VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297766 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-3498 | redhat_vex | JDK: unspecified vulnerability fixed in 7u111 and 8u101 (JavaFX) | fixed: 160 | 2026-06-28T07:21:24+00:00 | Vulnerability · Source |
| CVE-2016-3501 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016) | fixed: 80 known not affected: 62 | 2026-06-28T07:21:24+00:00 | Vulnerability · Source |
| CVE-2016-3492 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016) | fixed: 479 known affected: 18 known not affected: 8 under investigation: 9 | 2026-06-28T07:21:24+00:00 | Vulnerability · Source |
| CVE-2016-3452 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016) | fixed: 406 known affected: 9 known not affected: 11 under investigation: 9 | 2026-06-28T07:21:23+00:00 | Vulnerability · Source |
| CVE-2016-3427 | redhat_vex | OpenJDK: unrestricted deserialization of authentication credentials (JMX, 8144430) | fixed: 1119 | 2026-06-28T07:21:22+00:00 | Vulnerability · Source |
| CVE-2016-3471 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016) | fixed: 406 known affected: 9 known not affected: 11 under investigation: 9 | 2026-06-28T07:21:22+00:00 | Vulnerability · Source |
| CVE-2016-3426 | redhat_vex | OpenJDK: non-constant time GCM authentication tag comparison (JCE, 8143945) | fixed: 658 known not affected: 28 | 2026-06-28T07:21:22+00:00 | Vulnerability · Source |
| CVE-2026-23907 | redhat_vex | org.apache.pdfbox:pdfbox-examples: Apache PDFBox Example: Path Traversal via specially crafted filenames allows arbitrary file write | known affected: 17 | 2026-06-28T07:21:21+00:00 | Vulnerability · Source |
| CVE-2026-23890 | redhat_vex | pnpm: pnpm: Arbitrary code execution via path traversal in bin linking | known affected: 2 | 2026-06-28T07:21:21+00:00 | Vulnerability · Source |
| CVE-2016-3157 | redhat_vex | kernel: xen: Privilege escalation on 64-bit Xen PV domains with IO port access privileges (XSA-171) | known affected: 32 known not affected: 56 | 2026-06-28T07:21:21+00:00 | Vulnerability · Source |
| CVE-2016-2857 | redhat_vex | Qemu: net: out of bounds read in net_checksum_calculate() | fixed: 122 known affected: 2 known not affected: 6 | 2026-06-28T07:21:17+00:00 | Vulnerability · Source |
| CVE-2018-18337 | redhat_vex | chromium-browser: Use after free in Blink | fixed: 12 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2026-23737 | redhat_vex | seroval: seroval: Arbitrary Code Execution via Improper JSON Deserialization | known not affected: 1 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2016-2847 | redhat_vex | kernel: pipe: limit the per-user amount of pages allocated in pipes | fixed: 302 known affected: 27 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2026-23738 | redhat_vex | asterisk: embedded /httpstatus page echos user supplied values without sanitization | known not affected: 1 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2026-23740 | redhat_vex | Asterisk: Asterisk: Arbitrary code execution and file overwrite as root via insecure ast_coredumper file handling | known not affected: 1 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2016-2853 | redhat_vex | kernel: aufs module does not properly restrict the mount namespace | known not affected: 93 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2026-2369 | redhat_vex | libsoup: libsoup: Buffer overread due to integer underflow when handling zero-length resources | known affected: 4 known not affected: 12 | 2026-06-28T07:21:15+00:00 | Vulnerability · Source |
| CVE-2026-23558 | redhat_vex | xen: Xen: Privilege escalation or denial of service due to race condition in grant table version change | known not affected: 1 | 2026-06-28T07:21:15+00:00 | Vulnerability · Source |
| CVE-2026-2361 | redhat_vex | PostgreSQL Anonymizer: Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user with create privilege to gain superuser privileges | known not affected: 1 | 2026-06-28T07:21:15+00:00 | Vulnerability · Source |
| CVE-2026-23554 | redhat_vex | xen: Xen: Information disclosure and potential privilege escalation via use-after-free in EPT paging | known not affected: 1 | 2026-06-28T07:21:15+00:00 | Vulnerability · Source |
| CVE-2026-23555 | redhat_vex | Xen: Xenstored: Denial of Service via illegal Xenstore node path | known not affected: 1 | 2026-06-28T07:21:15+00:00 | Vulnerability · Source |
| CVE-2018-17475 | redhat_vex | chromium-browser: URL spoof in Omnibox | fixed: 12 | 2026-06-28T07:21:12+00:00 | Vulnerability · Source |
| CVE-2026-23527 | redhat_vex | h3: h3: HTTP Request Smuggling due to improper case-sensitive parsing of Transfer-Encoding header | known not affected: 1 | 2026-06-28T07:21:12+00:00 | Vulnerability · Source |
