VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-5130 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T11:03:25+00:00 | Vulnerability · Source |
| CVE-2026-11073 | redhat_vex | chromium-browser: Use after free in WebGL | known not affected: 1 | 2026-06-28T11:03:24+00:00 | Vulnerability · Source |
| CVE-2024-25126 | redhat_vex | rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing | fixed: 119 known affected: 7 known not affected: 90 | 2026-06-28T11:03:16+00:00 | Vulnerability · Source |
| CVE-2026-3914 | redhat_vex | chromium-browser: Integer overflow in WebML | known not affected: 1 | 2026-06-28T11:03:15+00:00 | Vulnerability · Source |
| CVE-2026-23352 | redhat_vex | kernel: x86/efi: defer freeing of boot services memory | known affected: 260 known not affected: 14 | 2026-06-28T11:03:12+00:00 | Vulnerability · Source |
| CVE-2016-6128 | redhat_vex | gd: Invalid color index not properly handled | fixed: 251 known affected: 28 known not affected: 100 | 2026-06-28T11:03:11+00:00 | Vulnerability · Source |
| CVE-2026-31565 | redhat_vex | kernel: RDMA/irdma: Fix deadlock during netdev reset with active connections | known affected: 184 known not affected: 90 | 2026-06-28T11:03:06+00:00 | Vulnerability · Source |
| CVE-2025-0736 | redhat_vex | org.infinispan-infinispan-parent: Exposure of Sensitive Information in Application Logs | fixed: 1 | 2026-06-28T11:03:06+00:00 | Vulnerability · Source |
| CVE-2026-12047 | redhat_vex | pgadmin4: pgAdmin 4: HTML injection via unsanitized SDK exception messages in cloud deployment module | known not affected: 1 | 2026-06-28T11:03:05+00:00 | Vulnerability · Source |
| CVE-2015-1931 | redhat_vex | JDK: plain text data stored in memory dumps | fixed: 376 | 2026-06-28T11:03:05+00:00 | Vulnerability · Source |
| CVE-2015-1914 | redhat_vex | JDK: unspecified partial Java sandbox restrictions bypass | fixed: 393 | 2026-06-28T11:03:04+00:00 | Vulnerability · Source |
| CVE-2016-5547 | redhat_vex | OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705) | fixed: 817 | 2026-06-28T11:03:04+00:00 | Vulnerability · Source |
| CVE-2016-5617 | redhat_vex | mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016) | fixed: 436 known affected: 55 known not affected: 8 | 2026-06-28T11:03:01+00:00 | Vulnerability · Source |
| CVE-2026-12048 | redhat_vex | pgAdmin 4: pgAdmin 4: Cross-site scripting allows arbitrary HTML injection and redirection to malicious sites | known not affected: 1 | 2026-06-28T11:03:01+00:00 | Vulnerability · Source |
| CVE-2016-5573 | redhat_vex | OpenJDK: insufficient checks of JDWP packets (Hotspot, 8159519) | fixed: 1091 | 2026-06-28T11:03:01+00:00 | Vulnerability · Source |
| CVE-2026-12706 | redhat_vex | ffmpeg: ffmpeg: heap use-after-free read in RASC decoder decode_move() | known affected: 8 known not affected: 2 | 2026-06-28T11:03:00+00:00 | Vulnerability · Source |
| CVE-2026-12293 | redhat_vex | firefox: thunderbird: Use-after-free in the Graphics: WebGPU component | known not affected: 23 | 2026-06-28T11:02:59+00:00 | Vulnerability · Source |
| CVE-2016-5423 | redhat_vex | postgresql: CASE/WHEN with inlining can cause untrusted pointer dereference | fixed: 524 known affected: 15 | 2026-06-28T11:02:59+00:00 | Vulnerability · Source |
| CVE-2016-5483 | redhat_vex | mysql: Incorrect input validation allowing code execution via mysqldump | fixed: 459 known affected: 28 | 2026-06-28T11:02:58+00:00 | Vulnerability · Source |
| CVE-2025-3406 | redhat_vex | stb: Nothings stb Header Array out-of-bounds read | known not affected: 1 | 2026-06-28T11:02:53+00:00 | Vulnerability · Source |
| CVE-2026-12301 | redhat_vex | firefox: thunderbird: Memory safety bug fixed in Firefox 152 | known not affected: 23 | 2026-06-28T11:02:53+00:00 | Vulnerability · Source |
| CVE-2016-5403 | redhat_vex | Qemu: virtio: unbounded memory allocation on host via guest leading to DoS | fixed: 184 known affected: 3 known not affected: 5 | 2026-06-28T11:02:52+00:00 | Vulnerability · Source |
| CVE-2026-42497 | redhat_vex | perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction | known affected: 8 | 2026-06-28T11:02:52+00:00 | Vulnerability · Source |
| CVE-2015-1299 | redhat_vex | chromium-browser: Use-after-free in Blink | fixed: 12 | 2026-06-28T11:02:50+00:00 | Vulnerability · Source |
