VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299463 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2007-3655 | redhat_vex | A buffer overflow vulnerability in Java Web Start URL parsing code | fixed: 158 | 2026-06-28T06:25:09+00:00 | Vulnerability · Source |
| CVE-2026-12023 | redhat_vex | chromium-browser: Google Chrome: Sandbox Escape vulnerability in GPU component | known not affected: 1 | 2026-06-28T06:25:09+00:00 | Vulnerability · Source |
| CVE-2019-2532 | redhat_vex | mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019) | fixed: 291 known affected: 8 known not affected: 98 | 2026-06-28T06:25:08+00:00 | Vulnerability · Source |
| CVE-2014-4266 | redhat_vex | OpenJDK: InfoBuilder incorrect return values (Serviceability, 8033301) | fixed: 503 known affected: 20 | 2026-06-28T06:25:08+00:00 | Vulnerability · Source |
| CVE-2021-3733 | redhat_vex | python: urllib: Regular expression DoS in AbstractBasicAuthHandler | fixed: 948 known affected: 57 known not affected: 4 | 2026-06-28T06:25:08+00:00 | Vulnerability · Source |
| CVE-2014-4288 | redhat_vex | JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment) | fixed: 530 | 2026-06-28T06:25:07+00:00 | Vulnerability · Source |
| CVE-2014-4274 | redhat_vex | mysql: unspecified MyISAM temporary file issue fixed in 5.5.39 and 5.6.20 | fixed: 278 under investigation: 9 | 2026-06-28T06:25:07+00:00 | Vulnerability · Source |
| CVE-2007-2263 | redhat_vex | realplayer swf file (flash media) heap overflow | fixed: 6 | 2026-06-28T06:25:06+00:00 | Vulnerability · Source |
| CVE-2014-4209 | redhat_vex | OpenJDK: SubjectDelegator protection insufficient (JMX, 8029755) | fixed: 840 | 2026-06-28T06:25:05+00:00 | Vulnerability · Source |
| CVE-2021-32606 | redhat_vex | kernel: isotp_setsockopt in net/can/isotp.c allows privilege escalation via use-after-free | known not affected: 197 | 2026-06-28T06:25:05+00:00 | Vulnerability · Source |
| CVE-2006-5857 | redhat_vex | security flaw | fixed: 56 | 2026-06-28T06:25:01+00:00 | Vulnerability · Source |
| CVE-2010-3554 | redhat_vex | OpenJDK corba reflection vulnerabilities (6891766,6925672) | fixed: 155 | 2026-06-28T06:25:00+00:00 | Vulnerability · Source |
| CVE-2021-32066 | redhat_vex | ruby: StartTLS stripping vulnerability in Net::IMAP | fixed: 1081 known affected: 16 known not affected: 33 | 2026-06-28T06:24:59+00:00 | Vulnerability · Source |
| CVE-2007-1701 | redhat_vex | php session extension global variable clobber | fixed: 608 | 2026-06-28T06:24:58+00:00 | Vulnerability · Source |
| CVE-2026-29628 | redhat_vex | tinyobjloader: tinyobjloader: Denial of Service via crafted .mtl file | known not affected: 1 | 2026-06-28T06:24:58+00:00 | Vulnerability · Source |
| CVE-2021-3638 | redhat_vex | QEMU: ati-vga: inconsistent check in ati_2d_blt() may lead to out-of-bounds write | known not affected: 126 | 2026-06-28T06:24:56+00:00 | Vulnerability · Source |
| CVE-2021-31615 | redhat_vex | bluetooth: Packet injection may lead to MITM or terminate existing link | known not affected: 197 | 2026-06-28T06:24:54+00:00 | Vulnerability · Source |
| CVE-2021-3156 | redhat_vex | sudo: Heap buffer overflow in argument parsing | fixed: 211 known not affected: 106 | 2026-06-28T06:24:54+00:00 | Vulnerability · Source |
| CVE-2005-3352 | redhat_vex | httpd cross-site scripting flaw in mod_imap | fixed: 160 | 2026-06-28T06:24:53+00:00 | Vulnerability · Source |
| CVE-2021-3139 | redhat_vex | tcmu-runner: SCSI target (LIO) write to any block on ILO backstore | fixed: 729 known affected: 1 known not affected: 4 | 2026-06-28T06:24:53+00:00 | Vulnerability · Source |
| CVE-2014-3190 | redhat_vex | chromium: multiple security fixes in Chrome 38.0.2125.101 | fixed: 15 | 2026-06-28T06:24:48+00:00 | Vulnerability · Source |
| CVE-2014-2397 | redhat_vex | OpenJDK: classfile parser invalid BootstrapMethods attribute length (Hotspot, 8034926) | fixed: 393 known not affected: 31 | 2026-06-28T06:24:46+00:00 | Vulnerability · Source |
| CVE-2014-2412 | redhat_vex | OpenJDK: AWT thread context handling (AWT, 8025010) | fixed: 856 known not affected: 7 | 2026-06-28T06:24:43+00:00 | Vulnerability · Source |
| CVE-2021-29648 | redhat_vex | kernel: DoS due to BPF subsystem does not properly consider that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF | known not affected: 197 | 2026-06-28T06:24:41+00:00 | Vulnerability · Source |
| CVE-2010-0837 | redhat_vex | OpenJDK JAR "unpack200" must verify input parameters (6902299) | fixed: 390 | 2026-06-28T06:24:41+00:00 | Vulnerability · Source |
