VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-16166 | redhat_vex | kernel: information exposure in drivers/char/random.c and kernel/time/timer.c | fixed: 397 known affected: 44 known not affected: 64 | 2026-06-28T11:22:15+00:00 | Vulnerability · Source |
| CVE-2015-2783 | redhat_vex | php: buffer over-read in Phar metadata parsing | fixed: 1063 known affected: 27 known not affected: 1 | 2026-06-28T11:22:15+00:00 | Vulnerability · Source |
| CVE-2023-28756 | redhat_vex | ruby: ReDoS vulnerability in Time | fixed: 834 known affected: 95 | 2026-06-28T11:22:13+00:00 | Vulnerability · Source |
| CVE-2026-9924 | redhat_vex | chromium-browser: Heap buffer overflow in ANGLE | known not affected: 1 | 2026-06-28T11:22:11+00:00 | Vulnerability · Source |
| CVE-2021-3544 | redhat_vex | QEMU: vhost-user-gpu: multiple memory leaks | known affected: 17 known not affected: 109 | 2026-06-28T11:22:11+00:00 | Vulnerability · Source |
| CVE-2013-6639 | redhat_vex | v8: DoS (out-of-bounds write) in DehoistArrayIndex function in hydrogen.cc | fixed: 36 known affected: 9 known not affected: 1819 | 2026-06-28T11:22:07+00:00 | Vulnerability · Source |
| CVE-2025-58148 | redhat_vex | xen: x86: Incorrect input sanitisation in Viridian hypercalls | known not affected: 1 | 2026-06-28T11:22:07+00:00 | Vulnerability · Source |
| CVE-2026-40505 | redhat_vex | MuPDF: MuPDF mutool: Terminal manipulation through unsanitized PDF metadata | known not affected: 1 | 2026-06-28T11:22:07+00:00 | Vulnerability · Source |
| CVE-2017-0750 | redhat_vex | kernel: Out-of-bounds write in f2fs allows code execution when mounted malicious file system | known not affected: 88 | 2026-06-28T11:22:07+00:00 | Vulnerability · Source |
| CVE-2026-40560 | redhat_vex | Starman: Starman: HTTP Request Smuggling via improper header precedence | known not affected: 1 | 2026-06-28T11:22:03+00:00 | Vulnerability · Source |
| CVE-2021-3516 | redhat_vex | libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c | fixed: 193 known affected: 12 known not affected: 4 | 2026-06-28T11:22:00+00:00 | Vulnerability · Source |
| CVE-2026-40499 | redhat_vex | radare2: radare2: Arbitrary command execution via command injection in PDB parser | known not affected: 1 | 2026-06-28T11:22:00+00:00 | Vulnerability · Source |
| CVE-2018-18311 | redhat_vex | perl: Integer overflow leading to buffer overflow in Perl_my_setenv() | fixed: 934 known affected: 52 known not affected: 55 | 2026-06-28T11:21:58+00:00 | Vulnerability · Source |
| CVE-2020-1728 | redhat_vex | keycloak: security headers missing on REST endpoints | fixed: 13 known affected: 3 known not affected: 1 | 2026-06-28T11:21:54+00:00 | Vulnerability · Source |
| CVE-2018-17477 | redhat_vex | chromium-browser: UI spoof in Extensions | fixed: 12 | 2026-06-28T11:21:54+00:00 | Vulnerability · Source |
| CVE-2014-4698 | redhat_vex | php: ArrayIterator use-after-free due to object change during sorting | fixed: 970 known affected: 2 known not affected: 1 | 2026-06-28T11:21:52+00:00 | Vulnerability · Source |
| CVE-2013-0623 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T11:21:52+00:00 | Vulnerability · Source |
| CVE-2018-17082 | redhat_vex | php: Cross-site scripting (XSS) flaw in Apache2 component via body of 'Transfer-Encoding: chunked' request | fixed: 486 known affected: 88 known not affected: 77 | 2026-06-28T11:21:50+00:00 | Vulnerability · Source |
| CVE-2021-2293 | redhat_vex | mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T11:21:50+00:00 | Vulnerability · Source |
| CVE-2021-3527 | redhat_vex | QEMU: usb: unbounded stack allocation in usbredir | known affected: 102 known not affected: 24 | 2026-06-28T11:21:49+00:00 | Vulnerability · Source |
| CVE-2020-36311 | redhat_vex | kernel: DoS by triggering destruction of a large SEV VM | known affected: 48 known not affected: 149 | 2026-06-28T11:21:48+00:00 | Vulnerability · Source |
| CVE-2020-15971 | redhat_vex | chromium-browser: Use after free in printing | fixed: 14 | 2026-06-28T11:21:46+00:00 | Vulnerability · Source |
| CVE-2026-39805 | redhat_vex | bandit: Bandit: HTTP Request Smuggling via Duplicate Content-Length Headers | known not affected: 1 | 2026-06-28T11:21:46+00:00 | Vulnerability · Source |
| CVE-2026-22740 | redhat_vex | spring-webflux: Spring WebFlux: Denial of Service via temporary file accumulation | known affected: 9 | 2026-06-28T11:21:45+00:00 | Vulnerability · Source |
| CVE-2026-44394 | redhat_vex | openstack-keystone: OpenStack Keystone: Federated token rescoping allows indefinite access | known affected: 10 | 2026-06-28T11:21:44+00:00 | Vulnerability · Source |
