VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-5112 | redhat_vex | chromium-browser: heap buffer overflow in webgl | fixed: 12 | 2026-06-28T11:46:47+00:00 | Vulnerability · Source |
| CVE-2017-5128 | redhat_vex | chromium-browser: heap overflow in webgl | fixed: 12 | 2026-06-28T11:46:47+00:00 | Vulnerability · Source |
| CVE-2021-22946 | redhat_vex | curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols | fixed: 105 known affected: 13 known not affected: 11 | 2026-06-28T11:46:46+00:00 | Vulnerability · Source |
| CVE-2017-5124 | redhat_vex | chromium-browser: uxss with mhtml | fixed: 12 | 2026-06-28T11:46:46+00:00 | Vulnerability · Source |
| CVE-2026-46169 | redhat_vex | kernel: hfsplus: fix uninit-value by validating catalog record size | known affected: 14 known not affected: 260 | 2026-06-28T11:46:46+00:00 | Vulnerability · Source |
| CVE-2008-4813 | redhat_vex | Reader: PDF objects parsing and JavaScript getCosObj handling memory corruption flaw | fixed: 20 | 2026-06-28T11:46:46+00:00 | Vulnerability · Source |
| CVE-2017-5054 | redhat_vex | chromium-browser: heap buffer overflow in v8 | fixed: 12 | 2026-06-28T11:46:45+00:00 | Vulnerability · Source |
| CVE-2017-5053 | redhat_vex | chromium-browser: out of bounds memory access in v8 | fixed: 12 | 2026-06-28T11:46:45+00:00 | Vulnerability · Source |
| CVE-2017-5110 | redhat_vex | chromium-browser: ui spoofing in payments dialog | fixed: 12 | 2026-06-28T11:46:45+00:00 | Vulnerability · Source |
| CVE-2017-3652 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Jul 2017) | fixed: 114 known affected: 10 known not affected: 67 | 2026-06-28T11:46:44+00:00 | Vulnerability · Source |
| CVE-2017-3640 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Jul 2017) | fixed: 54 known not affected: 86 | 2026-06-28T11:46:43+00:00 | Vulnerability · Source |
| CVE-2017-5009 | redhat_vex | chromium-browser: out of bounds memory access in webrtc | fixed: 12 | 2026-06-28T11:46:43+00:00 | Vulnerability · Source |
| CVE-2017-3649 | redhat_vex | mysql: Server: Replication unspecified vulnerability (CPU Jul 2017) | fixed: 114 known not affected: 77 | 2026-06-28T11:46:43+00:00 | Vulnerability · Source |
| CVE-2017-3651 | redhat_vex | mysql: Client mysqldump unspecified vulnerability (CPU Jul 2017) | fixed: 542 known affected: 47 known not affected: 21 | 2026-06-28T11:46:43+00:00 | Vulnerability · Source |
| CVE-2017-3633 | redhat_vex | mysql: Server: Memcached unspecified vulnerability (CPU Jul 2017) | fixed: 114 known not affected: 77 | 2026-06-28T11:46:42+00:00 | Vulnerability · Source |
| CVE-2021-22922 | redhat_vex | curl: Content not matching hash in Metalink is not being discarded | fixed: 90 known affected: 3 known not affected: 25 | 2026-06-28T11:46:41+00:00 | Vulnerability · Source |
| CVE-2017-3599 | redhat_vex | mysql: integer underflow in get_56_lenc_string() leading to DoS (CPU Apr 2017) | fixed: 114 known not affected: 57 | 2026-06-28T11:46:41+00:00 | Vulnerability · Source |
| CVE-2017-3291 | redhat_vex | mysql: unrestricted mysqld_safe's ledir (CPU Jan 2017) | fixed: 416 known affected: 27 under investigation: 1 | 2026-06-28T11:46:41+00:00 | Vulnerability · Source |
| CVE-2025-68670 | redhat_vex | xrdp: xrdp: Remote code execution via unauthenticated stack-based buffer overflow | known not affected: 1 | 2026-06-28T11:46:41+00:00 | Vulnerability · Source |
| CVE-2019-2950 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) | fixed: 291 known not affected: 109 | 2026-06-28T11:46:35+00:00 | Vulnerability · Source |
| CVE-2021-2213 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T11:46:35+00:00 | Vulnerability · Source |
| CVE-2017-2925 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-02 | fixed: 3 known affected: 1 | 2026-06-28T11:46:35+00:00 | Vulnerability · Source |
| CVE-2026-43328 | redhat_vex | kernel: cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path | known affected: 232 known not affected: 42 | 2026-06-28T11:46:35+00:00 | Vulnerability · Source |
| CVE-2017-3318 | redhat_vex | mysql: Server: Error Handling unspecified vulnerability (CPU Jan 2017) | fixed: 416 known affected: 18 under investigation: 9 | 2026-06-28T11:46:33+00:00 | Vulnerability · Source |
| CVE-2017-2928 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-02 | fixed: 3 known affected: 1 | 2026-06-28T11:46:33+00:00 | Vulnerability · Source |
| CVE-2017-3331 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Apr 2017) | fixed: 54 known not affected: 66 | 2026-06-28T11:46:33+00:00 | Vulnerability · Source |
