VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299456 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-12928 | redhat_vex | kernel: NULL pointer dereference in hfs_ext_read_extent in hfs.ko | known affected: 1 known not affected: 87 | 2026-06-28T07:03:55+00:00 | Vulnerability · Source |
| CVE-2026-34304 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:03:54+00:00 | Vulnerability · Source |
| CVE-2025-4918 | redhat_vex | firefox: thunderbird: Out-of-bounds access when resolving Promise objects | fixed: 253 known affected: 8 | 2026-06-28T07:03:54+00:00 | Vulnerability · Source |
| CVE-2018-12828 | redhat_vex | flash-plugin: Privilege Escalation vulnerability (APSB18-25) | fixed: 3 | 2026-06-28T07:03:52+00:00 | Vulnerability · Source |
| CVE-2026-34276 | redhat_vex | mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:03:51+00:00 | Vulnerability · Source |
| CVE-2020-8823 | redhat_vex | sockJS: function htmlfile is not checking the non-alphanumeric symbols which could result in reflected XSS | known not affected: 9 | 2026-06-28T07:03:49+00:00 | Vulnerability · Source |
| CVE-2026-34271 | redhat_vex | mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:03:49+00:00 | Vulnerability · Source |
| CVE-2015-1294 | redhat_vex | chromium-browser: Use-after-free in Skia | fixed: 12 | 2026-06-28T07:03:48+00:00 | Vulnerability · Source |
| CVE-2026-34270 | redhat_vex | mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) | fixed: 395 under investigation: 9 | 2026-06-28T07:03:47+00:00 | Vulnerability · Source |
| CVE-2018-12540 | redhat_vex | vertx-web: Incomplete CSRF validation by CSRFHandler | fixed: 1 | 2026-06-28T07:03:47+00:00 | Vulnerability · Source |
| CVE-2015-1263 | redhat_vex | chromium-browser: insecure download of spellcheck dictionary in unspecified component | fixed: 12 | 2026-06-28T07:03:47+00:00 | Vulnerability · Source |
| CVE-2025-49113 | redhat_vex | roundcubemail: Remote Code Execution in Roundcube via Unvalidated _from Parameter | known not affected: 1 | 2026-06-28T07:03:46+00:00 | Vulnerability · Source |
| CVE-2025-49087 | redhat_vex | mbedtls: Mbed TLS PKCS#7 Timing Vulnerability | known not affected: 1 | 2026-06-28T07:03:46+00:00 | Vulnerability · Source |
| CVE-2024-3049 | redhat_vex | booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server | fixed: 228 known affected: 10 | 2026-06-28T07:03:46+00:00 | Vulnerability · Source |
| CVE-2025-49112 | redhat_vex | valkey: Valkey Integer Underflow Vulnerability | known affected: 3 | 2026-06-28T07:03:46+00:00 | Vulnerability · Source |
| CVE-2025-49011 | redhat_vex | spicedb: SpiceDB permission check bypass | known not affected: 1 | 2026-06-28T07:03:46+00:00 | Vulnerability · Source |
| CVE-2017-5118 | redhat_vex | chromium-browser: bypass of content security policy in blink | fixed: 12 | 2026-06-28T07:03:45+00:00 | Vulnerability · Source |
| CVE-2017-5107 | redhat_vex | chromium-browser: user information leak via svg | fixed: 12 | 2026-06-28T07:03:44+00:00 | Vulnerability · Source |
| CVE-2017-5117 | redhat_vex | chromium-browser: use of uninitialized value in skia | fixed: 12 | 2026-06-28T07:03:44+00:00 | Vulnerability · Source |
| CVE-2017-5106 | redhat_vex | chromium-browser: url spoofing in omnibox | fixed: 12 | 2026-06-28T07:03:44+00:00 | Vulnerability · Source |
| CVE-2017-5100 | redhat_vex | chromium-browser: use after free in chrome apps | fixed: 12 | 2026-06-28T07:03:43+00:00 | Vulnerability · Source |
| CVE-2026-22002 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:03:43+00:00 | Vulnerability · Source |
| CVE-2017-5099 | redhat_vex | chromium-browser: out-of-bounds write in ppapi | fixed: 12 | 2026-06-28T07:03:42+00:00 | Vulnerability · Source |
| CVE-2017-5089 | redhat_vex | chromium-browser: domain spoofing in omnibox | fixed: 12 | 2026-06-28T07:03:42+00:00 | Vulnerability · Source |