| CVE-2026-23472 | redhat_vex | kernel: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN | known affected: 260 known not affected: 14 | 2026-06-28T07:21:10+00:00 | Vulnerability · Source |
| CVE-2026-23473 | redhat_vex | kernel: io_uring/poll: fix multishot recv missing EOF on wakeup race | known affected: 184 known not affected: 90 | 2026-06-28T07:21:10+00:00 | Vulnerability · Source |
| CVE-2026-23475 | redhat_vex | kernel: spi: fix statistics allocation | known affected: 184 known not affected: 90 | 2026-06-28T07:21:10+00:00 | Vulnerability · Source |
| CVE-2026-23474 | redhat_vex | kernel: mtd: Avoid boot crash in RedBoot partition table parser | known not affected: 274 | 2026-06-28T07:21:10+00:00 | Vulnerability · Source |
| CVE-2026-23470 | redhat_vex | kernel: drm/imagination: Fix deadlock in soft reset sequence | known not affected: 274 | 2026-06-28T07:21:09+00:00 | Vulnerability · Source |
| CVE-2026-23469 | redhat_vex | kernel: drm/imagination: Synchronize interrupts before suspending the GPU | known not affected: 274 | 2026-06-28T07:21:08+00:00 | Vulnerability · Source |
| CVE-2026-23465 | redhat_vex | kernel: btrfs: log new dentries when logging parent dir of a conflicting inode | known affected: 90 known not affected: 184 | 2026-06-28T07:21:08+00:00 | Vulnerability · Source |
| CVE-2026-23454 | redhat_vex | kernel: net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown | known affected: 232 known not affected: 42 | 2026-06-28T07:21:06+00:00 | Vulnerability · Source |
| CVE-2026-23453 | redhat_vex | kernel: net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode | known not affected: 274 | 2026-06-28T07:21:05+00:00 | Vulnerability · Source |
| CVE-2026-23452 | redhat_vex | kernel: PM: runtime: Fix a race condition related to device removal | known affected: 274 | 2026-06-28T07:21:05+00:00 | Vulnerability · Source |
| CVE-2026-23438 | redhat_vex | kernel: net: mvpp2: guard flow control update with global_tx_fc in buffer switching | known not affected: 274 | 2026-06-28T07:21:04+00:00 | Vulnerability · Source |
| CVE-2026-23448 | redhat_vex | kernel: net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check | known affected: 274 | 2026-06-28T07:21:04+00:00 | Vulnerability · Source |
| CVE-2026-23447 | redhat_vex | kernel: net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check | known affected: 246 known not affected: 28 | 2026-06-28T07:21:03+00:00 | Vulnerability · Source |
| CVE-2026-23446 | redhat_vex | kernel: net: usb: aqc111: Do not perform PM inside suspend callback | known not affected: 274 | 2026-06-28T07:21:02+00:00 | Vulnerability · Source |
| CVE-2026-23439 | redhat_vex | kernel: udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n | known affected: 260 known not affected: 14 | 2026-06-28T07:21:01+00:00 | Vulnerability · Source |
| CVE-2026-23435 | redhat_vex | kernel: perf/x86: Move event pointer setup earlier in x86_pmu_enable() | known not affected: 274 | 2026-06-28T07:20:59+00:00 | Vulnerability · Source |
| CVE-2026-23432 | redhat_vex | kernel: mshv: Fix use-after-free in mshv_map_user_memory error path | known not affected: 274 | 2026-06-28T07:20:58+00:00 | Vulnerability · Source |
| CVE-2026-23433 | redhat_vex | kernel: arm_mpam: Fix null pointer dereference when restoring bandwidth counters | known not affected: 274 | 2026-06-28T07:20:58+00:00 | Vulnerability · Source |
| CVE-2026-23431 | redhat_vex | kernel: spi: amlogic-spisg: Fix memory leak in aml_spisg_probe() | known not affected: 274 | 2026-06-28T07:20:57+00:00 | Vulnerability · Source |
| CVE-2026-23426 | redhat_vex | kernel: drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() | known not affected: 274 | 2026-06-28T07:20:56+00:00 | Vulnerability · Source |
| CVE-2026-23429 | redhat_vex | kernel: iommu/sva: Fix crash in iommu_sva_unbind_device() | known not affected: 274 | 2026-06-28T07:20:56+00:00 | Vulnerability · Source |
| CVE-2016-2182 | redhat_vex | openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() | fixed: 320 known affected: 10 | 2026-06-28T07:20:56+00:00 | Vulnerability · Source |
| CVE-2026-23428 | redhat_vex | kernel: ksmbd: fix use-after-free of share_conf in compound request | known not affected: 274 | 2026-06-28T07:20:56+00:00 | Vulnerability · Source |
| CVE-2026-23427 | redhat_vex | kernel: ksmbd: fix use-after-free in durable v2 replay of active file handles | known not affected: 274 | 2026-06-28T07:20:56+00:00 | Vulnerability · Source |
| CVE-2026-23424 | redhat_vex | kernel: accel/amdxdna: Validate command buffer payload count | known not affected: 274 | 2026-06-28T07:20:55+00:00 | Vulnerability · Source |
| CVE-2026-23425 | redhat_vex | kernel: KVM: arm64: Fix ID register initialization for non-protected pKVM guests | known not affected: 274 | 2026-06-28T07:20:55+00:00 | Vulnerability · Source |