VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299456 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2010-2204 | redhat_vex | acroread: multiple code execution flaws (APSB10-15) | fixed: 12 | 2026-06-28T07:02:15+00:00 | Vulnerability · Source |
| CVE-2025-44906 | redhat_vex | jhead: Heap Use-After-Free in jhead ProcessFile Function | known not affected: 1 | 2026-06-28T07:02:15+00:00 | Vulnerability · Source |
| CVE-2025-4447 | redhat_vex | java-1.8.0-ibm: Buffer Overflow in Eclipse OpenJ9 | fixed: 22 | 2026-06-28T07:02:15+00:00 | Vulnerability · Source |
| CVE-2025-44905 | redhat_vex | hdf5: Heap Buffer Overflow in HDF5 Scale-Offset Filter | known affected: 1 | 2026-06-28T07:02:14+00:00 | Vulnerability · Source |
| CVE-2024-36901 | redhat_vex | kernel: ipv6: prevent NULL dereference in ip6_output() | fixed: 709 known affected: 64 known not affected: 8 | 2026-06-28T07:02:13+00:00 | Vulnerability · Source |
| CVE-2025-4444 | redhat_vex | tor: Tor Onion Service Descriptor resource consumption | known not affected: 1 | 2026-06-28T07:02:12+00:00 | Vulnerability · Source |
| CVE-2025-44021 | redhat_vex | openstack-ironic: unsafe image file:// paths | known affected: 14 | 2026-06-28T07:02:12+00:00 | Vulnerability · Source |
| CVE-2025-43929 | redhat_vex | kitty: Kitty Unconfirmed Local Executable Execution | known not affected: 1 | 2026-06-28T07:02:10+00:00 | Vulnerability · Source |
| CVE-2025-44005 | redhat_vex | github.com/smallstep/certificates: github.com/smallstep/certificates: Authorization bypass allows unauthorized certificate creation | known not affected: 1 | 2026-06-28T07:02:10+00:00 | Vulnerability · Source |
| CVE-2025-43864 | redhat_vex | react-router: React Router allows a DoS via cache poisoning by forcing SPA mode | known not affected: 40 | 2026-06-28T07:02:09+00:00 | Vulnerability · Source |
| CVE-2025-43857 | redhat_vex | net-imap: net-imap rubygem vulnerable to possible DoS by memory exhaustion | known affected: 97 | 2026-06-28T07:02:08+00:00 | Vulnerability · Source |
| CVE-2025-4372 | redhat_vex | chromium-browser: Use after free in WebAudio | known not affected: 1 | 2026-06-28T07:02:08+00:00 | Vulnerability · Source |
| CVE-2022-1679 | redhat_vex | kernel: use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges | fixed: 475 known affected: 42 | 2026-06-28T07:02:04+00:00 | Vulnerability · Source |
| CVE-2014-4287 | redhat_vex | mysql: unspecified vulnerability related to SERVER:CHARACTER SETS (CPU October 2014) | fixed: 278 under investigation: 9 | 2026-06-28T07:01:59+00:00 | Vulnerability · Source |
| CVE-2022-1050 | redhat_vex | QEMU: pvrdma: use-after-free issue in pvrdma_exec_cmd() | known not affected: 99 | 2026-06-28T07:01:52+00:00 | Vulnerability · Source |
| CVE-2022-0854 | redhat_vex | kernel: swiotlb information leak with DMA_FROM_DEVICE | fixed: 475 known affected: 42 | 2026-06-28T07:01:48+00:00 | Vulnerability · Source |
| CVE-2025-43023 | redhat_vex | hplip: HP Linux Imaging and Printing Software - Use of DSA Key | known affected: 29 | 2026-06-28T07:01:46+00:00 | Vulnerability · Source |
| CVE-2025-4287 | redhat_vex | PyTorch: PyTorch nccl.py torch.cuda.nccl.reduce denial of service | known not affected: 1 | 2026-06-28T07:01:46+00:00 | Vulnerability · Source |
| CVE-2021-20095 | redhat_vex | python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code | fixed: 711 known affected: 12 known not affected: 3 | 2026-06-28T07:01:43+00:00 | Vulnerability · Source |
| CVE-2022-0669 | redhat_vex | dpdk: sending vhost-user-inflight type messages could lead to DoS | fixed: 15 known affected: 56 known not affected: 160 | 2026-06-28T07:01:42+00:00 | Vulnerability · Source |
| CVE-2025-41232 | redhat_vex | Spring-Security: Spring Security authorization bypass for method security annotations on private methods | known not affected: 14 | 2026-06-28T07:01:42+00:00 | Vulnerability · Source |
| CVE-2025-41080 | redhat_vex | seafile: Seafile: Stored Cross-Site Scripting (XSS) vulnerability allows arbitrary code execution | known not affected: 1 | 2026-06-28T07:01:41+00:00 | Vulnerability · Source |
| CVE-2025-40927 | redhat_vex | perl-cgi-simple: CGI::Simple response splitting flaw | known not affected: 1 | 2026-06-28T07:01:40+00:00 | Vulnerability · Source |
| CVE-2014-8142 | redhat_vex | php: use after free vulnerability in unserialize() | fixed: 586 known affected: 54 known not affected: 60 | 2026-06-28T07:01:39+00:00 | Vulnerability · Source |
| CVE-2020-8131 | redhat_vex | yarn: Arbitrary filesystem write via tar expansion | fixed: 11 | 2026-06-28T07:01:39+00:00 | Vulnerability · Source |
