VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2011-2459 | redhat_vex | flash-plugin: mulitple code execution flaws (APSB11-28) | fixed: 5 | 2026-06-28T11:06:27+00:00 | Vulnerability · Source |
| CVE-2011-2450 | redhat_vex | flash-plugin: mulitple code execution flaws (APSB11-28) | fixed: 5 | 2026-06-28T11:06:26+00:00 | Vulnerability · Source |
| CVE-2011-2452 | redhat_vex | flash-plugin: mulitple code execution flaws (APSB11-28) | fixed: 5 | 2026-06-28T11:06:26+00:00 | Vulnerability · Source |
| CVE-2011-2454 | redhat_vex | flash-plugin: mulitple code execution flaws (APSB11-28) | fixed: 5 | 2026-06-28T11:06:26+00:00 | Vulnerability · Source |
| CVE-2026-7820 | redhat_vex | pgadmin4: account-lockout bypass via Flask-Security default /login view | known not affected: 1 | 2026-06-28T11:06:23+00:00 | Vulnerability · Source |
| CVE-2014-0415 | redhat_vex | JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment) | fixed: 420 known not affected: 7 | 2026-06-28T11:06:23+00:00 | Vulnerability · Source |
| CVE-2011-0865 | redhat_vex | OpenJDK: Deserialization allows creation of mutable SignedObject (Deserialization, 6618658) | fixed: 666 | 2026-06-28T11:06:23+00:00 | Vulnerability · Source |
| CVE-2011-0868 | redhat_vex | OpenJDK: incorrect numeric type conversion in TransformHelper (2D, 7016495) | fixed: 352 known not affected: 11 | 2026-06-28T11:06:23+00:00 | Vulnerability · Source |
| CVE-2014-0403 | redhat_vex | JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment) | fixed: 420 known not affected: 7 | 2026-06-28T11:06:22+00:00 | Vulnerability · Source |
| CVE-2011-0624 | redhat_vex | flash-plugin: crash and potential arbitrary code execution (APSB11-12) | fixed: 5 | 2026-06-28T11:06:21+00:00 | Vulnerability · Source |
| CVE-2011-0585 | redhat_vex | acroread: critical APSB11-03 | fixed: 18 | 2026-06-28T11:06:21+00:00 | Vulnerability · Source |
| CVE-2011-0625 | redhat_vex | flash-plugin: crash and potential arbitrary code execution (APSB11-12) | fixed: 5 | 2026-06-28T11:06:21+00:00 | Vulnerability · Source |
| CVE-2011-0579 | redhat_vex | flash-plugin: crash and potential arbitrary code execution (APSB11-12) | fixed: 5 | 2026-06-28T11:06:20+00:00 | Vulnerability · Source |
| CVE-2010-4465 | redhat_vex | OpenJDK Swing timer-based security manager bypass (6907662) | fixed: 702 | 2026-06-28T11:06:20+00:00 | Vulnerability · Source |
| CVE-2011-0053 | redhat_vex | Mozilla miscellaneous memory safety hazards (MFSA 2011-01) | fixed: 300 known affected: 1 | 2026-06-28T11:06:19+00:00 | Vulnerability · Source |
| CVE-2024-26973 | redhat_vex | kernel: fat: fix uninitialized field in nostale filehandles | fixed: 709 known affected: 64 known not affected: 8 | 2026-06-28T11:06:18+00:00 | Vulnerability · Source |
| CVE-2010-4422 | redhat_vex | JDK unspecified vulnerability in Deployment component | fixed: 318 | 2026-06-28T11:06:18+00:00 | Vulnerability · Source |
| CVE-2026-0858 | redhat_vex | plantuml: PlantUML: Arbitrary script execution via Stored Cross-Site Scripting in GraphViz diagrams | known affected: 8 | 2026-06-28T11:06:18+00:00 | Vulnerability · Source |
| CVE-2010-3648 | redhat_vex | flash-plugin: security bulletin APSB10-26 | fixed: 9 | 2026-06-28T11:06:18+00:00 | Vulnerability · Source |
| CVE-2010-3646 | redhat_vex | flash-plugin: security bulletin APSB10-26 | fixed: 9 | 2026-06-28T11:06:17+00:00 | Vulnerability · Source |
| CVE-2010-3647 | redhat_vex | flash-plugin: security bulletin APSB10-26 | fixed: 9 | 2026-06-28T11:06:17+00:00 | Vulnerability · Source |
| CVE-2010-3652 | redhat_vex | flash-plugin: security bulletin APSB10-26 | fixed: 9 | 2026-06-28T11:06:16+00:00 | Vulnerability · Source |
| CVE-2010-3619 | redhat_vex | acroread: multiple code execution flaws (APSB10-21) | fixed: 12 known not affected: 2 | 2026-06-28T11:06:16+00:00 | Vulnerability · Source |
| CVE-2025-2913 | redhat_vex | hdf5: HDF5 H5FL.c H5FL__blk_gc_list use after free | known affected: 1 | 2026-06-28T11:06:15+00:00 | Vulnerability · Source |
| CVE-2026-0821 | redhat_vex | quickjs-ng: quickjs-ng: Heap-based buffer overflow in js_typed_array_constructor function | known not affected: 1 | 2026-06-28T11:06:15+00:00 | Vulnerability · Source |
