VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-3425 | redhat_vex | OpenJDK: incorrect handling of surrogate pairs in XML attribute values (JAXP, 8143167) | fixed: 713 | 2026-06-28T11:29:08+00:00 | Vulnerability · Source |
| CVE-2016-4219 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:29:08+00:00 | Vulnerability · Source |
| CVE-2026-43417 | redhat_vex | kernel: sched/mmcid: Handle vfork()/CLONE_VM correctly | known not affected: 274 | 2026-06-28T11:29:08+00:00 | Vulnerability · Source |
| CVE-2016-3422 | redhat_vex | JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D) | fixed: 666 | 2026-06-28T11:29:06+00:00 | Vulnerability · Source |
| CVE-2018-6164 | redhat_vex | chromium-browser: Same origin policy bypass in ServiceWorker | fixed: 12 | 2026-06-28T11:29:05+00:00 | Vulnerability · Source |
| CVE-2016-3142 | redhat_vex | php: Out-of-bounds read in phar_parse_zipfile() | fixed: 251 known affected: 109 known not affected: 1 | 2026-06-28T11:29:04+00:00 | Vulnerability · Source |
| CVE-2026-45104 | redhat_vex | mapserver: MapServer: Denial of Service via malformed SLD in WMS SLD_BODY parameter | known not affected: 1 | 2026-06-28T11:29:03+00:00 | Vulnerability · Source |
| CVE-2016-4171 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:29:03+00:00 | Vulnerability · Source |
| CVE-2026-11193 | redhat_vex | chromium-browser: Insufficient policy enforcement in Password Manager | known not affected: 1 | 2026-06-28T11:29:01+00:00 | Vulnerability · Source |
| CVE-2016-4152 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:29:00+00:00 | Vulnerability · Source |
| CVE-2016-4150 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:29:00+00:00 | Vulnerability · Source |
| CVE-2019-10201 | redhat_vex | keycloak: SAML broker does not check existence of signature on document allowing any user impersonation | fixed: 3 known affected: 3 known not affected: 1 | 2026-06-28T11:28:58+00:00 | Vulnerability · Source |
| CVE-2019-10205 | redhat_vex | quay: Red Hat Quay stores robot account tokens in plain text | fixed: 1 | 2026-06-28T11:28:58+00:00 | Vulnerability · Source |
| CVE-2019-18809 | redhat_vex | kernel: memory leak in af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c | fixed: 150 known affected: 1 known not affected: 44 | 2026-06-28T11:28:57+00:00 | Vulnerability · Source |
| CVE-2016-4144 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:28:56+00:00 | Vulnerability · Source |
| CVE-2019-18805 | redhat_vex | kernel: integer overflow in tcp_ack_update_rtt in net/ipv4/tcp_input.c | fixed: 175 known not affected: 55 | 2026-06-28T11:28:56+00:00 | Vulnerability · Source |
| CVE-2016-4142 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:28:55+00:00 | Vulnerability · Source |
| CVE-2018-6554 | redhat_vex | kernel: irda: Memory leak caused by repeated binds of irda socket | known not affected: 88 | 2026-06-28T11:28:54+00:00 | Vulnerability · Source |
| CVE-2016-3112 | redhat_vex | pulp: Agent certificate containing private key is stored in world-readable file | fixed: 639 | 2026-06-28T11:28:54+00:00 | Vulnerability · Source |
| CVE-2025-54119 | redhat_vex | php-adodb: ADOdb: SQL Injection via Meta Queries | known not affected: 1 | 2026-06-28T11:28:54+00:00 | Vulnerability · Source |
| CVE-2016-4135 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:28:53+00:00 | Vulnerability · Source |
| CVE-2016-3074 | redhat_vex | php: Signedness vulnerability causing heap overflow in libgd | fixed: 251 known affected: 117 | 2026-06-28T11:28:52+00:00 | Vulnerability · Source |
| CVE-2013-2417 | redhat_vex | OpenJDK: Network InetAddress serialization information disclosure (Networking, 8000724) | fixed: 543 | 2026-06-28T11:28:52+00:00 | Vulnerability · Source |
| CVE-2016-3070 | redhat_vex | kernel: Null pointer dereference in trace_writeback_dirty_page() | fixed: 191 known affected: 12 known not affected: 15 | 2026-06-28T11:28:52+00:00 | Vulnerability · Source |
| CVE-2018-6172 | redhat_vex | chromium-browser: URL spoof in Omnibox | fixed: 12 | 2026-06-28T11:28:51+00:00 | Vulnerability · Source |
| CVE-2016-2854 | redhat_vex | kernel: aufs module does not properly maintain POSIX ACL xattr data | known not affected: 93 | 2026-06-28T11:28:51+00:00 | Vulnerability · Source |
