VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2012-0753 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-03) | fixed: 5 | 2026-06-28T11:52:53+00:00 | Vulnerability · Source |
| CVE-2020-14377 | redhat_vex | dpdk: write_back_data buffer over read (cipher->para.dst_data_len & desc->len) | known not affected: 133 | 2026-06-28T11:52:51+00:00 | Vulnerability · Source |
| CVE-2008-3105 | redhat_vex | OpenJDK JAX-WS unauthorized URL access (6542088) | fixed: 196 | 2026-06-28T11:52:51+00:00 | Vulnerability · Source |
| CVE-2020-14376 | redhat_vex | dpdk: buffer overflow copying iv_data from guest to host (prepare_sym_cipher_op & prepare_sym_chain_op) | known not affected: 133 | 2026-06-28T11:52:51+00:00 | Vulnerability · Source |
| CVE-2026-25211 | redhat_vex | llamastack/llama-stack: Sensitive Information Exposure Through Log Files in Llama Stack PGVector Integration | known not affected: 1 | 2026-06-28T11:52:50+00:00 | Vulnerability · Source |
| CVE-2026-34094 | redhat_vex | mediawiki: customized help link for page protection indicator is relative to subpage name, because the link target is missing the "/wiki/" prefix | known not affected: 1 | 2026-06-28T11:52:50+00:00 | Vulnerability · Source |
| CVE-2005-2933 | redhat_vex | security flaw | fixed: 443 | 2026-06-28T11:52:50+00:00 | Vulnerability · Source |
| CVE-2026-25075 | redhat_vex | strongSwan: strongSwan: Denial of Service via integer underflow in EAP-TTLS AVP parser | known not affected: 1 | 2026-06-28T11:52:50+00:00 | Vulnerability · Source |
| CVE-2010-4471 | redhat_vex | OpenJDK Java2D font-related system property leak (6985453) | fixed: 494 | 2026-06-28T11:52:50+00:00 | Vulnerability · Source |
| CVE-2010-4448 | redhat_vex | OpenJDK DNS cache poisoning by untrusted applets (6981922) | fixed: 702 | 2026-06-28T11:52:49+00:00 | Vulnerability · Source |
| CVE-2020-14356 | redhat_vex | kernel: Use After Free vulnerability in cgroup BPF component | fixed: 150 known not affected: 45 | 2026-06-28T11:52:46+00:00 | Vulnerability · Source |
| CVE-2023-23914 | redhat_vex | curl: HSTS ignored on multiple requests | fixed: 12 known affected: 4 known not affected: 132 | 2026-06-28T11:52:45+00:00 | Vulnerability · Source |
| CVE-2020-14353 | redhat_vex | kernel: keys: for keyctl prevent creating a different user's keyrings in RHEL-6.10 | known not affected: 104 | 2026-06-28T11:52:45+00:00 | Vulnerability · Source |
| CVE-2020-14351 | redhat_vex | kernel: performance counters race condition use-after-free | fixed: 902 known affected: 43 known not affected: 53 | 2026-06-28T11:52:44+00:00 | Vulnerability · Source |
| CVE-2020-14343 | redhat_vex | PyYAML: incomplete fix for CVE-2020-1747 | fixed: 243 known affected: 1 known not affected: 1507 | 2026-06-28T11:52:42+00:00 | Vulnerability · Source |
| CVE-2026-31562 | redhat_vex | kernel: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register | known not affected: 274 | 2026-06-28T11:52:41+00:00 | Vulnerability · Source |
| CVE-2026-31728 | redhat_vex | kernel: usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop | known affected: 76 known not affected: 198 | 2026-06-28T11:52:40+00:00 | Vulnerability · Source |
| CVE-2026-31559 | redhat_vex | kernel: LoongArch: Fix missing NULL checks for kstrdup() | known not affected: 274 | 2026-06-28T11:52:40+00:00 | Vulnerability · Source |
| CVE-2026-2474 | redhat_vex | crypt-urandom: Crypt::URandom for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom() | known not affected: 1 | 2026-06-28T11:52:39+00:00 | Vulnerability · Source |
| CVE-2026-24686 | redhat_vex | github.com/theupdateframework/go-tuf/v2: go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names | known affected: 27 | 2026-06-28T11:52:39+00:00 | Vulnerability · Source |
| CVE-2025-32014 | redhat_vex | estree-util-value-to-estree: estree-util-value-to-estree allows prototype pollution in generated ESTree | known not affected: 1 | 2026-06-28T11:52:38+00:00 | Vulnerability · Source |
| CVE-2013-3343 | redhat_vex | flash-plugin: code execution flaw (APSB13-16) | fixed: 4 | 2026-06-28T11:52:38+00:00 | Vulnerability · Source |
| CVE-2026-24480 | redhat_vex | QGIS: QGIS GitHub Actions workflow: Remote Code Execution and repository compromise via insecure `pull_request_target` configuration | known not affected: 1 | 2026-06-28T11:52:37+00:00 | Vulnerability · Source |
| CVE-2026-31558 | redhat_vex | kernel: LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust | known not affected: 274 | 2026-06-28T11:52:37+00:00 | Vulnerability · Source |
| CVE-2013-2466 | redhat_vex | JDK: unspecified vulnerability fixed in 7u25 (Deployment) | fixed: 325 known not affected: 8 | 2026-06-28T11:52:37+00:00 | Vulnerability · Source |
