VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297692 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-4761 | redhat_vex | mysql: unspecified vulnerability related to Server:Memcached (CPU July 2015) | fixed: 147 known not affected: 41 | 2026-06-28T11:40:01+00:00 | Vulnerability · Source |
| CVE-2010-0204 | redhat_vex | Acroread: Multiple code execution flaws (APSB10-09) | fixed: 12 | 2026-06-28T11:40:00+00:00 | Vulnerability · Source |
| CVE-2015-6755 | redhat_vex | chromium-browser: cross-origin bypass in Blink | fixed: 12 | 2026-06-28T11:40:00+00:00 | Vulnerability · Source |
| CVE-2015-6676 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-23 | fixed: 5 | 2026-06-28T11:39:59+00:00 | Vulnerability · Source |
| CVE-2026-43219 | redhat_vex | kernel: net: cpsw_new: Fix potential unregister of netdev that has not been registered yet | known not affected: 274 | 2026-06-28T11:39:58+00:00 | Vulnerability · Source |
| CVE-2015-6682 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-23 | fixed: 5 | 2026-06-28T11:39:57+00:00 | Vulnerability · Source |
| CVE-2008-1185 | redhat_vex | Untrusted applet and application privilege escalation (CVE-2008-1186) | fixed: 66 | 2026-06-28T11:39:56+00:00 | Vulnerability · Source |
| CVE-2025-71189 | redhat_vex | kernel: dmaengine: dw: dmamux: fix OF node leak on route allocation failure | known not affected: 274 | 2026-06-28T11:39:56+00:00 | Vulnerability · Source |
| CVE-2008-1191 | redhat_vex | Untrusted Java Web Start arbitrary file creation | fixed: 55 | 2026-06-28T11:39:56+00:00 | Vulnerability · Source |
| CVE-2025-3777 | redhat_vex | transformers: Improper Input Validation in huggingface/transformers | known affected: 60 | 2026-06-28T11:39:50+00:00 | Vulnerability · Source |
| CVE-2026-23292 | redhat_vex | kernel: scsi: target: Fix recursive locking in __configfs_open_file() | known affected: 274 | 2026-06-28T11:39:50+00:00 | Vulnerability · Source |
| CVE-2011-2104 | redhat_vex | acroread: Multiple denial of service flaws (APSB11-16) | fixed: 18 | 2026-06-28T11:39:48+00:00 | Vulnerability · Source |
| CVE-2011-2456 | redhat_vex | flash-plugin: mulitple code execution flaws (APSB11-28) | fixed: 5 | 2026-06-28T11:39:48+00:00 | Vulnerability · Source |
| CVE-2015-5366 | redhat_vex | kernel: net: incorrect processing of checksums in UDP implementation | fixed: 613 | 2026-06-28T11:39:47+00:00 | Vulnerability · Source |
| CVE-2025-3635 | redhat_vex | moodle: CSRF Risk in Moodle User Tours Manager Allows Tour Duplication | known not affected: 1 | 2026-06-28T11:39:46+00:00 | Vulnerability · Source |
| CVE-2025-3644 | redhat_vex | moodle: AJAX section delete does not respect course_can_delete_section() | known not affected: 1 | 2026-06-28T11:39:46+00:00 | Vulnerability · Source |
| CVE-2025-3647 | redhat_vex | moodle: IDOR when accessing the cohorts report | known not affected: 1 | 2026-06-28T11:39:46+00:00 | Vulnerability · Source |
| CVE-2015-5117 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-16 | fixed: 5 | 2026-06-28T11:39:46+00:00 | Vulnerability · Source |
| CVE-2009-3245 | redhat_vex | openssl: missing bn_wexpand return value checks | fixed: 178 | 2026-06-28T11:39:45+00:00 | Vulnerability · Source |
| CVE-2015-4890 | redhat_vex | mysql: unspecified vulnerability related to Server:Replication (CPU October 2015) | fixed: 80 known not affected: 36 | 2026-06-28T11:39:45+00:00 | Vulnerability · Source |
| CVE-2025-3637 | redhat_vex | moodle: CSRF Token Exposure via URL in Moodle mod_data Module | known not affected: 1 | 2026-06-28T11:39:45+00:00 | Vulnerability · Source |
| CVE-2026-40022 | redhat_vex | camel-http: Apache Camel: Information disclosure and authentication bypass in embedded HTTP/management servers | fixed: 1 known not affected: 26 | 2026-06-28T11:39:44+00:00 | Vulnerability · Source |
| CVE-2025-3634 | redhat_vex | moodle: Moodle Allows Course Self-Enrolment Before Completing MFA | known not affected: 1 | 2026-06-28T11:39:43+00:00 | Vulnerability · Source |
| CVE-2020-14375 | redhat_vex | dpdk: time-of-check time-of-use vulnerabilities throughout vhost_crypto.c | known not affected: 133 | 2026-06-28T11:39:43+00:00 | Vulnerability · Source |
| CVE-2009-2674 | redhat_vex | Java Web Start Buffer JPEG processing integer overflow (6823373) | fixed: 244 | 2026-06-28T11:39:42+00:00 | Vulnerability · Source |
