VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299464 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-13362 | redhat_vex | QEMU: megasas: OOB read access due to invalid index leads to DoS | known not affected: 93 | 2026-06-28T06:18:49+00:00 | Vulnerability · Source |
| CVE-2026-27977 | redhat_vex | next.js: Next.js: null origin can bypass dev HMR websocket CSRF checks | known affected: 18 | 2026-06-28T06:18:48+00:00 | Vulnerability · Source |
| CVE-2025-61873 | redhat_vex | rt: CSV injection via ticket values when TSV export is used | known not affected: 1 | 2026-06-28T06:18:46+00:00 | Vulnerability · Source |
| CVE-2020-13254 | redhat_vex | django: potential data leakage via malformed memcached keys | fixed: 9 known affected: 22 | 2026-06-28T06:18:46+00:00 | Vulnerability · Source |
| CVE-2018-3133 | redhat_vex | mysql: Server: Parser unspecified vulnerability (CPU Oct 2018) | fixed: 763 known affected: 51 known not affected: 46 | 2026-06-28T06:18:36+00:00 | Vulnerability · Source |
| CVE-2018-3136 | redhat_vex | OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534) | fixed: 1095 known affected: 8 | 2026-06-28T06:18:36+00:00 | Vulnerability · Source |
| CVE-2018-2817 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Apr 2018) | fixed: 843 known affected: 47 known not affected: 19 | 2026-06-28T06:18:35+00:00 | Vulnerability · Source |
| CVE-2020-12430 | redhat_vex | libvirt: memory leak in domstats may allow read-only user to perform DoS attack | known affected: 62 known not affected: 71 | 2026-06-28T06:18:35+00:00 | Vulnerability · Source |
| CVE-2021-4135 | redhat_vex | kernel: Heap information leak in map_lookup_elem function | known affected: 154 known not affected: 43 | 2026-06-28T06:18:33+00:00 | Vulnerability · Source |
| CVE-2020-12352 | redhat_vex | kernel: net: bluetooth: information leak when processing certain AMP packets | fixed: 970 known not affected: 32 | 2026-06-28T06:18:28+00:00 | Vulnerability · Source |
| CVE-2020-12059 | redhat_vex | ceph: specially crafted XML payload on POST requests leads to DoS by crashing RGW | fixed: 132 known not affected: 97 | 2026-06-28T06:18:26+00:00 | Vulnerability · Source |
| CVE-2019-9824 | redhat_vex | QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables | fixed: 838 known affected: 17 known not affected: 1 | 2026-06-28T06:18:22+00:00 | Vulnerability · Source |
| CVE-2020-11947 | redhat_vex | QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c may lead to information disclosure | fixed: 1756 known affected: 53 known not affected: 41 | 2026-06-28T06:18:20+00:00 | Vulnerability · Source |
| CVE-2019-9740 | redhat_vex | python: CRLF injection via the query part of the url passed to urlopen() | fixed: 890 known affected: 16 known not affected: 42 | 2026-06-28T06:18:20+00:00 | Vulnerability · Source |
| CVE-2019-9458 | redhat_vex | kernel: use after free due to race condition in the video driver leads to local privilege escalation | fixed: 379 known affected: 27 known not affected: 1 | 2026-06-28T06:18:18+00:00 | Vulnerability · Source |
| CVE-2019-0564 | redhat_vex | Core: Kestrel - WebSocket DoS via CancellationToken (CoreFX and ASP.NET) | fixed: 63 known not affected: 9 | 2026-06-28T06:18:18+00:00 | Vulnerability · Source |
| CVE-2020-10750 | redhat_vex | jaegertracing/jaeger: credentials leaked to container logs | fixed: 3 known affected: 2 | 2026-06-28T06:18:05+00:00 | Vulnerability · Source |
| CVE-2018-7536 | redhat_vex | django: Catastrophic backtracking in regular expressions via 'urlize' and 'urlizetrunc' | fixed: 1156 known affected: 35 | 2026-06-28T06:18:01+00:00 | Vulnerability · Source |
| CVE-2020-10723 | redhat_vex | dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() | fixed: 176 known affected: 38 known not affected: 94 | 2026-06-28T06:18:01+00:00 | Vulnerability · Source |
| CVE-2018-18348 | redhat_vex | chromium-browser: Inappropriate implementation in Omnibox | fixed: 12 | 2026-06-28T06:17:59+00:00 | Vulnerability · Source |
| CVE-2018-18351 | redhat_vex | chromium-browser: Insufficient policy enforcement in Navigation | fixed: 12 | 2026-06-28T06:17:58+00:00 | Vulnerability · Source |
| CVE-2019-2054 | redhat_vex | kernel: seccompass mechanism bypass | known affected: 56 known not affected: 32 | 2026-06-28T06:17:56+00:00 | Vulnerability · Source |
| CVE-2019-19533 | redhat_vex | kernel: information leak bug caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c | fixed: 150 known affected: 56 | 2026-06-28T06:17:50+00:00 | Vulnerability · Source |
| CVE-2020-0030 | redhat_vex | kernel: use after free due to a race condition in binder driver leads to local privilege escalation | known not affected: 104 | 2026-06-28T06:17:47+00:00 | Vulnerability · Source |
| CVE-2018-17204 | redhat_vex | openvswitch: Mishandle of group mods in lib/ofp-util.c:parse_group_prop_ntr_selection_method() allows for assertion failure | fixed: 56 known affected: 17 known not affected: 24 | 2026-06-28T06:17:47+00:00 | Vulnerability · Source |
