VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299463 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-44331 | redhat_vex | ProFTPD: mod_wrap2_sql: SQL injection via reverse DNS hostname | known not affected: 1 | 2026-06-28T06:27:03+00:00 | Vulnerability · Source |
| CVE-2026-11660 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in New Tab Page | known not affected: 1 | 2026-06-28T06:27:00+00:00 | Vulnerability · Source |
| CVE-2022-21529 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2022) | fixed: 202 known not affected: 123 | 2026-06-28T06:27:00+00:00 | Vulnerability · Source |
| CVE-2020-2570 | redhat_vex | mysql: C API unspecified vulnerability (CPU Jan 2020) | fixed: 337 known not affected: 92 | 2026-06-28T06:27:00+00:00 | Vulnerability · Source |
| CVE-2025-31675 | redhat_vex | drupal: Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004 | known not affected: 1 | 2026-06-28T06:27:00+00:00 | Vulnerability · Source |
| CVE-2025-3264 | redhat_vex | transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers | known not affected: 60 | 2026-06-28T06:26:59+00:00 | Vulnerability · Source |
| CVE-2026-24116 | redhat_vex | wasmtime: Wasmtime segfault or unused out-of-sandbox load with f64.copysign operator on x86-64 | known not affected: 1 | 2026-06-28T06:26:56+00:00 | Vulnerability · Source |
| CVE-2025-32445 | redhat_vex | argo-events: Argo Events users can gain privileged access to the host system and cluster with EventSource and Sensor CR | known not affected: 2 | 2026-06-28T06:26:56+00:00 | Vulnerability · Source |
| CVE-2013-6629 | redhat_vex | libjpeg: information leak (read of uninitialized memory) | fixed: 686 known not affected: 7 | 2026-06-28T06:26:56+00:00 | Vulnerability · Source |
| CVE-2015-2639 | redhat_vex | mysql: unspecified vulnerability related to Server:Security:Firewall (CPU July 2015) | fixed: 147 known not affected: 41 | 2026-06-28T06:26:54+00:00 | Vulnerability · Source |
| CVE-2022-1789 | redhat_vex | kernel: KVM: NULL pointer dereference in kvm_mmu_invpcid_gva | fixed: 531 known not affected: 42 | 2026-06-28T06:26:53+00:00 | Vulnerability · Source |
| CVE-2020-14861 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020) | fixed: 155 known not affected: 92 | 2026-06-28T06:26:53+00:00 | Vulnerability · Source |
| CVE-2015-2638 | redhat_vex | JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D) | fixed: 636 | 2026-06-28T06:26:52+00:00 | Vulnerability · Source |
| CVE-2026-23927 | redhat_vex | Zabbix Agent 2: Oracle: Zabbix Agent 2: Oracle database credential disclosure via TNS connection string injection | known not affected: 1 | 2026-06-28T06:26:52+00:00 | Vulnerability · Source |
| CVE-2026-11647 | redhat_vex | chromium-browser: Use after free in Printing | known not affected: 1 | 2026-06-28T06:26:50+00:00 | Vulnerability · Source |
| CVE-2015-2628 | redhat_vex | OpenJDK: IIOPInputStream type confusion vulnerability (CORBA, 8076376) | fixed: 650 | 2026-06-28T06:26:50+00:00 | Vulnerability · Source |
| CVE-2026-23257 | redhat_vex | kernel: net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup | known affected: 76 known not affected: 198 | 2026-06-28T06:26:49+00:00 | Vulnerability · Source |
| CVE-2021-3587 | redhat_vex | kernel: nfc: Null pointer dereference in llcp_sock_getname | known not affected: 198 | 2026-06-28T06:26:49+00:00 | Vulnerability · Source |
| CVE-2020-14793 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020) | fixed: 155 known affected: 10 known not affected: 82 | 2026-06-28T06:26:49+00:00 | Vulnerability · Source |
| CVE-2026-52926 | redhat_vex | kernel: batman-adv: clear current gateway during teardown | known not affected: 274 | 2026-06-28T06:26:46+00:00 | Vulnerability · Source |
| CVE-2026-11692 | redhat_vex | chromium-browser: Use after free in Read Anything | known not affected: 1 | 2026-06-28T06:26:45+00:00 | Vulnerability · Source |
| CVE-2026-11677 | redhat_vex | chromium-browser: Race in Network | known not affected: 1 | 2026-06-28T06:26:45+00:00 | Vulnerability · Source |
| CVE-2022-1263 | redhat_vex | kernel: KVM: NULL pointer dereference in kvm_dirty_ring_push in virt/kvm/dirty_ring.c | fixed: 346 known not affected: 42 | 2026-06-28T06:26:45+00:00 | Vulnerability · Source |
| CVE-2026-31440 | redhat_vex | kernel: Linux kernel: Denial of Service due to event log memory leak in dmaengine: idxd | known affected: 184 known not affected: 90 | 2026-06-28T06:26:42+00:00 | Vulnerability · Source |
| CVE-2020-14656 | redhat_vex | mysql: Server: Locking unspecified vulnerability (CPU Jul 2020) | fixed: 337 known not affected: 92 | 2026-06-28T06:26:42+00:00 | Vulnerability · Source |
