat_vex | OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) | fixed: 1023 | 2026-06-28T11:57:06+00:00 | Vulnerability · Source |
| CVE-2026-31582 | redhat_vex | kernel: hwmon: (powerz) Fix use-after-free on USB disconnect | known not affected: 274 | 2026-06-28T11:57:04+00:00 | Vulnerability · Source |
| CVE-2014-6531 | redhat_vex | OpenJDK: insufficient ResourceBundle name check (Libraries, 8044274) | fixed: 961 | 2026-06-28T11:57:03+00:00 | Vulnerability · Source |
| CVE-2020-25684 | redhat_vex | dnsmasq: loose address/port check in reply_query() makes forging replies easier for an off-path attacker | fixed: 180 known affected: 4 known not affected: 107 | 2026-06-28T11:57:02+00:00 | Vulnerability · Source |
| CVE-2026-23073 | redhat_vex | kernel: wifi: rsi: Fix memory corruption due to not set vif driver data size | known not affected: 274 | 2026-06-28T11:57:02+00:00 | Vulnerability · Source |
| CVE-2014-2432 | redhat_vex | mysql: unspecified DoS related to Federated (CPU April 2014) | fixed: 190 under investigation: 9 | 2026-06-28T11:57:00+00:00 | Vulnerability · Source |
| CVE-2026-28212 | redhat_vex | Firebird: Firebird: Denial of Service via crafted network packet during op_slice processing | known not affected: 1 | 2026-06-28T11:57:00+00:00 | Vulnerability · Source |
| CVE-2026-31580 | redhat_vex | kernel: bcache: fix cached_dev.sb_bio use-after-free and crash | known not affected: 274 | 2026-06-28T11:57:00+00:00 | Vulnerability · Source |
| CVE-2026-33260 | redhat_vex | dnsdist: insufficient input validation of internal webserver | known not affected: 1 | 2026-06-28T11:57:00+00:00 | Vulnerability · Source |
| CVE-2014-2401 | redhat_vex | JDK: unspecified vulnerability fixed in 5.0u75, 6u75, 7u55 and 8u5 (2D) | fixed: 591 known not affected: 14 | 2026-06-28T11:57:00+00:00 | Vulnerability · Source |
| CVE-2023-26545 | redhat_vex | kernel: mpls: double free on sysctl allocation failure | fixed: 666 known affected: 22 known not affected: 42 | 2026-06-28T11:56:59+00:00 | Vulnerability · Source |
| CVE-2026-26012 | redhat_vex | vaultwarden: Vaultwarden: Information disclosure due to bypassed collection permissions | known not affected: 1 | 2026-06-28T11:56:59+00:00 | Vulnerability · Source |
| CVE-2017-7407 | redhat_vex | curl: --write-out out of bounds read | fixed: 336 known affected: 13 known not affected: 11 | 2026-06-28T11:56:58+00:00 | Vulnerability · Source |
| CVE-2026-41314 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF with large image sizes | known affected: 10 | 2026-06-28T11:56:56+00:00 | Vulnerability · Source |
| CVE-2007-6244 | redhat_vex | flash: XSS via asfunction protocol | fixed: 10 | 2026-06-28T11:56:56+00:00 | Vulnerability · Source |
| CVE-2026-31574 | redhat_vex | kernel: clockevents: Add missing resets of the next_event_forced flag | known affected: 260 known not affected: 14 | 2026-06-28T11:56:54+00:00 | Vulnerability · Source |
| CVE-2026-43470 | redhat_vex | kernel: nfs: return EISDIR on nfs3_proc_create if d_alias is a dir | known affected: 90 known not affected: 184 | 2026-06-28T11:56:51+00:00 | Vulnerability · Source |
| CVE-2026-5447 | redhat_vex | wolfSSL: wolfSSL: Heap buffer overflow via AuthorityKeyIdentifier size confusion | known not affected: 1 | 2026-06-28T11:56:51+00:00 | Vulnerability · Source |
| CVE-2007-1285 | redhat_vex | security flaw | fixed: 608 | 2026-06-28T11:56:51+00:00 | Vulnerability · Source |
| CVE-2026-31577 | redhat_vex | kernel: nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map | known not affected: 274 | 2026-06-28T11:56:50+00:00 | Vulnerability · Source |
