VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-1762 | redhat_vex | libxml2: Heap-based buffer-overread in xmlNextChar | fixed: 145 known affected: 2 | 2026-06-28T11:27:10+00:00 | Vulnerability · Source |
| CVE-2016-1709 | redhat_vex | chromium-browser: heap-buffer-overflow in sfntly | fixed: 12 | 2026-06-28T11:27:09+00:00 | Vulnerability · Source |
| CVE-2016-1710 | redhat_vex | chromium-browser: same-origin bypass in blink | fixed: 12 | 2026-06-28T11:27:09+00:00 | Vulnerability · Source |
| CVE-2016-1096 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T11:27:08+00:00 | Vulnerability · Source |
| CVE-2016-1100 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T11:27:08+00:00 | Vulnerability · Source |
| CVE-2024-47685 | redhat_vex | kernel: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() | fixed: 305 known affected: 98 known not affected: 14 | 2026-06-28T11:27:08+00:00 | Vulnerability · Source |
| CVE-2019-18277 | redhat_vex | haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated "chunked" value | fixed: 41 known affected: 4 known not affected: 4 | 2026-06-28T11:27:07+00:00 | Vulnerability · Source |
| CVE-2016-1033 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-10 | fixed: 5 | 2026-06-28T11:27:06+00:00 | Vulnerability · Source |
| CVE-2023-27530 | redhat_vex | rubygem-rack: Denial of service in Multipart MIME parsing | fixed: 84 known affected: 9 known not affected: 1921 | 2026-06-28T11:27:06+00:00 | Vulnerability · Source |
| CVE-2013-1540 | redhat_vex | JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment) | fixed: 313 | 2026-06-28T11:27:04+00:00 | Vulnerability · Source |
| CVE-2013-1473 | redhat_vex | JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment) | fixed: 313 known affected: 1 known not affected: 8 | 2026-06-28T11:27:03+00:00 | Vulnerability · Source |
| CVE-2019-10192 | redhat_vex | redis: Heap buffer overflow in HyperLogLog triggered by malicious client | fixed: 106 known not affected: 8 | 2026-06-28T11:27:03+00:00 | Vulnerability · Source |
| CVE-2024-4767 | redhat_vex | Mozilla: IndexedDB files retained in private browsing mode | fixed: 234 known affected: 4 | 2026-06-28T11:27:01+00:00 | Vulnerability · Source |
| CVE-2018-6144 | redhat_vex | chromium-browser: Out of bounds memory access in PDFium | fixed: 12 | 2026-06-28T11:27:00+00:00 | Vulnerability · Source |
| CVE-2023-27535 | redhat_vex | curl: FTP too eager connection reuse | fixed: 164 known affected: 13 | 2026-06-28T11:27:00+00:00 | Vulnerability · Source |
| CVE-2021-3392 | redhat_vex | QEMU: scsi: mptsas: use-after-free while processing io requests | known not affected: 104 | 2026-06-28T11:26:59+00:00 | Vulnerability · Source |
| CVE-2018-6173 | redhat_vex | chromium-browser: URL spoof in Omnibox | fixed: 12 | 2026-06-28T11:26:57+00:00 | Vulnerability · Source |
| CVE-2026-32946 | redhat_vex | step-security/harden-runner: Harden-Runner: Egress policy bypass via DNS over TCP | known affected: 12 | 2026-06-28T11:26:57+00:00 | Vulnerability · Source |
| CVE-2018-6157 | redhat_vex | chromium-browser: Type confusion in WebRTC | fixed: 12 | 2026-06-28T11:26:57+00:00 | Vulnerability · Source |
| CVE-2018-6150 | redhat_vex | chromium-browser: Cross origin information disclosure in Service Workers | fixed: 12 | 2026-06-28T11:26:56+00:00 | Vulnerability · Source |
| CVE-2018-6132 | redhat_vex | chromium-browser: Use of uninitialized memory in WebRTC | fixed: 12 | 2026-06-28T11:26:55+00:00 | Vulnerability · Source |
| CVE-2018-6158 | redhat_vex | chromium-browser: Use after free in Blink | fixed: 12 | 2026-06-28T11:26:55+00:00 | Vulnerability · Source |
| CVE-2018-6141 | redhat_vex | chromium-browser: Heap buffer overflow in Skia | fixed: 12 | 2026-06-28T11:26:55+00:00 | Vulnerability · Source |
| CVE-2018-6165 | redhat_vex | chromium-browser: URL spoof in Omnibox | fixed: 12 | 2026-06-28T11:26:55+00:00 | Vulnerability · Source |
| CVE-2018-6142 | redhat_vex | chromium-browser: Out of bounds memory access in V8 | fixed: 12 | 2026-06-28T11:26:53+00:00 | Vulnerability · Source |
| CVE-2025-48075 | redhat_vex | github.com/gofiber/fiber/v2: Panic on Negative Index in Fiber BodyParser | known not affected: 1 | 2026-06-28T11:26:53+00:00 | Vulnerability · Source |
