VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-31424 | redhat_vex | kernel: netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP | known affected: 274 | 2026-06-28T07:25:15+00:00 | Vulnerability · Source |
| CVE-2026-31423 | redhat_vex | kernel: net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() | known affected: 274 | 2026-06-28T07:25:15+00:00 | Vulnerability · Source |
| CVE-2026-31413 | redhat_vex | kernel: bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR | known not affected: 274 | 2026-06-28T07:25:13+00:00 | Vulnerability · Source |
| CVE-2026-31415 | redhat_vex | kernel: ipv6: avoid overflows in ip6_datagram_send_ctl() | known affected: 274 | 2026-06-28T07:25:13+00:00 | Vulnerability · Source |
| CVE-2026-31418 | redhat_vex | kernel: netfilter: ipset: drop logically empty buckets in mtype_del | known not affected: 274 | 2026-06-28T07:25:13+00:00 | Vulnerability · Source |
| CVE-2019-14287 | redhat_vex | sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword | fixed: 284 | 2026-06-28T07:25:12+00:00 | Vulnerability · Source |
| CVE-2026-31405 | redhat_vex | kernel: media: dvb-net: fix OOB access in ULE extension header tables | known not affected: 274 | 2026-06-28T07:25:10+00:00 | Vulnerability · Source |
| CVE-2026-31410 | redhat_vex | kernel: ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION | known not affected: 274 | 2026-06-28T07:25:10+00:00 | Vulnerability · Source |
| CVE-2019-13767 | redhat_vex | chromium-browser: Use after free in media picker | fixed: 14 | 2026-06-28T07:25:07+00:00 | Vulnerability · Source |
| CVE-2019-13762 | redhat_vex | chromium-browser: Insufficient policy enforcement in downloads | fixed: 14 | 2026-06-28T07:25:07+00:00 | Vulnerability · Source |
| CVE-2019-13750 | redhat_vex | sqlite: dropping of shadow tables not restricted in defensive mode | fixed: 89 known not affected: 13 | 2026-06-28T07:25:06+00:00 | Vulnerability · Source |
| CVE-2026-31400 | redhat_vex | kernel: sunrpc: fix cache_request leak in cache_release | known affected: 274 | 2026-06-28T07:25:01+00:00 | Vulnerability · Source |
| CVE-2019-13728 | redhat_vex | chromium-browser: Out of bounds write in V8 | fixed: 14 | 2026-06-28T07:25:01+00:00 | Vulnerability · Source |
| CVE-2026-31399 | redhat_vex | kernel: nvdimm/bus: Fix potential use after free in asynchronous initialization | known affected: 260 known not affected: 14 | 2026-06-28T07:25:01+00:00 | Vulnerability · Source |
| CVE-2019-13720 | redhat_vex | chromium-browser: use-after-free in audio | fixed: 14 | 2026-06-28T07:25:00+00:00 | Vulnerability · Source |
| CVE-2019-13719 | redhat_vex | chromium-browser: Notification obscured | fixed: 14 | 2026-06-28T07:25:00+00:00 | Vulnerability · Source |
| CVE-2026-31397 | redhat_vex | kernel: mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd() | known not affected: 274 | 2026-06-28T07:24:55+00:00 | Vulnerability · Source |
| CVE-2019-13661 | redhat_vex | chromium-browser: Full screen notification spoof | fixed: 14 | 2026-06-28T07:24:50+00:00 | Vulnerability · Source |
| CVE-2026-31395 | redhat_vex | kernel: bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler | known affected: 184 known not affected: 90 | 2026-06-28T07:24:50+00:00 | Vulnerability · Source |
| CVE-2026-31396 | redhat_vex | kernel: net: macb: fix use-after-free access to PTP clock | known not affected: 274 | 2026-06-28T07:24:49+00:00 | Vulnerability · Source |
| CVE-2019-13660 | redhat_vex | chromium-browser: Full screen notification overlap | fixed: 14 | 2026-06-28T07:24:49+00:00 | Vulnerability · Source |
| CVE-2019-13272 | redhat_vex | kernel: broken permission and object lifetime handling for PTRACE_TRACEME | fixed: 180 known not affected: 57 | 2026-06-28T07:24:46+00:00 | Vulnerability · Source |
| CVE-2026-31394 | redhat_vex | kernel: mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations | known affected: 274 | 2026-06-28T07:24:46+00:00 | Vulnerability · Source |
| CVE-2026-31390 | redhat_vex | kernel: drm/xe: Fix memory leak in xe_vm_madvise_ioctl | known affected: 184 known not affected: 90 | 2026-06-28T07:24:45+00:00 | Vulnerability · Source |
| CVE-2026-3112 | redhat_vex | Mattermost: Mattermost: Information Disclosure via Advanced Logging file target path validation bypass | known not affected: 1 | 2026-06-28T07:24:44+00:00 | Vulnerability · Source |
| CVE-2026-3118 | redhat_vex | rhdh: GraphQL Injection Leading to Platform-Wide Denial of Service (DoS) in RH Developer Hub Orchestrator Plugin | fixed: 2 known not affected: 4 | 2026-06-28T07:24:43+00:00 | Vulnerability · Source |
| CVE-2026-3108 | redhat_vex | Mattermost: mmctl: Mattermost mmctl: Administrator terminal manipulation via crafted messages | known not affected: 1 | 2026-06-28T07:24:43+00:00 | Vulnerability · Source |