| CVE-2021-29647 | redhat_vex | kernel: information disclosure due to uninitialized data structure in qrtr_recvmsg function in net/qrtr/qrtr.c | known not affected: 197 | 2026-06-28T06:24:40+00:00 | Vulnerability · Source |
| CVE-2026-7246 | redhat_vex | github.com/pallets/click: Pallets Click: Arbitrary command execution via command injection in click.edit() | fixed: 20 known not affected: 469 | 2026-06-28T06:24:39+00:00 | Vulnerability · Source |
| CVE-2026-24905 | redhat_vex | inspektor-gadget: Command Injection in Makefile.build | known not affected: 1 | 2026-06-28T06:24:39+00:00 | Vulnerability · Source |
| CVE-2021-28861 | redhat_vex | python: open redirection vulnerability in lib/http/server.py may lead to information disclosure | fixed: 629 known affected: 76 known not affected: 99 | 2026-06-28T06:24:34+00:00 | Vulnerability · Source |
| CVE-2014-0559 | redhat_vex | flash-plugin: multiple code execution or security bypass flaws (APSB14-21) | fixed: 5 | 2026-06-28T06:24:33+00:00 | Vulnerability · Source |
| CVE-2004-0550 | redhat_vex | security flaw | fixed: 1 | 2026-06-28T06:24:32+00:00 | Vulnerability · Source |
| CVE-2014-0587 | redhat_vex | flash-plugin: Multiple code-execution flaws (APSB14-27) | fixed: 5 | 2026-06-28T06:24:30+00:00 | Vulnerability · Source |
| CVE-2021-27218 | redhat_vex | glib: integer overflow in g_byte_array_new_take function when called with a buffer of 4GB or more on a 64-bit platform | fixed: 82 known affected: 16 known not affected: 11 | 2026-06-28T06:24:27+00:00 | Vulnerability · Source |
| CVE-2026-33598 | redhat_vex | dnsdist: out-of-bounds read in cache inspection via Lua | known not affected: 1 | 2026-06-28T06:24:27+00:00 | Vulnerability · Source |
| CVE-2014-0458 | redhat_vex | OpenJDK: Activation framework default command map caching (JAX-WS, 8025152) | fixed: 749 known not affected: 15 | 2026-06-28T06:24:26+00:00 | Vulnerability · Source |
| CVE-2014-0455 | redhat_vex | OpenJDK: MethodHandle variable argument lists handling (Libraries, 8029844) | fixed: 404 known not affected: 37 | 2026-06-28T06:24:26+00:00 | Vulnerability · Source |
| CVE-2026-11635 | redhat_vex | chromium-browser: Use after free in Bluetooth | known not affected: 1 | 2026-06-28T06:24:25+00:00 | Vulnerability · Source |
| CVE-2025-70069 | redhat_vex | Assimp: Assimp: Denial of Service via FBXConverter.cpp and ConvertMeshMultiMaterial() method | known not affected: 8 | 2026-06-28T06:24:25+00:00 | Vulnerability · Source |
| CVE-2014-2431 | redhat_vex | mysql: unspecified DoS related to Options (CPU April 2014) | fixed: 190 under investigation: 9 | 2026-06-28T06:24:23+00:00 | Vulnerability · Source |
| CVE-2019-19074 | redhat_vex | kernel: a memory leak in the ath9k management function in allows local DoS | fixed: 150 known affected: 55 known not affected: 1 | 2026-06-28T06:24:22+00:00 | Vulnerability · Source |
| CVE-2026-31658 | redhat_vex | kernel: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() | known not affected: 274 | 2026-06-28T06:24:22+00:00 | Vulnerability · Source |
| CVE-2026-33593 | redhat_vex | dnsdist: denial of service via crafted DNSCrypt query | known not affected: 1 | 2026-06-28T06:24:22+00:00 | Vulnerability · Source |
| CVE-2019-18786 | redhat_vex | kernel: memory disclosure in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c | known not affected: 104 | 2026-06-28T06:24:19+00:00 | Vulnerability · Source |
| CVE-2026-31655 | redhat_vex | kernel: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled | known affected: 184 known not affected: 90 | 2026-06-28T06:24:18+00:00 | Vulnerability · Source |
| CVE-2025-57319 | redhat_vex | fast-redact: fast-redact prototype pollution | known affected: 19 | 2026-06-28T06:24:18+00:00 | Vulnerability · Source |
| CVE-2021-2418 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2021) | fixed: 155 known not affected: 119 | 2026-06-28T06:24:17+00:00 | Vulnerability · Source |
| CVE-2021-2422 | redhat_vex | mysql: Server: PS unspecified vulnerability (CPU Jul 2021) | fixed: 155 known not affected: 119 | 2026-06-28T06:24:17+00:00 | Vulnerability · Source |
| CVE-2021-2417 | redhat_vex | mysql: Server: GIS unspecified vulnerability (CPU Jul 2021) | fixed: 155 known not affected: 119 | 2026-06-28T06:24:16+00:00 | Vulnerability · Source |
| CVE-2021-23840 | redhat_vex | openssl: integer overflow in CipherUpdate | fixed: 294 known affected: 5 known not affected: 16 | 2026-06-28T06:24:15+00:00 | Vulnerability · Source |
| CVE-2015-4736 | redhat_vex | JDK: unspecified vulnerability fixed in 7u85 and 8u51 (Deployment) | fixed: 305 | 2026-06-28T06:24:12+00:00 | Vulnerability · Source |