VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-4166 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T07:21:38+00:00 | Vulnerability · Source |
| CVE-2016-4172 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T07:21:38+00:00 | Vulnerability · Source |
| CVE-2016-4177 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T07:21:38+00:00 | Vulnerability · Source |
| CVE-2016-4114 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T07:21:38+00:00 | Vulnerability · Source |
| CVE-2026-24006 | redhat_vex | seroval: Seroval: Denial of Service due to excessive recursion during object serialization | known not affected: 1 | 2026-06-28T07:21:38+00:00 | Vulnerability · Source |
| CVE-2016-4155 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T07:21:37+00:00 | Vulnerability · Source |
| CVE-2016-4163 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T07:21:37+00:00 | Vulnerability · Source |
| CVE-2016-4153 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T07:21:37+00:00 | Vulnerability · Source |
| CVE-2016-4156 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T07:21:37+00:00 | Vulnerability · Source |
| CVE-2016-4154 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T07:21:37+00:00 | Vulnerability · Source |
| CVE-2016-4162 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T07:21:37+00:00 | Vulnerability · Source |
| CVE-2016-4129 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T07:21:36+00:00 | Vulnerability · Source |
| CVE-2016-4145 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T07:21:36+00:00 | Vulnerability · Source |
| CVE-2016-4130 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T07:21:36+00:00 | Vulnerability · Source |
| CVE-2016-4138 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T07:21:36+00:00 | Vulnerability · Source |
| CVE-2016-4128 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T07:21:35+00:00 | Vulnerability · Source |
| CVE-2016-4124 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T07:21:35+00:00 | Vulnerability · Source |
| CVE-2016-4127 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T07:21:35+00:00 | Vulnerability · Source |
| CVE-2016-4125 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T07:21:35+00:00 | Vulnerability · Source |
| CVE-2026-24027 | redhat_vex | PowerDNS Recursor: crafted zones can lead to increased incoming network traffic | known not affected: 1 | 2026-06-28T07:21:34+00:00 | Vulnerability · Source |
| CVE-2016-4117 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T07:21:34+00:00 | Vulnerability · Source |
| CVE-2016-4116 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T07:21:34+00:00 | Vulnerability · Source |
| CVE-2026-24029 | redhat_vex | dnsdist: dnsdist: Access Control List bypass allows unauthorized DNS over HTTPS queries | known not affected: 1 | 2026-06-28T07:21:33+00:00 | Vulnerability · Source |
| CVE-2026-24030 | redhat_vex | DNSdist: DNSdist: Denial of Service via excessive memory allocation from DNS over QUIC or HTTP/3 payloads | known not affected: 1 | 2026-06-28T07:21:33+00:00 | Vulnerability · Source |
| CVE-2016-4112 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T07:21:33+00:00 | Vulnerability · Source |
| CVE-2016-4072 | redhat_vex | php: Invalid memory write in phar on filename containing \0 inside name | fixed: 251 known affected: 109 known not affected: 1 | 2026-06-28T07:21:33+00:00 | Vulnerability · Source |
| CVE-2016-3728 | redhat_vex | foreman: Missing input validation in Smart Proxy allows RCE via TFTP file variant parameter | fixed: 639 under investigation: 3 | 2026-06-28T07:21:32+00:00 | Vulnerability · Source |
| CVE-2026-23957 | redhat_vex | seroval: Seroval: Denial of Service via large encoded array lengths | known not affected: 1 | 2026-06-28T07:21:32+00:00 | Vulnerability · Source |
| CVE-2026-23956 | redhat_vex | seroval: Seroval: Denial of Service via malicious regular expressions during deserialization | known not affected: 1 | 2026-06-28T07:21:32+00:00 | Vulnerability · Source |
