VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298211 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-23956 | redhat_vex | seroval: Seroval: Denial of Service via malicious regular expressions during deserialization | known not affected: 1 | 2026-06-28T07:21:32+00:00 | Vulnerability · Source |
| CVE-2026-23926 | redhat_vex | zabbix: Zabbix: Cross-Site Scripting via malicious script in maintenance period tooltip | known not affected: 1 | 2026-06-28T07:21:32+00:00 | Vulnerability · Source |
| CVE-2026-23954 | redhat_vex | incus: container image templating arbitrary host file read and write | known not affected: 1 | 2026-06-28T07:21:32+00:00 | Vulnerability · Source |
| CVE-2026-23992 | redhat_vex | github.com/theupdateframework/go-tuf/v2: go-tuf improperly validates the configured threshold for delegations | known affected: 35 | 2026-06-28T07:21:32+00:00 | Vulnerability · Source |
| CVE-2016-3705 | redhat_vex | libxml2: stack overflow before detecting invalid XML file | fixed: 145 known affected: 3 | 2026-06-28T07:21:31+00:00 | Vulnerability · Source |
| CVE-2026-23953 | redhat_vex | incus: container environment configuration newline injection | known not affected: 1 | 2026-06-28T07:21:31+00:00 | Vulnerability · Source |
| CVE-2026-23925 | redhat_vex | zabbix: Zabbix: Confidentiality loss via improper access control in configuration.import API | known not affected: 1 | 2026-06-28T07:21:30+00:00 | Vulnerability · Source |
| CVE-2016-3610 | redhat_vex | OpenJDK: insufficient value count check in MethodHandles.filterReturnValue() (Libraries, 8158571) | fixed: 392 known not affected: 13 | 2026-06-28T07:21:30+00:00 | Vulnerability · Source |
| CVE-2016-3679 | redhat_vex | chromium-browser: multiple unspecified vulnerabilities | fixed: 12 | 2026-06-28T07:21:30+00:00 | Vulnerability · Source |
| CVE-2016-3699 | redhat_vex | kernel: ACPI table override allowed when securelevel is enabled | fixed: 191 known affected: 12 known not affected: 15 | 2026-06-28T07:21:29+00:00 | Vulnerability · Source |
| CVE-2016-3672 | redhat_vex | kernel: unlimiting the stack disables ASLR | fixed: 191 known affected: 27 | 2026-06-28T07:21:29+00:00 | Vulnerability · Source |
| CVE-2026-23949 | redhat_vex | jaraco.context: jaraco.context: Path traversal via malicious tar archives | known not affected: 1 | 2026-06-28T07:21:29+00:00 | Vulnerability · Source |
| CVE-2016-3503 | redhat_vex | JDK: unspecified vulnerability fixed in 6u121, 7u111, and 8u101 (Install) | fixed: 260 | 2026-06-28T07:21:29+00:00 | Vulnerability · Source |
| CVE-2026-23921 | redhat_vex | Zabbix: Zabbix: Arbitrary database data exfiltration and administrator account compromise via blind SQL injection in API | known not affected: 1 | 2026-06-28T07:21:28+00:00 | Vulnerability · Source |
| CVE-2016-3615 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: DML (CPU July 2016) | fixed: 502 known affected: 9 under investigation: 9 | 2026-06-28T07:21:27+00:00 | Vulnerability · Source |
| CVE-2016-3614 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016) | fixed: 80 known not affected: 62 | 2026-06-28T07:21:27+00:00 | Vulnerability · Source |
| CVE-2026-23918 | redhat_vex | Apache HTTP Server: Apache HTTP Server: Remote Code Execution via Double Free in HTTP/2 Protocol | fixed: 4 known not affected: 58 | 2026-06-28T07:21:26+00:00 | Vulnerability · Source |
| CVE-2026-23919 | redhat_vex | Zabbix Server: Zabbix Proxy: Duktape: Zabbix Server and Proxy: Information disclosure via reused JavaScript contexts | known not affected: 1 | 2026-06-28T07:21:26+00:00 | Vulnerability · Source |
| CVE-2016-3598 | redhat_vex | OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985) | fixed: 647 known not affected: 13 | 2026-06-28T07:21:26+00:00 | Vulnerability · Source |
| CVE-2016-3606 | redhat_vex | OpenJDK: insufficient bytecode verification (Hotspot, 8155981) | fixed: 613 | 2026-06-28T07:21:26+00:00 | Vulnerability · Source |
| CVE-2016-3508 | redhat_vex | OpenJDK: missing entity replacement limits (JAXP, 8149962) | fixed: 713 | 2026-06-28T07:21:25+00:00 | Vulnerability · Source |
| CVE-2016-3498 | redhat_vex | JDK: unspecified vulnerability fixed in 7u111 and 8u101 (JavaFX) | fixed: 160 | 2026-06-28T07:21:24+00:00 | Vulnerability · Source |
| CVE-2016-3501 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016) | fixed: 80 known not affected: 62 | 2026-06-28T07:21:24+00:00 | Vulnerability · Source |
| CVE-2016-3492 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016) | fixed: 479 known affected: 18 known not affected: 8 under investigation: 9 | 2026-06-28T07:21:24+00:00 | Vulnerability · Source |
| CVE-2016-3452 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016) | fixed: 406 known affected: 9 known not affected: 11 under investigation: 9 | 2026-06-28T07:21:23+00:00 | Vulnerability · Source |
