VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299463 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-7953 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Omnibox | known not affected: 1 | 2026-06-28T06:22:16+00:00 | Vulnerability · Source |
| CVE-2020-6475 | redhat_vex | chromium-browser: Incorrect security UI in full screen | fixed: 14 | 2026-06-28T06:22:16+00:00 | Vulnerability · Source |
| CVE-2003-0542 | redhat_vex | security flaw | fixed: 71 | 2026-06-28T06:22:14+00:00 | Vulnerability · Source |
| CVE-2022-0001 | redhat_vex | hw: cpu: intel: Branch History Injection (BHI) | fixed: 150 known affected: 42 known not affected: 108 | 2026-06-28T06:22:08+00:00 | Vulnerability · Source |
| CVE-2020-29443 | redhat_vex | QEMU: ide: atapi: OOB access while processing read commands | fixed: 1824 known affected: 23 known not affected: 7 | 2026-06-28T06:21:59+00:00 | Vulnerability · Source |
| CVE-2022-4172 | redhat_vex | QEMU: ACPI ERST: memory corruption issues in read_erst_record and write_erst_record | fixed: 102 known not affected: 75 | 2026-06-28T06:21:34+00:00 | Vulnerability · Source |
| CVE-2025-32460 | redhat_vex | GraphicsMagick: heap-based buffer over-read in ReadJXLImage | known not affected: 1 | 2026-06-28T06:21:21+00:00 | Vulnerability · Source |
| CVE-2025-62693 | redhat_vex | mediawiki-lastmodified: Stored XSS through system messages in LastModified | known not affected: 1 | 2026-06-28T06:21:15+00:00 | Vulnerability · Source |
| CVE-2021-44533 | redhat_vex | nodejs: Incorrect handling of certificate subject and issuer fields | fixed: 242 known affected: 1 known not affected: 85 | 2026-06-28T06:21:14+00:00 | Vulnerability · Source |
| CVE-2026-32726 | redhat_vex | scitokens-cpp: SciTokens C++: Authorization bypass due to incorrect path-based scope validation | known not affected: 1 | 2026-06-28T06:21:09+00:00 | Vulnerability · Source |
| CVE-2026-32725 | redhat_vex | SciTokens C++: scitokens-cpp: SciTokens C++: Authorization bypass via path traversal in scope claims | known not affected: 1 | 2026-06-28T06:21:08+00:00 | Vulnerability · Source |
| CVE-2020-25723 | redhat_vex | QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c | fixed: 3437 known affected: 90 known not affected: 5 | 2026-06-28T06:20:58+00:00 | Vulnerability · Source |
| CVE-2019-2537 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Jan 2019) | fixed: 934 known affected: 48 known not affected: 18 | 2026-06-28T06:20:54+00:00 | Vulnerability · Source |
| CVE-2019-2436 | redhat_vex | mysql: Server: Replication unspecified vulnerability (CPU Jan 2019) | fixed: 291 known not affected: 106 | 2026-06-28T06:20:46+00:00 | Vulnerability · Source |
| CVE-2025-6196 | redhat_vex | libgepub: Integer Overflow in libgepub's EPUB Archive Handling | known affected: 3 | 2026-06-28T06:20:45+00:00 | Vulnerability · Source |
| CVE-2020-25640 | redhat_vex | wildfly: resource adapter logs plaintext JMS password at warning level on connection error | fixed: 345 known affected: 9 known not affected: 3 | 2026-06-28T06:20:43+00:00 | Vulnerability · Source |
| CVE-2026-27940 | redhat_vex | llama.cpp: heap-based buffer overflow via integer overflow in mem_size calculation (bypass of CVE-2025-53630 fix) | known not affected: 1 | 2026-06-28T06:20:41+00:00 | Vulnerability · Source |
| CVE-2012-0769 | redhat_vex | flash-plugin: information disclosure flaw (APSB12-05) | fixed: 5 | 2026-06-28T06:20:40+00:00 | Vulnerability · Source |
| CVE-2020-25032 | redhat_vex | python-flask-cors: allows ../ directory traversal to access private resources | known affected: 1 | 2026-06-28T06:20:39+00:00 | Vulnerability · Source |
| CVE-2021-43057 | redhat_vex | kernel: use-after-free in the SELinux handler for PTRACE_TRACEME | known not affected: 197 | 2026-06-28T06:20:36+00:00 | Vulnerability · Source |
| CVE-2016-4146 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T06:20:33+00:00 | Vulnerability · Source |
| CVE-2020-24165 | redhat_vex | QEMU: use-after-free in TCG accelerator can lead to local privilege escalation | known not affected: 77 | 2026-06-28T06:20:32+00:00 | Vulnerability · Source |
| CVE-2026-28804 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF with ASCIIHexDecode filter | known affected: 6 | 2026-06-28T06:20:32+00:00 | Vulnerability · Source |
| CVE-2019-9947 | redhat_vex | python: CRLF injection via the path part of the url passed to urlopen() | fixed: 890 known affected: 16 known not affected: 42 | 2026-06-28T06:20:29+00:00 | Vulnerability · Source |
| CVE-2019-20372 | redhat_vex | nginx: HTTP request smuggling in configurations with URL redirect used as error_page | fixed: 153 known affected: 34 | 2026-06-28T06:20:26+00:00 | Vulnerability · Source |
