VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-10531 | redhat_vex | ICU: Integer overflow in UnicodeString::doAppend() | fixed: 394 known affected: 1 known not affected: 112 | 2026-06-28T11:19:49+00:00 | Vulnerability · Source |
| CVE-2013-2736 | redhat_vex | acroread: multiple code execution flaws (APSB13-15) | fixed: 8 | 2026-06-28T11:19:49+00:00 | Vulnerability · Source |
| CVE-2013-2451 | redhat_vex | OpenJDK: exclusive port binding (Networking, 7170730) | fixed: 325 known not affected: 22 | 2026-06-28T11:19:47+00:00 | Vulnerability · Source |
| CVE-2015-5544 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T11:19:47+00:00 | Vulnerability · Source |
| CVE-2026-26994 | redhat_vex | utls: uTLS: TLS 1.3 downgrade protection bypass allows information disclosure and fingerprinting | known not affected: 1 | 2026-06-28T11:19:41+00:00 | Vulnerability · Source |
| CVE-2016-3077 | redhat_vex | ovirt-engine: Crash of API when parsing unxepected version number | fixed: 21 | 2026-06-28T11:19:41+00:00 | Vulnerability · Source |
| CVE-2026-40026 | redhat_vex | sleuthkit: The Sleuth Kit: Information disclosure and denial of service via crafted ISO image | known not affected: 1 | 2026-06-28T11:19:40+00:00 | Vulnerability · Source |
| CVE-2026-23384 | redhat_vex | kernel: RDMA/ionic: Fix kernel stack leak in ionic_create_cq() | known not affected: 274 | 2026-06-28T11:19:40+00:00 | Vulnerability · Source |
| CVE-2021-47429 | redhat_vex | kernel: powerpc/64s: Fix unrecoverable MCE calling async handler from NMI | fixed: 280 known affected: 64 known not affected: 56 | 2026-06-28T11:19:38+00:00 | Vulnerability · Source |
| CVE-2026-40025 | redhat_vex | sleuthkit: The Sleuth Kit: Information Disclosure and Denial of Service via malicious APFS disk image | known not affected: 1 | 2026-06-28T11:19:36+00:00 | Vulnerability · Source |
| CVE-2016-7879 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-39 | fixed: 3 known affected: 1 | 2026-06-28T11:19:32+00:00 | Vulnerability · Source |
| CVE-2026-26045 | redhat_vex | moodle: Moodle: Improper Validation in File Restore Functionality Leading to Remote Code Execution | known not affected: 1 | 2026-06-28T11:19:32+00:00 | Vulnerability · Source |
| CVE-2016-2843 | redhat_vex | chromium-browser: Multiple unspecified vulnerabilities in V8 before 4.9.385.26 | fixed: 12 | 2026-06-28T11:19:30+00:00 | Vulnerability · Source |
| CVE-2026-44932 | redhat_vex | wicked: wicked: Arbitrary code execution via unsanitized DHCP replies | known not affected: 1 | 2026-06-28T11:19:30+00:00 | Vulnerability · Source |
| CVE-2026-31612 | redhat_vex | kernel: ksmbd: validate EaNameLength in smb2_get_ea() | known not affected: 274 | 2026-06-28T11:19:30+00:00 | Vulnerability · Source |
| CVE-2016-7872 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-39 | fixed: 3 known affected: 1 | 2026-06-28T11:19:30+00:00 | Vulnerability · Source |
| CVE-2026-12009 | redhat_vex | chromium-browser: chromium-browser: Insufficient validation of untrusted input Accessibility | known not affected: 1 | 2026-06-28T11:19:29+00:00 | Vulnerability · Source |
| CVE-2026-25996 | redhat_vex | inspektor-gadget: Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode | known not affected: 1 | 2026-06-28T11:19:29+00:00 | Vulnerability · Source |
| CVE-2016-7859 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-37 | fixed: 5 | 2026-06-28T11:19:29+00:00 | Vulnerability · Source |
| CVE-2026-31629 | redhat_vex | kernel: nfc: llcp: add missing return after LLCP_CLOSED checks | known not affected: 274 | 2026-06-28T11:19:29+00:00 | Vulnerability · Source |
| CVE-2016-7869 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-39 | fixed: 3 known affected: 1 | 2026-06-28T11:19:28+00:00 | Vulnerability · Source |
| CVE-2026-12010 | redhat_vex | chromium-browser: Google Chrome on Android: Sandbox escape via heap buffer overflow in GPU | known not affected: 1 | 2026-06-28T11:19:28+00:00 | Vulnerability · Source |
| CVE-2021-3611 | redhat_vex | QEMU: intel-hda: segmentation fault due to stack overflow | fixed: 114 known affected: 34 known not affected: 68 | 2026-06-28T11:19:27+00:00 | Vulnerability · Source |
| CVE-2026-31476 | redhat_vex | kernel: ksmbd: do not expire session on binding failure | known not affected: 274 | 2026-06-28T11:19:26+00:00 | Vulnerability · Source |
| CVE-2026-12026 | redhat_vex | chromium-browser: chromium-browser: Out of bounds read Video | known not affected: 1 | 2026-06-28T11:19:24+00:00 | Vulnerability · Source |