| CVE-2013-1557 | redhat_vex | OpenJDK: LogStream.setDefaultStream() missing security restrictions (RMI, 8001329) | fixed: 543 | 2026-06-28T06:26:40+00:00 | Vulnerability · Source |
| CVE-2026-23232 | redhat_vex | kernel: Revert "f2fs: block cache/dio write during f2fs_enable_checkpoint()" | known not affected: 274 | 2026-06-28T06:26:39+00:00 | Vulnerability · Source |
| CVE-2025-57833 | redhat_vex | django: Django SQL injection in FilteredRelation column aliases | fixed: 50 known affected: 4 known not affected: 637 | 2026-06-28T06:26:38+00:00 | Vulnerability · Source |
| CVE-2022-0617 | redhat_vex | kernel: NULL pointer dereference in udf_expand_file_adinicbdue() during writeback | fixed: 475 known affected: 28 known not affected: 14 | 2026-06-28T06:26:37+00:00 | Vulnerability · Source |
| CVE-2026-11657 | redhat_vex | chromium-browser: Use after free in Payments | known not affected: 1 | 2026-06-28T06:26:37+00:00 | Vulnerability · Source |
| CVE-2015-1231 | redhat_vex | chromium-browser: Various fixes from internal audits, fuzzing and other initiatives. | fixed: 15 | 2026-06-28T06:26:36+00:00 | Vulnerability · Source |
| CVE-2025-59475 | redhat_vex | jenkins: Missing permission check in authenticated users' profile menu | known affected: 1 | 2026-06-28T06:26:36+00:00 | Vulnerability · Source |
| CVE-2026-10014 | redhat_vex | chromium-browser: Use after free in WebMIDI | known not affected: 1 | 2026-06-28T06:26:34+00:00 | Vulnerability · Source |
| CVE-2022-0358 | redhat_vex | QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 | fixed: 4296 known affected: 44 known not affected: 44 | 2026-06-28T06:26:33+00:00 | Vulnerability · Source |
| CVE-2025-57106 | redhat_vex | Kitware VTK: vtk: Kitware VTK: Buffer Overflow in GLTF accessor data processing | known not affected: 1 | 2026-06-28T06:26:33+00:00 | Vulnerability · Source |
| CVE-2026-25556 | redhat_vex | MuPDF: MuPDF: Denial of Service via crafted input during barcode decoding | known not affected: 1 | 2026-06-28T06:26:32+00:00 | Vulnerability · Source |
| CVE-2014-6555 | redhat_vex | mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014) | fixed: 278 under investigation: 9 | 2026-06-28T06:26:32+00:00 | Vulnerability · Source |
| CVE-2020-1723 | redhat_vex | keycloak: logout endpoint /oauth/logout?redirect=url can be abused to redirect logged in users to arbitrary web pages | known affected: 1 known not affected: 3 | 2026-06-28T06:26:32+00:00 | Vulnerability · Source |
| CVE-2026-11628 | redhat_vex | chromium-browser: Use after free in Ozone | known not affected: 1 | 2026-06-28T06:26:31+00:00 | Vulnerability · Source |
| CVE-2010-0190 | redhat_vex | Acroread: Multiple code execution flaws (APSB10-09) | fixed: 12 | 2026-06-28T06:26:30+00:00 | Vulnerability · Source |
| CVE-2010-0196 | redhat_vex | Acroread: Multiple code execution flaws (APSB10-09) | fixed: 12 | 2026-06-28T06:26:30+00:00 | Vulnerability · Source |
| CVE-2026-11662 | redhat_vex | chromium-browser: Type Confusion in Bindings | known not affected: 1 | 2026-06-28T06:26:30+00:00 | Vulnerability · Source |
| CVE-2026-10022 | redhat_vex | chromium-browser: Type Confusion in V8 | known not affected: 1 | 2026-06-28T06:26:30+00:00 | Vulnerability · Source |
| CVE-2026-11697 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in UI | known not affected: 1 | 2026-06-28T06:26:30+00:00 | Vulnerability · Source |
| CVE-2026-6986 | redhat_vex | mongoose: Mongoose: Improper cryptographic signature verification | known not affected: 1 | 2026-06-28T06:26:30+00:00 | Vulnerability · Source |
| CVE-2025-71107 | redhat_vex | kernel: f2fs: ensure node page reads complete before f2fs_put_super() finishes | known not affected: 274 | 2026-06-28T06:26:28+00:00 | Vulnerability · Source |
| CVE-2015-0403 | redhat_vex | JDK: unspecified vulnerability fixed in 6u91, 7u75 and 8u31 (Deployment) | fixed: 527 known not affected: 7 | 2026-06-28T06:26:27+00:00 | Vulnerability · Source |
| CVE-2021-47497 | redhat_vex | kernel: nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells | fixed: 709 known affected: 50 known not affected: 22 | 2026-06-28T06:26:26+00:00 | Vulnerability · Source |
| CVE-2021-47435 | redhat_vex | kernel: dm: fix mempool NULL pointer race when completing IO | fixed: 390 known affected: 42 known not affected: 108 | 2026-06-28T06:26:24+00:00 | Vulnerability · Source |
| CVE-2021-47468 | redhat_vex | kernel: isdn: mISDN: Fix sleeping function called from invalid context | fixed: 413 known affected: 42 known not affected: 111 | 2026-06-28T06:26:24+00:00 | Vulnerability · Source |