VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299463 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2010-0195 | redhat_vex | Acroread: Multiple code execution flaws (APSB10-09) | fixed: 12 | 2026-06-28T06:41:19+00:00 | Vulnerability · Source |
| CVE-2010-0095 | redhat_vex | OpenJDK Subclasses of InetAddress may incorrectly interpret network addresses (6893954) | fixed: 594 | 2026-06-28T06:41:18+00:00 | Vulnerability · Source |
| CVE-2010-0187 | redhat_vex | flash-plugin: possible player crash (APSB10-06) | fixed: 2 | 2026-06-28T06:41:15+00:00 | Vulnerability · Source |
| CVE-2015-1815 | redhat_vex | setroubleshoot: command injection via crafted file name | fixed: 75 | 2026-06-28T06:41:13+00:00 | Vulnerability · Source |
| CVE-2010-0093 | redhat_vex | OpenJDK System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (6892265) | fixed: 118 | 2026-06-28T06:41:11+00:00 | Vulnerability · Source |
| CVE-2010-0094 | redhat_vex | OpenJDK Deserialization of RMIConnectionImpl objects should enforce stricter checks (6893947) | fixed: 390 | 2026-06-28T06:41:11+00:00 | Vulnerability · Source |
| CVE-2010-0091 | redhat_vex | OpenJDK Unsigned applet can retrieve the dragged information before drop action occurs(6887703) | fixed: 594 | 2026-06-28T06:41:10+00:00 | Vulnerability · Source |
| CVE-2021-22939 | redhat_vex | nodejs: Incomplete validation of tls rejectUnauthorized parameter | fixed: 194 known affected: 1 known not affected: 26 | 2026-06-28T06:41:01+00:00 | Vulnerability · Source |
| CVE-2015-1262 | redhat_vex | chromium-browser: Uninitialized value in Blink. | fixed: 12 | 2026-06-28T06:40:59+00:00 | Vulnerability · Source |
| CVE-2015-1269 | redhat_vex | chromium-browser: Normalization error in HSTS/HPKP preload list | fixed: 12 | 2026-06-28T06:40:59+00:00 | Vulnerability · Source |
| CVE-2010-0838 | redhat_vex | OpenJDK CMM readMabCurveData Buffer Overflow Vulnerability (6899653) | fixed: 390 | 2026-06-28T06:40:59+00:00 | Vulnerability · Source |
| CVE-2015-1228 | redhat_vex | chromium-browser: Uninitialized value in rendering | fixed: 15 | 2026-06-28T06:40:58+00:00 | Vulnerability · Source |
| CVE-2015-1229 | redhat_vex | chromium-browser: Cookie injection in proxies | fixed: 15 | 2026-06-28T06:40:58+00:00 | Vulnerability · Source |
| CVE-2015-1227 | redhat_vex | chromium-browser: Uninitialized value in blink | fixed: 15 | 2026-06-28T06:40:58+00:00 | Vulnerability · Source |
| CVE-2015-1223 | redhat_vex | chromium-browser: Use-after-free in dom | fixed: 15 | 2026-06-28T06:40:56+00:00 | Vulnerability · Source |
| CVE-2010-0428 | redhat_vex | libspice: Insufficient guest provided pointers validation | fixed: 13 | 2026-06-28T06:40:54+00:00 | Vulnerability · Source |
| CVE-2016-4272 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-29 | fixed: 5 | 2026-06-28T06:40:52+00:00 | Vulnerability · Source |
| CVE-2016-1612 | redhat_vex | chromium-browser: bad cast in V8 | fixed: 12 | 2026-06-28T06:40:50+00:00 | Vulnerability · Source |
| CVE-2015-0458 | redhat_vex | JDK: unspecified vulnerability fixed in 6u95, 7u79 and 8u45 (Deployment) | fixed: 546 | 2026-06-28T06:40:49+00:00 | Vulnerability · Source |
| CVE-2015-0441 | redhat_vex | mysql: unspecified vulnerability related to Server:Security:Encryption (CPU April 2015) | fixed: 338 known not affected: 19 under investigation: 9 | 2026-06-28T06:40:47+00:00 | Vulnerability · Source |
| CVE-2015-0433 | redhat_vex | mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU April 2015) | fixed: 338 known not affected: 19 under investigation: 9 | 2026-06-28T06:40:44+00:00 | Vulnerability · Source |
| CVE-2015-0315 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T06:40:42+00:00 | Vulnerability · Source |
| CVE-2015-0339 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-05 | fixed: 5 | 2026-06-28T06:40:40+00:00 | Vulnerability · Source |
| CVE-2015-0340 | redhat_vex | flash-plugin: file upload restriction bypass (APSB15-05) | fixed: 5 | 2026-06-28T06:40:40+00:00 | Vulnerability · Source |
| CVE-2015-0338 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-05 | fixed: 5 | 2026-06-28T06:40:40+00:00 | Vulnerability · Source |
| CVE-2015-0314 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T06:40:40+00:00 | Vulnerability · Source |
| CVE-2015-0316 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T06:40:38+00:00 | Vulnerability · Source |
