VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297692 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-5011 | redhat_vex | chromium-browser: unauthorised file access in devtools | fixed: 12 | 2026-06-28T11:38:39+00:00 | Vulnerability · Source |
| CVE-2017-5020 | redhat_vex | chromium-browser: universal xss in chrome://downloads | fixed: 12 | 2026-06-28T11:38:39+00:00 | Vulnerability · Source |
| CVE-2017-5024 | redhat_vex | chromium-browser: heap overflow in ffmpeg | fixed: 12 | 2026-06-28T11:38:39+00:00 | Vulnerability · Source |
| CVE-2019-3828 | redhat_vex | Ansible: path traversal in the fetch module | fixed: 17 known affected: 22 known not affected: 2 | 2026-06-28T11:38:38+00:00 | Vulnerability · Source |
| CVE-2020-14893 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020) | fixed: 155 known not affected: 92 | 2026-06-28T11:38:38+00:00 | Vulnerability · Source |
| CVE-2020-14846 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020) | fixed: 155 known not affected: 92 | 2026-06-28T11:38:38+00:00 | Vulnerability · Source |
| CVE-2026-7835 | redhat_vex | netatalk: Netatalk: Denial of Service via format string argument mismatch | known not affected: 1 | 2026-06-28T11:38:38+00:00 | Vulnerability · Source |
| CVE-2017-5010 | redhat_vex | chromium-browser: universal xss in blink | fixed: 12 | 2026-06-28T11:38:38+00:00 | Vulnerability · Source |
| CVE-2017-3645 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017) | fixed: 54 known not affected: 86 | 2026-06-28T11:38:36+00:00 | Vulnerability · Source |
| CVE-2020-14623 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jul 2020) | fixed: 337 known not affected: 92 | 2026-06-28T11:38:36+00:00 | Vulnerability · Source |
| CVE-2017-3647 | redhat_vex | mysql: Server: Replication unspecified vulnerability (CPU Jul 2017) | fixed: 114 known not affected: 77 | 2026-06-28T11:38:36+00:00 | Vulnerability · Source |
| CVE-2021-28363 | redhat_vex | python-urllib3: HTTPS proxy host name not validated when using default SSLContext | fixed: 2 known affected: 2 known not affected: 133 | 2026-06-28T11:38:35+00:00 | Vulnerability · Source |
| CVE-2017-3638 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017) | fixed: 54 known not affected: 86 | 2026-06-28T11:38:35+00:00 | Vulnerability · Source |
| CVE-2025-71191 | redhat_vex | kernel: dmaengine: at_hdmac: fix device leak on of_dma_xlate() | known not affected: 274 | 2026-06-28T11:38:33+00:00 | Vulnerability · Source |
| CVE-2017-3309 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017) | fixed: 416 known affected: 27 | 2026-06-28T11:38:32+00:00 | Vulnerability · Source |
| CVE-2025-71299 | redhat_vex | kernel: spi: cadence-quadspi: Parse DT for flashes with the rest of the DT parsing | known affected: 76 known not affected: 198 | 2026-06-28T11:38:31+00:00 | Vulnerability · Source |
| CVE-2017-10096 | redhat_vex | OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469) | fixed: 854 | 2026-06-28T11:38:31+00:00 | Vulnerability · Source |
| CVE-2019-15290 | redhat_vex | kernel: Null pointer dereference in the ath6kl_usb_alloc_urb_from_pipe function in the drivers/net/wireless/ath/ath6kl/usb.c | known not affected: 104 | 2026-06-28T11:38:31+00:00 | Vulnerability · Source |
| CVE-2017-3467 | redhat_vex | mysql: Server: C API unspecified vulnerability (CPU Apr 2017) | fixed: 54 known not affected: 66 | 2026-06-28T11:38:30+00:00 | Vulnerability · Source |
| CVE-2017-10090 | redhat_vex | OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries) | fixed: 720 | 2026-06-28T11:38:30+00:00 | Vulnerability · Source |
| CVE-2014-3559 | redhat_vex | ovirt-engine-backend: memory snapshots not wiped when deleting a VM with wipe-after-delete (WAD) enabled for its disks | fixed: 16 | 2026-06-28T11:38:29+00:00 | Vulnerability · Source |
| CVE-2017-3453 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017) | fixed: 416 known affected: 27 | 2026-06-28T11:38:29+00:00 | Vulnerability · Source |
| CVE-2014-3515 | redhat_vex | php: unserialize() SPL ArrayObject / SPLObjectStorage type confusion flaw | fixed: 970 known not affected: 1 | 2026-06-28T11:38:27+00:00 | Vulnerability · Source |
| CVE-2014-3479 | redhat_vex | file: cdf_check_stream_offset insufficient boundary check | fixed: 1133 known not affected: 4 | 2026-06-28T11:38:26+00:00 | Vulnerability · Source |
| CVE-2026-43355 | redhat_vex | kernel: iio: light: bh1780: fix PM runtime leak on error path | known not affected: 274 | 2026-06-28T11:38:25+00:00 | Vulnerability · Source |