| CVE-2016-3427 | redhat_vex | OpenJDK: unrestricted deserialization of authentication credentials (JMX, 8144430) | fixed: 1119 | 2026-06-28T07:21:22+00:00 | Vulnerability · Source |
| CVE-2016-3471 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016) | fixed: 406 known affected: 9 known not affected: 11 under investigation: 9 | 2026-06-28T07:21:22+00:00 | Vulnerability · Source |
| CVE-2016-3426 | redhat_vex | OpenJDK: non-constant time GCM authentication tag comparison (JCE, 8143945) | fixed: 658 known not affected: 28 | 2026-06-28T07:21:22+00:00 | Vulnerability · Source |
| CVE-2026-23907 | redhat_vex | org.apache.pdfbox:pdfbox-examples: Apache PDFBox Example: Path Traversal via specially crafted filenames allows arbitrary file write | known affected: 17 | 2026-06-28T07:21:21+00:00 | Vulnerability · Source |
| CVE-2026-23890 | redhat_vex | pnpm: pnpm: Arbitrary code execution via path traversal in bin linking | known affected: 2 | 2026-06-28T07:21:21+00:00 | Vulnerability · Source |
| CVE-2016-3157 | redhat_vex | kernel: xen: Privilege escalation on 64-bit Xen PV domains with IO port access privileges (XSA-171) | known affected: 32 known not affected: 56 | 2026-06-28T07:21:21+00:00 | Vulnerability · Source |
| CVE-2016-2857 | redhat_vex | Qemu: net: out of bounds read in net_checksum_calculate() | fixed: 122 known affected: 2 known not affected: 6 | 2026-06-28T07:21:17+00:00 | Vulnerability · Source |
| CVE-2018-18337 | redhat_vex | chromium-browser: Use after free in Blink | fixed: 12 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2026-23737 | redhat_vex | seroval: seroval: Arbitrary Code Execution via Improper JSON Deserialization | known not affected: 1 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2016-2847 | redhat_vex | kernel: pipe: limit the per-user amount of pages allocated in pipes | fixed: 302 known affected: 27 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2026-23738 | redhat_vex | asterisk: embedded /httpstatus page echos user supplied values without sanitization | known not affected: 1 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2026-23740 | redhat_vex | Asterisk: Asterisk: Arbitrary code execution and file overwrite as root via insecure ast_coredumper file handling | known not affected: 1 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2016-2853 | redhat_vex | kernel: aufs module does not properly restrict the mount namespace | known not affected: 93 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2026-2369 | redhat_vex | libsoup: libsoup: Buffer overread due to integer underflow when handling zero-length resources | known affected: 4 known not affected: 12 | 2026-06-28T07:21:15+00:00 | Vulnerability · Source |
| CVE-2026-23558 | redhat_vex | xen: Xen: Privilege escalation or denial of service due to race condition in grant table version change | known not affected: 1 | 2026-06-28T07:21:15+00:00 | Vulnerability · Source |
| CVE-2026-2361 | redhat_vex | PostgreSQL Anonymizer: Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user with create privilege to gain superuser privileges | known not affected: 1 | 2026-06-28T07:21:15+00:00 | Vulnerability · Source |
| CVE-2026-23554 | redhat_vex | xen: Xen: Information disclosure and potential privilege escalation via use-after-free in EPT paging | known not affected: 1 | 2026-06-28T07:21:15+00:00 | Vulnerability · Source |
| CVE-2026-23555 | redhat_vex | Xen: Xenstored: Denial of Service via illegal Xenstore node path | known not affected: 1 | 2026-06-28T07:21:15+00:00 | Vulnerability · Source |
| CVE-2018-17475 | redhat_vex | chromium-browser: URL spoof in Omnibox | fixed: 12 | 2026-06-28T07:21:12+00:00 | Vulnerability · Source |
| CVE-2026-23527 | redhat_vex | h3: h3: HTTP Request Smuggling due to improper case-sensitive parsing of Transfer-Encoding header | known not affected: 1 | 2026-06-28T07:21:12+00:00 | Vulnerability · Source |
| CVE-2026-23472 | redhat_vex | kernel: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN | known affected: 260 known not affected: 14 | 2026-06-28T07:21:10+00:00 | Vulnerability · Source |
| CVE-2026-23473 | redhat_vex | kernel: io_uring/poll: fix multishot recv missing EOF on wakeup race | known affected: 184 known not affected: 90 | 2026-06-28T07:21:10+00:00 | Vulnerability · Source |
| CVE-2026-23475 | redhat_vex | kernel: spi: fix statistics allocation | known affected: 184 known not affected: 90 | 2026-06-28T07:21:10+00:00 | Vulnerability · Source |
| CVE-2026-23474 | redhat_vex | kernel: mtd: Avoid boot crash in RedBoot partition table parser | known not affected: 274 | 2026-06-28T07:21:10+00:00 | Vulnerability · Source |
| CVE-2026-23470 | redhat_vex | kernel: drm/imagination: Fix deadlock in soft reset sequence | known not affected: 274 | 2026-06-28T07:21:09+00:00 | Vulnerability · Source |