VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297763 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-5768 | redhat_vex | chromium-browser: Insufficient policy enforcement in DevTools | fixed: 12 | 2026-06-28T07:29:36+00:00 | Vulnerability · Source |
| CVE-2019-5769 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Blink | fixed: 12 | 2026-06-28T07:29:36+00:00 | Vulnerability · Source |
| CVE-2019-5758 | redhat_vex | chromium-browser: Use after free in Blink | fixed: 12 | 2026-06-28T07:29:35+00:00 | Vulnerability · Source |
| CVE-2019-5760 | redhat_vex | chromium-browser: Use after free in WebRTC | fixed: 12 | 2026-06-28T07:29:35+00:00 | Vulnerability · Source |
| CVE-2019-5759 | redhat_vex | chromium-browser: Use after free in HTML select elements | fixed: 12 | 2026-06-28T07:29:35+00:00 | Vulnerability · Source |
| CVE-2019-5754 | redhat_vex | chromium-browser: Inappropriate implementation in QUIC Networking | fixed: 12 | 2026-06-28T07:29:34+00:00 | Vulnerability · Source |
| CVE-2019-5756 | redhat_vex | chromium-browser: Use after free in PDFium | fixed: 12 | 2026-06-28T07:29:34+00:00 | Vulnerability · Source |
| CVE-2026-32945 | redhat_vex | PJSIP: pjproject: PJSUA: PJSUA2: PJSIP: Heap-based buffer overflow in DNS parser may lead to arbitrary code execution or denial of service. | known not affected: 1 | 2026-06-28T07:29:34+00:00 | Vulnerability · Source |
| CVE-2019-5737 | redhat_vex | nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass | fixed: 233 known affected: 16 known not affected: 2 | 2026-06-28T07:29:34+00:00 | Vulnerability · Source |
| CVE-2019-5755 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | fixed: 12 | 2026-06-28T07:29:34+00:00 | Vulnerability · Source |
| CVE-2026-32948 | redhat_vex | org.scala-sbt/sbt: sbt: Arbitrary command execution via unvalidated URI fragments on Windows | known not affected: 3 | 2026-06-28T07:29:33+00:00 | Vulnerability · Source |
| CVE-2023-22084 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Oct 2023) | fixed: 479 known affected: 22 known not affected: 37 | 2026-06-28T07:29:33+00:00 | Vulnerability · Source |
| CVE-2023-22070 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023) | fixed: 206 known not affected: 93 | 2026-06-28T07:29:33+00:00 | Vulnerability · Source |
| CVE-2019-5419 | redhat_vex | rubygem-actionpack: denial of service vulnerability in Action View | fixed: 75 | 2026-06-28T07:29:32+00:00 | Vulnerability · Source |
| CVE-2026-32947 | redhat_vex | harden-runner: Harden-Runner: Data exfiltration via DNS over HTTPS (DoH) bypass | known affected: 12 | 2026-06-28T07:29:32+00:00 | Vulnerability · Source |
| CVE-2026-32854 | redhat_vex | LibVNCServer: LibVNCServer: Denial of Service via specially crafted HTTP requests | known affected: 8 known not affected: 3 | 2026-06-28T07:29:30+00:00 | Vulnerability · Source |
| CVE-2019-3880 | redhat_vex | samba: save registry file outside share as unprivileged user | fixed: 713 known affected: 30 known not affected: 2 | 2026-06-28T07:29:30+00:00 | Vulnerability · Source |
| CVE-2019-3900 | redhat_vex | Kernel: vhost_net: infinite loop while receiving packets leads to DoS | fixed: 922 known not affected: 13 | 2026-06-28T07:29:29+00:00 | Vulnerability · Source |
| CVE-2026-32853 | redhat_vex | LibVNCServer: LibVNCServer: Information disclosure or Denial of Service via heap out-of-bounds read in UltraZip encoding | known affected: 8 known not affected: 3 | 2026-06-28T07:29:29+00:00 | Vulnerability · Source |
| CVE-2019-3901 | redhat_vex | kernel: perf_event_open() and execve() race in setuid programs allows a data leak | fixed: 438 known affected: 26 known not affected: 71 | 2026-06-28T07:29:29+00:00 | Vulnerability · Source |
| CVE-2023-22032 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023) | fixed: 206 known not affected: 93 | 2026-06-28T07:29:28+00:00 | Vulnerability · Source |
| CVE-2019-3886 | redhat_vex | libvirt: virsh domhostname command discloses guest hostname in readonly mode | fixed: 861 known affected: 31 known not affected: 73 | 2026-06-28T07:29:28+00:00 | Vulnerability · Source |
| CVE-2026-3284 | redhat_vex | libvips: vips: libvips: Integer overflow leads to denial of service | known not affected: 1 | 2026-06-28T07:29:27+00:00 | Vulnerability · Source |
| CVE-2019-3884 | redhat_vex | atomic-openshift: cross-namespace owner references can trigger deletions of valid children | fixed: 6 known affected: 76 known not affected: 776 | 2026-06-28T07:29:27+00:00 | Vulnerability · Source |
| CVE-2026-32836 | redhat_vex | dr_libs: mackron / dr_libs Excessive Memory Allocation in PICTURE Metadata Parsing | known not affected: 1 | 2026-06-28T07:29:27+00:00 | Vulnerability · Source |