| CVE-2015-0312 | redhat_vex | flash-plugin: multiple critical vulnerabilities (APSA15-01)(APSB15-03) | fixed: 5 | 2026-06-28T06:40:37+00:00 | Vulnerability · Source |
| CVE-2009-3875 | redhat_vex | OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities (6863503) | fixed: 640 | 2026-06-28T06:40:37+00:00 | Vulnerability · Source |
| CVE-2023-24023 | redhat_vex | kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses | fixed: 429 known affected: 64 | 2026-06-28T06:40:36+00:00 | Vulnerability · Source |
| CVE-2015-0273 | redhat_vex | php: use after free vulnerability in unserialize() with DateTimeZone | fixed: 849 known affected: 55 known not affected: 31 | 2026-06-28T06:40:36+00:00 | Vulnerability · Source |
| CVE-2021-2217 | redhat_vex | mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T06:40:29+00:00 | Vulnerability · Source |
| CVE-2017-18509 | redhat_vex | kernel: not checking sk_type and protocol in net/ipv6/ip6mr.c leads to general protection fault, or arbitrary code execution | known not affected: 104 | 2026-06-28T06:40:28+00:00 | Vulnerability · Source |
| CVE-2026-46060 | redhat_vex | kernel: crypto: qat - fix IRQ cleanup on 6xxx probe failure | known affected: 184 known not affected: 90 | 2026-06-28T06:40:27+00:00 | Vulnerability · Source |
| CVE-2009-2724 | redhat_vex | JDK race condition vulnerability reflection checks | fixed: 66 | 2026-06-28T06:40:26+00:00 | Vulnerability · Source |
| CVE-2021-2208 | redhat_vex | mysql: Server: Partition unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T06:40:25+00:00 | Vulnerability · Source |
| CVE-2017-18549 | redhat_vex | kernel: information exposure in drivers/scsi/aacraid/commctrl.c | known affected: 1 known not affected: 92 | 2026-06-28T06:40:25+00:00 | Vulnerability · Source |
| CVE-2009-2672 | redhat_vex | OpenJDK Proxy mechanism information leaks (6801071) | fixed: 434 | 2026-06-28T06:40:23+00:00 | Vulnerability · Source |
| CVE-2026-46061 | redhat_vex | kernel: jbd2: fix deadlock in jbd2_journal_cancel_revoke() | known affected: 90 known not affected: 184 | 2026-06-28T06:40:18+00:00 | Vulnerability · Source |
| CVE-2026-46059 | redhat_vex | kernel: KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN | known affected: 232 known not affected: 42 | 2026-06-28T06:40:18+00:00 | Vulnerability · Source |
| CVE-2023-23918 | redhat_vex | Node.js: Permissions policies can be bypassed via process.mainModule | fixed: 254 known affected: 1 known not affected: 16 | 2026-06-28T06:40:15+00:00 | Vulnerability · Source |
| CVE-2026-48101 | redhat_vex | 7-Zip: 7-Zip: Information Disclosure via uninitialized memory in UEFI capsule parser | known not affected: 1 | 2026-06-28T06:40:15+00:00 | Vulnerability · Source |
| CVE-2023-23916 | redhat_vex | curl: HTTP multi-header compression denial of service | fixed: 331 known affected: 8 known not affected: 117 | 2026-06-28T06:40:14+00:00 | Vulnerability · Source |
| CVE-2014-9419 | redhat_vex | kernel: partial ASLR bypass through TLS base addresses leak | fixed: 347 known affected: 2 | 2026-06-28T06:40:06+00:00 | Vulnerability · Source |
| CVE-2017-17807 | redhat_vex | kernel: Missing permissions check for request_key() destination allows local attackers to add keys to keyring without Write permission | fixed: 207 known affected: 43 known not affected: 32 | 2026-06-28T06:40:04+00:00 | Vulnerability · Source |
| CVE-2017-17790 | redhat_vex | ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution | fixed: 576 known affected: 14 | 2026-06-28T06:40:04+00:00 | Vulnerability · Source |
| CVE-2017-17805 | redhat_vex | kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial-of-service | fixed: 419 known affected: 12 known not affected: 42 | 2026-06-28T06:40:03+00:00 | Vulnerability · Source |
| CVE-2017-17381 | redhat_vex | Qemu: virtio: divide by zero exception while updating rings | known affected: 10 known not affected: 17 | 2026-06-28T06:39:56+00:00 | Vulnerability · Source |
| CVE-2014-0502 | redhat_vex | flash-plugin: multiple flaws lead to arbitrary code execution (APSB14-07) | fixed: 5 | 2026-06-28T06:39:56+00:00 | Vulnerability · Source |
| CVE-2009-2906 | redhat_vex | samba: infinite loop flaw in smbd on unexpected oplock break notification reply | fixed: 228 | 2026-06-28T06:39:55+00:00 | Vulnerability · Source |