| CVE-2023-1018 | redhat_vex | tpm2: TCG TPM2.0 implementations vulnerable to memory corruption | fixed: 1889 known affected: 9 | 2026-06-28T07:24:43+00:00 | Vulnerability · Source |
| CVE-2026-3115 | redhat_vex | mattermost: Mattermost: Information disclosure via group retrieval endpoint | known not affected: 1 | 2026-06-28T07:24:43+00:00 | Vulnerability · Source |
| CVE-2026-30997 | redhat_vex | FFmpeg: FFmpeg: Denial of Service via out-of-bounds read | known affected: 9 | 2026-06-28T07:24:41+00:00 | Vulnerability · Source |
| CVE-2026-30964 | redhat_vex | web-auth/webauthn-lib: web-auth/webauthn-lib: Origin validation bypass due to host component reduction | known not affected: 1 | 2026-06-28T07:24:41+00:00 | Vulnerability · Source |
| CVE-2026-30942 | redhat_vex | flare: Flare: Information disclosure via authenticated path traversal | known not affected: 1 | 2026-06-28T07:24:41+00:00 | Vulnerability · Source |
| CVE-2019-2989 | redhat_vex | OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) | fixed: 901 | 2026-06-28T07:24:41+00:00 | Vulnerability · Source |
| CVE-2026-30851 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddyhttp/reverseproxy: Caddy: Privilege escalation via identity injection due to unstripped client headers | known not affected: 1 | 2026-06-28T07:24:40+00:00 | Vulnerability · Source |
| CVE-2026-30930 | redhat_vex | glances: SQL injection via process names in TimescaleDB export | known not affected: 1 | 2026-06-28T07:24:40+00:00 | Vulnerability · Source |
| CVE-2019-1301 | redhat_vex | dotnet: System.Net.Sockets.dll Socket.ConnectAsync Denial of Service | fixed: 76 | 2026-06-28T07:24:38+00:00 | Vulnerability · Source |
| CVE-2019-12984 | redhat_vex | kernel: null pointer dereference in function nfc_genl_deactivate_target() in net/nfc/netlink.c | known not affected: 104 | 2026-06-28T07:24:38+00:00 | Vulnerability · Source |
| CVE-2019-2784 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Jul 2019) | fixed: 291 known not affected: 112 | 2026-06-28T07:24:38+00:00 | Vulnerability · Source |
| CVE-2026-30853 | redhat_vex | calibre: Calibre: Arbitrary file write via crafted RocketBook (.rb) file | known not affected: 1 | 2026-06-28T07:24:37+00:00 | Vulnerability · Source |
| CVE-2019-2780 | redhat_vex | mysql: Server: Components / Services unspecified vulnerability (CPU Jul 2019) | fixed: 291 known not affected: 112 | 2026-06-28T07:24:37+00:00 | Vulnerability · Source |
| CVE-2026-30852 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddyhttp: Caddy: Information disclosure via double-expansion of user-controlled input | known not affected: 1 | 2026-06-28T07:24:37+00:00 | Vulnerability · Source |
| CVE-2026-30827 | redhat_vex | express-rate-limit: express-rate-limit: Denial of Service for IPv4 clients due to incorrect IPv6 subnet masking | fixed: 8 known affected: 2 known not affected: 163 | 2026-06-28T07:24:35+00:00 | Vulnerability · Source |
| CVE-2026-30836 | redhat_vex | github.com/smallstep/certificates: Step CA: Unauthenticated certificate issuance via SCEP Update Request | known not affected: 1 | 2026-06-28T07:24:35+00:00 | Vulnerability · Source |
| CVE-2026-30230 | redhat_vex | flare: Flare: Unauthorized information disclosure due to improper access control in the thumbnail endpoint. | known not affected: 1 | 2026-06-28T07:24:35+00:00 | Vulnerability · Source |
| CVE-2026-3063 | redhat_vex | chromium-browser: Inappropriate implementation in DevTools | known not affected: 1 | 2026-06-28T07:24:34+00:00 | Vulnerability · Source |
| CVE-2026-30656 | redhat_vex | fio: fio: Denial of Service via NULL pointer dereference when parsing job files | known not affected: 19 | 2026-06-28T07:24:34+00:00 | Vulnerability · Source |
| CVE-2026-30587 | redhat_vex | Seafile Server: Seadoc editor: seahub: seadoc-editor: Seafile Server: Arbitrary client-side code execution via Stored Cross-Site Scripting in Seadoc editor | known not affected: 1 | 2026-06-28T07:24:32+00:00 | Vulnerability · Source |
| CVE-2019-2587 | redhat_vex | mysql: Server: Partition unspecified vulnerability (CPU Apr 2019) | fixed: 291 known not affected: 123 | 2026-06-28T07:24:31+00:00 | Vulnerability · Source |
| CVE-2026-30231 | redhat_vex | flare: Flare: Information disclosure via inconsistent access checks for private files | known not affected: 1 | 2026-06-28T07:24:31+00:00 | Vulnerability · Source |
| CVE-2019-12455 | redhat_vex | kernel: null pointer dereference in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c causing denial of service | known not affected: 104 | 2026-06-28T07:24:29+00:00 | Vulnerability · Source |