| CVE-2026-32642 | redhat_vex | Apache Artemis: Apache ActiveMQ Artemis: Apache Artemis and Apache ActiveMQ Artemis: Unauthorized address creation due to incorrect authorization during JMS topic subscription. | fixed: 1 known affected: 15 | 2026-06-28T11:52:37+00:00 | Vulnerability · Source |
| CVE-2023-23455 | redhat_vex | Kernel: denial of service in atm_tc_enqueue in net/sched/sch_atm.c due to type confusion | fixed: 399 known affected: 42 known not affected: 108 | 2026-06-28T11:52:36+00:00 | Vulnerability · Source |
| CVE-2017-9227 | redhat_vex | oniguruma: Out-of-bounds stack read in mbc_enc_len() during regular expression searching | fixed: 254 known affected: 174 under investigation: 4 | 2026-06-28T11:52:35+00:00 | Vulnerability · Source |
| CVE-2017-9242 | redhat_vex | kernel: Incorrect overwrite check in __ip6_append_data() | fixed: 185 known not affected: 34 | 2026-06-28T11:52:35+00:00 | Vulnerability · Source |
| CVE-2017-9229 | redhat_vex | oniguruma: Invalid pointer dereference in left_adjust_char_head() | fixed: 257 known affected: 174 under investigation: 3 | 2026-06-28T11:52:34+00:00 | Vulnerability · Source |
| CVE-2025-62820 | redhat_vex | nebula: incorrect handling of CIDR in some configurations allows arbitrary source IP addresses within the network | known not affected: 1 | 2026-06-28T11:52:33+00:00 | Vulnerability · Source |
| CVE-2013-2176 | redhat_vex | rhev-m: rhev-apt service unquoted search path | fixed: 1 | 2026-06-28T11:52:33+00:00 | Vulnerability · Source |
| CVE-2008-5359 | redhat_vex | OpenJDK Buffer overflow in image processing (6726779) | fixed: 587 | 2026-06-28T11:52:33+00:00 | Vulnerability · Source |
| CVE-2026-24133 | redhat_vex | jsPDF: jsPDF: Denial of Service due to excessive memory allocation from crafted BMP images | known affected: 6 | 2026-06-28T11:52:32+00:00 | Vulnerability · Source |
| CVE-2025-71271 | redhat_vex | kernel: hfsplus: ensure sb->s_fs_info is always cleaned up | known affected: 14 known not affected: 260 | 2026-06-28T11:52:28+00:00 | Vulnerability · Source |
| CVE-2015-1267 | redhat_vex | chromium-browser: Cross-origin bypass in Blink | fixed: 12 | 2026-06-28T11:52:26+00:00 | Vulnerability · Source |
| CVE-2018-11506 | redhat_vex | kernel: Stack-based buffer overflow in drivers/scsi/sr_ioctl.c allows denial of service or other unspecified impact | fixed: 26 known not affected: 87 | 2026-06-28T11:52:25+00:00 | Vulnerability · Source |
| CVE-2006-3588 | redhat_vex | security flaw | fixed: 2 | 2026-06-28T11:52:24+00:00 | Vulnerability · Source |
| CVE-2005-1625 | redhat_vex | security flaw | fixed: 2 | 2026-06-28T11:52:23+00:00 | Vulnerability · Source |
| CVE-2006-0208 | redhat_vex | security flaw | fixed: 335 | 2026-06-28T11:52:23+00:00 | Vulnerability · Source |
| CVE-2026-12030 | redhat_vex | chromium-browser: chromium-browser: Heap buffer overflow GPU | known not affected: 1 | 2026-06-28T11:52:23+00:00 | Vulnerability · Source |
| CVE-2026-3529 | redhat_vex | Google Analytics GA4: Drupal: Drupal Google Analytics GA4: Cross-site Scripting (XSS) via improper input neutralization | known not affected: 1 | 2026-06-28T11:52:20+00:00 | Vulnerability · Source |
| CVE-2015-1210 | redhat_vex | chromium-browser: cross-origin-bypass in V8 bindings | fixed: 15 | 2026-06-28T11:52:19+00:00 | Vulnerability · Source |
| CVE-2025-31721 | redhat_vex | jenkins: Missing permission check allows retrieving secrets from agent configurations | known affected: 1 | 2026-06-28T11:52:18+00:00 | Vulnerability · Source |
| CVE-2020-13950 | redhat_vex | httpd: mod_proxy NULL pointer dereference | fixed: 228 known affected: 2 known not affected: 37 | 2026-06-28T11:52:16+00:00 | Vulnerability · Source |
| CVE-2020-13949 | redhat_vex | libthrift: potential DoS when processing untrusted payloads | fixed: 56 known affected: 45 known not affected: 29 | 2026-06-28T11:52:15+00:00 | Vulnerability · Source |
| CVE-2026-43446 | redhat_vex | kernel: accel/amdxdna: Fix runtime suspend deadlock when there is pending job | known not affected: 274 | 2026-06-28T11:52:14+00:00 | Vulnerability · Source |
| CVE-2020-13800 | redhat_vex | QEMU: ati-vga: infinite recursion in ati_mm_read/write calls may lead to DoS | known not affected: 93 | 2026-06-28T11:52:14+00:00 | Vulnerability · Source |
| CVE-2026-23741 | redhat_vex | asterisk: privilege escalation via the ast_coredumper script | known not affected: 1 | 2026-06-28T11:52:13+00:00 | Vulnerability · Source |
| CVE-2015-0325 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T11:52:13+00:00 | Vulnerability · Source |