VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299456 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-24724 | redhat_vex | cmark-gfm: possible RCE due to integer overflow | fixed: 6 | 2026-06-28T07:04:57+00:00 | Vulnerability · Source |
| CVE-2021-0606 | redhat_vex | kernel: struct drm_syncobj object leak which can be triggered with DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD | known not affected: 197 | 2026-06-28T07:04:56+00:00 | Vulnerability · Source |
| CVE-2013-2420 | redhat_vex | OpenJDK: image processing vulnerability (2D, 8007617) | fixed: 543 | 2026-06-28T07:04:56+00:00 | Vulnerability · Source |
| CVE-2013-2419 | redhat_vex | ICU: Layout Engine font processing errors (JDK 2D, 8001031) | fixed: 543 known affected: 12 | 2026-06-28T07:04:56+00:00 | Vulnerability · Source |
| CVE-2013-2407 | redhat_vex | OpenJDK: Integrate Apache Santuario, rework class loader (Libraries, 6741606, 8008744) | fixed: 462 known not affected: 8 | 2026-06-28T07:04:56+00:00 | Vulnerability · Source |
| CVE-2021-1998 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021) | fixed: 337 known not affected: 70 | 2026-06-28T07:04:55+00:00 | Vulnerability · Source |
| CVE-2013-2394 | redhat_vex | JDK: unspecified vulnerability fixed in 7u21 and 6u45 (2D) | fixed: 406 | 2026-06-28T07:04:54+00:00 | Vulnerability · Source |
| CVE-2013-2400 | redhat_vex | JDK: unspecified vulnerability fixed in 7u25 (Deployment) | fixed: 135 known not affected: 17 | 2026-06-28T07:04:54+00:00 | Vulnerability · Source |
| CVE-2025-5267 | redhat_vex | firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details | fixed: 249 known affected: 8 | 2026-06-28T07:04:53+00:00 | Vulnerability · Source |
| CVE-2025-5269 | redhat_vex | firefox: thunderbird: Memory safety bug | fixed: 249 known affected: 8 | 2026-06-28T07:04:53+00:00 | Vulnerability · Source |
| CVE-2021-0961 | redhat_vex | kernel: there is a possible way to read kernel memory due to uninitialized data in quota_proc_write() in xt_quota2.c | known not affected: 197 | 2026-06-28T07:04:52+00:00 | Vulnerability · Source |
| CVE-2021-0938 | redhat_vex | kernel: possible bypass of defense in depth due to uninitialized data in memzero_explicit() of compiler-clang.h | known not affected: 197 | 2026-06-28T07:04:50+00:00 | Vulnerability · Source |
| CVE-2025-5263 | redhat_vex | firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content | fixed: 249 known affected: 8 | 2026-06-28T07:04:50+00:00 | Vulnerability · Source |
| CVE-2021-0605 | redhat_vex | kernel: In pfkey_dump() dplen and splen can both be specified to access the xfrm_address_t structure out of bounds | fixed: 150 known affected: 1 known not affected: 148 | 2026-06-28T07:04:48+00:00 | Vulnerability · Source |
| CVE-2022-22822 | redhat_vex | expat: Integer overflow in addBinding in xmlparse.c | fixed: 264 known affected: 13 known not affected: 31 | 2026-06-28T07:04:48+00:00 | Vulnerability · Source |
| CVE-2025-52496 | redhat_vex | mbedtls: Mbed TLS AESNI Race Condition Vulnerability | known not affected: 1 | 2026-06-28T07:04:47+00:00 | Vulnerability · Source |
| CVE-2022-22817 | redhat_vex | python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions | fixed: 182 known affected: 1 | 2026-06-28T07:04:43+00:00 | Vulnerability · Source |
| CVE-2025-5187 | redhat_vex | kubernetes: kube-apiserver: Nodes can delete themselves by adding an OwnerReference | fixed: 8 known affected: 31 known not affected: 1296 | 2026-06-28T07:04:43+00:00 | Vulnerability · Source |
| CVE-2022-22815 | redhat_vex | python-pillow: improperly initializes ImagePath.Path in path_getbbox() in path.c | fixed: 52 known affected: 8 | 2026-06-28T07:04:41+00:00 | Vulnerability · Source |
| CVE-2025-51591 | redhat_vex | pandoc: Server-Side Request Forgery in Pandoc | known affected: 3 | 2026-06-28T07:04:41+00:00 | Vulnerability · Source |
| CVE-2025-50946 | redhat_vex | github.com/olivetin/olivetin: Olivetin OS Command Injection | known not affected: 1 | 2026-06-28T07:04:39+00:00 | Vulnerability · Source |
| CVE-2025-50518 | redhat_vex | libcoap: Libcoap Use-After-Free Vulnerability | known not affected: 1 | 2026-06-28T07:04:39+00:00 | Vulnerability · Source |
| CVE-2025-50950 | redhat_vex | audiofile: NULL pointer dereference in the ModuleState::setup function | fixed: 22 known affected: 2 | 2026-06-28T07:04:39+00:00 | Vulnerability · Source |
| CVE-2025-50537 | redhat_vex | eslint: eslint: Denial of Service via stack overflow when serializing objects with circular references | known affected: 123 | 2026-06-28T07:04:37+00:00 | Vulnerability · Source |
