VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297692 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-3539 | redhat_vex | chromium-browser: Object lifecycle issue in DevTools | known not affected: 1 | 2026-06-28T11:39:28+00:00 | Vulnerability · Source |
| CVE-2015-4643 | redhat_vex | php: integer overflow in ftp_genlist() resulting in heap overflow (improved fix for CVE-2015-4022) | fixed: 1046 known affected: 2 | 2026-06-28T11:39:28+00:00 | Vulnerability · Source |
| CVE-2017-11281 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-28 | fixed: 3 | 2026-06-28T11:39:27+00:00 | Vulnerability · Source |
| CVE-2017-11215 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-33 | fixed: 3 | 2026-06-28T11:39:26+00:00 | Vulnerability · Source |
| CVE-2026-43373 | redhat_vex | kernel: net: ncsi: fix skb leak in error paths | known not affected: 274 | 2026-06-28T11:39:25+00:00 | Vulnerability · Source |
| CVE-2015-4148 | redhat_vex | php: SoapClient's do_soap_call() type confusion after unserialize() | fixed: 849 known affected: 56 known not affected: 30 | 2026-06-28T11:39:25+00:00 | Vulnerability · Source |
| CVE-2025-71287 | redhat_vex | kernel: memory: mtk-smi: fix device leak on larb probe | known not affected: 274 | 2026-06-28T11:39:24+00:00 | Vulnerability · Source |
| CVE-2015-4024 | redhat_vex | php: multipart/form-data request parsing CPU usage DoS | fixed: 1046 known affected: 2 | 2026-06-28T11:39:23+00:00 | Vulnerability · Source |
| CVE-2026-46247 | redhat_vex | kernel: clk: qcom: gfx3d: add parent to parent request map | known affected: 76 known not affected: 198 | 2026-06-28T11:39:22+00:00 | Vulnerability · Source |
| CVE-2025-3839 | redhat_vex | epiphany: Insecure External Protocol Invocation in Epiphany | known not affected: 1 | 2026-06-28T11:39:21+00:00 | Vulnerability · Source |
| CVE-2026-34303 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T11:39:21+00:00 | Vulnerability · Source |
| CVE-2008-5358 | redhat_vex | OpenJDK Buffer Overflow in GIF image processing (6766136) | fixed: 196 | 2026-06-28T11:39:21+00:00 | Vulnerability · Source |
| CVE-2019-15239 | redhat_vex | kernel: local attacker can trigger multiple use-after-free conditions results in privilege escalation | fixed: 237 known not affected: 91 | 2026-06-28T11:39:20+00:00 | Vulnerability · Source |
| CVE-2026-40706 | redhat_vex | ntfs-3g: NTFS-3G: Arbitrary code execution via crafted NTFS image | known not affected: 1 | 2026-06-28T11:39:20+00:00 | Vulnerability · Source |
| CVE-2026-25833 | redhat_vex | mbedtls: buffer underflow in x509_inet_pton_ipv6() | known not affected: 1 | 2026-06-28T11:39:20+00:00 | Vulnerability · Source |
| CVE-2008-0667 | redhat_vex | acroread: silent print vulnerability | fixed: 20 | 2026-06-28T11:39:20+00:00 | Vulnerability · Source |
| CVE-2025-32797 | redhat_vex | conda-build: Conda-build Code Execution | known not affected: 1 | 2026-06-28T11:39:18+00:00 | Vulnerability · Source |
| CVE-2026-39860 | redhat_vex | nix: privilege escalation via symlink following during output registration | known not affected: 1 | 2026-06-28T11:39:18+00:00 | Vulnerability · Source |
| CVE-2008-3873 | redhat_vex | flash: clipboard hijack attack | fixed: 10 | 2026-06-28T11:39:18+00:00 | Vulnerability · Source |
| CVE-2025-32444 | redhat_vex | vllm: vLLM Vulnerable to Remote Code Execution via Mooncake Integration | known not affected: 12 | 2026-06-28T11:39:17+00:00 | Vulnerability · Source |
| CVE-2025-71285 | redhat_vex | kernel: net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels | known affected: 232 known not affected: 42 | 2026-06-28T11:39:17+00:00 | Vulnerability · Source |
| CVE-2019-15291 | redhat_vex | kernel: Null pointer dereference in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c | known affected: 91 known not affected: 13 | 2026-06-28T11:39:16+00:00 | Vulnerability · Source |
| CVE-2019-5418 | redhat_vex | rubygem-actionpack: render file directory traversal in Action View | fixed: 75 | 2026-06-28T11:39:16+00:00 | Vulnerability · Source |
| CVE-2026-43293 | redhat_vex | kernel: media: chips-media: wave5: Fix kthread worker destruction in polling mode | known not affected: 274 | 2026-06-28T11:39:16+00:00 | Vulnerability · Source |
| CVE-2025-5643 | redhat_vex | radare2: Radare2 radiff2 cons.c cons_stack_load memory corruption | known not affected: 1 | 2026-06-28T11:39:14+00:00 | Vulnerability · Source |
