VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299407 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-5569 | redhat_vex | flash-plugin: information leak and hardening fixes in APSB15-25 | fixed: 5 | 2026-06-28T07:17:33+00:00 | Vulnerability · Source |
| CVE-2015-5562 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T07:17:32+00:00 | Vulnerability · Source |
| CVE-2015-5559 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T07:17:32+00:00 | Vulnerability · Source |
| CVE-2026-22259 | redhat_vex | suricata: Suricata dnp3: unbounded transaction growth | known not affected: 1 | 2026-06-28T07:17:31+00:00 | Vulnerability · Source |
| CVE-2015-5557 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T07:17:31+00:00 | Vulnerability · Source |
| CVE-2015-5558 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T07:17:31+00:00 | Vulnerability · Source |
| CVE-2026-2219 | redhat_vex | dpkg: dpkg-deb: Denial of Service via improper validation of zstd-compressed archives | known not affected: 1 | 2026-06-28T07:17:31+00:00 | Vulnerability · Source |
| CVE-2026-22022 | redhat_vex | org.apache.solr/solr-core: Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin | known affected: 1 known not affected: 2 | 2026-06-28T07:17:30+00:00 | Vulnerability · Source |
| CVE-2026-22017 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:17:24+00:00 | Vulnerability · Source |
| CVE-2026-22015 | redhat_vex | mysql: Information Schema unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:17:24+00:00 | Vulnerability · Source |
| CVE-2026-21998 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:17:24+00:00 | Vulnerability · Source |
| CVE-2026-22001 | redhat_vex | mysql: Information Schema unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:17:21+00:00 | Vulnerability · Source |
| CVE-2015-5286 | redhat_vex | openstack-glance: Storage overrun by deleting images | fixed: 16 | 2026-06-28T07:17:19+00:00 | Vulnerability · Source |
| CVE-2026-21895 | redhat_vex | RSA: RSA crate: Denial of Service due to malformed prime in private key generation | known affected: 24 | 2026-06-28T07:17:17+00:00 | Vulnerability · Source |
| CVE-2015-5245 | redhat_vex | Ceph: RGW returns requested bucket name raw in Bucket response header | fixed: 368 known affected: 1 | 2026-06-28T07:17:16+00:00 | Vulnerability · Source |
| CVE-2026-21620 | redhat_vex | erlang: Erlang OTP tftp_file modules: Information disclosure via relative path traversal | known affected: 41 | 2026-06-28T07:17:15+00:00 | Vulnerability · Source |
| CVE-2015-5223 | redhat_vex | openstack-swift: Information leak via Swift tempurls | fixed: 42 known affected: 1 known not affected: 2 | 2026-06-28T07:17:15+00:00 | Vulnerability · Source |
| CVE-2026-21619 | redhat_vex | hex_core: hex_core, hex, rebar3: Denial of Service due to uncontrolled resource consumption | known not affected: 1 | 2026-06-28T07:17:14+00:00 | Vulnerability · Source |
| CVE-2026-21428 | redhat_vex | cpp-httplib: cpp-httplib: Server-Side Request Forgery via header injection | known not affected: 1 | 2026-06-28T07:17:14+00:00 | Vulnerability · Source |
| CVE-2026-20912 | redhat_vex | gitea: Gitea: Cross-Repository Authorization Bypass via Release Attachment Linking Leads to Private Attachment Disclosure | known not affected: 9 | 2026-06-28T07:17:14+00:00 | Vulnerability · Source |
| CVE-2015-5201 | redhat_vex | RHEV: vdsm spice disable-ticketing and VM suspend and restore allows auth bypass | fixed: 5 known affected: 2 under investigation: 27 | 2026-06-28T07:17:14+00:00 | Vulnerability · Source |
| CVE-2015-5162 | redhat_vex | openstack-nova/glance/cinder: Malicious image may exhaust resources | fixed: 70 known affected: 2 known not affected: 44 | 2026-06-28T07:17:13+00:00 | Vulnerability · Source |
| CVE-2015-5160 | redhat_vex | libvirt: Ceph id/key leaked in the process list | fixed: 194 known affected: 7 known not affected: 1 | 2026-06-28T07:17:13+00:00 | Vulnerability · Source |
| CVE-2015-5163 | redhat_vex | openstack-glance: Glance v2 API host file disclosure through qcow2 backing file | fixed: 4 known not affected: 2 | 2026-06-28T07:17:13+00:00 | Vulnerability · Source |
| CVE-2015-5156 | redhat_vex | kernel: buffer overflow with fraglist larger than MAX_SKB_FRAGS + 2 in virtio-net | fixed: 362 known affected: 1 known not affected: 12 | 2026-06-28T07:17:12+00:00 | Vulnerability · Source |
| CVE-2015-4906 | redhat_vex | JDK: unspecified vulnerability fixed in 8u65 (JavaFX) | fixed: 64 | 2026-06-28T07:17:11+00:00 | Vulnerability · Source |
