VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299456 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-21233 | redhat_vex | hw: cpu: Intel: Stale Data Read from legacy xAPIC vulnerability | fixed: 185 known affected: 20 known not affected: 156 | 2026-06-28T07:02:36+00:00 | Vulnerability · Source |
| CVE-2017-3169 | redhat_vex | httpd: mod_ssl NULL pointer dereference | fixed: 377 known affected: 7 known not affected: 1 | 2026-06-28T07:02:36+00:00 | Vulnerability · Source |
| CVE-2012-0767 | redhat_vex | flash-plugin: universal cross-site scripting flaw (APSB12-03) | fixed: 5 | 2026-06-28T07:02:36+00:00 | Vulnerability · Source |
| CVE-2025-47291 | redhat_vex | containerd: containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods. | known not affected: 96 | 2026-06-28T07:02:36+00:00 | Vulnerability · Source |
| CVE-2025-47285 | redhat_vex | vyper: Vyper: Zero-Length Bytestring Side-Effect Skipping | known not affected: 1 | 2026-06-28T07:02:35+00:00 | Vulnerability · Source |
| CVE-2025-47290 | redhat_vex | containerd: Containerd vulnerable to host filesystem access during image unpack | known not affected: 78 | 2026-06-28T07:02:35+00:00 | Vulnerability · Source |
| CVE-2025-47279 | redhat_vex | undici: Undici Memory Leak with Invalid Certificates | known affected: 52 | 2026-06-28T07:02:34+00:00 | Vulnerability · Source |
| CVE-2025-47229 | redhat_vex | pspp: denial of service via crafted input data in pspp | known not affected: 1 | 2026-06-28T07:02:33+00:00 | Vulnerability · Source |
| CVE-2025-47226 | redhat_vex | snipeit: Incorrect Access Control (IDOR) in snipeit | known not affected: 1 | 2026-06-28T07:02:33+00:00 | Vulnerability · Source |
| CVE-2025-47256 | redhat_vex | libxmp: stack-based buffer overflow via a malformed Pha format tracker module | known not affected: 1 | 2026-06-28T07:02:33+00:00 | Vulnerability · Source |
| CVE-2018-11759 | redhat_vex | mod_jk: connector path traversal due to mishandled HTTP requests in httpd | fixed: 139 known affected: 3 known not affected: 1 | 2026-06-28T07:02:33+00:00 | Vulnerability · Source |
| CVE-2017-3100 | redhat_vex | flash-plugin: information disclosure issues fixed in APSB17-21 | fixed: 3 | 2026-06-28T07:02:33+00:00 | Vulnerability · Source |
| CVE-2017-3083 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-17 | fixed: 3 | 2026-06-28T07:02:33+00:00 | Vulnerability · Source |
| CVE-2017-3073 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-15 | fixed: 3 | 2026-06-28T07:02:32+00:00 | Vulnerability · Source |
| CVE-2017-3079 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-17 | fixed: 3 | 2026-06-28T07:02:32+00:00 | Vulnerability · Source |
| CVE-2018-11412 | redhat_vex | kernel: out-of-bounds memcpy in fs/ext4/inline.c:ext4_read_inline_data() with crafted ext4 image | fixed: 26 known not affected: 87 | 2026-06-28T07:02:32+00:00 | Vulnerability · Source |
| CVE-2017-3078 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-17 | fixed: 3 | 2026-06-28T07:02:32+00:00 | Vulnerability · Source |
| CVE-2017-3070 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-15 | fixed: 3 | 2026-06-28T07:02:31+00:00 | Vulnerability · Source |
| CVE-2017-3069 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-15 | fixed: 3 | 2026-06-28T07:02:31+00:00 | Vulnerability · Source |
| CVE-2017-3068 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-15 | fixed: 3 | 2026-06-28T07:02:30+00:00 | Vulnerability · Source |
| CVE-2022-20141 | redhat_vex | kernel: igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets | fixed: 514 known affected: 28 known not affected: 14 | 2026-06-28T07:02:29+00:00 | Vulnerability · Source |
| CVE-2017-3001 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-07 | fixed: 3 known affected: 1 | 2026-06-28T07:02:29+00:00 | Vulnerability · Source |
| CVE-2017-3002 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-07 | fixed: 3 known affected: 1 | 2026-06-28T07:02:29+00:00 | Vulnerability · Source |
| CVE-2025-46810 | redhat_vex | traefik: Escalation to root from traefik user via %post script | known not affected: 6 | 2026-06-28T07:02:29+00:00 | Vulnerability · Source |
| CVE-2025-46806 | redhat_vex | sslh: Misaligned Memory Accesses in `is_openvpn_protocol()` | known not affected: 1 | 2026-06-28T07:02:28+00:00 | Vulnerability · Source |
| CVE-2017-2990 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-04 | fixed: 3 known affected: 1 | 2026-06-28T07:02:28+00:00 | Vulnerability · Source |
