VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-11216 | redhat_vex | chromium-browser: Incorrect security UI in File Input | known not affected: 1 | 2026-06-28T11:10:19+00:00 | Vulnerability · Source |
| CVE-2026-22987 | redhat_vex | kernel: Linux kernel: Denial of Service due to invalid dereference in networking scheduler during netns teardown | known affected: 14 known not affected: 260 | 2026-06-28T11:10:18+00:00 | Vulnerability · Source |
| CVE-2024-3447 | redhat_vex | QEMU: sdhci: heap buffer overflow in sdhci_write_dataport() | known not affected: 77 | 2026-06-28T11:10:17+00:00 | Vulnerability · Source |
| CVE-2010-2178 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:10:17+00:00 | Vulnerability · Source |
| CVE-2015-0568 | redhat_vex | kernel: use-after-free in msm_set_crop function | known not affected: 93 | 2026-06-28T11:10:16+00:00 | Vulnerability · Source |
| CVE-2026-48855 | redhat_vex | erlang: Erlang OTP ssh: Information disclosure via symlink resolution in SFTP | known affected: 41 | 2026-06-28T11:10:16+00:00 | Vulnerability · Source |
| CVE-2010-2186 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:10:15+00:00 | Vulnerability · Source |
| CVE-2010-2171 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:10:14+00:00 | Vulnerability · Source |
| CVE-2019-14820 | redhat_vex | keycloak: adapter endpoints are exposed via arbitrary URLs | fixed: 30 known affected: 2 known not affected: 1 | 2026-06-28T11:10:13+00:00 | Vulnerability · Source |
| CVE-2026-23238 | redhat_vex | kernel: romfs: check sb_set_blocksize() return value | known affected: 14 known not affected: 260 | 2026-06-28T11:10:12+00:00 | Vulnerability · Source |
| CVE-2025-68461 | redhat_vex | roundcubemail: Roundcube Webmail: Cross-Site Scripting (XSS) vulnerability via crafted SVG animate tag | known not affected: 1 | 2026-06-28T11:10:12+00:00 | Vulnerability · Source |
| CVE-2026-23188 | redhat_vex | kernel: Linux kernel: Denial of Service in r8152 USB network adapter driver | known affected: 76 known not affected: 198 | 2026-06-28T11:10:11+00:00 | Vulnerability · Source |
| CVE-2021-3847 | redhat_vex | kernel: low-privileged user privileges escalation | known not affected: 198 | 2026-06-28T11:10:10+00:00 | Vulnerability · Source |
| CVE-2015-0459 | redhat_vex | JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D) | fixed: 653 | 2026-06-28T11:10:05+00:00 | Vulnerability · Source |
| CVE-2017-10689 | redhat_vex | puppet: Unpacking of tarballs in tar/mini.rb can create files with insecure permissions | fixed: 1110 known affected: 17 | 2026-06-28T11:10:03+00:00 | Vulnerability · Source |
| CVE-2021-3859 | redhat_vex | undertow: client side invocation timeout raised when calling over HTTP2 | fixed: 120 known affected: 5 known not affected: 2216 | 2026-06-28T11:10:03+00:00 | Vulnerability · Source |
| CVE-2015-0360 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-06 | fixed: 5 | 2026-06-28T11:10:03+00:00 | Vulnerability · Source |
| CVE-2015-0357 | redhat_vex | flash-plugin: information leaks leading to ASLR bypass (APSB15-06) | fixed: 5 | 2026-06-28T11:10:02+00:00 | Vulnerability · Source |
| CVE-2015-0335 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-05 | fixed: 5 | 2026-06-28T11:10:01+00:00 | Vulnerability · Source |
| CVE-2020-15959 | redhat_vex | chromium-browser: Insufficient policy enforcement in networking | fixed: 14 | 2026-06-28T11:10:00+00:00 | Vulnerability · Source |
| CVE-2026-23291 | redhat_vex | kernel: nfc: pn533: properly drop the usb interface reference on disconnect | known not affected: 274 | 2026-06-28T11:09:59+00:00 | Vulnerability · Source |
| CVE-2017-10295 | redhat_vex | OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751) | fixed: 830 known affected: 8 | 2026-06-28T11:09:59+00:00 | Vulnerability · Source |
| CVE-2026-52913 | redhat_vex | kernel: batman-adv: v: stop OGMv2 on disabled interface | known not affected: 274 | 2026-06-28T11:09:58+00:00 | Vulnerability · Source |
| CVE-2020-7212 | redhat_vex | python-urllib3: inefficient algorithm allows a DoS (CPU consumption) in _encode_invalid_chars function in util/url.py | known not affected: 20 | 2026-06-28T11:09:57+00:00 | Vulnerability · Source |