| CVE-2017-3059 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-10 | fixed: 3 | 2026-06-28T11:46:33+00:00 | Vulnerability · Source |
| CVE-2017-3085 | redhat_vex | flash-plugin: Information Disclosure via Security Bypass issue fixed in APSB17-23 | fixed: 3 | 2026-06-28T11:46:33+00:00 | Vulnerability · Source |
| CVE-2017-3308 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Apr 2017) | fixed: 416 known affected: 27 | 2026-06-28T11:46:32+00:00 | Vulnerability · Source |
| CVE-2017-3231 | redhat_vex | OpenJDK: URLClassLoader insufficient access control checks (Networking, 8151934) | fixed: 1032 | 2026-06-28T11:46:31+00:00 | Vulnerability · Source |
| CVE-2026-43319 | redhat_vex | kernel: spi: spidev: fix lock inversion between spi_lock and buf_lock | known affected: 76 known not affected: 198 | 2026-06-28T11:46:31+00:00 | Vulnerability · Source |
| CVE-2017-3319 | redhat_vex | mysql: Server: X Plugin unspecified vulnerability (CPU Jan 2017) | fixed: 54 known not affected: 66 | 2026-06-28T11:46:31+00:00 | Vulnerability · Source |
| CVE-2021-22947 | redhat_vex | curl: Server responses received before STARTTLS processed after TLS handshake | fixed: 105 known affected: 13 known not affected: 11 | 2026-06-28T11:46:29+00:00 | Vulnerability · Source |
| CVE-2026-43317 | redhat_vex | kernel: most: core: fix leak on early registration failure | known not affected: 274 | 2026-06-28T11:46:29+00:00 | Vulnerability · Source |
| CVE-2026-46171 | redhat_vex | kernel: riscv: kvm: fix vector context allocation leak | known not affected: 274 | 2026-06-28T11:46:28+00:00 | Vulnerability · Source |
| CVE-2026-35540 | redhat_vex | roundcubemail: Roundcube Webmail: SSRF via insufficient CSS sanitization | known not affected: 1 | 2026-06-28T11:46:27+00:00 | Vulnerability · Source |
| CVE-2010-2166 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:46:27+00:00 | Vulnerability · Source |
| CVE-2026-43306 | redhat_vex | kernel: bpf: crypto: Use the correct destructor kfunc type | known affected: 76 known not affected: 198 | 2026-06-28T11:46:27+00:00 | Vulnerability · Source |
| CVE-2017-2636 | redhat_vex | kernel: Race condition access to n_hdlc.tbuf causes double free in n_hdlc_release() | fixed: 730 known not affected: 1 | 2026-06-28T11:46:26+00:00 | Vulnerability · Source |
| CVE-2026-28415 | redhat_vex | Gradio: Gradio: Open Redirect vulnerability allows redirection to arbitrary external URLs. | known not affected: 1 | 2026-06-28T11:46:24+00:00 | Vulnerability · Source |
| CVE-2022-47951 | redhat_vex | openstack: Arbitrary file access through custom VMDK flat descriptor | fixed: 113 known not affected: 39 | 2026-06-28T11:46:24+00:00 | Vulnerability · Source |
| CVE-2009-1856 | redhat_vex | acroread: multiple security fixes in version 8.1.6 (APSB09-07) | fixed: 20 | 2026-06-28T11:46:22+00:00 | Vulnerability · Source |
| CVE-2018-1097 | redhat_vex | foreman: Ovirt admin password exposed by foreman API | fixed: 1110 known not affected: 1 | 2026-06-28T11:46:20+00:00 | Vulnerability · Source |
| CVE-2022-48619 | redhat_vex | kernel: event code falling outside of a bitmap in input_set_capability() leads to panic | fixed: 150 known affected: 42 known not affected: 108 | 2026-06-28T11:46:19+00:00 | Vulnerability · Source |
| CVE-2022-47929 | redhat_vex | kernel: NULL pointer dereference in traffic control subsystem | fixed: 514 known affected: 42 | 2026-06-28T11:46:17+00:00 | Vulnerability · Source |
| CVE-2026-23090 | redhat_vex | kernel: slimbus: core: fix device reference leak on report present | known not affected: 274 | 2026-06-28T11:46:16+00:00 | Vulnerability · Source |
| CVE-2026-30479 | redhat_vex | MapServer: MapServer: Arbitrary code execution via Dynamic-link Library Injection | known not affected: 1 | 2026-06-28T11:46:16+00:00 | Vulnerability · Source |
| CVE-2017-18344 | redhat_vex | kernel: out-of-bounds access in the show_timer function in kernel/time/posix-timers.c | fixed: 672 known not affected: 56 | 2026-06-28T11:46:15+00:00 | Vulnerability · Source |
| CVE-2017-18174 | redhat_vex | kernel: Double free vulnerability in drivers/pinctrl/pinctrl-amd.c:amd_gpio_remove() function can lead to kernel panic | known not affected: 88 | 2026-06-28T11:46:14+00:00 | Vulnerability · Source |
| CVE-2017-18255 | redhat_vex | kernel: Integer overflow in events/core.c:perf_cpu_time_max_percent_handler() can allow for denial of service | known not affected: 88 | 2026-06-28T11:46:13+00:00 | Vulnerability · Source |