VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297761 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-8320 | redhat_vex | rubygems: Delete directory using symlink when decompressing tar | fixed: 554 known affected: 20 known not affected: 40 | 2026-06-28T07:29:58+00:00 | Vulnerability · Source |
| CVE-2019-7837 | redhat_vex | flash-plugin: Arbitrary Code Execution vulnerability (APSB19-26) | fixed: 3 | 2026-06-28T07:29:57+00:00 | Vulnerability · Source |
| CVE-2026-33205 | redhat_vex | calibre: server-side request forgery in ebook viewer backend | known not affected: 1 | 2026-06-28T07:29:57+00:00 | Vulnerability · Source |
| CVE-2019-8069 | redhat_vex | flash-plugin: Arbitrary Code Execution vulnerabilities (APSB19-46) | fixed: 3 | 2026-06-28T07:29:57+00:00 | Vulnerability · Source |
| CVE-2019-7096 | redhat_vex | flash-plugin: Arbitrary Code Execution vulnerability (APSB19-19) | fixed: 3 | 2026-06-28T07:29:57+00:00 | Vulnerability · Source |
| CVE-2019-7845 | redhat_vex | flash-plugin: Arbitrary Code Execution vulnerability (APSB19-30) | fixed: 3 | 2026-06-28T07:29:57+00:00 | Vulnerability · Source |
| CVE-2026-33174 | redhat_vex | Rails: Active Storage: Rails Active Storage: Denial of Service via unbounded Range header | known affected: 15 known not affected: 4 | 2026-06-28T07:29:55+00:00 | Vulnerability · Source |
| CVE-2026-33176 | redhat_vex | Rails: Active Support: Active Support: Denial of Service via large scientific notation strings | fixed: 16 known affected: 1 known not affected: 281 | 2026-06-28T07:29:55+00:00 | Vulnerability · Source |
| CVE-2019-7222 | redhat_vex | Kernel: KVM: leak of uninitialized stack contents to guest | fixed: 358 known not affected: 43 | 2026-06-28T07:29:55+00:00 | Vulnerability · Source |
| CVE-2026-33173 | redhat_vex | Rails: Active Storage: Rails Active Storage: Content type bypass via arbitrary metadata in direct uploads | known affected: 17 | 2026-06-28T07:29:54+00:00 | Vulnerability · Source |
| CVE-2019-6977 | redhat_vex | gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c | fixed: 998 known affected: 92 known not affected: 51 | 2026-06-28T07:29:52+00:00 | Vulnerability · Source |
| CVE-2019-7108 | redhat_vex | flash-plugin: Information Disclosure vulnerability (APSB19-19) | fixed: 3 | 2026-06-28T07:29:52+00:00 | Vulnerability · Source |
| CVE-2026-33168 | redhat_vex | actionview: Action View: Cross-Site Scripting (XSS) via blank HTML attribute names | known affected: 17 | 2026-06-28T07:29:52+00:00 | Vulnerability · Source |
| CVE-2026-33147 | redhat_vex | gmt: GMT: Stack-based Buffer Overflow in gmt_remote_dataset_id | known not affected: 1 | 2026-06-28T07:29:51+00:00 | Vulnerability · Source |
| CVE-2019-5872 | redhat_vex | chromium-browser: Use-after-free in Mojo | fixed: 14 | 2026-06-28T07:29:51+00:00 | Vulnerability · Source |
| CVE-2026-33145 | redhat_vex | xrdp: xrdp-sesman: xrdp: Arbitrary Command Execution via unsafe handling of AlternateShell parameter | known not affected: 1 | 2026-06-28T07:29:51+00:00 | Vulnerability · Source |
| CVE-2026-33151 | redhat_vex | socket.io: Socket.IO: Denial of Service due to excessive buffering of specially crafted packets | known affected: 10 | 2026-06-28T07:29:51+00:00 | Vulnerability · Source |
| CVE-2026-33019 | redhat_vex | libsixel: libsixel: Denial of Service and Information Disclosure via integer overflow in crop option | known not affected: 1 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33123 | redhat_vex | pypdf: pypdf: Denial of Service due to excessive resource consumption from crafted PDF | known affected: 9 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33018 | redhat_vex | libsixel: libsixel: Arbitrary code execution via Use-After-Free in GIF processing | known not affected: 1 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33020 | redhat_vex | libsixel: libsixel: Arbitrary code execution via crafted palettised PNG image processing | known not affected: 1 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33021 | redhat_vex | libsixel: libsixel: Use-after-free vulnerability allows for potential code execution via premature pixel buffer freeing. | known not affected: 1 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33128 | redhat_vex | h3: H3: Server-Sent Events injection due to improper newline sanitization | known not affected: 1 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33069 | redhat_vex | PJSIP: PJSIP: Information disclosure vulnerability in SIP message processing | known not affected: 1 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33034 | redhat_vex | Django: Django: Denial of Service via missing or understated Content-Length header in ASGI requests | known affected: 11 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33023 | redhat_vex | libsixel: libsixel: Code execution via crafted image due to use-after-free vulnerability | known not affected: 1 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33129 | redhat_vex | h3: H3: Password deduction via Timing Side-Channel vulnerability in basic authentication | known not affected: 1 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2019-5876 | redhat_vex | chromium-browser: Use-after-free in media | fixed: 14 | 2026-06-28T07:29:49+00:00 | Vulnerability · Source |
| CVE-2019-5880 | redhat_vex | chromium-browser: SameSite cookie bypass | fixed: 14 | 2026-06-28T07:29:49+00:00 | Vulnerability · Source |
| CVE-2019-5877 | redhat_vex | chromium-browser: Out-of-bounds access in V8 | fixed: 14 | 2026-06-28T07:29:49+00:00 | Vulnerability · Source |
| CVE-2019-5879 | redhat_vex | chromium-browser: Extensions can read some local files | fixed: 14 | 2026-06-28T07:29:49+00:00 | Vulnerability · Source |
| CVE-2020-10933 | redhat_vex | ruby: BasicSocket#read_nonblock method leads to information disclosure | fixed: 767 known not affected: 47 | 2026-06-28T07:29:49+00:00 | Vulnerability · Source |
| CVE-2019-5878 | redhat_vex | chromium-browser: Use-after-free in V8 | fixed: 14 | 2026-06-28T07:29:49+00:00 | Vulnerability · Source |
| CVE-2019-5881 | redhat_vex | chromium-browser: Arbitrary read in SwiftShader | fixed: 14 | 2026-06-28T07:29:49+00:00 | Vulnerability · Source |
| CVE-2019-5870 | redhat_vex | chromium-browser: Use-after-free in media | fixed: 14 | 2026-06-28T07:29:48+00:00 | Vulnerability · Source |
| CVE-2019-5871 | redhat_vex | chromium-browser: Heap overflow in Skia | fixed: 14 | 2026-06-28T07:29:48+00:00 | Vulnerability · Source |
| CVE-2019-5874 | redhat_vex | chromium-browser: External URIs may trigger other browsers | fixed: 14 | 2026-06-28T07:29:48+00:00 | Vulnerability · Source |
| CVE-2019-5859 | redhat_vex | chromium-browser: res: URIs can load alternative browsers | fixed: 14 | 2026-06-28T07:29:47+00:00 | Vulnerability · Source |
| CVE-2019-5869 | redhat_vex | chromium-browser: Use-after-free in Blink | fixed: 14 | 2026-06-28T07:29:47+00:00 | Vulnerability · Source |
| CVE-2019-5864 | redhat_vex | chromium-browser: Insufficient port filtering in CORS for extensions | fixed: 14 | 2026-06-28T07:29:47+00:00 | Vulnerability · Source |
| CVE-2019-5861 | redhat_vex | chromium-browser: Click location incorrectly checked | fixed: 14 | 2026-06-28T07:29:47+00:00 | Vulnerability · Source |
| CVE-2019-5858 | redhat_vex | chromium-browser: Insufficient filtering of Open URL service parameters | fixed: 14 | 2026-06-28T07:29:47+00:00 | Vulnerability · Source |
| CVE-2019-5865 | redhat_vex | chromium-browser: Site isolation bypass from compromised renderer | fixed: 14 | 2026-06-28T07:29:47+00:00 | Vulnerability · Source |
| CVE-2019-5860 | redhat_vex | chromium-browser: Use-after-free in PDFium | fixed: 14 | 2026-06-28T07:29:47+00:00 | Vulnerability · Source |
| CVE-2019-5857 | redhat_vex | chromium-browser: Comparison of -0 and null yields crash | fixed: 14 | 2026-06-28T07:29:47+00:00 | Vulnerability · Source |
| CVE-2019-5855 | redhat_vex | chromium-browser: Integer overflow in PDFium | fixed: 14 | 2026-06-28T07:29:46+00:00 | Vulnerability · Source |
| CVE-2019-5850 | redhat_vex | chromium-browser: Use-after-free in offline page fetcher | fixed: 14 | 2026-06-28T07:29:46+00:00 | Vulnerability · Source |
| CVE-2019-5848 | redhat_vex | chromium-browser: Font sizes may expose sensitive information | fixed: 14 | 2026-06-28T07:29:46+00:00 | Vulnerability · Source |
| CVE-2019-5856 | redhat_vex | chromium-browser: Insufficient checks on filesystem: URI permissions | fixed: 14 | 2026-06-28T07:29:46+00:00 | Vulnerability · Source |
| CVE-2019-5854 | redhat_vex | chromium-browser: Integer overflow in PDFium text rendering | fixed: 14 | 2026-06-28T07:29:46+00:00 | Vulnerability · Source |