VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-13673 | redhat_vex | QEMU: VGA: reachable assert failure during display update | fixed: 46 known affected: 32 | 2026-06-28T11:11:06+00:00 | Vulnerability · Source |
| CVE-2017-12155 | redhat_vex | openstack-tripleo-heat-templates: Ceph client keyring is world-readable when deployed by director | fixed: 10 known affected: 9 known not affected: 1 | 2026-06-28T11:11:05+00:00 | Vulnerability · Source |
| CVE-2015-3098 | redhat_vex | flash-plugin: same-origin-policy bypass fixed in APSB15-11 | fixed: 5 | 2026-06-28T11:11:04+00:00 | Vulnerability · Source |
| CVE-2026-54417 | redhat_vex | microtar: microtar: Denial of Service via crafted tar archive due to integer overflow | known not affected: 1 | 2026-06-28T11:11:04+00:00 | Vulnerability · Source |
| CVE-2003-0987 | redhat_vex | httpd mod_digest nonce not verified | fixed: 6 | 2026-06-28T11:11:00+00:00 | Vulnerability · Source |
| CVE-2017-11305 | redhat_vex | flash-plugin: unintended reset of global settings preference file vulnerability (APSB17-42) | fixed: 3 | 2026-06-28T11:10:59+00:00 | Vulnerability · Source |
| CVE-2011-2107 | redhat_vex | flash-plugin: Cross-site scripting vulnerability (APSB11-13) | fixed: 23 | 2026-06-28T11:10:58+00:00 | Vulnerability · Source |
| CVE-2017-11143 | redhat_vex | php: Incorrect WDDX deserialization of boolean parameters leads to DoS | fixed: 254 known affected: 87 known not affected: 30 | 2026-06-28T11:10:57+00:00 | Vulnerability · Source |
| CVE-2018-12537 | redhat_vex | vertx: Improper neutralization of CRLF sequences allows remote attackers to inject arbitrary HTTP response headers | fixed: 2 known not affected: 1 | 2026-06-28T11:10:55+00:00 | Vulnerability · Source |
| CVE-2019-19531 | redhat_vex | kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/yurex.c driver leads to denial of service | known not affected: 104 | 2026-06-28T11:10:54+00:00 | Vulnerability · Source |
| CVE-2018-12931 | redhat_vex | kernel: stack-based out-of-bounds write in ntfs_attr_find in the ntfs.ko | fixed: 16 known not affected: 76 | 2026-06-28T11:10:53+00:00 | Vulnerability · Source |
| CVE-2026-23030 | redhat_vex | kernel: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() | known not affected: 274 | 2026-06-28T11:10:49+00:00 | Vulnerability · Source |
| CVE-2017-12193 | redhat_vex | kernel: Null pointer dereference due to incorrect node-splitting in assoc_array implementation | fixed: 207 known affected: 16 known not affected: 15 | 2026-06-28T11:10:48+00:00 | Vulnerability · Source |
| CVE-2017-12190 | redhat_vex | kernel: memory leak when merging buffers in SCSI IO vectors | fixed: 557 known affected: 1 | 2026-06-28T11:10:47+00:00 | Vulnerability · Source |
| CVE-2019-5010 | redhat_vex | python: NULL pointer dereference using a specially crafted X509 certificate | fixed: 290 known affected: 8 known not affected: 42 | 2026-06-28T11:10:47+00:00 | Vulnerability · Source |
| CVE-2026-57283 | redhat_vex | jenkins-pipeline-groovy: Jenkins Pipeline: Groovy Plugin: Cross-site request forgery allows unauthorized configuration changes. | known affected: 3 | 2026-06-28T11:10:46+00:00 | Vulnerability · Source |
| CVE-2017-10378 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017) | fixed: 892 known affected: 17 known not affected: 9 | 2026-06-28T11:10:45+00:00 | Vulnerability · Source |
| CVE-2026-57285 | redhat_vex | Jenkins GitHub Branch Source Plugin: Jenkins GitHub Branch Source Plugin: Information disclosure via missing permission check | known affected: 3 | 2026-06-28T11:10:45+00:00 | Vulnerability · Source |
| CVE-2026-33420 | redhat_vex | Vaultwarden: Vaultwarden: Information disclosure via missing authorization check | known not affected: 1 | 2026-06-28T11:10:45+00:00 | Vulnerability · Source |
| CVE-2017-10313 | redhat_vex | mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2017) | fixed: 63 known not affected: 86 | 2026-06-28T11:10:44+00:00 | Vulnerability · Source |
| CVE-2017-10296 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Oct 2017) | fixed: 63 known not affected: 86 | 2026-06-28T11:10:44+00:00 | Vulnerability · Source |
| CVE-2017-10293 | redhat_vex | JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc) | fixed: 214 | 2026-06-28T11:10:43+00:00 | Vulnerability · Source |
| CVE-2017-9049 | redhat_vex | libxml2: Heap-based buffer over-read in function xmlDictComputeFastKey | fixed: 1 known affected: 13 known not affected: 7 | 2026-06-28T11:10:42+00:00 | Vulnerability · Source |
| CVE-2017-9050 | redhat_vex | libxml2: Heap-based buffer over-read in function xmlDictAddString | fixed: 1 known affected: 16 known not affected: 4 | 2026-06-28T11:10:42+00:00 | Vulnerability · Source |
