VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-1387 | redhat_vex | git: Remote code execution in recursive clones with nested submodules | fixed: 362 known not affected: 15 | 2026-06-28T11:50:57+00:00 | Vulnerability · Source |
| CVE-2026-31754 | redhat_vex | kernel: usb: cdns3: gadget: fix state inconsistency on gadget init failure | known affected: 76 known not affected: 198 | 2026-06-28T11:50:56+00:00 | Vulnerability · Source |
| CVE-2025-61646 | redhat_vex | MediaWiki: MediaWiki: Information disclosure via user interaction in EnhancedChangesList.Php | known not affected: 1 | 2026-06-28T11:50:56+00:00 | Vulnerability · Source |
| CVE-2026-23889 | redhat_vex | pnpm: pnpm: Arbitrary file write via path traversal on Windows | known affected: 2 | 2026-06-28T11:50:55+00:00 | Vulnerability · Source |
| CVE-2026-43174 | redhat_vex | kernel: io_uring/zcrx: fix post open error handling | known not affected: 274 | 2026-06-28T11:50:55+00:00 | Vulnerability · Source |
| CVE-2026-23888 | redhat_vex | pnpm: pnpm: Arbitrary file write via path traversal in binary fetcher leading to remote code execution | known affected: 2 | 2026-06-28T11:50:54+00:00 | Vulnerability · Source |
| CVE-2016-3134 | redhat_vex | kernel: netfilter: missing bounds check in ipt_entry structure | fixed: 207 known affected: 15 | 2026-06-28T11:50:53+00:00 | Vulnerability · Source |
| CVE-2016-3108 | redhat_vex | pulp: Insecure temporary file used when generating certificate for Pulp Nodes | fixed: 639 | 2026-06-28T11:50:52+00:00 | Vulnerability · Source |
| CVE-2018-16082 | redhat_vex | chromium-browser: Stack buffer overflow in SwiftShader | fixed: 12 | 2026-06-28T11:50:52+00:00 | Vulnerability · Source |
| CVE-2019-13764 | redhat_vex | chromium-browser: Type Confusion in V8 | fixed: 14 | 2026-06-28T11:50:52+00:00 | Vulnerability · Source |
| CVE-2018-7740 | redhat_vex | kernel: Denial of service in resv_map_release function in mm/hugetlb.c | fixed: 222 known affected: 28 known not affected: 56 | 2026-06-28T11:50:52+00:00 | Vulnerability · Source |
| CVE-2025-5264 | redhat_vex | firefox: thunderbird: Potential local code execution in “Copy as cURL” command | fixed: 249 known affected: 8 | 2026-06-28T11:50:51+00:00 | Vulnerability · Source |
| CVE-2026-12024 | redhat_vex | chromium-browser: chromium-browser: Insufficient policy enforcement DevTools | known not affected: 1 | 2026-06-28T11:50:51+00:00 | Vulnerability · Source |
| CVE-2026-23874 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via infinite recursion in MSL <write> command | known affected: 14 | 2026-06-28T11:50:51+00:00 | Vulnerability · Source |
| CVE-2014-2490 | redhat_vex | OpenJDK: Event logger format string vulnerability (Hotspot, 8037076) | fixed: 363 known not affected: 20 | 2026-06-28T11:50:51+00:00 | Vulnerability · Source |
| CVE-2014-3193 | redhat_vex | chromium: multiple security fixes in Chrome 38.0.2125.101 | fixed: 15 | 2026-06-28T11:50:50+00:00 | Vulnerability · Source |
| CVE-2012-6712 | redhat_vex | kernel: buffer overflow in drivers/net/wireless/iwlwifi/iwl-agn-sta.c | known affected: 1 known not affected: 103 | 2026-06-28T11:50:49+00:00 | Vulnerability · Source |
| CVE-2025-62349 | redhat_vex | salt: Salt Master authentication protocol downgrade may enable minion impersonation | known not affected: 1 | 2026-06-28T11:50:49+00:00 | Vulnerability · Source |
| CVE-2026-23739 | redhat_vex | Asterisk: Asterisk: Local file disclosure via unsafe XML parsing | known not affected: 1 | 2026-06-28T11:50:48+00:00 | Vulnerability · Source |
| CVE-2026-23158 | redhat_vex | kernel: gpio: virtuser: fix UAF in configfs release path | known not affected: 274 | 2026-06-28T11:50:48+00:00 | Vulnerability · Source |
| CVE-2006-0451 | redhat_vex | memory leaks using ber_scanf when handling bad BER packets (CVE-2006-0453) | fixed: 1 | 2026-06-28T11:50:47+00:00 | Vulnerability · Source |
| CVE-2018-6170 | redhat_vex | chromium-browser: Type confusion in PDFium | fixed: 12 | 2026-06-28T11:50:46+00:00 | Vulnerability · Source |
| CVE-2026-31541 | redhat_vex | kernel: tracing: Fix trace_marker copy link list updates | known not affected: 274 | 2026-06-28T11:50:44+00:00 | Vulnerability · Source |
| CVE-2026-31512 | redhat_vex | kernel: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() | known affected: 260 known not affected: 14 | 2026-06-28T11:50:43+00:00 | Vulnerability · Source |
| CVE-2019-14233 | redhat_vex | Django: the behavior of the underlying HTMLParser leading to DoS | fixed: 9 known affected: 24 known not affected: 6 | 2026-06-28T11:50:43+00:00 | Vulnerability · Source |