| CVE-2025-71149 | redhat_vex | kernel: io_uring/poll: correctly handle io_poll_add() return value on update | known affected: 184 known not affected: 90 | 2026-06-28T11:39:14+00:00 | Vulnerability · Source |
| CVE-2014-7907 | redhat_vex | chromium-browser: Use-after-free in blink | fixed: 18 known affected: 9 | 2026-06-28T11:39:14+00:00 | Vulnerability · Source |
| CVE-2025-71203 | redhat_vex | kernel: riscv: Sanitize syscall table indexing under speculation | known not affected: 274 | 2026-06-28T11:39:12+00:00 | Vulnerability · Source |
| CVE-2019-15605 | redhat_vex | nodejs: HTTP request smuggling using malformed Transfer-Encoding header | fixed: 355 known not affected: 1 | 2026-06-28T11:39:11+00:00 | Vulnerability · Source |
| CVE-2015-3087 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-09 | fixed: 5 | 2026-06-28T11:39:10+00:00 | Vulnerability · Source |
| CVE-2008-2086 | redhat_vex | Java Web Start File Inclusion via System Properties Override | fixed: 575 | 2026-06-28T11:39:08+00:00 | Vulnerability · Source |
| CVE-2019-3896 | redhat_vex | kernel: Double free in lib/idr.c | fixed: 212 known affected: 1 known not affected: 89 | 2026-06-28T11:39:08+00:00 | Vulnerability · Source |
| CVE-2019-3891 | redhat_vex | candlepin: credentials exposure through log files | fixed: 1128 | 2026-06-28T11:39:06+00:00 | Vulnerability · Source |
| CVE-2026-43262 | redhat_vex | kernel: gfs2: fiemap page fault fix | known affected: 198 known not affected: 76 | 2026-06-28T11:39:06+00:00 | Vulnerability · Source |
| CVE-2019-3894 | redhat_vex | wildfly: wrong SecurityIdentity for EE concurrency threads that are reused | fixed: 392 | 2026-06-28T11:39:06+00:00 | Vulnerability · Source |
| CVE-2019-3887 | redhat_vex | Kernel: KVM: nVMX: guest accesses L0 MSR causes potential DoS | fixed: 162 known not affected: 56 | 2026-06-28T11:39:05+00:00 | Vulnerability · Source |
| CVE-2026-46213 | redhat_vex | kernel: HID: appletb-kbd: fix UAF in inactivity-timer cleanup path | known not affected: 274 | 2026-06-28T11:39:05+00:00 | Vulnerability · Source |
| CVE-2014-6493 | redhat_vex | JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment) | fixed: 530 | 2026-06-28T11:39:05+00:00 | Vulnerability · Source |
| CVE-2017-10690 | redhat_vex | puppet: Environment leakage in puppet-agent | fixed: 1110 | 2026-06-28T11:39:05+00:00 | Vulnerability · Source |
| CVE-2019-3882 | redhat_vex | kernel: denial of service vector through vfio DMA mappings | fixed: 358 known affected: 16 known not affected: 27 | 2026-06-28T11:39:05+00:00 | Vulnerability · Source |
| CVE-2015-2620 | redhat_vex | mysql: unspecified vulnerability related to Server:Security:Privileges (CPU July 2015) | fixed: 428 known affected: 17 | 2026-06-28T11:39:04+00:00 | Vulnerability · Source |
| CVE-2019-3875 | redhat_vex | keycloak: missing signatures validation on CRL used to verify client certificates | fixed: 3 known affected: 5 | 2026-06-28T11:39:04+00:00 | Vulnerability · Source |
| CVE-2019-3861 | redhat_vex | libssh2: Out-of-bounds reads with specially crafted SSH packets | fixed: 63 known affected: 12 known not affected: 4 | 2026-06-28T11:39:03+00:00 | Vulnerability · Source |
| CVE-2019-3862 | redhat_vex | libssh2: Out-of-bounds memory comparison with specially crafted message channel request | fixed: 81 known affected: 12 known not affected: 4 | 2026-06-28T11:39:03+00:00 | Vulnerability · Source |
| CVE-2019-3868 | redhat_vex | keycloak: session hijack using the user access token | fixed: 10 known affected: 4 known not affected: 1 | 2026-06-28T11:39:03+00:00 | Vulnerability · Source |
| CVE-2015-2573 | redhat_vex | mysql: unspecified vulnerability related to Server:DDL (CPU April 2015) | fixed: 338 known not affected: 19 under investigation: 9 | 2026-06-28T11:39:03+00:00 | Vulnerability · Source |
| CVE-2019-3860 | redhat_vex | libssh2: Out-of-bounds reads with specially crafted SFTP packets | known affected: 16 known not affected: 4 | 2026-06-28T11:39:03+00:00 | Vulnerability · Source |
| CVE-2019-3859 | redhat_vex | libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read | known affected: 16 known not affected: 4 | 2026-06-28T11:39:02+00:00 | Vulnerability · Source |
| CVE-2020-16003 | redhat_vex | chromium-browser: Use after free in printing | fixed: 14 | 2026-06-28T11:39:01+00:00 | Vulnerability · Source |
| CVE-2017-10309 | redhat_vex | JDK: unspecified vulnerability fixed in 8u151 and 9.0.1 (Deployment) | fixed: 174 | 2026-06-28T11:39:01+00:00 | Vulnerability · Source |