VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-25225 | redhat_vex | sanitize-html: sanitize-html cross site scripting | known not affected: 32 | 2026-06-28T11:19:20+00:00 | Vulnerability · Source |
| CVE-2026-43225 | redhat_vex | kernel: staging: rtl8723bs: fix memory leak on failure path | known not affected: 274 | 2026-06-28T11:19:19+00:00 | Vulnerability · Source |
| CVE-2026-21869 | redhat_vex | llama.cpp: llama.cpp: Remote code execution via invalid n_discard parameter in server endpoints | known not affected: 1 | 2026-06-28T11:19:19+00:00 | Vulnerability · Source |
| CVE-2021-47393 | redhat_vex | kernel: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs | fixed: 781 known affected: 22 known not affected: 42 | 2026-06-28T11:19:17+00:00 | Vulnerability · Source |
| CVE-2025-2946 | redhat_vex | pgadmin: Cross-Site Vulnerability(XSS) due to arbitrary HTML/JavaScript gets executed while query result rendering in Query Tool and View/Edit Data Tool of pgAdmin 4 | known not affected: 1 | 2026-06-28T11:19:16+00:00 | Vulnerability · Source |
| CVE-2013-1537 | redhat_vex | OpenJDK: remote code loading enabled by default (RMI, 8001040) | fixed: 543 | 2026-06-28T11:19:16+00:00 | Vulnerability · Source |
| CVE-2013-1558 | redhat_vex | OpenJDK: java.beans.ThreadGroupContext missing restrictions (Beans, 7200507) | fixed: 326 | 2026-06-28T11:19:16+00:00 | Vulnerability · Source |
| CVE-2013-1373 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-05) | fixed: 4 | 2026-06-28T11:19:15+00:00 | Vulnerability · Source |
| CVE-2013-1374 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-05) | fixed: 4 | 2026-06-28T11:19:15+00:00 | Vulnerability · Source |
| CVE-2026-31072 | redhat_vex | apscheduler: APScheduler: Remote Code Execution via Insecure Deserialization | known not affected: 8 | 2026-06-28T11:19:14+00:00 | Vulnerability · Source |
| CVE-2013-1378 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-11) | fixed: 4 | 2026-06-28T11:19:14+00:00 | Vulnerability · Source |
| CVE-2013-0782 | redhat_vex | Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28) | fixed: 299 known affected: 1 | 2026-06-28T11:19:11+00:00 | Vulnerability · Source |
| CVE-2026-1556 | redhat_vex | Drupal: File (Field) Paths: Drupal File (Field) Paths: Information Disclosure via filename-collision uploads | known not affected: 1 | 2026-06-28T11:19:10+00:00 | Vulnerability · Source |
| CVE-2013-0603 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T11:19:10+00:00 | Vulnerability · Source |
| CVE-2013-0612 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T11:19:09+00:00 | Vulnerability · Source |
| CVE-2013-0608 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T11:19:08+00:00 | Vulnerability · Source |
| CVE-2013-0445 | redhat_vex | OpenJDK: insufficient privilege checking issue (AWT, 8001057) | fixed: 543 known affected: 1 | 2026-06-28T11:19:08+00:00 | Vulnerability · Source |
| CVE-2025-46337 | redhat_vex | ADOdb: SQL injection in ADOdb PostgreSQL driver pg_insert_id() method | known not affected: 1 | 2026-06-28T11:19:08+00:00 | Vulnerability · Source |
| CVE-2019-2606 | redhat_vex | mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) | fixed: 291 known not affected: 123 | 2026-06-28T11:19:07+00:00 | Vulnerability · Source |
| CVE-2026-0908 | redhat_vex | chromium-browser: Use after free in ANGLE | known not affected: 1 | 2026-06-28T11:19:05+00:00 | Vulnerability · Source |
| CVE-2024-57809 | redhat_vex | kernel: PCI: imx6: Fix suspend/resume support on i.MX6QDL | fixed: 305 known affected: 64 known not affected: 48 | 2026-06-28T11:19:04+00:00 | Vulnerability · Source |
| CVE-2013-0427 | redhat_vex | OpenJDK: invalid threads subject to interrupts (Libraries, 6776941) | fixed: 543 known affected: 1 | 2026-06-28T11:19:04+00:00 | Vulnerability · Source |
| CVE-2019-3701 | redhat_vex | kernel: Missing check in net/can/gw.c:can_can_gw_rcv() allows for crash by users with CAP_NET_ADMIN | known not affected: 104 | 2026-06-28T11:19:01+00:00 | Vulnerability · Source |
| CVE-2019-2774 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019) | fixed: 291 known affected: 8 known not affected: 104 | 2026-06-28T11:18:59+00:00 | Vulnerability · Source |
| CVE-2026-47190 | redhat_vex | github.com/metal3-io/ip-address-manager: Cluster API Provider Metal3 IPAM: Information disclosure via excessive permissions on Secrets | known affected: 6 | 2026-06-28T11:18:59+00:00 | Vulnerability · Source |