| CVE-2026-3910 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | known not affected: 1 | 2026-06-28T11:50:42+00:00 | Vulnerability · Source |
| CVE-2014-0577 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-24) | fixed: 6 | 2026-06-28T11:50:41+00:00 | Vulnerability · Source |
| CVE-2019-14235 | redhat_vex | Django: Potential memory exhaustion in django.utils.encoding.uri_to_iri() | fixed: 9 known affected: 24 known not affected: 6 | 2026-06-28T11:50:41+00:00 | Vulnerability · Source |
| CVE-2014-0569 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-22) | fixed: 6 | 2026-06-28T11:50:41+00:00 | Vulnerability · Source |
| CVE-2014-0573 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-24) | fixed: 6 | 2026-06-28T11:50:40+00:00 | Vulnerability · Source |
| CVE-2012-5280 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-24) | fixed: 5 | 2026-06-28T11:50:40+00:00 | Vulnerability · Source |
| CVE-2014-0564 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-22) | fixed: 6 | 2026-06-28T11:50:40+00:00 | Vulnerability · Source |
| CVE-2018-3665 | redhat_vex | Kernel: FPU state information leakage via lazy FPU restore | fixed: 546 known affected: 1 known not affected: 48 | 2026-06-28T11:50:39+00:00 | Vulnerability · Source |
| CVE-2018-2811 | redhat_vex | JDK: unspecified vulnerability fixed in 8u171 and 10.0.1 (Install) | fixed: 64 | 2026-06-28T11:50:38+00:00 | Vulnerability · Source |
| CVE-2018-2573 | redhat_vex | mysql: Server: GIS unspecified vulnerability (CPU Jan 2018) | fixed: 133 known not affected: 96 | 2026-06-28T11:50:38+00:00 | Vulnerability · Source |
| CVE-2017-9224 | redhat_vex | oniguruma: Out-of-bounds stack read in match_at() during regular expression searching | fixed: 254 known affected: 174 under investigation: 3 | 2026-06-28T11:50:37+00:00 | Vulnerability · Source |
| CVE-2020-14331 | redhat_vex | kernel: kernel: buffer over write in vgacon_scroll | fixed: 335 known affected: 32 known not affected: 6 | 2026-06-28T11:50:36+00:00 | Vulnerability · Source |
| CVE-2013-6668 | redhat_vex | v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.146 | fixed: 704 known affected: 9 | 2026-06-28T11:50:36+00:00 | Vulnerability · Source |
| CVE-2018-3211 | redhat_vex | JDK: unspecified vulnerability fixed in 8u191 and 11.0.1 (Serviceability) | fixed: 64 | 2026-06-28T11:50:35+00:00 | Vulnerability · Source |
| CVE-2020-26141 | redhat_vex | kernel: not verifying TKIP MIC of fragmented frames | fixed: 150 known affected: 44 known not affected: 106 | 2026-06-28T11:50:35+00:00 | Vulnerability · Source |
| CVE-2026-6366 | redhat_vex | drupal: Drupal core: Object Injection vulnerability | known not affected: 1 | 2026-06-28T11:50:33+00:00 | Vulnerability · Source |
| CVE-2018-10184 | redhat_vex | haproxy: Heap buffer overflow in mux_h2.c:h2_process_demux() can allow attackers to cause a denial of service | fixed: 23 known not affected: 52 | 2026-06-28T11:50:31+00:00 | Vulnerability · Source |
| CVE-2012-3159 | redhat_vex | JDK: unspecified vulnerability (Deployment) | fixed: 296 known affected: 8 | 2026-06-28T11:50:31+00:00 | Vulnerability · Source |
| CVE-2018-10124 | redhat_vex | kernel: Undefined behaviour with INT_MIN argument in kernel/signal.c:kill_something_info() allows for denial of service | known not affected: 88 | 2026-06-28T11:50:31+00:00 | Vulnerability · Source |
| CVE-2016-5200 | redhat_vex | chromium-browser: out of bounds memory access in v8 | fixed: 12 | 2026-06-28T11:50:25+00:00 | Vulnerability · Source |
| CVE-2011-0869 | redhat_vex | OpenJDK: unprivileged proxy settings change via SOAPConnection (SAAJ, 7013971) | fixed: 352 known not affected: 11 | 2026-06-28T11:50:25+00:00 | Vulnerability · Source |
| CVE-2013-5891 | redhat_vex | mysql: unspecified vulnerability related to Partition DoS (CPU Jan 2014) | fixed: 90 known not affected: 18 | 2026-06-28T11:50:23+00:00 | Vulnerability · Source |
| CVE-2020-11609 | redhat_vex | kernel: NULL pointer dereference due to incorrect handling of invalid descriptors in stv06xx subsystem | known affected: 104 | 2026-06-28T11:50:23+00:00 | Vulnerability · Source |
| CVE-2020-11608 | redhat_vex | kernel: NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs in drivers/media/usb/gspca/ov519.c | fixed: 150 known affected: 56 | 2026-06-28T11:50:23+00:00 | Vulnerability · Source |
| CVE-2018-13100 | redhat_vex | kernel: divide-by-zero in fs/f2fs/super.c | known not affected: 88 | 2026-06-28T11:50:23+00:00 | Vulnerability · Source |