| CVE-2010-2208 | redhat_vex | acroread: multiple code execution flaws (APSB10-15) | fixed: 12 | 2026-06-28T11:06:15+00:00 | Vulnerability · Source |
| CVE-2010-0847 | redhat_vex | OpenJDK ImagingLib arbitrary code execution vulnerability (6914866) | fixed: 594 | 2026-06-28T11:06:13+00:00 | Vulnerability · Source |
| CVE-2016-1102 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T11:06:12+00:00 | Vulnerability · Source |
| CVE-2009-4324 | redhat_vex | acroread: media.newplayer JavaScript API code execution vulnerability (APSB10-02) | fixed: 16 | 2026-06-28T11:06:11+00:00 | Vulnerability · Source |
| CVE-2016-10516 | redhat_vex | python-werkzeug: Cross-site scripting in render_full function in debug/tbtools.py | fixed: 1215 known affected: 9 | 2026-06-28T11:06:11+00:00 | Vulnerability · Source |
| CVE-2010-0429 | redhat_vex | libspice: Relying on guest provided data structures to indicate memory allocation | fixed: 13 | 2026-06-28T11:06:11+00:00 | Vulnerability · Source |
| CVE-2026-0710 | redhat_vex | SIPp/sipp: SIPp: Denial of Service and potential Arbitrary Code Execution vulnerability | known not affected: 1 | 2026-06-28T11:06:11+00:00 | Vulnerability · Source |
| CVE-2025-48979 | redhat_vex | uisp: UISP Command Injection Vulnerability | known not affected: 1 | 2026-06-28T11:06:10+00:00 | Vulnerability · Source |
| CVE-2009-1106 | redhat_vex | OpenJDK: Improper parsing of crossdomain.xml files (intended access restriction bypass) (6798948) | fixed: 338 | 2026-06-28T11:06:09+00:00 | Vulnerability · Source |
| CVE-2009-3879 | redhat_vex | OpenJDK GraphicsConfiguration information leak(6822057) | fixed: 168 | 2026-06-28T11:06:09+00:00 | Vulnerability · Source |
| CVE-2026-0598 | redhat_vex | ansible-lightspeed: Broken Object Level Authorization Leading to Cross-User AI Conversation Context Injection in Ansible Lightspeed API | fixed: 4 known not affected: 143 | 2026-06-28T11:06:08+00:00 | Vulnerability · Source |
| CVE-2008-1194 | redhat_vex | JRE image parsing library allows privilege escalation (CVE-2008-1194) | fixed: 286 | 2026-06-28T11:06:08+00:00 | Vulnerability · Source |
| CVE-2016-8327 | redhat_vex | mysql: Server: Replication unspecified vulnerability (CPU Jan 2017) | fixed: 114 known not affected: 57 | 2026-06-28T11:06:08+00:00 | Vulnerability · Source |
| CVE-2008-0890 | redhat_vex | 7.1: insecure default permissions on jars directory | fixed: 8 | 2026-06-28T11:06:07+00:00 | Vulnerability · Source |
| CVE-2007-1825 | redhat_vex | php imap_mail_compose() buffer overflow via type.parameters | fixed: 608 | 2026-06-28T11:06:06+00:00 | Vulnerability · Source |
| CVE-2008-0883 | redhat_vex | acroread: insecure handling of temporary files | fixed: 20 | 2026-06-28T11:06:06+00:00 | Vulnerability · Source |
| CVE-2007-5239 | redhat_vex | Untrusted Application or Applet May Move or Copy Arbitrary Files | fixed: 430 | 2026-06-28T11:06:06+00:00 | Vulnerability · Source |
| CVE-2026-3934 | redhat_vex | chromium-browser: Insufficient policy enforcement in ChromeDriver | known not affected: 1 | 2026-06-28T11:06:05+00:00 | Vulnerability · Source |
| CVE-2004-1019 | redhat_vex | security flaw | fixed: 336 | 2026-06-28T11:06:05+00:00 | Vulnerability · Source |
| CVE-2026-11130 | redhat_vex | chromium-browser: Use after free in Media | known not affected: 1 | 2026-06-28T11:06:03+00:00 | Vulnerability · Source |
| CVE-2026-0531 | redhat_vex | kibana: allocation of resources without limits or throttling via specially crafted bulk retrieval request | known affected: 1 | 2026-06-28T11:06:02+00:00 | Vulnerability · Source |
| CVE-2026-11177 | redhat_vex | chromium-browser: Use after free in Omnibox | known not affected: 1 | 2026-06-28T11:05:58+00:00 | Vulnerability · Source |
| CVE-2024-25742 | redhat_vex | hw: amd: Instruction raise #VC exception at exit | fixed: 949 known affected: 22 known not affected: 43 | 2026-06-28T11:05:57+00:00 | Vulnerability · Source |
| CVE-2016-10166 | redhat_vex | gd: Unsigned integer underflow _gdContributionsAlloc() | fixed: 972 known affected: 62 known not affected: 124 | 2026-06-28T11:05:52+00:00 | Vulnerability · Source |
| CVE-2025-27154 | redhat_vex | spotipy: Spotipy's cache file, containing spotify auth token, is created with overly broad permissions | known not affected: 1 | 2026-06-28T11:05:52+00:00 | Vulnerability · Source |