VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-45939 | redhat_vex | kernel: gpib: Fix memory leak in ni_usb_init() | known not affected: 274 | 2026-06-28T11:18:37+00:00 | Vulnerability · Source |
| CVE-2025-3642 | redhat_vex | moodle: Authenticated remote code execution risk in the Moodle LMS EQUELLA repository | known not affected: 1 | 2026-06-28T11:18:36+00:00 | Vulnerability · Source |
| CVE-2012-4167 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-19) | fixed: 5 | 2026-06-28T11:18:33+00:00 | Vulnerability · Source |
| CVE-2026-46112 | redhat_vex | kernel: RDMA/hns: Fix unlocked call to hns_roce_qp_remove() | known not affected: 274 | 2026-06-28T11:18:29+00:00 | Vulnerability · Source |
| CVE-2014-3086 | redhat_vex | JDK: Privilege escalation issue | fixed: 375 under investigation: 13 | 2026-06-28T11:18:28+00:00 | Vulnerability · Source |
| CVE-2025-41390 | redhat_vex | TruffleHog: specially crafted git repository can lead to arbitrary code execution | known not affected: 5 | 2026-06-28T11:18:25+00:00 | Vulnerability · Source |
| CVE-2026-11640 | redhat_vex | chromium-browser: Integer overflow in libyuv | known not affected: 1 | 2026-06-28T11:18:25+00:00 | Vulnerability · Source |
| CVE-2026-11463 | redhat_vex | cereal: USCiLab Cereal: Type confusion vulnerability in Shared Pointer Handler | known not affected: 1 | 2026-06-28T11:18:23+00:00 | Vulnerability · Source |
| CVE-2018-1092 | redhat_vex | kernel: NULL pointer dereference in ext4/mballoc.c:ext4_process_freed_data() when mounting crafted ext4 image | fixed: 248 known affected: 27 known not affected: 41 | 2026-06-28T11:18:22+00:00 | Vulnerability · Source |
| CVE-2026-45960 | redhat_vex | kernel: hfsplus: return error when node already exists in hfs_bnode_create | known affected: 14 known not affected: 260 | 2026-06-28T11:18:20+00:00 | Vulnerability · Source |
| CVE-2025-40924 | redhat_vex | catalyst-plugin-session: Catalyst::Plugin::Session generates session ids insecurely | known not affected: 1 | 2026-06-28T11:18:18+00:00 | Vulnerability · Source |
| CVE-2019-5875 | redhat_vex | chromium-browser: URL bar spoof via download redirect | fixed: 14 | 2026-06-28T11:18:18+00:00 | Vulnerability · Source |
| CVE-2025-4091 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 | fixed: 296 known affected: 10 | 2026-06-28T11:18:18+00:00 | Vulnerability · Source |
| CVE-2026-8358 | redhat_vex | LibreOffice: LibreOffice Calc: Heap buffer overflow leads to denial of service via crafted spreadsheet document. | known affected: 670 | 2026-06-28T11:18:16+00:00 | Vulnerability · Source |
| CVE-2019-5862 | redhat_vex | chromium-browser: AppCache not robust to compromised renderers | fixed: 14 | 2026-06-28T11:18:16+00:00 | Vulnerability · Source |
| CVE-2019-5852 | redhat_vex | chromium-browser: Object leak of utility functions | fixed: 14 | 2026-06-28T11:18:15+00:00 | Vulnerability · Source |
| CVE-2026-45956 | redhat_vex | kernel: drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() | known not affected: 274 | 2026-06-28T11:18:14+00:00 | Vulnerability · Source |
| CVE-2026-30998 | redhat_vex | FFmpeg: FFmpeg: Denial of Service vulnerability in zmqsend.c via crafted input | known affected: 9 | 2026-06-28T11:18:13+00:00 | Vulnerability · Source |
| CVE-2026-43336 | redhat_vex | kernel: lib/crypto: chacha: Zeroize permuted_state before it leaves scope | known not affected: 274 | 2026-06-28T11:18:11+00:00 | Vulnerability · Source |
| CVE-2026-45940 | redhat_vex | kernel: net: stmmac: fix oops when split header is enabled | known affected: 108 known not affected: 166 | 2026-06-28T11:18:10+00:00 | Vulnerability · Source |
| CVE-2026-43188 | redhat_vex | kernel: ceph: do not propagate page array emplacement errors as batch errors | known not affected: 274 | 2026-06-28T11:18:09+00:00 | Vulnerability · Source |
| CVE-2019-13752 | redhat_vex | sqlite: fts3: improve shadow table corruption detection | fixed: 89 known affected: 6 known not affected: 7 | 2026-06-28T11:18:07+00:00 | Vulnerability · Source |
| CVE-2012-2035 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-14) | fixed: 5 | 2026-06-28T11:18:07+00:00 | Vulnerability · Source |
| CVE-2026-45966 | redhat_vex | kernel: apparmor: fix NULL pointer dereference in __unix_needs_revalidation | known not affected: 274 | 2026-06-28T11:18:06+00:00 | Vulnerability · Source |
| CVE-2026-45992 | redhat_vex | kernel: ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path | known affected: 14 known not affected: 260 | 2026-06-28T11:18:06+00:00 | Vulnerability · Source |
| CVE-2012-1711 | redhat_vex | OpenJDK: improper protection of CORBA data models (CORBA, 7079902) | fixed: 234 | 2026-06-28T11:18:05+00:00 | Vulnerability · Source |