| CVE-2020-15961 | redhat_vex | chromium-browser: Insufficient policy enforcement in extensions | fixed: 14 | 2026-06-28T11:21:43+00:00 | Vulnerability · Source |
| CVE-2020-15960 | redhat_vex | chromium-browser: Out of bounds read in storage | fixed: 14 | 2026-06-28T11:21:43+00:00 | Vulnerability · Source |
| CVE-2018-16887 | redhat_vex | katello: stored XSS in subscriptions and repositories pages | fixed: 1128 known not affected: 1 | 2026-06-28T11:21:42+00:00 | Vulnerability · Source |
| CVE-2024-53203 | redhat_vex | kernel: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() | fixed: 305 known affected: 22 known not affected: 90 | 2026-06-28T11:21:41+00:00 | Vulnerability · Source |
| CVE-2021-47527 | redhat_vex | kernel: serial: core: fix transmit-buffer reset and memleak | fixed: 429 known affected: 136 known not affected: 14 | 2026-06-28T11:21:40+00:00 | Vulnerability · Source |
| CVE-2024-53134 | redhat_vex | kernel: pmdomain: imx93-blk-ctrl: correct remove path | fixed: 305 known affected: 22 known not affected: 90 | 2026-06-28T11:21:38+00:00 | Vulnerability · Source |
| CVE-2015-0382 | redhat_vex | mysql: unspecified vulnerability related to Server:Replication (CPU Jan 2015) | fixed: 333 under investigation: 9 | 2026-06-28T11:21:37+00:00 | Vulnerability · Source |
| CVE-2016-9911 | redhat_vex | Qemu: usb: ehci: memory leakage in ehci_init_transfer | fixed: 47 known affected: 10 known not affected: 8 | 2026-06-28T11:21:37+00:00 | Vulnerability · Source |
| CVE-2020-36777 | redhat_vex | kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() | fixed: 150 known affected: 42 known not affected: 108 | 2026-06-28T11:21:37+00:00 | Vulnerability · Source |
| CVE-2025-30193 | redhat_vex | dnsdist: Denial of service via crafted TCP exchange | known not affected: 1 | 2026-06-28T11:21:36+00:00 | Vulnerability · Source |
| CVE-2025-71081 | redhat_vex | kernel: ASoC: stm32: sai: fix OF node leak on probe | known not affected: 274 | 2026-06-28T11:21:35+00:00 | Vulnerability · Source |
| CVE-2026-26940 | redhat_vex | Kibana: Timelion: Kibana Timelion Plugin: Denial of Service via improper input validation in Timelion expressions | known affected: 7 | 2026-06-28T11:21:35+00:00 | Vulnerability · Source |
| CVE-2015-0301 | redhat_vex | flash-plugin: Information disclosure via various methods (APSB15-01) | fixed: 5 | 2026-06-28T11:21:35+00:00 | Vulnerability · Source |
| CVE-2024-53190 | redhat_vex | kernel: wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures | fixed: 305 known affected: 98 known not affected: 90 | 2026-06-28T11:21:34+00:00 | Vulnerability · Source |
| CVE-2026-43973 | redhat_vex | gun: gun: Denial of Service via unbounded HTTP/1.1 response buffering | known not affected: 1 | 2026-06-28T11:21:32+00:00 | Vulnerability · Source |
| CVE-2021-3505 | redhat_vex | libtpms: RSA keys weaker than expected | known affected: 9 known not affected: 2 | 2026-06-28T11:21:30+00:00 | Vulnerability · Source |
| CVE-2026-43045 | redhat_vex | kernel: mshv: Fix error handling in mshv_region_pin | known not affected: 274 | 2026-06-28T11:21:28+00:00 | Vulnerability · Source |
| CVE-2026-39855 | redhat_vex | osslsigncode: integer underflow in PE page hash calculation can cause out-of-bounds read | known not affected: 1 | 2026-06-28T11:21:27+00:00 | Vulnerability · Source |
| CVE-2018-16876 | redhat_vex | ansible: Information disclosure in vvv+ mode with no_log on | fixed: 82 known affected: 21 known not affected: 4 | 2026-06-28T11:21:27+00:00 | Vulnerability · Source |
| CVE-2026-40453 | redhat_vex | Apache Camel: org.apache.camel: Apache Camel: Remote Code Execution and Arbitrary File Write via case-variant header injection | fixed: 2 known affected: 2 known not affected: 24 under investigation: 8 | 2026-06-28T11:21:27+00:00 | Vulnerability · Source |
| CVE-2026-23333 | redhat_vex | kernel: netfilter: nft_set_rbtree: validate open interval overlap | known affected: 232 known not affected: 42 | 2026-06-28T11:21:27+00:00 | Vulnerability · Source |
| CVE-2011-0592 | redhat_vex | acroread: critical APSB11-03 | fixed: 18 | 2026-06-28T11:21:26+00:00 | Vulnerability · Source |
| CVE-2018-16871 | redhat_vex | kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence | fixed: 492 known not affected: 15 | 2026-06-28T11:21:26+00:00 | Vulnerability · Source |
| CVE-2016-4975 | redhat_vex | httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir | fixed: 247 known affected: 19 known not affected: 24 | 2026-06-28T11:21:25+00:00 | Vulnerability · Source |
| CVE-2019-20095 | redhat_vex | kernel: memory leak in mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c | fixed: 229 known affected: 75 | 2026-06-28T11:21:25+00:00 | Vulnerability · Source |