| CVE-2025-5068 | redhat_vex | chromium: Chrome Use-After-Free Vulnerability | known not affected: 1 | 2026-06-28T07:04:37+00:00 | Vulnerability · Source |
| CVE-2025-50343 | redhat_vex | matio: matio: Memory corruption allows arbitrary code execution or denial of service | known not affected: 1 | 2026-06-28T07:04:35+00:00 | Vulnerability · Source |
| CVE-2018-14616 | redhat_vex | kernel: NULL pointer dereference in fs/crypto/crypto.c:fscrypt_do_page_crypto() when operating on a corrupted f2fs image | known not affected: 88 | 2026-06-28T07:04:34+00:00 | Vulnerability · Source |
| CVE-2013-1710 | redhat_vex | Mozilla: CRMF requests allow for code execution and XSS attacks (MFSA 2013-69) | fixed: 140 known affected: 1 | 2026-06-28T07:04:33+00:00 | Vulnerability · Source |
| CVE-2025-50334 | redhat_vex | technitium-dns-server: Technitium DNS Server: Denial of Service via rate-limiting component | known not affected: 1 | 2026-06-28T07:04:32+00:00 | Vulnerability · Source |
| CVE-2013-1681 | redhat_vex | Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48) | fixed: 140 known affected: 1 | 2026-06-28T07:04:26+00:00 | Vulnerability · Source |
| CVE-2025-5001 | redhat_vex | pspp: GNU PSPP pspp-convert.c calloc integer overflow | known not affected: 1 | 2026-06-28T07:04:21+00:00 | Vulnerability · Source |
| CVE-2015-3119 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-16 | fixed: 5 | 2026-06-28T07:04:20+00:00 | Vulnerability · Source |
| CVE-2015-3085 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-09 | fixed: 5 | 2026-06-28T07:04:19+00:00 | Vulnerability · Source |
| CVE-2018-14371 | redhat_vex | mojarra: Path traversal in ResourceManager.java:getLocalePrefix() via the loc parameter | fixed: 804 known affected: 9 | 2026-06-28T07:04:16+00:00 | Vulnerability · Source |
| CVE-2013-1485 | redhat_vex | OpenJDK: MethodHandles insufficient privilege checks (Libraries, 8006439) | fixed: 202 known not affected: 37 | 2026-06-28T07:04:12+00:00 | Vulnerability · Source |
| CVE-2025-49763 | redhat_vex | trafficserver: Traffic Server ESI Inclusion Depth Vulnerability | known not affected: 1 | 2026-06-28T07:04:12+00:00 | Vulnerability · Source |
| CVE-2018-13797 | redhat_vex | nodejs-macaddress: improper input validation leading to command injection | known affected: 1 known not affected: 1 | 2026-06-28T07:04:08+00:00 | Vulnerability · Source |
| CVE-2015-2659 | redhat_vex | OpenJDK: GCM cipher issue causing JVM crash (Security, 8067648) | fixed: 187 known not affected: 28 | 2026-06-28T07:04:08+00:00 | Vulnerability · Source |
| CVE-2025-49656 | redhat_vex | org.apache.jena/jena-arq: Apache Jena path traversal | known affected: 5 | 2026-06-28T07:04:07+00:00 | Vulnerability · Source |
| CVE-2025-49600 | redhat_vex | mbedtls: MbedTLS LMS Signature Forgery via Fault Injection | known not affected: 1 | 2026-06-28T07:04:04+00:00 | Vulnerability · Source |
| CVE-2025-49642 | redhat_vex | zabbix: Agent builds for AIX vulnerable to library loading hijacking | known not affected: 1 | 2026-06-28T07:04:04+00:00 | Vulnerability · Source |
| CVE-2015-2596 | redhat_vex | JDK: unspecified vulnerability fixed in 7u85 (Hotspot) | fixed: 96 under investigation: 15 | 2026-06-28T07:04:04+00:00 | Vulnerability · Source |
| CVE-2025-49521 | redhat_vex | event-driven-ansible: Template Injection via Git Branch and Refspec in EDA Projects | fixed: 12 known not affected: 341 | 2026-06-28T07:04:04+00:00 | Vulnerability · Source |
| CVE-2025-49520 | redhat_vex | event-driven-ansible: Authenticated Argument Injection in Git URL in EDA Project Creation | fixed: 12 known not affected: 341 | 2026-06-28T07:04:02+00:00 | Vulnerability · Source |
| CVE-2013-0645 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-05) | fixed: 4 | 2026-06-28T07:04:02+00:00 | Vulnerability · Source |
| CVE-2013-0647 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-05) | fixed: 4 | 2026-06-28T07:04:02+00:00 | Vulnerability · Source |
| CVE-2013-0617 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T07:04:00+00:00 | Vulnerability · Source |
| CVE-2013-0619 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T07:04:00+00:00 | Vulnerability · Source |
| CVE-2018-12824 | redhat_vex | flash-plugin: Information Disclosure vulnerabilities (APSB18-25) | fixed: 3 | 2026-06-28T07:03:56+00:00 | Vulnerability · Source |
| CVE-2025-4919 | redhat_vex | firefox: thunderbird: Out-of-bounds access when optimizing linear sums | fixed: 253 known affected: 8 | 2026-06-28T07:03:56+00:00 | Vulnerability · Source |