| CVE-2017-10227 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017) | fixed: 133 known not affected: 77 | 2026-06-28T11:10:42+00:00 | Vulnerability · Source |
| CVE-2017-10285 | redhat_vex | OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966) | fixed: 830 known affected: 8 | 2026-06-28T11:10:42+00:00 | Vulnerability · Source |
| CVE-2017-10193 | redhat_vex | OpenJDK: incorrect key size constraint check (Security, 8179101) | fixed: 600 | 2026-06-28T11:10:41+00:00 | Vulnerability · Source |
| CVE-2017-10243 | redhat_vex | OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054) | fixed: 854 | 2026-06-28T11:10:40+00:00 | Vulnerability · Source |
| CVE-2018-12930 | redhat_vex | kernel: stack-based out-of-bounds write in ntfs_end_buffer_async_read in the ntfs.ko | fixed: 16 known not affected: 76 | 2026-06-28T11:10:39+00:00 | Vulnerability · Source |
| CVE-2017-10101 | redhat_vex | OpenJDK: unrestricted access to com.sun.org.apache.xml.internal.resolver (JAXP, 8173286) | fixed: 854 | 2026-06-28T11:10:38+00:00 | Vulnerability · Source |
| CVE-2017-1000385 | redhat_vex | erlang: TLS server vulnerable to Adaptive Chosen Ciphertext attack allowing plaintext recovery or MITM attack | fixed: 245 known affected: 79 | 2026-06-28T11:10:38+00:00 | Vulnerability · Source |
| CVE-2017-1000381 | redhat_vex | c-ares: NAPTR parser out of bounds access | fixed: 30 known affected: 22 known not affected: 9 | 2026-06-28T11:10:36+00:00 | Vulnerability · Source |
| CVE-2018-13093 | redhat_vex | kernel: NULL pointer dereference in lookup_slow function | fixed: 204 known affected: 28 known not affected: 47 | 2026-06-28T11:10:35+00:00 | Vulnerability · Source |
| CVE-2018-13094 | redhat_vex | kernel: NULL pointer dereference in xfs_da_shrink_inode function | fixed: 230 known affected: 12 known not affected: 47 | 2026-06-28T11:10:33+00:00 | Vulnerability · Source |
| CVE-2025-11966 | redhat_vex | io.vertx/vertx-web: Eclipse Vert.x cross site scripting | fixed: 3 known affected: 122 | 2026-06-28T11:10:33+00:00 | Vulnerability · Source |
| CVE-2026-5194 | redhat_vex | wolfSSL: wolfSSL: Reduced security of ECDSA authentication via missing digest size checks | known not affected: 1 | 2026-06-28T11:10:32+00:00 | Vulnerability · Source |
| CVE-2010-4476 | redhat_vex | JDK Double.parseDouble Denial-Of-Service | fixed: 921 known not affected: 10 | 2026-06-28T11:10:32+00:00 | Vulnerability · Source |
| CVE-2017-11628 | redhat_vex | php: Stack based 1-byte buffer over-write in zend_ini_do_op() function Zend/zend_ini_parser.c | fixed: 254 known affected: 87 | 2026-06-28T11:10:30+00:00 | Vulnerability · Source |
| CVE-2015-1284 | redhat_vex | chromium-browser: Use-after-free in blink. | fixed: 12 | 2026-06-28T11:10:30+00:00 | Vulnerability · Source |
| CVE-2017-11600 | redhat_vex | kernel: Out-of-bounds access via an XFRM_MSG_MIGRATE xfrm Netlink message | fixed: 350 known affected: 16 known not affected: 15 | 2026-06-28T11:10:30+00:00 | Vulnerability · Source |
| CVE-2020-10720 | redhat_vex | kernel: use-after-free read in napi_gro_frags() in the Linux kernel | fixed: 179 known affected: 15 known not affected: 41 | 2026-06-28T11:10:27+00:00 | Vulnerability · Source |
| CVE-2026-44047 | redhat_vex | netatalk: Netatalk: Arbitrary code execution and data compromise via SQL injection | known not affected: 1 | 2026-06-28T11:10:27+00:00 | Vulnerability · Source |
| CVE-2017-1000048 | redhat_vex | nodejs-qs: Prototype override protection bypass | fixed: 12 known affected: 5 known not affected: 2 under investigation: 2 | 2026-06-28T11:10:24+00:00 | Vulnerability · Source |
| CVE-2017-0898 | redhat_vex | ruby: Buffer underrun vulnerability in Kernel.sprintf | fixed: 576 known affected: 1 known not affected: 13 | 2026-06-28T11:10:23+00:00 | Vulnerability · Source |
| CVE-2017-0901 | redhat_vex | rubygems: Arbitrary file overwrite due to incorrect validation of specification name | fixed: 576 known affected: 2 under investigation: 4 | 2026-06-28T11:10:22+00:00 | Vulnerability · Source |
| CVE-2015-1237 | redhat_vex | chromium-browser: Use-after-free in IPC | fixed: 15 | 2026-06-28T11:10:21+00:00 | Vulnerability · Source |
| CVE-2026-11208 | redhat_vex | chromium-browser: Use after free in Codecs | known not affected: 1 | 2026-06-28T11:10:21+00:00 | Vulnerability · Source |
| CVE-2017-11334 | redhat_vex | Qemu: exec: oob access during dma operation | fixed: 47 known affected: 1 known not affected: 23 | 2026-06-28T11:10:21+00:00 | Vulnerability · Source |
| CVE-2010-3632 | redhat_vex | acroread: multiple code execution flaws (APSB10-21) | fixed: 12 known not affected: 2 | 2026-06-28T11:10:20+00:00 | Vulnerability · Source |
| CVE-2015-1221 | redhat_vex | chromium-browser: Use-after-free in web databases | fixed: 15 | 2026-06-28T11:10:20+00:00 | Vulnerability · Source |