VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-32935 | redhat_vex | phpseclib: phpseclib: Information disclosure via padding oracle timing attack when using AES in CBC mode | known not affected: 1 | 2026-06-28T11:48:02+00:00 | Vulnerability · Source |
| CVE-2026-23219 | redhat_vex | kernel: mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single | known affected: 76 known not affected: 198 | 2026-06-28T11:48:02+00:00 | Vulnerability · Source |
| CVE-2010-3641 | redhat_vex | flash-plugin: security bulletin APSB10-26 | fixed: 9 | 2026-06-28T11:48:00+00:00 | Vulnerability · Source |
| CVE-2020-10758 | redhat_vex | keycloak: DoS by sending multiple simultaneous requests with a Content-Length header value greater than actual byte count of request body | fixed: 11 known affected: 1 known not affected: 4 | 2026-06-28T11:48:00+00:00 | Vulnerability · Source |
| CVE-2018-16084 | redhat_vex | chromium-browser: User confirmation bypass in external protocol handling | fixed: 12 | 2026-06-28T11:47:59+00:00 | Vulnerability · Source |
| CVE-2009-5147 | redhat_vex | ruby: dlopen could open a library with tainted library name | fixed: 145 known affected: 79 | 2026-06-28T11:47:55+00:00 | Vulnerability · Source |
| CVE-2026-23203 | redhat_vex | kernel: net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue | known not affected: 274 | 2026-06-28T11:47:54+00:00 | Vulnerability · Source |
| CVE-2018-0739 | redhat_vex | openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service | fixed: 314 known affected: 15 known not affected: 6 | 2026-06-28T11:47:54+00:00 | Vulnerability · Source |
| CVE-2017-18208 | redhat_vex | kernel: Inifinite loop vulnerability in mm/madvise.c:madvise_willneed() function allows local denial of service | fixed: 473 known not affected: 56 | 2026-06-28T11:47:52+00:00 | Vulnerability · Source |
| CVE-2026-33596 | redhat_vex | dnsdist: TCP backend stream ID overflow | known not affected: 1 | 2026-06-28T11:47:51+00:00 | Vulnerability · Source |
| CVE-2018-0734 | redhat_vex | openssl: timing side channel attack in the DSA signature algorithm | fixed: 292 known affected: 17 | 2026-06-28T11:47:51+00:00 | Vulnerability · Source |
| CVE-2018-14615 | redhat_vex | kernel: Buffer overflow in fs/f2fs/inline.c:truncate_inline_inode() when unmounting a crafted f2fs image | known not affected: 88 | 2026-06-28T11:47:51+00:00 | Vulnerability · Source |
| CVE-2015-5041 | redhat_vex | JDK: J9 JVM allows code to invoke non-public interface methods | fixed: 346 | 2026-06-28T11:47:51+00:00 | Vulnerability · Source |
| CVE-2021-2437 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2021) | fixed: 155 known not affected: 119 | 2026-06-28T11:47:50+00:00 | Vulnerability · Source |
| CVE-2008-1190 | redhat_vex | Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190) | fixed: 434 | 2026-06-28T11:47:50+00:00 | Vulnerability · Source |
| CVE-2007-1286 | redhat_vex | security flaw | fixed: 384 | 2026-06-28T11:47:49+00:00 | Vulnerability · Source |
| CVE-2017-17975 | redhat_vex | kernel: use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c | known not affected: 88 | 2026-06-28T11:47:48+00:00 | Vulnerability · Source |
| CVE-2022-45884 | redhat_vex | kernel: use-after-free due to race condition occurring in dvb_register_device() | fixed: 399 known affected: 42 known not affected: 108 | 2026-06-28T11:47:46+00:00 | Vulnerability · Source |
| CVE-2015-2613 | redhat_vex | JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833) | fixed: 305 known affected: 11 known not affected: 58 | 2026-06-28T11:47:44+00:00 | Vulnerability · Source |
| CVE-2015-3105 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-11 | fixed: 5 | 2026-06-28T11:47:43+00:00 | Vulnerability · Source |
| CVE-2018-3728 | redhat_vex | hoek: Prototype pollution in utilities function | fixed: 126 known affected: 5 known not affected: 12 | 2026-06-28T11:47:43+00:00 | Vulnerability · Source |
| CVE-2013-0450 | redhat_vex | OpenJDK: RequiredModelMBean missing access control context checks (JMX, 8000537) | fixed: 543 known affected: 1 | 2026-06-28T11:47:42+00:00 | Vulnerability · Source |
| CVE-2015-2637 | redhat_vex | JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D) | fixed: 636 | 2026-06-28T11:47:41+00:00 | Vulnerability · Source |
| CVE-2025-68787 | redhat_vex | kernel: netrom: Fix memory leak in nr_sendmsg() | known not affected: 274 | 2026-06-28T11:47:40+00:00 | Vulnerability · Source |
| CVE-2025-59788 | redhat_vex | Nextcloud: Nextcloud: Cross-site scripting (XSS) in PDF viewer allows arbitrary JavaScript execution | known not affected: 1 | 2026-06-28T11:47:38+00:00 | Vulnerability · Source |
