VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2009-3956 | redhat_vex | acroread: script injection vulnerability (APSB10-02) | fixed: 16 | 2026-06-28T11:51:23+00:00 | Vulnerability · Source |
| CVE-2013-1693 | redhat_vex | Mozilla: SVG filters can lead to information disclosure (MFSA 2013-55) | fixed: 140 known affected: 1 | 2026-06-28T11:51:23+00:00 | Vulnerability · Source |
| CVE-2009-3955 | redhat_vex | acroread: multiple code execution flaws (APSB10-02) | fixed: 16 | 2026-06-28T11:51:23+00:00 | Vulnerability · Source |
| CVE-2026-28871 | redhat_vex | webkitgtk: Visiting a maliciously crafted website may lead to a cross-site scripting attack | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-28T11:51:22+00:00 | Vulnerability · Source |
| CVE-2013-1678 | redhat_vex | Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48) | fixed: 140 known affected: 1 | 2026-06-28T11:51:22+00:00 | Vulnerability · Source |
| CVE-2018-16881 | redhat_vex | rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled | fixed: 168 known not affected: 40 | 2026-06-28T11:51:22+00:00 | Vulnerability · Source |
| CVE-2013-1677 | redhat_vex | Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48) | fixed: 140 known affected: 1 | 2026-06-28T11:51:21+00:00 | Vulnerability · Source |
| CVE-2013-1670 | redhat_vex | Mozilla: Privileged access for content level constructor (MFSA 2013-42) | fixed: 140 known affected: 1 | 2026-06-28T11:51:20+00:00 | Vulnerability · Source |
| CVE-2013-1676 | redhat_vex | Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48) | fixed: 140 known affected: 1 | 2026-06-28T11:51:20+00:00 | Vulnerability · Source |
| CVE-2022-43945 | redhat_vex | kernel: nfsd buffer overflow by RPC message over TCP with garbage data | fixed: 598 known not affected: 28 | 2026-06-28T11:51:19+00:00 | Vulnerability · Source |
| CVE-2026-23131 | redhat_vex | kernel: platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names | known not affected: 274 | 2026-06-28T11:51:17+00:00 | Vulnerability · Source |
| CVE-2020-12351 | redhat_vex | kernel: net: bluetooth: type confusion while processing AMP packets | fixed: 852 known not affected: 27 | 2026-06-28T11:51:16+00:00 | Vulnerability · Source |
| CVE-2017-9076 | redhat_vex | kernel: net: IPv6 DCCP implementation mishandles inheritance | fixed: 381 known affected: 1 known not affected: 7 | 2026-06-28T11:51:15+00:00 | Vulnerability · Source |
| CVE-2013-1486 | redhat_vex | OpenJDK: MBeanServer insufficient privilege restrictions (JMX, 8006446) | fixed: 543 | 2026-06-28T11:51:14+00:00 | Vulnerability · Source |
| CVE-2026-32738 | redhat_vex | libheif: libheif: Unsigned integer underflow leads to Denial of Service | known not affected: 1 | 2026-06-28T11:51:14+00:00 | Vulnerability · Source |
| CVE-2020-12114 | redhat_vex | kernel: DoS by corrupting mountpoint reference counter | fixed: 300 known affected: 45 | 2026-06-28T11:51:14+00:00 | Vulnerability · Source |
| CVE-2013-1366 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-05) | fixed: 4 | 2026-06-28T11:51:13+00:00 | Vulnerability · Source |
| CVE-2013-0775 | redhat_vex | Mozilla: Use-after-free in nsImageLoadingContent (MFSA 2013-26) | fixed: 299 known not affected: 1 | 2026-06-28T11:51:12+00:00 | Vulnerability · Source |
| CVE-2018-12130 | redhat_vex | hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS) | fixed: 3508 known affected: 2 known not affected: 16 | 2026-06-28T11:51:12+00:00 | Vulnerability · Source |
| CVE-2021-22890 | redhat_vex | curl: TLS 1.3 session ticket mix-up with HTTPS proxy host | fixed: 144 known affected: 2 known not affected: 30 | 2026-06-28T11:51:12+00:00 | Vulnerability · Source |
| CVE-2018-9385 | redhat_vex | kernel: Out-of-bounds write due to incorrect bounds check in drivers/amba/bus.c:driver_override_store() | known affected: 1 known not affected: 103 | 2026-06-28T11:51:11+00:00 | Vulnerability · Source |
| CVE-2013-0754 | redhat_vex | Mozilla: Use-after-free in ListenerManager (MFSA 2013-17) | fixed: 140 known affected: 1 | 2026-06-28T11:51:11+00:00 | Vulnerability · Source |
| CVE-2026-31781 | redhat_vex | kernel: drm/ioc32: stop speculation on the drm_compat_ioctl path | known affected: 246 known not affected: 28 | 2026-06-28T11:51:10+00:00 | Vulnerability · Source |
| CVE-2008-3109 | redhat_vex | Security Vulnerabilities in the Java Runtime Environment Scripting Language Support (6529568, 6529579) | fixed: 196 | 2026-06-28T11:51:10+00:00 | Vulnerability · Source |
| CVE-2018-17479 | redhat_vex | chromium-browser: Use-after-free in GPU | fixed: 12 | 2026-06-28T11:51:10+00:00 | Vulnerability · Source |