| CVE-2026-23926 | redhat_vex | zabbix: Zabbix: Cross-Site Scripting via malicious script in maintenance period tooltip | known not affected: 1 | 2026-06-28T07:21:32+00:00 | Vulnerability · Source |
| CVE-2026-23954 | redhat_vex | incus: container image templating arbitrary host file read and write | known not affected: 1 | 2026-06-28T07:21:32+00:00 | Vulnerability · Source |
| CVE-2026-23992 | redhat_vex | github.com/theupdateframework/go-tuf/v2: go-tuf improperly validates the configured threshold for delegations | known affected: 35 | 2026-06-28T07:21:32+00:00 | Vulnerability · Source |
| CVE-2016-3705 | redhat_vex | libxml2: stack overflow before detecting invalid XML file | fixed: 145 known affected: 3 | 2026-06-28T07:21:31+00:00 | Vulnerability · Source |
| CVE-2026-23953 | redhat_vex | incus: container environment configuration newline injection | known not affected: 1 | 2026-06-28T07:21:31+00:00 | Vulnerability · Source |
| CVE-2026-23925 | redhat_vex | zabbix: Zabbix: Confidentiality loss via improper access control in configuration.import API | known not affected: 1 | 2026-06-28T07:21:30+00:00 | Vulnerability · Source |
| CVE-2016-3610 | redhat_vex | OpenJDK: insufficient value count check in MethodHandles.filterReturnValue() (Libraries, 8158571) | fixed: 392 known not affected: 13 | 2026-06-28T07:21:30+00:00 | Vulnerability · Source |
| CVE-2016-3679 | redhat_vex | chromium-browser: multiple unspecified vulnerabilities | fixed: 12 | 2026-06-28T07:21:30+00:00 | Vulnerability · Source |
| CVE-2016-3699 | redhat_vex | kernel: ACPI table override allowed when securelevel is enabled | fixed: 191 known affected: 12 known not affected: 15 | 2026-06-28T07:21:29+00:00 | Vulnerability · Source |
| CVE-2016-3672 | redhat_vex | kernel: unlimiting the stack disables ASLR | fixed: 191 known affected: 27 | 2026-06-28T07:21:29+00:00 | Vulnerability · Source |
| CVE-2026-23949 | redhat_vex | jaraco.context: jaraco.context: Path traversal via malicious tar archives | known not affected: 1 | 2026-06-28T07:21:29+00:00 | Vulnerability · Source |
| CVE-2016-3503 | redhat_vex | JDK: unspecified vulnerability fixed in 6u121, 7u111, and 8u101 (Install) | fixed: 260 | 2026-06-28T07:21:29+00:00 | Vulnerability · Source |
| CVE-2026-23921 | redhat_vex | Zabbix: Zabbix: Arbitrary database data exfiltration and administrator account compromise via blind SQL injection in API | known not affected: 1 | 2026-06-28T07:21:28+00:00 | Vulnerability · Source |
| CVE-2016-3615 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: DML (CPU July 2016) | fixed: 502 known affected: 9 under investigation: 9 | 2026-06-28T07:21:27+00:00 | Vulnerability · Source |
| CVE-2016-3614 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016) | fixed: 80 known not affected: 62 | 2026-06-28T07:21:27+00:00 | Vulnerability · Source |
| CVE-2026-23918 | redhat_vex | Apache HTTP Server: Apache HTTP Server: Remote Code Execution via Double Free in HTTP/2 Protocol | fixed: 4 known not affected: 58 | 2026-06-28T07:21:26+00:00 | Vulnerability · Source |
| CVE-2026-23919 | redhat_vex | Zabbix Server: Zabbix Proxy: Duktape: Zabbix Server and Proxy: Information disclosure via reused JavaScript contexts | known not affected: 1 | 2026-06-28T07:21:26+00:00 | Vulnerability · Source |
| CVE-2016-3598 | redhat_vex | OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985) | fixed: 647 known not affected: 13 | 2026-06-28T07:21:26+00:00 | Vulnerability · Source |
| CVE-2016-3606 | redhat_vex | OpenJDK: insufficient bytecode verification (Hotspot, 8155981) | fixed: 613 | 2026-06-28T07:21:26+00:00 | Vulnerability · Source |
| CVE-2016-3508 | redhat_vex | OpenJDK: missing entity replacement limits (JAXP, 8149962) | fixed: 713 | 2026-06-28T07:21:25+00:00 | Vulnerability · Source |
| CVE-2016-3498 | redhat_vex | JDK: unspecified vulnerability fixed in 7u111 and 8u101 (JavaFX) | fixed: 160 | 2026-06-28T07:21:24+00:00 | Vulnerability · Source |