| CVE-2026-22004 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:03:42+00:00 | Vulnerability · Source |
| CVE-2012-5279 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-24) | fixed: 5 | 2026-06-28T07:03:41+00:00 | Vulnerability · Source |
| CVE-2017-5092 | redhat_vex | chromium-browser: use after free in ppapi | fixed: 12 | 2026-06-28T07:03:41+00:00 | Vulnerability · Source |
| CVE-2012-5275 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-24) | fixed: 5 | 2026-06-28T07:03:41+00:00 | Vulnerability · Source |
| CVE-2017-5086 | redhat_vex | chromium-browser: address spoofing in omnibox | fixed: 12 | 2026-06-28T07:03:40+00:00 | Vulnerability · Source |
| CVE-2012-5257 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T07:03:40+00:00 | Vulnerability · Source |
| CVE-2017-5085 | redhat_vex | chromium-browser: inappropriate javascript execution on webui pages | fixed: 12 | 2026-06-28T07:03:39+00:00 | Vulnerability · Source |
| CVE-2017-5074 | redhat_vex | chromium-browser: use after free in apps bluetooth | fixed: 12 | 2026-06-28T07:03:38+00:00 | Vulnerability · Source |
| CVE-2017-5080 | redhat_vex | chromium-browser: use after free in credit card autofill | fixed: 12 | 2026-06-28T07:03:37+00:00 | Vulnerability · Source |
| CVE-2025-48965 | redhat_vex | mbedtls: Mbed TLS: NULL Pointer Dereference | known not affected: 1 | 2026-06-28T07:03:37+00:00 | Vulnerability · Source |
| CVE-2017-5081 | redhat_vex | chromium-browser: extension verification bypass | fixed: 12 | 2026-06-28T07:03:37+00:00 | Vulnerability · Source |
| CVE-2025-48945 | redhat_vex | pycares: pycares Channel Use-After-Free | known not affected: 11 | 2026-06-28T07:03:36+00:00 | Vulnerability · Source |
| CVE-2025-48943 | redhat_vex | vllm: Remote crash of vllm server with invalid regex | known affected: 28 | 2026-06-28T07:03:36+00:00 | Vulnerability · Source |
| CVE-2025-48944 | redhat_vex | vllm: vLLM Tool Schema denial of service | known affected: 13 | 2026-06-28T07:03:35+00:00 | Vulnerability · Source |
| CVE-2017-5077 | redhat_vex | chromium-browser: heap buffer overflow in skia | fixed: 12 | 2026-06-28T07:03:35+00:00 | Vulnerability · Source |
| CVE-2017-5075 | redhat_vex | chromium-browser: information leak in csp reporting | fixed: 12 | 2026-06-28T07:03:34+00:00 | Vulnerability · Source |
| CVE-2017-5073 | redhat_vex | chromium-browser: use after free in print preview | fixed: 12 | 2026-06-28T07:03:34+00:00 | Vulnerability · Source |
| CVE-2017-5064 | redhat_vex | chromium-browser: use after free in blink | fixed: 12 | 2026-06-28T07:03:33+00:00 | Vulnerability · Source |
| CVE-2017-5068 | redhat_vex | chromium-browser: race condition in webrtc | fixed: 12 | 2026-06-28T07:03:32+00:00 | Vulnerability · Source |
| CVE-2017-5067 | redhat_vex | chromium-browser: url spoofing in omnibox | fixed: 12 | 2026-06-28T07:03:32+00:00 | Vulnerability · Source |
| CVE-2021-2178 | redhat_vex | mysql: Server: Replication unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:03:32+00:00 | Vulnerability · Source |
| CVE-2017-5057 | redhat_vex | chromium-browser: type confusion in pdfium | fixed: 12 | 2026-06-28T07:03:31+00:00 | Vulnerability · Source |
| CVE-2015-0358 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-06 | fixed: 5 | 2026-06-28T07:03:30+00:00 | Vulnerability · Source |
| CVE-2025-48887 | redhat_vex | vllm: vLLM has a Regular Expression Denial of Service (ReDoS) Vulnerability | known affected: 13 | 2026-06-28T07:03:30+00:00 | Vulnerability · Source |
| CVE-2017-5037 | redhat_vex | chromium-browser: multiple out of bounds writes in chunkdemuxer | fixed: 12 | 2026-06-28T07:03:29+00:00 | Vulnerability · Source |
| CVE-2017-5041 | redhat_vex | chromium-browser: address spoofing in omnibox | fixed: 12 | 2026-06-28T07:03:29+00:00 | Vulnerability · Source |