| CVE-2015-1230 | redhat_vex | chromium-browser: Type confusion in v8 | fixed: 15 | 2026-06-28T11:02:49+00:00 | Vulnerability · Source |
| CVE-2021-43267 | redhat_vex | kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type | fixed: 365 known not affected: 152 | 2026-06-28T11:02:43+00:00 | Vulnerability · Source |
| CVE-2014-5333 | redhat_vex | flash-plugin: multiple code execution or security bypass flaws (APSB14-18) | fixed: 5 | 2026-06-28T11:02:36+00:00 | Vulnerability · Source |
| CVE-2015-0406 | redhat_vex | JDK: unspecified vulnerability fixed in 6u91, 7u75 and 8u31 (Deployment) | fixed: 527 known not affected: 7 | 2026-06-28T11:02:34+00:00 | Vulnerability · Source |
| CVE-2025-52566 | redhat_vex | llama-cpp: llama.cpp heap overflow | known not affected: 1 | 2026-06-28T11:02:33+00:00 | Vulnerability · Source |
| CVE-2012-5261 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T11:02:33+00:00 | Vulnerability · Source |
| CVE-2012-5260 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T11:02:33+00:00 | Vulnerability · Source |
| CVE-2012-4166 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-19) | fixed: 5 | 2026-06-28T11:02:32+00:00 | Vulnerability · Source |
| CVE-2012-5073 | redhat_vex | OpenJDK: LogManager security bypass (Libraries, 7169884) | fixed: 588 known affected: 9 | 2026-06-28T11:02:32+00:00 | Vulnerability · Source |
| CVE-2019-10217 | redhat_vex | Ansible: gcp modules do not flag sensitive data fields properly | fixed: 8 known not affected: 10 | 2026-06-28T11:02:31+00:00 | Vulnerability · Source |
| CVE-2026-53442 | redhat_vex | jenkins: Jenkins: Information disclosure of secrets via unencrypted storage | known affected: 1 | 2026-06-28T11:02:30+00:00 | Vulnerability · Source |
| CVE-2026-43371 | redhat_vex | kernel: net: macb: Shuffle the tx ring before enabling tx | known not affected: 274 | 2026-06-28T11:02:29+00:00 | Vulnerability · Source |
| CVE-2026-43287 | redhat_vex | kernel: drm: Account property blob allocations to memcg | known affected: 260 known not affected: 14 | 2026-06-28T11:02:29+00:00 | Vulnerability · Source |
| CVE-2021-43389 | redhat_vex | kernel: an array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c | fixed: 150 known not affected: 149 | 2026-06-28T11:02:29+00:00 | Vulnerability · Source |
| CVE-2022-48747 | redhat_vex | kernel: block: Fix wrong offset in bio_truncate() | fixed: 150 known not affected: 150 | 2026-06-28T11:02:28+00:00 | Vulnerability · Source |
| CVE-2026-43212 | redhat_vex | kernel: LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE | known not affected: 274 | 2026-06-28T11:02:25+00:00 | Vulnerability · Source |
| CVE-2016-5195 | redhat_vex | kernel: mm: privilege escalation via MAP_PRIVATE COW breakage | fixed: 977 known not affected: 1 | 2026-06-28T11:02:25+00:00 | Vulnerability · Source |
| CVE-2025-71064 | redhat_vex | kernel: net: hns3: using the num_tqps in the vf driver to apply for resources | known affected: 232 known not affected: 42 | 2026-06-28T11:02:25+00:00 | Vulnerability · Source |
| CVE-2026-43201 | redhat_vex | kernel: APEI/GHES: ARM processor Error: don't go past allocated memory | known affected: 274 | 2026-06-28T11:02:25+00:00 | Vulnerability · Source |
| CVE-2016-5188 | redhat_vex | chromium-browser: ui spoofing | fixed: 12 | 2026-06-28T11:02:24+00:00 | Vulnerability · Source |
| CVE-2026-11072 | redhat_vex | chromium-browser: Use after free in WebView | known not affected: 1 | 2026-06-28T11:02:24+00:00 | Vulnerability · Source |
| CVE-2016-5167 | redhat_vex | chromium-browser: various fixes from internal audits | fixed: 12 | 2026-06-28T11:02:24+00:00 | Vulnerability · Source |
| CVE-2016-5171 | redhat_vex | chromium-browser: use after free in blink | fixed: 12 | 2026-06-28T11:02:24+00:00 | Vulnerability · Source |
| CVE-2016-5159 | redhat_vex | openjpeg: heap overflow in parsing of JPEG2000 code blocks | fixed: 141 | 2026-06-28T11:02:21+00:00 | Vulnerability · Source |
| CVE-2016-5160 | redhat_vex | chromium-browser: extensions web accessible resources bypass | fixed: 12 | 2026-06-28T11:02:21+00:00 | Vulnerability · Source |
| CVE-2016-5158 | redhat_vex | openjpeg: heap overflow due to unsafe use of opj_aligned_malloc | fixed: 141 | 2026-06-28T11:02:20+00:00 | Vulnerability · Source |