| CVE-2018-1088 | redhat_vex | glusterfs: Privilege escalation via gluster_shared_storage when snapshot scheduling is enabled | fixed: 84 known not affected: 22 | 2026-06-28T11:18:05+00:00 | Vulnerability · Source |
| CVE-2026-12468 | redhat_vex | chromium-browser: chromium-browser: Inappropriate implementation in Updater | known not affected: 1 | 2026-06-28T11:18:03+00:00 | Vulnerability · Source |
| CVE-2025-65406 | redhat_vex | live555: heap-based buffer overflow during SDP construction for Matroska/AAC | known not affected: 1 | 2026-06-28T11:18:03+00:00 | Vulnerability · Source |
| CVE-2026-45974 | redhat_vex | kernel: btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found | known affected: 76 known not affected: 198 | 2026-06-28T11:18:02+00:00 | Vulnerability · Source |
| CVE-2021-37159 | redhat_vex | kernel: use-after-free in hso_free_net_device() in drivers/net/usb/hso.c | fixed: 150 known affected: 149 | 2026-06-28T11:18:01+00:00 | Vulnerability · Source |
| CVE-2019-12819 | redhat_vex | kernel: use-after-free in function __mdiobus_register() in drivers/net/phy/mdio_bus.c | fixed: 150 known affected: 2 known not affected: 54 | 2026-06-28T11:17:58+00:00 | Vulnerability · Source |
| CVE-2026-45954 | redhat_vex | kernel: fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() | known not affected: 274 | 2026-06-28T11:17:58+00:00 | Vulnerability · Source |
| CVE-2016-2061 | redhat_vex | kernel: DoS in MSM V4L2 video driver | known not affected: 93 | 2026-06-28T11:17:57+00:00 | Vulnerability · Source |
| CVE-2026-3061 | redhat_vex | chromium-browser: Out of bounds read in Media | known not affected: 1 | 2026-06-28T11:17:57+00:00 | Vulnerability · Source |
| CVE-2016-5616 | redhat_vex | mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016) | fixed: 591 known affected: 19 known not affected: 8 under investigation: 1 | 2026-06-28T11:17:56+00:00 | Vulnerability · Source |
| CVE-2025-4085 | redhat_vex | firefox: thunderbird: Potential information leakage and privilege escalation in UITour actor | known affected: 6 known not affected: 19 | 2026-06-28T11:17:55+00:00 | Vulnerability · Source |
| CVE-2026-32608 | redhat_vex | glances: command injection via process names in action command templates | known not affected: 1 | 2026-06-28T11:17:53+00:00 | Vulnerability · Source |
| CVE-2018-1062 | redhat_vex | ovirt-engine: When Wipe After Delete (WAD) and Enable Discard are both enabled for a VM disk, discarded data might not be wiped after the disk is removed. | fixed: 21 known affected: 1 known not affected: 1 | 2026-06-28T11:17:53+00:00 | Vulnerability · Source |
| CVE-2013-0444 | redhat_vex | OpenJDK: MethodFinder insufficient checks for cached results (Beans, 7200493) | fixed: 202 known affected: 1 known not affected: 37 | 2026-06-28T11:17:52+00:00 | Vulnerability · Source |
| CVE-2011-3546 | redhat_vex | JDK: unspecified vulnerability fixed in 6u29 (Deployment) | fixed: 323 known not affected: 13 | 2026-06-28T11:17:52+00:00 | Vulnerability · Source |
| CVE-2016-5546 | redhat_vex | OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714) | fixed: 1032 | 2026-06-28T11:17:50+00:00 | Vulnerability · Source |
| CVE-2011-3521 | redhat_vex | OpenJDK: IIOP deserialization code execution (Deserialization, 7055902) | fixed: 365 known not affected: 13 | 2026-06-28T11:17:50+00:00 | Vulnerability · Source |
| CVE-2018-10545 | redhat_vex | php: Dumpable FPM child processes allow bypassing opcache access controls | fixed: 486 known affected: 116 known not affected: 49 | 2026-06-28T11:17:49+00:00 | Vulnerability · Source |
| CVE-2016-5542 | redhat_vex | OpenJDK: missing algorithm restrictions for jar verification (Libraries, 8155973) | fixed: 1091 | 2026-06-28T11:17:49+00:00 | Vulnerability · Source |
| CVE-2018-1002200 | redhat_vex | plexus-archiver: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file | fixed: 57 known affected: 1 known not affected: 6 | 2026-06-28T11:17:48+00:00 | Vulnerability · Source |
| CVE-2016-5444 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016) | fixed: 406 known affected: 9 known not affected: 11 under investigation: 9 | 2026-06-28T11:17:45+00:00 | Vulnerability · Source |
| CVE-2021-3621 | redhat_vex | sssd: shell command injection in sssctl | fixed: 1520 known affected: 31 known not affected: 41 | 2026-06-28T11:17:44+00:00 | Vulnerability · Source |
| CVE-2018-10021 | redhat_vex | kernel: ata qc leak in drivers/scsi/libsas/sas_scsi_host.c allows local users to cause denial-of-service | known affected: 55 known not affected: 157 | 2026-06-28T11:17:43+00:00 | Vulnerability · Source |
| CVE-2026-46031 | redhat_vex | kernel: net: ks8851: Reinstate disabling of BHs around IRQ handler | known not affected: 274 | 2026-06-28T11:17:42+00:00 | Vulnerability · Source |