| CVE-2018-4935 | redhat_vex | flash-plugin: Remote Code Execution vulnerabilities (APSB18-08) | fixed: 3 | 2026-06-28T11:56:49+00:00 | Vulnerability · Source |
| CVE-2018-5008 | redhat_vex | flash-plugin: Information Disclosure vulnerability (APSB18-24) | fixed: 3 | 2026-06-28T11:56:49+00:00 | Vulnerability · Source |
| CVE-2010-3541 | redhat_vex | OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004) | fixed: 724 | 2026-06-28T11:56:47+00:00 | Vulnerability · Source |
| CVE-2017-3465 | redhat_vex | mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017) | fixed: 54 known not affected: 66 | 2026-06-28T11:56:47+00:00 | Vulnerability · Source |
| CVE-2010-3555 | redhat_vex | JDK unspecified vulnerability in Deployment component | fixed: 270 | 2026-06-28T11:56:47+00:00 | Vulnerability · Source |
| CVE-2019-13749 | redhat_vex | chromium-browser: Incorrect security UI in Omnibox | fixed: 14 | 2026-06-28T11:56:47+00:00 | Vulnerability · Source |
| CVE-2018-8779 | redhat_vex | ruby: Unintentional socket creation by poisoned NULL byte in UNIXServer and UNIXSocket | fixed: 637 known affected: 21 known not affected: 58 | 2026-06-28T11:56:46+00:00 | Vulnerability · Source |
| CVE-2010-3567 | redhat_vex | OpenJDK ICU Opentype layout engine crash (6963285) | fixed: 155 | 2026-06-28T11:56:45+00:00 | Vulnerability · Source |
| CVE-2019-13730 | redhat_vex | chromium-browser: Type Confusion in V8 | fixed: 14 | 2026-06-28T11:56:45+00:00 | Vulnerability · Source |
| CVE-2020-25284 | redhat_vex | kernel: incomplete permission checking for access to rbd devices | fixed: 150 known affected: 41 known not affected: 15 | 2026-06-28T11:56:44+00:00 | Vulnerability · Source |
| CVE-2019-13717 | redhat_vex | chromium-browser: Notification obscured | fixed: 14 | 2026-06-28T11:56:43+00:00 | Vulnerability · Source |
| CVE-2019-13727 | redhat_vex | chromium-browser: Insufficient policy enforcement in WebSockets | fixed: 14 | 2026-06-28T11:56:42+00:00 | Vulnerability · Source |
| CVE-2010-2160 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:56:42+00:00 | Vulnerability · Source |
| CVE-2019-13685 | redhat_vex | chromium-browser: Use-after-free in UI | fixed: 14 | 2026-06-28T11:56:42+00:00 | Vulnerability · Source |
| CVE-2026-46128 | redhat_vex | kernel: ipmi: Check event message buffer response for bad data | known not affected: 274 | 2026-06-28T11:56:41+00:00 | Vulnerability · Source |
| CVE-2022-41674 | redhat_vex | kernel: u8 overflow problem in cfg80211_update_notlisted_nontrans() | fixed: 514 known not affected: 42 | 2026-06-28T11:56:40+00:00 | Vulnerability · Source |
| CVE-2020-24352 | redhat_vex | QEMU: out-of-bounds read/write in ati-vga device emulation in ati_2d_blt() | known affected: 24 known not affected: 70 | 2026-06-28T11:56:40+00:00 | Vulnerability · Source |
| CVE-2014-0061 | redhat_vex | postgresql: privilege escalation via procedural language validator functions | fixed: 362 known affected: 1 known not affected: 13 | 2026-06-28T11:56:39+00:00 | Vulnerability · Source |
| CVE-2014-0063 | redhat_vex | postgresql: stack-based buffer overflow in datetime input/output | fixed: 362 known affected: 1 known not affected: 13 | 2026-06-28T11:56:39+00:00 | Vulnerability · Source |
| CVE-2018-7858 | redhat_vex | QEMU: cirrus: OOB access when updating VGA display | fixed: 96 known affected: 11 known not affected: 21 | 2026-06-28T11:56:37+00:00 | Vulnerability · Source |
| CVE-2019-13747 | redhat_vex | chromium-browser: Uninitialized Use in rendering | fixed: 14 | 2026-06-28T11:56:37+00:00 | Vulnerability · Source |