| CVE-2016-8666 | redhat_vex | kernel: Remotely triggerable recursion in GRE code leading to kernel crash | fixed: 350 known not affected: 15 | 2026-06-28T11:28:49+00:00 | Vulnerability · Source |
| CVE-2015-3214 | redhat_vex | qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function | fixed: 90 known affected: 1 known not affected: 59 | 2026-06-28T11:28:49+00:00 | Vulnerability · Source |
| CVE-2026-11149 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Extensions | known not affected: 1 | 2026-06-28T11:28:49+00:00 | Vulnerability · Source |
| CVE-2025-47815 | redhat_vex | pspp: PSPP: Heap Buffer Overflow | known not affected: 1 | 2026-06-28T11:28:49+00:00 | Vulnerability · Source |
| CVE-2025-33042 | redhat_vex | org.apache.avro/avro: Apache Avro Java SDK: Code injection on Java generated code | fixed: 2 known affected: 14 | 2026-06-28T11:28:49+00:00 | Vulnerability · Source |
| CVE-2016-4121 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T11:28:48+00:00 | Vulnerability · Source |
| CVE-2025-67735 | redhat_vex | netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection | fixed: 2 known affected: 76 | 2026-06-28T11:28:48+00:00 | Vulnerability · Source |
| CVE-2016-4108 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T11:28:46+00:00 | Vulnerability · Source |
| CVE-2019-18811 | redhat_vex | kernel: memory leak in sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c | fixed: 120 known affected: 16 known not affected: 45 | 2026-06-28T11:28:44+00:00 | Vulnerability · Source |
| CVE-2026-11250 | redhat_vex | chromium-browser: Inappropriate implementation in DevTools | known not affected: 1 | 2026-06-28T11:28:42+00:00 | Vulnerability · Source |
| CVE-2019-17666 | redhat_vex | kernel: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel lacks a certain upper-bound check, leading to a buffer overflow | fixed: 1046 known not affected: 1 | 2026-06-28T11:28:41+00:00 | Vulnerability · Source |
| CVE-2014-0461 | redhat_vex | OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794) | fixed: 749 known not affected: 15 | 2026-06-28T11:28:40+00:00 | Vulnerability · Source |
| CVE-2026-40250 | redhat_vex | OpenEXR: OpenEXR: Integer overflow leads to memory corruption and denial of service | known affected: 18 | 2026-06-28T11:28:40+00:00 | Vulnerability · Source |
| CVE-2026-23070 | redhat_vex | kernel: Octeontx2-af: Add proper checks for fwdata | known affected: 184 known not affected: 90 | 2026-06-28T11:28:39+00:00 | Vulnerability · Source |
| CVE-2026-11281 | redhat_vex | chromium-browser: Integer overflow in Chromoting | known not affected: 1 | 2026-06-28T11:28:39+00:00 | Vulnerability · Source |
| CVE-2026-23356 | redhat_vex | kernel: drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() | known not affected: 274 | 2026-06-28T11:28:37+00:00 | Vulnerability · Source |
| CVE-2026-54388 | redhat_vex | tinyproxy: HTTP Request Smuggling via duplicate Content-Length headers | known not affected: 1 | 2026-06-28T11:28:35+00:00 | Vulnerability · Source |
| CVE-2019-18660 | redhat_vex | kernel: powerpc: incomplete Spectre-RSB mitigation leads to information exposure | fixed: 782 known affected: 17 known not affected: 29 | 2026-06-28T11:28:35+00:00 | Vulnerability · Source |
| CVE-2026-39807 | redhat_vex | bandit: Bandit: Transport-state spoofing leads to information disclosure and security bypass | known not affected: 1 | 2026-06-28T11:28:34+00:00 | Vulnerability · Source |
| CVE-2019-11477 | redhat_vex | Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service | fixed: 987 known not affected: 1 | 2026-06-28T11:28:34+00:00 | Vulnerability · Source |
| CVE-2016-4232 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:28:34+00:00 | Vulnerability · Source |
| CVE-2019-18806 | redhat_vex | kernel: memory leak in ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c | known affected: 93 | 2026-06-28T11:28:34+00:00 | Vulnerability · Source |
| CVE-2011-0802 | redhat_vex | JDK: unspecified vulnerabilities fixed in 6u26 (Sound) | fixed: 637 | 2026-06-28T11:28:34+00:00 | Vulnerability · Source |
| CVE-2016-4230 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:28:33+00:00 | Vulnerability · Source |