| CVE-2022-30783 | redhat_vex | ntfs-3g: invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic | known affected: 2 known not affected: 12 | 2026-06-28T07:01:39+00:00 | Vulnerability · Source |
| CVE-2025-40920 | redhat_vex | catalyst-authentication-credential-http: Catalyst::Authentication::Credential::HTTP insecure nonce generation | known not affected: 1 | 2026-06-28T07:01:38+00:00 | Vulnerability · Source |
| CVE-2025-4092 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox 138 and Thunderbird 138 | known affected: 6 known not affected: 19 | 2026-06-28T07:01:38+00:00 | Vulnerability · Source |
| CVE-2025-40914 | redhat_vex | cryptx: Perl CryptX code execution via integer overflow | known not affected: 1 | 2026-06-28T07:01:38+00:00 | Vulnerability · Source |
| CVE-2020-6565 | redhat_vex | chromium-browser: Incorrect security UI in Omnibox | fixed: 14 | 2026-06-28T07:01:37+00:00 | Vulnerability · Source |
| CVE-2017-18079 | redhat_vex | kernel: Null pointer dereference in drivers/input/serio/i8042.c leading to denial-of-service | known affected: 55 known not affected: 33 | 2026-06-28T07:01:35+00:00 | Vulnerability · Source |
| CVE-2025-40912 | redhat_vex | cryptx: CryptX for Perl denial of service vector | known not affected: 1 | 2026-06-28T07:01:35+00:00 | Vulnerability · Source |
| CVE-2025-4089 | redhat_vex | firefox: thunderbird: Potential local code execution in "copy as cURL" command | known affected: 6 known not affected: 19 | 2026-06-28T07:01:35+00:00 | Vulnerability · Source |
| CVE-2017-18077 | redhat_vex | nodejs-brace-expansion: Regular expression denial of service | fixed: 62 known affected: 7 | 2026-06-28T07:01:35+00:00 | Vulnerability · Source |
| CVE-2025-4088 | redhat_vex | firefox: thunderbird: Cross-site request forgery via storage access API redirects | known affected: 6 known not affected: 19 | 2026-06-28T07:01:33+00:00 | Vulnerability · Source |
| CVE-2025-4083 | redhat_vex | firefox: thunderbird: Process isolation bypass using "javascript:" URI links in cross-origin frames | fixed: 296 known affected: 10 | 2026-06-28T07:01:32+00:00 | Vulnerability · Source |
| CVE-2025-4084 | redhat_vex | firefox: thunderbird: Potential local code execution in "copy as cURL" command | known affected: 6 known not affected: 19 | 2026-06-28T07:01:32+00:00 | Vulnerability · Source |
| CVE-2025-4087 | redhat_vex | firefox: thunderbird: Unsafe attribute access during XPath parsing | fixed: 296 known affected: 10 | 2026-06-28T07:01:32+00:00 | Vulnerability · Source |
| CVE-2025-4082 | redhat_vex | firefox: thunderbird: WebGL shader attribute memory corruption in Firefox for macOS | known affected: 6 known not affected: 19 | 2026-06-28T07:01:31+00:00 | Vulnerability · Source |
| CVE-2020-35501 | redhat_vex | kernel: audit not logging access to syscall open_by_handle_at for users with CAP_DAC_READ_SEARCH capability | known affected: 198 | 2026-06-28T07:01:30+00:00 | Vulnerability · Source |
| CVE-2024-27059 | redhat_vex | kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command | fixed: 429 known affected: 150 | 2026-06-28T07:01:29+00:00 | Vulnerability · Source |
| CVE-2022-32086 | redhat_vex | mariadb: server crash in Item_field::fix_outer_field for INSERT SELECT | fixed: 554 known affected: 10 known not affected: 58 | 2026-06-28T07:01:24+00:00 | Vulnerability · Source |
| CVE-2022-32085 | redhat_vex | mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor | fixed: 751 known affected: 19 known not affected: 20 | 2026-06-28T07:01:23+00:00 | Vulnerability · Source |
| CVE-2020-29129 | redhat_vex | QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets | fixed: 838 known affected: 43 known not affected: 1 | 2026-06-28T07:01:22+00:00 | Vulnerability · Source |
| CVE-2020-28407 | redhat_vex | swtpm: symlink issue may lead to privilege escalation | known affected: 6 known not affected: 16 | 2026-06-28T07:01:20+00:00 | Vulnerability · Source |
| CVE-2011-0628 | redhat_vex | flash-plugin: crash and potential arbitrary code execution (APSB11-12) | fixed: 5 | 2026-06-28T07:01:19+00:00 | Vulnerability · Source |
| CVE-2011-0604 | redhat_vex | acroread: multiple XSS flaws (APSB11-03) | fixed: 18 | 2026-06-28T07:01:18+00:00 | Vulnerability · Source |
| CVE-2011-0607 | redhat_vex | flash-plugin: multiple code execution flaws (APSB11-02) | fixed: 8 | 2026-06-28T07:01:18+00:00 | Vulnerability · Source |
| CVE-2011-0596 | redhat_vex | acroread: critical APSB11-03 | fixed: 18 | 2026-06-28T07:01:17+00:00 | Vulnerability · Source |
| CVE-2020-26088 | redhat_vex | kernel: missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c allows local attackers to create raw sockets | known not affected: 104 | 2026-06-28T07:01:09+00:00 | Vulnerability · Source |