| CVE-2011-0600 | redhat_vex | acroread: critical APSB11-03 | fixed: 18 | 2026-06-28T11:47:37+00:00 | Vulnerability · Source |
| CVE-2026-33433 | redhat_vex | github.com/traefik/traefik: Traefik: Authentication bypass via non-canonical HTTP header injection | fixed: 4 known not affected: 57 | 2026-06-28T11:47:37+00:00 | Vulnerability · Source |
| CVE-2015-0395 | redhat_vex | OpenJDK: phantom references handling issue in garbage collector (Hotspot, 8047125) | fixed: 801 known not affected: 38 | 2026-06-28T11:47:36+00:00 | Vulnerability · Source |
| CVE-2015-0327 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T11:47:36+00:00 | Vulnerability · Source |
| CVE-2015-0326 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T11:47:35+00:00 | Vulnerability · Source |
| CVE-2022-29970 | redhat_vex | sinatra: path traversal possible outside of public_dir when serving static files | fixed: 73 known affected: 25 known not affected: 1829 | 2026-06-28T11:47:34+00:00 | Vulnerability · Source |
| CVE-2017-9725 | redhat_vex | kernel: Incorrect type conversion for size during dma allocation | fixed: 318 known not affected: 31 | 2026-06-28T11:47:33+00:00 | Vulnerability · Source |
| CVE-2017-7486 | redhat_vex | postgresql: pg_user_mappings view discloses foreign server passwords | fixed: 436 known affected: 14 known not affected: 1 | 2026-06-28T11:47:32+00:00 | Vulnerability · Source |
| CVE-2020-10740 | redhat_vex | wildfly: unsafe deserialization in Wildfly Enterprise Java Beans | fixed: 762 known affected: 8 known not affected: 4 | 2026-06-28T11:47:32+00:00 | Vulnerability · Source |
| CVE-2017-7679 | redhat_vex | httpd: mod_mime buffer overread | fixed: 377 known affected: 8 | 2026-06-28T11:47:32+00:00 | Vulnerability · Source |
| CVE-2026-43390 | redhat_vex | kernel: nstree: tighten permission checks for listing | known not affected: 274 | 2026-06-28T11:47:32+00:00 | Vulnerability · Source |
| CVE-2026-44167 | redhat_vex | phpseclib: phpseclib: Denial of Service via untrusted ASN.1 file loading | known not affected: 1 | 2026-06-28T11:47:32+00:00 | Vulnerability · Source |
| CVE-2022-47015 | redhat_vex | mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() | fixed: 843 known affected: 39 known not affected: 107 | 2026-06-28T11:47:31+00:00 | Vulnerability · Source |
| CVE-2017-7472 | redhat_vex | kernel: keyctl_set_reqkey_keyring() leaks thread keyrings | fixed: 207 known affected: 14 known not affected: 1 | 2026-06-28T11:47:31+00:00 | Vulnerability · Source |
| CVE-2026-3293 | redhat_vex | snowflake-jdbc: snowflake-jdbc: Denial of Service via inefficient regular expression processing | known affected: 2 | 2026-06-28T11:47:30+00:00 | Vulnerability · Source |
| CVE-2017-6214 | redhat_vex | kernel: ipv4/tcp: Infinite loop in tcp_splice_read() | fixed: 387 known not affected: 1 | 2026-06-28T11:47:30+00:00 | Vulnerability · Source |
| CVE-2026-43388 | redhat_vex | kernel: mm/damon/core: clear walk_control on inactive context in damos_walk() | known not affected: 274 | 2026-06-28T11:47:28+00:00 | Vulnerability · Source |
| CVE-2013-4480 | redhat_vex | Satellite: Interface to create the initial administrator user remains open after installation | fixed: 48 | 2026-06-28T11:47:27+00:00 | Vulnerability · Source |
| CVE-2025-59474 | redhat_vex | jenkins: Missing permission check allows obtaining agent names | known affected: 1 | 2026-06-28T11:47:26+00:00 | Vulnerability · Source |
| CVE-2010-1297 | redhat_vex | flash-plugin: Arbitrary code execution by opening a specially-crafted PDF file with malicious SWF content (APSA10-01) | fixed: 22 | 2026-06-28T11:47:26+00:00 | Vulnerability · Source |
| CVE-2011-4369 | redhat_vex | acroread: unspecified vulnerability in PRC component (APSB11-30) | fixed: 18 | 2026-06-28T11:47:26+00:00 | Vulnerability · Source |
| CVE-2026-23179 | redhat_vex | kernel: nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() | known affected: 232 known not affected: 42 | 2026-06-28T11:47:26+00:00 | Vulnerability · Source |
| CVE-2026-43381 | redhat_vex | kernel: nouveau/dpcd: return EBUSY for aux xfer if the device is asleep | known not affected: 274 | 2026-06-28T11:47:25+00:00 | Vulnerability · Source |
| CVE-2013-0429 | redhat_vex | OpenJDK: PresentationManager incorrectly shared (CORBA, 7141694) | fixed: 243 known affected: 1 known not affected: 24 | 2026-06-28T11:47:24+00:00 | Vulnerability · Source |
| CVE-2022-45919 | redhat_vex | kernel: use-after-free due to race condition occurring in dvb_ca_en50221.c | fixed: 399 known affected: 42 known not affected: 108 | 2026-06-28T11:47:24+00:00 | Vulnerability · Source |