| CVE-2019-10168 | redhat_vex | libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs | fixed: 1649 known not affected: 8 | 2026-06-28T11:26:53+00:00 | Vulnerability · Source |
| CVE-2016-1013 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-10 | fixed: 5 | 2026-06-28T11:26:53+00:00 | Vulnerability · Source |
| CVE-2026-11239 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Extensions | known not affected: 1 | 2026-06-28T11:26:52+00:00 | Vulnerability · Source |
| CVE-2018-6123 | redhat_vex | chromium-browser: Use after free in Blink | fixed: 12 | 2026-06-28T11:26:51+00:00 | Vulnerability · Source |
| CVE-2016-1006 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-10 | fixed: 5 | 2026-06-28T11:26:51+00:00 | Vulnerability · Source |
| CVE-2010-3654 | redhat_vex | acroread/flash-plugin: critical vulnerablility (APSA10-05, APSB10-26) | fixed: 27 | 2026-06-28T11:26:51+00:00 | Vulnerability · Source |
| CVE-2026-23123 | redhat_vex | kernel: Linux kernel: Local denial of service in interconnect debugfs due to uninitialized pointers | known affected: 76 known not affected: 198 | 2026-06-28T11:26:51+00:00 | Vulnerability · Source |
| CVE-2018-6122 | redhat_vex | chromium-browser: Type confusion in V8 | fixed: 12 | 2026-06-28T11:26:50+00:00 | Vulnerability · Source |
| CVE-2018-6119 | redhat_vex | chromium-browser: Spoof of contents of the Omnibox (URL bar) via a crafted HTML page | fixed: 12 | 2026-06-28T11:26:50+00:00 | Vulnerability · Source |
| CVE-2016-10200 | redhat_vex | kernel: l2tp: Race condition in the L2TPv3 IP encapsulation feature | fixed: 312 known not affected: 22 | 2026-06-28T11:26:49+00:00 | Vulnerability · Source |
| CVE-2016-1000345 | redhat_vex | bouncycastle: DHIES/ECIES CBC modes are vulnerable to padding oracle attack | fixed: 1105 known affected: 5 known not affected: 13 | 2026-06-28T11:26:48+00:00 | Vulnerability · Source |
| CVE-2025-71220 | redhat_vex | kernel: smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() | known affected: 76 known not affected: 198 | 2026-06-28T11:26:47+00:00 | Vulnerability · Source |
| CVE-2016-1000110 | redhat_vex | CGIHandler: sets environmental variable based on user supplied Proxy request header | fixed: 416 known affected: 2 | 2026-06-28T11:26:46+00:00 | Vulnerability · Source |
| CVE-2025-48039 | redhat_vex | erlang: Erlang Excessive Use of System Resources | known affected: 41 | 2026-06-28T11:26:46+00:00 | Vulnerability · Source |
| CVE-2018-6088 | redhat_vex | chromium-browser: Use after free in PDFium | fixed: 12 | 2026-06-28T11:26:45+00:00 | Vulnerability · Source |
| CVE-2026-42183 | redhat_vex | github.com/argoproj/argo-workflows: Argo Workflows: Denial of Service via nil pointer dereference for SSO users | known affected: 14 | 2026-06-28T11:26:44+00:00 | Vulnerability · Source |
| CVE-2020-24394 | redhat_vex | kernel: umask not applied on filesystem without ACL support | fixed: 660 known affected: 31 known not affected: 10 | 2026-06-28T11:26:43+00:00 | Vulnerability · Source |
| CVE-2026-31723 | redhat_vex | kernel: usb: gadget: f_subset: Fix net_device lifecycle with device_move | known not affected: 274 | 2026-06-28T11:26:43+00:00 | Vulnerability · Source |
| CVE-2016-0962 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-08 | fixed: 5 | 2026-06-28T11:26:42+00:00 | Vulnerability · Source |
| CVE-2019-10166 | redhat_vex | libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients | fixed: 1649 known not affected: 8 | 2026-06-28T11:26:42+00:00 | Vulnerability · Source |
| CVE-2018-6079 | redhat_vex | chromium-browser: information disclosure via texture data in webgl | fixed: 12 | 2026-06-28T11:26:41+00:00 | Vulnerability · Source |
| CVE-2018-6075 | redhat_vex | chromium-browser: overly permissive cross origin downloads | fixed: 12 | 2026-06-28T11:26:41+00:00 | Vulnerability · Source |
| CVE-2016-10160 | redhat_vex | php: Off-by-one error in phar_parse_pharfile when loading crafted phar archive | fixed: 254 known affected: 86 known not affected: 1 | 2026-06-28T11:26:40+00:00 | Vulnerability · Source |
| CVE-2016-10155 | redhat_vex | Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb | fixed: 47 known affected: 16 known not affected: 2 | 2026-06-28T11:26:39+00:00 | Vulnerability · Source |