| CVE-2019-2455 | redhat_vex | mysql: Server: Parser unspecified vulnerability (CPU Jan 2019) | fixed: 868 known affected: 57 known not affected: 19 | 2026-06-28T06:20:25+00:00 | Vulnerability · Source |
| CVE-2022-40897 | redhat_vex | pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py | fixed: 1078 known affected: 9 known not affected: 75 | 2026-06-28T06:20:24+00:00 | Vulnerability · Source |
| CVE-2026-8557 | redhat_vex | chromium-browser: chromium-browser: Use after free in Accessibility | known not affected: 1 | 2026-06-28T06:20:24+00:00 | Vulnerability · Source |
| CVE-2020-17376 | redhat_vex | openstack-nova: Soft reboot after live-migration reverts instance to original source domain XML | fixed: 93 known affected: 13 | 2026-06-28T06:20:13+00:00 | Vulnerability · Source |
| CVE-2020-1725 | redhat_vex | keycloak-gatekeeper: improper usage of parsed claims for authorization leads to improper resource access | known not affected: 4 | 2026-06-28T06:20:02+00:00 | Vulnerability · Source |
| CVE-2020-1727 | redhat_vex | keycloak: missing input validation in IDP authorization URLs | fixed: 3 known affected: 3 | 2026-06-28T06:20:02+00:00 | Vulnerability · Source |
| CVE-2026-40686 | redhat_vex | Exim: Exim: Information disclosure via malformed UTF-8 header data | known not affected: 1 | 2026-06-28T06:20:01+00:00 | Vulnerability · Source |
| CVE-2020-16092 | redhat_vex | QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c | fixed: 1825 known affected: 47 known not affected: 24 | 2026-06-28T06:19:54+00:00 | Vulnerability · Source |
| CVE-2018-7191 | redhat_vex | kernel: denial of service via ioctl call in network tun handling | fixed: 438 known affected: 27 known not affected: 70 | 2026-06-28T06:19:40+00:00 | Vulnerability · Source |
| CVE-2020-14339 | redhat_vex | libvirt: leak of /dev/mapper/control into QEMU guests | fixed: 1756 known affected: 62 known not affected: 105 | 2026-06-28T06:19:24+00:00 | Vulnerability · Source |
| CVE-2021-4207 | redhat_vex | QEMU: QXL: double fetch in qxl_cursor() can lead to heap buffer overflow | fixed: 1692 known affected: 64 known not affected: 24 | 2026-06-28T06:19:24+00:00 | Vulnerability · Source |
| CVE-2026-22258 | redhat_vex | suricata: Suricata DCERPC: unbounded fragment buffering leads to memory exhaustion | known not affected: 1 | 2026-06-28T06:19:22+00:00 | Vulnerability · Source |
| CVE-2025-4057 | redhat_vex | activemq-artemis-operator: AMQ Broker Operator Starting Credentials Reuse | fixed: 15 | 2026-06-28T06:19:18+00:00 | Vulnerability · Source |
| CVE-2019-2614 | redhat_vex | mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) | fixed: 1269 known affected: 54 | 2026-06-28T06:19:10+00:00 | Vulnerability · Source |
| CVE-2025-61927 | redhat_vex | happy-dom: Happy-DOM VM Context Escape | fixed: 4 known not affected: 57 | 2026-06-28T06:19:09+00:00 | Vulnerability · Source |
| CVE-2020-14313 | redhat_vex | quay: build triggers can disclose robot account names and existence of private repos within namespaces | known affected: 1 | 2026-06-28T06:19:06+00:00 | Vulnerability · Source |
| CVE-2019-12382 | redhat_vex | kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service | fixed: 447 known affected: 42 known not affected: 17 | 2026-06-28T06:19:06+00:00 | Vulnerability · Source |
| CVE-2021-4197 | redhat_vex | kernel: cgroup: Use open-time creds and namespace for migration perm checks | fixed: 300 known not affected: 148 | 2026-06-28T06:19:04+00:00 | Vulnerability · Source |
| CVE-2025-3636 | redhat_vex | moodle: IDOR in Moodle RSS Block Allows Unauthorized Access to RSS Feeds | known not affected: 1 | 2026-06-28T06:19:01+00:00 | Vulnerability · Source |
| CVE-2019-11775 | redhat_vex | JDK: Failure to privatize a value pulled out of the loop by versioning | fixed: 201 | 2026-06-28T06:19:01+00:00 | Vulnerability · Source |
| CVE-2026-9898 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in GPU | known not affected: 1 | 2026-06-28T06:18:59+00:00 | Vulnerability · Source |
| CVE-2026-4697 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component | fixed: 320 known affected: 8 | 2026-06-28T06:18:59+00:00 | Vulnerability · Source |
| CVE-2019-13115 | redhat_vex | libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write | known affected: 12 known not affected: 4 | 2026-06-28T06:18:51+00:00 | Vulnerability · Source |
| CVE-2020-12770 | redhat_vex | kernel: sg_write function lacks an sg_remove_request call in a certain failure case | fixed: 685 known affected: 43 known not affected: 9 | 2026-06-28T06:18:50+00:00 | Vulnerability · Source |
| CVE-2020-13362 | redhat_vex | QEMU: megasas: OOB read access due to invalid index leads to DoS | known not affected: 93 | 2026-06-28T06:18:49+00:00 | Vulnerability · Source |