| CVE-2026-3283 | redhat_vex | libvips: vips: libvips: Information disclosure due to out-of-bounds read | known not affected: 1 | 2026-06-28T07:29:26+00:00 | Vulnerability · Source |
| CVE-2019-3878 | redhat_vex | mod_auth_mellon: authentication bypass in ECP flow | fixed: 266 known not affected: 2 | 2026-06-28T07:29:26+00:00 | Vulnerability · Source |
| CVE-2019-3872 | redhat_vex | picketlink: reflected XSS in SAMLRequest via RelayState parameter | fixed: 394 | 2026-06-28T07:29:25+00:00 | Vulnerability · Source |
| CVE-2019-3873 | redhat_vex | picketlink: URL injection via xinclude parameter | fixed: 394 | 2026-06-28T07:29:25+00:00 | Vulnerability · Source |
| CVE-2026-32814 | redhat_vex | libheif: libheif: Information Disclosure via Crafted HEIF/AVIF Files | known not affected: 1 | 2026-06-28T07:29:25+00:00 | Vulnerability · Source |
| CVE-2023-21946 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) | fixed: 206 known not affected: 123 | 2026-06-28T07:29:25+00:00 | Vulnerability · Source |
| CVE-2019-3867 | redhat_vex | quay: insufficient session expiration | known affected: 2 | 2026-06-28T07:29:25+00:00 | Vulnerability · Source |
| CVE-2019-3864 | redhat_vex | quay: CSRF token does not expire and is leaked in query string | known affected: 1 known not affected: 1 | 2026-06-28T07:29:24+00:00 | Vulnerability · Source |
| CVE-2019-3857 | redhat_vex | libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write | fixed: 885 known affected: 8 | 2026-06-28T07:29:23+00:00 | Vulnerability · Source |
| CVE-2026-3281 | redhat_vex | libvips: vips: libvips: Memory corruption vulnerability via argument index manipulation in vips_bandrank_build | known not affected: 1 | 2026-06-28T07:29:23+00:00 | Vulnerability · Source |
| CVE-2019-3855 | redhat_vex | libssh2: Integer overflow in transport read resulting in out of bounds write | fixed: 885 known affected: 8 | 2026-06-28T07:29:22+00:00 | Vulnerability · Source |
| CVE-2019-3856 | redhat_vex | libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write | fixed: 885 known affected: 8 | 2026-06-28T07:29:22+00:00 | Vulnerability · Source |
| CVE-2026-32766 | redhat_vex | astral-tokio-tar: astral-tokio-tar: Potential archive misinterpretation via malformed PAX extensions | known affected: 10 | 2026-06-28T07:29:21+00:00 | Vulnerability · Source |
| CVE-2026-32714 | redhat_vex | scitokens: SciTokens: Arbitrary SQL command execution via SQL Injection in KeyCache class | known not affected: 1 | 2026-06-28T07:29:20+00:00 | Vulnerability · Source |
| CVE-2026-32739 | redhat_vex | libheif: libheif: Denial of Service via crafted HEIF sequence file | known not affected: 1 | 2026-06-28T07:29:20+00:00 | Vulnerability · Source |
| CVE-2026-32588 | redhat_vex | Apache Cassandra: Apache Cassandra: Denial of Service via repeated password changes | known affected: 5 | 2026-06-28T07:29:19+00:00 | Vulnerability · Source |
| CVE-2026-32635 | redhat_vex | @angular/core: @angular/compiler: Angular has XSS in i18n attribute bindings | known affected: 25 known not affected: 3 | 2026-06-28T07:29:19+00:00 | Vulnerability · Source |
| CVE-2026-32634 | redhat_vex | glances: Central Browser autodiscovery leaks reusable credentials to Zeroconf-spoofed servers | known not affected: 1 | 2026-06-28T07:29:19+00:00 | Vulnerability · Source |
| CVE-2026-32609 | redhat_vex | nicolargo.github.io/glances: Glances has Incomplete Secrets Redaction: /api/v4/args Endpoint Leaks Password Hash and SNMP Credentials | known not affected: 1 | 2026-06-28T07:29:18+00:00 | Vulnerability · Source |
| CVE-2026-32633 | redhat_vex | glances: browser API exposes reusable downstream credentials via '/api/4/serverslist' | known not affected: 1 | 2026-06-28T07:29:18+00:00 | Vulnerability · Source |
| CVE-2026-32610 | redhat_vex | glances: default CORS configuration allows Cross-Origin credential theft | known not affected: 1 | 2026-06-28T07:29:18+00:00 | Vulnerability · Source |
| CVE-2026-32623 | redhat_vex | xrdp: xrdp NeutrinoRDP: Remote Code Execution or Denial of Service via heap-based buffer overflow in fragmented RDP data handling | known not affected: 1 | 2026-06-28T07:29:18+00:00 | Vulnerability · Source |
| CVE-2019-3819 | redhat_vex | kernel: infinite loop in drivers/hid/hid-debug.c:hid_debug_events_read() | known not affected: 104 | 2026-06-28T07:29:17+00:00 | Vulnerability · Source |
| CVE-2026-32595 | redhat_vex | traefik: Traefik: Username enumeration via timing attack in BasicAuth middleware | known affected: 1 | 2026-06-28T07:29:17+00:00 | Vulnerability · Source |
| CVE-2019-3003 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Oct 2019) | fixed: 291 known not affected: 109 | 2026-06-28T07:29:16+00:00 | Vulnerability · Source |