| CVE-2019-25225 | redhat_vex | sanitize-html: sanitize-html cross site scripting | known not affected: 32 | 2026-06-28T11:19:20+00:00 | Vulnerability · Source |
| CVE-2026-43225 | redhat_vex | kernel: staging: rtl8723bs: fix memory leak on failure path | known not affected: 274 | 2026-06-28T11:19:19+00:00 | Vulnerability · Source |
| CVE-2026-21869 | redhat_vex | llama.cpp: llama.cpp: Remote code execution via invalid n_discard parameter in server endpoints | known not affected: 1 | 2026-06-28T11:19:19+00:00 | Vulnerability · Source |
| CVE-2021-47393 | redhat_vex | kernel: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs | fixed: 781 known affected: 22 known not affected: 42 | 2026-06-28T11:19:17+00:00 | Vulnerability · Source |
| CVE-2025-2946 | redhat_vex | pgadmin: Cross-Site Vulnerability(XSS) due to arbitrary HTML/JavaScript gets executed while query result rendering in Query Tool and View/Edit Data Tool of pgAdmin 4 | known not affected: 1 | 2026-06-28T11:19:16+00:00 | Vulnerability · Source |
| CVE-2013-1537 | redhat_vex | OpenJDK: remote code loading enabled by default (RMI, 8001040) | fixed: 543 | 2026-06-28T11:19:16+00:00 | Vulnerability · Source |
| CVE-2013-1558 | redhat_vex | OpenJDK: java.beans.ThreadGroupContext missing restrictions (Beans, 7200507) | fixed: 326 | 2026-06-28T11:19:16+00:00 | Vulnerability · Source |
| CVE-2013-1373 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-05) | fixed: 4 | 2026-06-28T11:19:15+00:00 | Vulnerability · Source |
| CVE-2013-1374 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-05) | fixed: 4 | 2026-06-28T11:19:15+00:00 | Vulnerability · Source |
| CVE-2026-31072 | redhat_vex | apscheduler: APScheduler: Remote Code Execution via Insecure Deserialization | known not affected: 8 | 2026-06-28T11:19:14+00:00 | Vulnerability · Source |
| CVE-2013-1378 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-11) | fixed: 4 | 2026-06-28T11:19:14+00:00 | Vulnerability · Source |
| CVE-2013-0782 | redhat_vex | Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28) | fixed: 299 known affected: 1 | 2026-06-28T11:19:11+00:00 | Vulnerability · Source |
| CVE-2026-1556 | redhat_vex | Drupal: File (Field) Paths: Drupal File (Field) Paths: Information Disclosure via filename-collision uploads | known not affected: 1 | 2026-06-28T11:19:10+00:00 | Vulnerability · Source |
| CVE-2013-0603 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T11:19:10+00:00 | Vulnerability · Source |
| CVE-2013-0612 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T11:19:09+00:00 | Vulnerability · Source |
| CVE-2013-0608 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T11:19:08+00:00 | Vulnerability · Source |
| CVE-2013-0445 | redhat_vex | OpenJDK: insufficient privilege checking issue (AWT, 8001057) | fixed: 543 known affected: 1 | 2026-06-28T11:19:08+00:00 | Vulnerability · Source |
| CVE-2025-46337 | redhat_vex | ADOdb: SQL injection in ADOdb PostgreSQL driver pg_insert_id() method | known not affected: 1 | 2026-06-28T11:19:08+00:00 | Vulnerability · Source |
| CVE-2019-2606 | redhat_vex | mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) | fixed: 291 known not affected: 123 | 2026-06-28T11:19:07+00:00 | Vulnerability · Source |
| CVE-2026-0908 | redhat_vex | chromium-browser: Use after free in ANGLE | known not affected: 1 | 2026-06-28T11:19:05+00:00 | Vulnerability · Source |
| CVE-2024-57809 | redhat_vex | kernel: PCI: imx6: Fix suspend/resume support on i.MX6QDL | fixed: 305 known affected: 64 known not affected: 48 | 2026-06-28T11:19:04+00:00 | Vulnerability · Source |
| CVE-2013-0427 | redhat_vex | OpenJDK: invalid threads subject to interrupts (Libraries, 6776941) | fixed: 543 known affected: 1 | 2026-06-28T11:19:04+00:00 | Vulnerability · Source |
| CVE-2019-3701 | redhat_vex | kernel: Missing check in net/can/gw.c:can_can_gw_rcv() allows for crash by users with CAP_NET_ADMIN | known not affected: 104 | 2026-06-28T11:19:01+00:00 | Vulnerability · Source |
| CVE-2019-2774 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019) | fixed: 291 known affected: 8 known not affected: 104 | 2026-06-28T11:18:59+00:00 | Vulnerability · Source |
| CVE-2026-47190 | redhat_vex | github.com/metal3-io/ip-address-manager: Cluster API Provider Metal3 IPAM: Information disclosure via excessive permissions on Secrets | known affected: 6 | 2026-06-28T11:18:59+00:00 | Vulnerability · Source |