| CVE-2026-23206 | redhat_vex | kernel: dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero | known affected: 76 known not affected: 198 | 2026-06-28T11:39:40+00:00 | Vulnerability · Source |
| CVE-2026-23265 | redhat_vex | kernel: f2fs: fix to do sanity check on node footer in {read,write}_end_io | known not affected: 274 | 2026-06-28T11:39:40+00:00 | Vulnerability · Source |
| CVE-2026-34515 | redhat_vex | aiohttp: AIOHTTP: Information disclosure via static resource handler on Windows | known not affected: 88 | 2026-06-28T11:39:40+00:00 | Vulnerability · Source |
| CVE-2007-0910 | redhat_vex | security flaw | fixed: 608 | 2026-06-28T11:39:39+00:00 | Vulnerability · Source |
| CVE-2019-5823 | redhat_vex | chromium-browser: Forced navigation from service worker | fixed: 14 | 2026-06-28T11:39:39+00:00 | Vulnerability · Source |
| CVE-2026-23215 | redhat_vex | kernel: x86/vmware: Fix hypercall clobbers | known affected: 76 known not affected: 198 | 2026-06-28T11:39:39+00:00 | Vulnerability · Source |
| CVE-2026-10890 | redhat_vex | chromium-browser: Use after free in Cast | known not affected: 1 | 2026-06-28T11:39:39+00:00 | Vulnerability · Source |
| CVE-2026-23252 | redhat_vex | kernel: xfs: get rid of the xchk_xfile_*_descr calls | known affected: 184 known not affected: 90 | 2026-06-28T11:39:39+00:00 | Vulnerability · Source |
| CVE-2025-3625 | redhat_vex | moodle: User DoS and Name Disclosure via IDOR in Moodle MFA Email Factor Revoke Action | known not affected: 1 | 2026-06-28T11:39:39+00:00 | Vulnerability · Source |
| CVE-2026-23254 | redhat_vex | kernel: net: gro: fix outer network offset | known affected: 76 known not affected: 198 | 2026-06-28T11:39:38+00:00 | Vulnerability · Source |
| CVE-2026-43377 | redhat_vex | kernel: ksmbd: Don't log keys in SMB3 signing and encryption key generation | known not affected: 274 | 2026-06-28T11:39:37+00:00 | Vulnerability · Source |
| CVE-2026-40924 | redhat_vex | github.com/tektoncd/pipeline: Tekton Pipelines: Denial of Service via large HTTP response body | known affected: 74 | 2026-06-28T11:39:37+00:00 | Vulnerability · Source |
| CVE-2025-3522 | redhat_vex | thunderbird: Leak of hashed Window credentials via crafted attachment URL | fixed: 144 known affected: 6 | 2026-06-28T11:39:36+00:00 | Vulnerability · Source |
| CVE-2026-40087 | redhat_vex | langchain: incomplete f-string validation in prompt templates | known affected: 10 | 2026-06-28T11:39:35+00:00 | Vulnerability · Source |
| CVE-2026-23200 | redhat_vex | kernel: ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF | known affected: 274 | 2026-06-28T11:39:34+00:00 | Vulnerability · Source |
| CVE-2006-4640 | redhat_vex | security flaw | fixed: 2 | 2026-06-28T11:39:34+00:00 | Vulnerability · Source |
| CVE-2025-34451 | redhat_vex | proxychains-ng: proxychains-ng: Denial of Service due to stack-based buffer overflow via crafted proxy configuration | known not affected: 1 | 2026-06-28T11:39:33+00:00 | Vulnerability · Source |
| CVE-2015-5127 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T11:39:32+00:00 | Vulnerability · Source |
| CVE-2015-5124 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-16 | fixed: 5 | 2026-06-28T11:39:32+00:00 | Vulnerability · Source |
| CVE-2015-5006 | redhat_vex | JDK: local disclosure of kerberos credentials cache | fixed: 346 known affected: 8 | 2026-06-28T11:39:31+00:00 | Vulnerability · Source |
| CVE-2015-4806 | redhat_vex | OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193) | fixed: 1136 | 2026-06-28T11:39:30+00:00 | Vulnerability · Source |
| CVE-2015-4881 | redhat_vex | OpenJDK: missing type checks in IIOPInputStream (CORBA, 8076392) | fixed: 689 | 2026-06-28T11:39:30+00:00 | Vulnerability · Source |
| CVE-2015-4916 | redhat_vex | JDK: unspecified vulnerability fixed in 8u65 (JavaFX) | fixed: 64 | 2026-06-28T11:39:30+00:00 | Vulnerability · Source |
| CVE-2015-4734 | redhat_vex | OpenJDK: kerberos realm name leak (JGSS, 8048030) | fixed: 1035 known affected: 8 | 2026-06-28T11:39:29+00:00 | Vulnerability · Source |
| CVE-2019-15504 | redhat_vex | kernel: double free in drivers/net/wireless/rsi/rsi_91x_usb.c via crafted USB device | known not affected: 92 | 2026-06-28T11:39:28+00:00 | Vulnerability · Source |