| CVE-2026-23286 | redhat_vex | kernel: atm: lec: fix null-ptr-deref in lec_arp_clear_vccs | known affected: 198 known not affected: 76 | 2026-06-28T11:09:56+00:00 | Vulnerability · Source |
| CVE-2017-10661 | redhat_vex | kernel: Handling of might_cancel queueing is not properly pretected against race | fixed: 447 known affected: 26 known not affected: 26 | 2026-06-28T11:09:55+00:00 | Vulnerability · Source |
| CVE-2024-35840 | redhat_vex | kernel: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T11:09:54+00:00 | Vulnerability · Source |
| CVE-2017-1000410 | redhat_vex | kernel: Stack information leak in the EFS element | fixed: 562 known not affected: 1 | 2026-06-28T11:09:53+00:00 | Vulnerability · Source |
| CVE-2016-8650 | redhat_vex | kernel: Null pointer dereference via keyctl | fixed: 387 known not affected: 1 | 2026-06-28T11:09:53+00:00 | Vulnerability · Source |
| CVE-2017-10115 | redhat_vex | OpenJDK: DSA implementation timing attack (JCE, 8175106) | fixed: 854 | 2026-06-28T11:09:53+00:00 | Vulnerability · Source |
| CVE-2016-4275 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-29 | fixed: 5 | 2026-06-28T11:09:51+00:00 | Vulnerability · Source |
| CVE-2016-6294 | redhat_vex | php: Out-of-bounds access in locale_accept_from_http | fixed: 251 known affected: 109 known not affected: 1 | 2026-06-28T11:09:51+00:00 | Vulnerability · Source |
| CVE-2016-8288 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: InnoDB Plugin (CPU October 2016) | fixed: 80 known not affected: 79 | 2026-06-28T11:09:51+00:00 | Vulnerability · Source |
| CVE-2016-6292 | redhat_vex | php: Null pointer dereference in exif_process_user_comment | fixed: 251 known affected: 80 known not affected: 30 | 2026-06-28T11:09:51+00:00 | Vulnerability · Source |
| CVE-2016-5432 | redhat_vex | ovirt-engine: ovirt-engine-provisiondb logs contain DB username and password in plain text | fixed: 23 known affected: 1 | 2026-06-28T11:09:50+00:00 | Vulnerability · Source |
| CVE-2017-1000405 | redhat_vex | kernel: pmd can become dirty without going through a COW cycle | fixed: 50 known not affected: 55 | 2026-06-28T11:09:50+00:00 | Vulnerability · Source |
| CVE-2019-0220 | redhat_vex | httpd: URL normalization inconsistency | fixed: 654 known affected: 10 known not affected: 2 | 2026-06-28T11:09:50+00:00 | Vulnerability · Source |
| CVE-2026-11201 | redhat_vex | chromium-browser: Use after free in ServiceWorker | known not affected: 1 | 2026-06-28T11:09:49+00:00 | Vulnerability · Source |
| CVE-2017-1000380 | redhat_vex | kernel: information leak due to a data race in ALSA timer | fixed: 207 known affected: 31 | 2026-06-28T11:09:49+00:00 | Vulnerability · Source |
| CVE-2017-1000379 | redhat_vex | kernel: Incorrectly mapped contents of PIE executable | fixed: 923 known affected: 16 known not affected: 7 | 2026-06-28T11:09:49+00:00 | Vulnerability · Source |
| CVE-2016-5215 | redhat_vex | chromium-browser: use after free in webaudio | fixed: 12 | 2026-06-28T11:09:48+00:00 | Vulnerability · Source |
| CVE-2016-5214 | redhat_vex | chromium-browser: file download protection bypass | fixed: 12 | 2026-06-28T11:09:48+00:00 | Vulnerability · Source |
| CVE-2016-5166 | redhat_vex | chromium-browser: smb relay attack via save page as | fixed: 12 | 2026-06-28T11:09:47+00:00 | Vulnerability · Source |
| CVE-2016-5185 | redhat_vex | chromium-browser: use after free in blink | fixed: 12 | 2026-06-28T11:09:47+00:00 | Vulnerability · Source |
| CVE-2016-4226 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:09:47+00:00 | Vulnerability · Source |
| CVE-2016-4483 | redhat_vex | libxml2: out-of-bounds read | fixed: 1 known affected: 13 | 2026-06-28T11:09:47+00:00 | Vulnerability · Source |
| CVE-2016-4187 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:09:45+00:00 | Vulnerability · Source |
| CVE-2025-58136 | redhat_vex | Apache Traffic Server: Apache Traffic Server: Denial of Service via POST request handling | known not affected: 1 | 2026-06-28T11:09:45+00:00 | Vulnerability · Source |
| CVE-2016-4136 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:09:45+00:00 | Vulnerability · Source |
| CVE-2016-4237 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:09:45+00:00 | Vulnerability · Source |