| CVE-2019-2534 | redhat_vex | mysql: Server: Replication unspecified vulnerability (CPU Jan 2019) | fixed: 291 known affected: 8 known not affected: 98 | 2026-06-28T11:18:58+00:00 | Vulnerability · Source |
| CVE-2026-5879 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in ANGLE | known not affected: 1 | 2026-06-28T11:18:56+00:00 | Vulnerability · Source |
| CVE-2026-28490 | redhat_vex | authlib: Authlib: Information disclosure due to cryptographic padding oracle in JWE RSA1_5 | known affected: 24 known not affected: 1 | 2026-06-28T11:18:55+00:00 | Vulnerability · Source |
| CVE-2026-30999 | redhat_vex | FFmpeg: FFmpeg: Denial of Service via heap buffer overflow in av_bprint_finalize() | known affected: 9 | 2026-06-28T11:18:55+00:00 | Vulnerability · Source |
| CVE-2026-25068 | redhat_vex | alsa-lib: alsa-lib Topology Decoder Heap-based Buffer Overflow | fixed: 3 known affected: 13 known not affected: 1 | 2026-06-28T11:18:54+00:00 | Vulnerability · Source |
| CVE-2013-0168 | redhat_vex | rhev-m: insufficient MoveDisk target domain permission checks | fixed: 13 known not affected: 1 | 2026-06-28T11:18:53+00:00 | Vulnerability · Source |
| CVE-2026-31520 | redhat_vex | kernel: HID: apple: avoid memory leak in apple_report_fixup() | known affected: 260 known not affected: 14 | 2026-06-28T11:18:53+00:00 | Vulnerability · Source |
| CVE-2026-43010 | redhat_vex | kernel: bpf: Reject sleepable kprobe_multi programs at attach time | known affected: 184 known not affected: 90 | 2026-06-28T11:18:51+00:00 | Vulnerability · Source |
| CVE-2021-47428 | redhat_vex | kernel: powerpc/64s: fix program check interrupt emergency stack path | fixed: 280 known affected: 64 known not affected: 56 | 2026-06-28T11:18:51+00:00 | Vulnerability · Source |
| CVE-2012-5253 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T11:18:45+00:00 | Vulnerability · Source |
| CVE-2026-45971 | redhat_vex | kernel: bpf: Limit bpf program signature size | known affected: 76 known not affected: 198 | 2026-06-28T11:18:45+00:00 | Vulnerability · Source |
| CVE-2025-2925 | redhat_vex | hdf5: HDF5 H5MM.c H5MM_realloc double free | known affected: 1 | 2026-06-28T11:18:44+00:00 | Vulnerability · Source |
| CVE-2018-1095 | redhat_vex | kernel: out-of-bound access in fs/posix_acl.c:get_acl() causes crash with crafted ext4 image | fixed: 26 known not affected: 87 | 2026-06-28T11:18:42+00:00 | Vulnerability · Source |
| CVE-2012-5497 | redhat_vex | (Plone): Anonymous users can list user account names | fixed: 13 known affected: 1 | 2026-06-28T11:18:42+00:00 | Vulnerability · Source |
| CVE-2012-5500 | redhat_vex | (Plone): Anonymous users can batch change titles of content items | fixed: 13 known affected: 1 | 2026-06-28T11:18:42+00:00 | Vulnerability · Source |
| CVE-2012-5498 | redhat_vex | (Plone): Partial denial of service through Collections functionality | fixed: 13 known affected: 1 | 2026-06-28T11:18:42+00:00 | Vulnerability · Source |
| CVE-2016-7103 | redhat_vex | jquery-ui: cross-site scripting in dialog closeText | fixed: 6 known affected: 8 | 2026-06-28T11:18:42+00:00 | Vulnerability · Source |
| CVE-2016-2554 | redhat_vex | php: buffer overflow in handling of long link names in tar phar archives | fixed: 251 known affected: 109 known not affected: 1 | 2026-06-28T11:18:41+00:00 | Vulnerability · Source |
| CVE-2012-5259 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T11:18:41+00:00 | Vulnerability · Source |
| CVE-2012-5254 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T11:18:41+00:00 | Vulnerability · Source |
| CVE-2012-5251 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T11:18:41+00:00 | Vulnerability · Source |
| CVE-2012-5086 | redhat_vex | OpenJDK: XMLDecoder sandbox restriction bypass (Beans, 7195917) | fixed: 293 known affected: 9 known not affected: 9 | 2026-06-28T11:18:39+00:00 | Vulnerability · Source |
| CVE-2012-5076 | redhat_vex | OpenJDK: com.sun.org.glassfish.* not restricted packages (JAX-WS, 7163198) | fixed: 144 known affected: 9 known not affected: 20 | 2026-06-28T11:18:39+00:00 | Vulnerability · Source |
| CVE-2012-4821 | redhat_vex | JDK: getDeclaredMethods() and setAccessible() code execution | fixed: 50 known affected: 1 | 2026-06-28T11:18:38+00:00 | Vulnerability · Source |
| CVE-2012-4681 | redhat_vex | OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473) | fixed: 135 known affected: 8 known not affected: 29 | 2026-06-28T11:18:38+00:00 | Vulnerability · Source |