| CVE-2026-20750 | redhat_vex | gitea: Gitea Organization Projects Cross-Organization Authorization Bypass via Project ID (IDOR) | known not affected: 9 | 2026-06-28T07:17:11+00:00 | Vulnerability · Source |
| CVE-2015-5122 | redhat_vex | flash-plugin: two code execution issues in APSA15-04 / APSB15-18 | fixed: 5 | 2026-06-28T07:17:11+00:00 | Vulnerability · Source |
| CVE-2015-5123 | redhat_vex | flash-plugin: two code execution issues in APSA15-04 / APSB15-18 | fixed: 5 | 2026-06-28T07:17:11+00:00 | Vulnerability · Source |
| CVE-2015-4910 | redhat_vex | mysql: unspecified vulnerability related to Server:Memcached (CPU October 2015) | fixed: 80 known not affected: 36 | 2026-06-28T07:17:10+00:00 | Vulnerability · Source |
| CVE-2015-4908 | redhat_vex | JDK: unspecified vulnerability fixed in 8u65 (JavaFX) | fixed: 64 | 2026-06-28T07:17:10+00:00 | Vulnerability · Source |
| CVE-2015-4904 | redhat_vex | mysql: unspecified vulnerability related to libmysqld (CPU October 2015) | fixed: 70 known not affected: 45 | 2026-06-28T07:17:10+00:00 | Vulnerability · Source |
| CVE-2015-4901 | redhat_vex | JDK: unspecified vulnerability fixed in 8u65 (JavaFX) | fixed: 64 | 2026-06-28T07:17:09+00:00 | Vulnerability · Source |
| CVE-2015-4893 | redhat_vex | OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733) | fixed: 1035 known affected: 9 | 2026-06-28T07:17:09+00:00 | Vulnerability · Source |
| CVE-2015-4883 | redhat_vex | OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413) | fixed: 1136 | 2026-06-28T07:17:09+00:00 | Vulnerability · Source |
| CVE-2015-4882 | redhat_vex | OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387) | fixed: 1035 known affected: 8 | 2026-06-28T07:17:09+00:00 | Vulnerability · Source |
| CVE-2015-4879 | redhat_vex | mysql: unspecified vulnerability related to Server:DML (CPU October 2015) | fixed: 446 known affected: 15 under investigation: 9 | 2026-06-28T07:17:08+00:00 | Vulnerability · Source |
| CVE-2015-4872 | redhat_vex | OpenJDK: incomplete constraints enforcement by AlgorithmChecker (Security, 8131291) | fixed: 1136 | 2026-06-28T07:17:08+00:00 | Vulnerability · Source |
| CVE-2015-4870 | redhat_vex | mysql: unspecified vulnerability related to Server:Parser (CPU October 2015) | fixed: 406 known affected: 16 under investigation: 9 | 2026-06-28T07:17:07+00:00 | Vulnerability · Source |
| CVE-2015-4868 | redhat_vex | OpenJDK: CRL checking flaw (Libraries, 8081744) | fixed: 226 known not affected: 28 | 2026-06-28T07:17:07+00:00 | Vulnerability · Source |
| CVE-2015-4866 | redhat_vex | mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015) | fixed: 77 known not affected: 44 | 2026-06-28T07:17:06+00:00 | Vulnerability · Source |
| CVE-2015-4862 | redhat_vex | mysql: unspecified vulnerability related to Server:DML (CPU October 2015) | fixed: 80 known not affected: 45 | 2026-06-28T07:17:06+00:00 | Vulnerability · Source |
| CVE-2015-4858 | redhat_vex | mysql: unspecified vulnerability related to Server:DML (CPU October 2015) | fixed: 406 known affected: 16 under investigation: 9 | 2026-06-28T07:17:06+00:00 | Vulnerability · Source |
| CVE-2015-4843 | redhat_vex | OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891) | fixed: 1136 | 2026-06-28T07:17:05+00:00 | Vulnerability · Source |
| CVE-2015-4844 | redhat_vex | ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042) | fixed: 1136 known affected: 11 | 2026-06-28T07:17:05+00:00 | Vulnerability · Source |
| CVE-2015-4836 | redhat_vex | mysql: unspecified vulnerability related to Server:SP (CPU October 2015) | fixed: 406 known affected: 16 under investigation: 9 | 2026-06-28T07:17:05+00:00 | Vulnerability · Source |
| CVE-2015-4756 | redhat_vex | mysql: unspecified vulnerability related to Server:InnoDB (CPU July 2015) | fixed: 147 known not affected: 41 | 2026-06-28T07:17:03+00:00 | Vulnerability · Source |
| CVE-2015-4805 | redhat_vex | OpenJDK: missing checks for proper initialization in ObjectStreamClass (Serialization, 8103671) | fixed: 1136 | 2026-06-28T07:17:03+00:00 | Vulnerability · Source |
| CVE-2015-4752 | redhat_vex | mysql: unspecified vulnerability related to Server:I_S (CPU July 2015) | fixed: 428 known affected: 17 | 2026-06-28T07:17:02+00:00 | Vulnerability · Source |
| CVE-2015-4737 | redhat_vex | mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU July 2015) | fixed: 428 known affected: 17 | 2026-06-28T07:17:02+00:00 | Vulnerability · Source |