| CVE-2025-71133 | redhat_vex | kernel: RDMA/irdma: avoid invalid read in irdma_net_event | known affected: 232 known not affected: 42 | 2026-06-28T11:38:25+00:00 | Vulnerability · Source |
| CVE-2017-3261 | redhat_vex | OpenJDK: integer overflow in SocketOutputStream boundary check (Networking, 8164147) | fixed: 1032 | 2026-06-28T11:38:24+00:00 | Vulnerability · Source |
| CVE-2017-3259 | redhat_vex | JDK: unspecified vulnerability fixed in 6u141, 7u131, and 8u121 (Deployment) | fixed: 630 | 2026-06-28T11:38:24+00:00 | Vulnerability · Source |
| CVE-2026-10919 | redhat_vex | chromium-browser: Use after free in ANGLE | known not affected: 1 | 2026-06-28T11:38:24+00:00 | Vulnerability · Source |
| CVE-2014-3065 | redhat_vex | JDK: privilege escalation via shared class cache | fixed: 439 | 2026-06-28T11:38:23+00:00 | Vulnerability · Source |
| CVE-2026-5292 | redhat_vex | chromium-browser: Google Chrome, Chromium: Information disclosure via out-of-bounds read in WebCodecs | known not affected: 1 | 2026-06-28T11:38:22+00:00 | Vulnerability · Source |
| CVE-2019-15211 | redhat_vex | kernel: use-after-free in drivers/media/v4l2-core/v4l2-dev.c | known not affected: 82 | 2026-06-28T11:38:22+00:00 | Vulnerability · Source |
| CVE-2026-10894 | redhat_vex | chromium-browser: Use after free in Printing | known not affected: 1 | 2026-06-28T11:38:22+00:00 | Vulnerability · Source |
| CVE-2014-2436 | redhat_vex | mysql: unspecified vulnerability related to RBR (CPU April 2014) | fixed: 190 under investigation: 9 | 2026-06-28T11:38:21+00:00 | Vulnerability · Source |
| CVE-2026-5275 | redhat_vex | chromium-browser: Heap buffer overflow in ANGLE | known not affected: 1 | 2026-06-28T11:38:20+00:00 | Vulnerability · Source |
| CVE-2026-44053 | redhat_vex | netatalk: Netatalk: Data compromise due to weak cryptography | known not affected: 1 | 2026-06-28T11:38:18+00:00 | Vulnerability · Source |
| CVE-2025-71182 | redhat_vex | kernel: can: j1939: make j1939_session_activate() fail if device is no longer registered | known affected: 184 known not affected: 90 | 2026-06-28T11:38:18+00:00 | Vulnerability · Source |
| CVE-2026-44070 | redhat_vex | netatalk: Netatalk: Denial of Service via unbounded realloc in charset conversion | known not affected: 1 | 2026-06-28T11:38:17+00:00 | Vulnerability · Source |
| CVE-2014-3197 | redhat_vex | chromium: information leak in XSS Auditor fixed in Chrome 38.0.2125.101 | fixed: 15 known not affected: 9 | 2026-06-28T11:38:16+00:00 | Vulnerability · Source |
| CVE-2017-0861 | redhat_vex | kernel: Use-after-free in snd_pcm_info function in ALSA subsystem potentially leads to privilege escalation | fixed: 513 known affected: 29 known not affected: 41 | 2026-06-28T11:38:15+00:00 | Vulnerability · Source |
| CVE-2019-3460 | redhat_vex | kernel: Heap address information leak while using L2CAP_PARSE_CONF_RSP | fixed: 383 known affected: 26 known not affected: 1 | 2026-06-28T11:38:14+00:00 | Vulnerability · Source |
| CVE-2019-3016 | redhat_vex | kernel: kvm: Information leak within a KVM guest | fixed: 150 known not affected: 56 | 2026-06-28T11:38:14+00:00 | Vulnerability · Source |
| CVE-2019-2607 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019) | fixed: 291 known not affected: 123 | 2026-06-28T11:38:14+00:00 | Vulnerability · Source |
| CVE-2019-2684 | redhat_vex | OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453) | fixed: 1023 | 2026-06-28T11:38:14+00:00 | Vulnerability · Source |
| CVE-2026-40892 | redhat_vex | PJSIP: PJSIP: Arbitrary code execution or denial of service via stack buffer overflow in digest creation | known not affected: 1 | 2026-06-28T11:38:14+00:00 | Vulnerability · Source |
| CVE-2014-0532 | redhat_vex | flash-plugin: multiple cross-site scripting flaws (APSB14-16) | fixed: 5 | 2026-06-28T11:38:13+00:00 | Vulnerability · Source |
| CVE-2025-71230 | redhat_vex | kernel: hfs: ensure sb->s_fs_info is always cleaned up | known not affected: 274 | 2026-06-28T11:38:13+00:00 | Vulnerability · Source |
| CVE-2016-0984 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-04 | fixed: 5 | 2026-06-28T11:38:12+00:00 | Vulnerability · Source |
| CVE-2017-3084 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-17 | fixed: 3 | 2026-06-28T11:38:12+00:00 | Vulnerability · Source |
| CVE-2014-0240 | redhat_vex | mod_wsgi: possible privilege escalation in setuid() failure scenarios | fixed: 74 known affected: 3 known not affected: 2 | 2026-06-28T11:38:12+00:00 | Vulnerability · Source |