| CVE-2025-46803 | redhat_vex | screen: Screen by Default Creates World Writable PTYs | known affected: 3 | 2026-06-28T07:02:28+00:00 | Vulnerability · Source |
| CVE-2017-2987 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-04 | fixed: 3 known affected: 1 | 2026-06-28T07:02:28+00:00 | Vulnerability · Source |
| CVE-2025-46807 | redhat_vex | sslh: File Descriptor Exhaustion in sslh-select and sslh-ev triggers SEGFAULT | known not affected: 1 | 2026-06-28T07:02:28+00:00 | Vulnerability · Source |
| CVE-2025-46805 | redhat_vex | screen: Race Conditions when Sending Signals | known affected: 3 | 2026-06-28T07:02:28+00:00 | Vulnerability · Source |
| CVE-2017-2988 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-04 | fixed: 3 known affected: 1 | 2026-06-28T07:02:28+00:00 | Vulnerability · Source |
| CVE-2017-2986 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-04 | fixed: 3 known affected: 1 | 2026-06-28T07:02:27+00:00 | Vulnerability · Source |
| CVE-2017-2931 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-02 | fixed: 3 known affected: 1 | 2026-06-28T07:02:26+00:00 | Vulnerability · Source |
| CVE-2025-46762 | redhat_vex | org.apache.parquet/parquet-avro: Apache Parquet Java: Potential malicious code execution from trusted packages in the parquet-avro module when reading an Avro schema from a Parquet file metadata | known affected: 1 | 2026-06-28T07:02:26+00:00 | Vulnerability · Source |
| CVE-2025-46570 | redhat_vex | vllm: vLLM’s Chunk-Based Prefix Caching Vulnerable to Potential Timing Side-Channel | known affected: 13 | 2026-06-28T07:02:26+00:00 | Vulnerability · Source |
| CVE-2025-46717 | redhat_vex | sudo-rs: sudo-rs: File Existence Information Disclosure | known not affected: 1 | 2026-06-28T07:02:24+00:00 | Vulnerability · Source |
| CVE-2025-46718 | redhat_vex | sudo-rs: sudo-rs: Privilege Enumeration Vulnerability | known not affected: 1 | 2026-06-28T07:02:24+00:00 | Vulnerability · Source |
| CVE-2018-11232 | redhat_vex | kernel: coresight: kernel panic caused by invalid CPU | known not affected: 88 | 2026-06-28T07:02:23+00:00 | Vulnerability · Source |
| CVE-2025-46569 | redhat_vex | github.com/open-policy-agent/opa/server: github.com/open-policy-agent/opa/v1/server: OPA server Data API HTTP path injection of Rego | known affected: 1 | 2026-06-28T07:02:21+00:00 | Vulnerability · Source |
| CVE-2025-4656 | redhat_vex | github.com/hashicorp/vault: Vault Denial of Service | known affected: 7 | 2026-06-28T07:02:21+00:00 | Vulnerability · Source |
| CVE-2025-46565 | redhat_vex | vite: Path Traversal in Vite Dev Server Allows Access to Restricted Files | known affected: 5 | 2026-06-28T07:02:21+00:00 | Vulnerability · Source |
| CVE-2025-4638 | redhat_vex | pcl: zlib: Improper Pointer Arithmetic in pcl | known not affected: 1 | 2026-06-28T07:02:20+00:00 | Vulnerability · Source |
| CVE-2025-46392 | redhat_vex | apache-commons-configuration: Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x | known affected: 2 | 2026-06-28T07:02:20+00:00 | Vulnerability · Source |
| CVE-2025-46393 | redhat_vex | ImageMagick: Incorrect Calculation of Buffer Size in ImageMagick's Multispectral MIFF Processing | known affected: 14 | 2026-06-28T07:02:20+00:00 | Vulnerability · Source |
| CVE-2025-46299 | redhat_vex | webkitgtk: Processing maliciously crafted web content may disclose internal states of the app | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-28T07:02:20+00:00 | Vulnerability · Source |
| CVE-2025-46059 | redhat_vex | langchain-core: Langchain indirect propmpt injection | known affected: 1 known not affected: 41 | 2026-06-28T07:02:19+00:00 | Vulnerability · Source |
| CVE-2025-45765 | redhat_vex | ruby-jwt: Ruby-JWT Weak Encryption | known not affected: 4 | 2026-06-28T07:02:18+00:00 | Vulnerability · Source |
| CVE-2024-36932 | redhat_vex | kernel: thermal/debugfs: Prevent use-after-free from occurring after cdev removal | fixed: 280 known affected: 50 known not affected: 70 | 2026-06-28T07:02:18+00:00 | Vulnerability · Source |
| CVE-2025-45764 | redhat_vex | jsrsasign: jsrsasign Weak Encryption Vulnerability | known affected: 3 | 2026-06-28T07:02:18+00:00 | Vulnerability · Source |
| CVE-2025-45512 | redhat_vex | u-boot: Improper Bootloader Signature Verification in U-Boot | known not affected: 1 | 2026-06-28T07:02:16+00:00 | Vulnerability · Source |