| CVE-2022-36946 | redhat_vex | kernel: DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c | fixed: 475 known not affected: 42 | 2026-06-28T06:17:39+00:00 | Vulnerability · Source |
| CVE-2019-9245 | redhat_vex | kernel: out of bounds read due to a missing bounds check leads to local information disclosure | known not affected: 104 | 2026-06-28T06:17:36+00:00 | Vulnerability · Source |
| CVE-2019-8321 | redhat_vex | rubygems: Escape sequence injection vulnerability in verbose | fixed: 778 known affected: 20 known not affected: 24 | 2026-06-28T06:17:22+00:00 | Vulnerability · Source |
| CVE-2021-38199 | redhat_vex | kernel: incorrect connection-setup ordering allows operators of remote NFSv4 servers to cause a DoS | known affected: 48 known not affected: 149 | 2026-06-28T06:17:10+00:00 | Vulnerability · Source |
| CVE-2019-12067 | redhat_vex | QEMU: NULL dereference in ahci_commit_buf() leading to DoS | known affected: 43 known not affected: 32 | 2026-06-28T06:17:06+00:00 | Vulnerability · Source |
| CVE-2019-11833 | redhat_vex | kernel: fs/ext4/extents.c leads to information disclosure | fixed: 358 known affected: 43 | 2026-06-28T06:17:03+00:00 | Vulnerability · Source |
| CVE-2021-3762 | redhat_vex | quay/claircore: directory traversal when scanning crafted container image layer allows for arbitrary file write | fixed: 1 known not affected: 9 | 2026-06-28T06:16:58+00:00 | Vulnerability · Source |
| CVE-2019-3863 | redhat_vex | libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes | fixed: 885 known affected: 8 | 2026-06-28T06:16:55+00:00 | Vulnerability · Source |
| CVE-2021-3716 | redhat_vex | nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS | fixed: 1886 known affected: 75 known not affected: 28 | 2026-06-28T06:16:25+00:00 | Vulnerability · Source |
| CVE-2019-19536 | redhat_vex | kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver | known affected: 41 known not affected: 63 | 2026-06-28T06:16:14+00:00 | Vulnerability · Source |
| CVE-2019-19523 | redhat_vex | kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver | fixed: 354 known affected: 42 known not affected: 1 | 2026-06-28T06:16:10+00:00 | Vulnerability · Source |
| CVE-2018-3284 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Oct 2018) | fixed: 616 known not affected: 109 | 2026-06-28T06:16:06+00:00 | Vulnerability · Source |
| CVE-2018-3282 | redhat_vex | mysql: Server: Storage Engines unspecified vulnerability (CPU Oct 2018) | fixed: 726 known affected: 51 known not affected: 46 | 2026-06-28T06:16:06+00:00 | Vulnerability · Source |
| CVE-2018-3156 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Oct 2018) | fixed: 616 known affected: 30 known not affected: 79 | 2026-06-28T06:16:03+00:00 | Vulnerability · Source |
| CVE-2021-37136 | redhat_vex | netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data | fixed: 182 known affected: 17 known not affected: 2186 | 2026-06-28T06:15:57+00:00 | Vulnerability · Source |
| CVE-2018-3060 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jul 2018) | fixed: 616 known not affected: 81 | 2026-06-28T06:15:56+00:00 | Vulnerability · Source |
| CVE-2018-2819 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2018) | fixed: 843 known affected: 47 known not affected: 19 | 2026-06-28T06:15:52+00:00 | Vulnerability · Source |
| CVE-2018-2810 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2018) | fixed: 616 known not affected: 84 | 2026-06-28T06:15:51+00:00 | Vulnerability · Source |
| CVE-2018-5390 | redhat_vex | kernel: TCP segments with random offsets allow a remote denial of service (SegmentSmack) | fixed: 945 known affected: 1 known not affected: 32 | 2026-06-28T06:15:47+00:00 | Vulnerability · Source |
| CVE-2018-2612 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jan 2018) | fixed: 563 known affected: 21 known not affected: 54 | 2026-06-28T06:15:41+00:00 | Vulnerability · Source |
| CVE-2026-53173 | redhat_vex | kernel: accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate() | known not affected: 274 | 2026-06-28T06:15:40+00:00 | Vulnerability · Source |
| CVE-2019-17498 | redhat_vex | libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c | fixed: 61 known affected: 8 known not affected: 4 | 2026-06-28T06:15:36+00:00 | Vulnerability · Source |
| CVE-2018-20961 | redhat_vex | kernel: double free vulnerability in function f_midi_set_alt in drivers/usb/gadget/function/f_midi.c causing denial of service | known not affected: 93 | 2026-06-28T06:15:26+00:00 | Vulnerability · Source |
| CVE-2018-3760 | redhat_vex | rubygem-sprockets: Path traversal in forbidden_request?() can allow remote attackers to read arbitrary files | fixed: 80 known affected: 2 known not affected: 1 | 2026-06-28T06:15:20+00:00 | Vulnerability · Source |
| CVE-2018-14617 | redhat_vex | kernel: NULL pointer dereference in fs/hfsplus/dir.c:hfsplus_lookup() when operating on a file in a crafted hfs+ image | known affected: 1 known not affected: 87 | 2026-06-28T06:15:12+00:00 | Vulnerability · Source |