| CVE-2013-0423 | redhat_vex | JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment) | fixed: 313 known affected: 1 known not affected: 8 | 2026-06-28T11:51:09+00:00 | Vulnerability · Source |
| CVE-2026-24043 | redhat_vex | jsPDF: jsPDF: PDF integrity compromised via arbitrary XML injection in addMetadata function | known affected: 6 | 2026-06-28T11:51:09+00:00 | Vulnerability · Source |
| CVE-2013-0428 | redhat_vex | OpenJDK: reflection API incorrect checks for proxy classes (Libraries, 7197546, SE-2012-01 Issue 29) | fixed: 543 known affected: 1 | 2026-06-28T11:51:09+00:00 | Vulnerability · Source |
| CVE-2018-17474 | redhat_vex | chromium-browser: Use after free in Blink | fixed: 12 | 2026-06-28T11:51:09+00:00 | Vulnerability · Source |
| CVE-2026-25793 | redhat_vex | nebula: Nebula: Blocklist evasion via ECDSA Signature Malleability | known not affected: 1 | 2026-06-28T11:51:08+00:00 | Vulnerability · Source |
| CVE-2008-3106 | redhat_vex | security flaw | fixed: 320 | 2026-06-28T11:51:08+00:00 | Vulnerability · Source |
| CVE-2026-23369 | redhat_vex | kernel: i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" | known affected: 198 known not affected: 76 | 2026-06-28T11:51:08+00:00 | Vulnerability · Source |
| CVE-2026-23991 | redhat_vex | github.com/theupdateframework/go-tuf/v2: go-tuf client DoS via malformed server response | known affected: 35 | 2026-06-28T11:51:08+00:00 | Vulnerability · Source |
| CVE-2020-11993 | redhat_vex | httpd: mod_http2 concurrent pool usage | fixed: 361 known affected: 3 known not affected: 16 | 2026-06-28T11:51:07+00:00 | Vulnerability · Source |
| CVE-2013-0273 | redhat_vex | pidgin: Meanwhile protocol missing nul termination of long Lotus Sametime usernames | fixed: 113 known affected: 1 | 2026-06-28T11:51:07+00:00 | Vulnerability · Source |
| CVE-2013-0272 | redhat_vex | pidgin: MXit protocol stack-based buffer overflow when processing HTTP headers | fixed: 113 known affected: 1 | 2026-06-28T11:51:06+00:00 | Vulnerability · Source |
| CVE-2023-35825 | redhat_vex | kernel: r592: race condition leading to use-after-free in r592_remove() | fixed: 666 known affected: 64 | 2026-06-28T11:51:06+00:00 | Vulnerability · Source |
| CVE-2018-17467 | redhat_vex | chromium-browser: URL spoof in Omnibox | fixed: 12 | 2026-06-28T11:51:05+00:00 | Vulnerability · Source |
| CVE-2018-8822 | redhat_vex | kernel: Memory corruption in ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c | known not affected: 88 | 2026-06-28T11:51:05+00:00 | Vulnerability · Source |
| CVE-2026-23952 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via processing of MSL comment tags | known affected: 14 | 2026-06-28T11:51:04+00:00 | Vulnerability · Source |
| CVE-2014-3597 | redhat_vex | php: multiple buffer over-reads in php_parserr | fixed: 970 known not affected: 1 | 2026-06-28T11:51:03+00:00 | Vulnerability · Source |
| CVE-2025-67481 | redhat_vex | MediaWiki: MediaWiki: Cross-site Scripting vulnerability via improper input neutralization | known not affected: 1 | 2026-06-28T11:51:02+00:00 | Vulnerability · Source |
| CVE-2026-23920 | redhat_vex | zabbix: Zabbix: Arbitrary code execution via newline injection in script input validation | known not affected: 1 | 2026-06-28T11:51:01+00:00 | Vulnerability · Source |
| CVE-2026-28861 | redhat_vex | webkitgtk: A malicious website may be able to access script message handlers intended for other origins | known not affected: 27 | 2026-06-28T11:51:01+00:00 | Vulnerability · Source |
| CVE-2020-11984 | redhat_vex | httpd: mod_proxy_uwsgi buffer overflow | fixed: 361 known affected: 3 known not affected: 16 | 2026-06-28T11:51:01+00:00 | Vulnerability · Source |
| CVE-2022-44020 | redhat_vex | VirtualBMC: removes password protection from the managed libvirt XML domain | fixed: 2 known not affected: 5 | 2026-06-28T11:51:01+00:00 | Vulnerability · Source |
| CVE-2021-35591 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Oct 2021) | fixed: 125 known not affected: 134 | 2026-06-28T11:51:00+00:00 | Vulnerability · Source |
| CVE-2020-11884 | redhat_vex | Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation | fixed: 287 known not affected: 72 | 2026-06-28T11:50:59+00:00 | Vulnerability · Source |
| CVE-2007-5238 | redhat_vex | Vulnerabilities in Java Web Start allow to determine the location of the Java Web Start cache | fixed: 375 | 2026-06-28T11:50:58+00:00 | Vulnerability · Source |
| CVE-2026-12014 | redhat_vex | chromium-browser: chromium-browser: Use after free Cast | known not affected: 1 | 2026-06-28T11:50:58+00:00 | Vulnerability · Source |