VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299850 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2011-2517 | redhat_vex | kernel: nl80211: missing check for valid SSID size in scan operations | fixed: 198 known not affected: 1 | 2026-06-27T15:03:48+00:00 | Vulnerability · Source |
| CVE-2011-2925 | redhat_vex | cumin: broker username/password appears in the log file | fixed: 165 known affected: 1 | 2026-06-27T15:01:24+00:00 | Vulnerability · Source |
| CVE-2011-3620 | redhat_vex | qpid-cpp: cluster authentication ignores cluster-* settings | fixed: 177 known affected: 1 known not affected: 14 | 2026-06-27T15:01:09+00:00 | Vulnerability · Source |
| CVE-2011-3648 | redhat_vex | Mozilla: Universal XSS likely with MultiByte charset (MFSA 2011-47) | fixed: 274 | 2026-06-27T15:01:07+00:00 | Vulnerability · Source |
| CVE-2011-3650 | redhat_vex | Mozilla: crash while profiling page with many functions (MFSA 2011-49) | fixed: 130 | 2026-06-27T15:01:03+00:00 | Vulnerability · Source |
| CVE-2011-3346 | redhat_vex | qemu: local DoS with SCSI CD-ROM | fixed: 29 known not affected: 6 | 2026-06-27T15:00:53+00:00 | Vulnerability · Source |
| CVE-2011-3101 | redhat_vex | Mozilla: Miscellaneous memory safety hazards (rv:13.0/ rv:10.0.5) (MFSA 2012-34) | fixed: 160 | 2026-06-27T15:00:47+00:00 | Vulnerability · Source |
| CVE-2011-2998 | redhat_vex | Mozilla: Integer underflow when using JavaScript RegExp (MFSA 2011-37) | fixed: 274 | 2026-06-27T15:00:43+00:00 | Vulnerability · Source |
| CVE-2011-2999 | redhat_vex | Mozilla: XSS via plugins and shadowed window.location object (MFSA 2011-38) | fixed: 274 | 2026-06-27T15:00:42+00:00 | Vulnerability · Source |
| CVE-2011-2995 | redhat_vex | Mozilla: Miscellaneous memory safety hazards (MFSA 2011-36) | fixed: 130 known affected: 3 | 2026-06-27T15:00:38+00:00 | Vulnerability · Source |
| CVE-2011-2996 | redhat_vex | Mozilla: crash in plugin API (MFSA 2011-36) | known not affected: 9 | 2026-06-27T15:00:35+00:00 | Vulnerability · Source |
| CVE-2011-2981 | redhat_vex | Mozilla: Privilege escalation using event handlers | fixed: 121 | 2026-06-27T15:00:31+00:00 | Vulnerability · Source |
| CVE-2011-3062 | redhat_vex | Mozilla: Off-by-one error in OpenType Sanitizer (MFSA 2012-31) | fixed: 160 | 2026-06-27T15:00:28+00:00 | Vulnerability · Source |
| CVE-2011-2983 | redhat_vex | Mozilla: Private data leakage using RegExp.input | fixed: 265 | 2026-06-27T15:00:21+00:00 | Vulnerability · Source |
| CVE-2011-3000 | redhat_vex | Mozilla: Defense against multiple Location headers due to CRLF Injection (MFSA 2011-39) | fixed: 130 known affected: 3 | 2026-06-27T15:00:19+00:00 | Vulnerability · Source |
| CVE-2011-3378 | redhat_vex | rpm: crashes and overflows on malformed header | fixed: 332 | 2026-06-27T14:57:16+00:00 | Vulnerability · Source |
| CVE-2011-3919 | redhat_vex | libxml2: Heap-based buffer overflow when decoding an entity reference with a long name | fixed: 216 | 2026-06-27T14:55:52+00:00 | Vulnerability · Source |
| CVE-2011-3647 | redhat_vex | Mozilla: Security problem with loadSubScript on 1.9.2 branch (MFSA 2011-46) | fixed: 130 | 2026-06-27T14:55:00+00:00 | Vulnerability · Source |
| CVE-2026-0798 | redhat_vex | gitea: Gitea Release Email Notifications Leak Private Repository Release Details After Access Revocation | known not affected: 9 | 2026-06-27T14:49:29+00:00 | Vulnerability · Source |
| CVE-2025-9394 | redhat_vex | PoDoFo: PoDoFo PDF Dictionary PdfTokenizer.cpp DetermineDataType use after free | known not affected: 1 | 2026-06-27T14:48:48+00:00 | Vulnerability · Source |
| CVE-2025-8862 | redhat_vex | yugabytedb: YugabyteDB information exposure | known affected: 2 | 2026-06-27T14:48:24+00:00 | Vulnerability · Source |
| CVE-2025-8580 | redhat_vex | chromium-browser: Inappropriate implementation in Filesystems in Google Chrome | known not affected: 1 | 2026-06-27T14:48:10+00:00 | Vulnerability · Source |
| CVE-2025-8579 | redhat_vex | chromium-browser: Inappropriate implementation in Picture In Picture in Google Chrome | known not affected: 1 | 2026-06-27T14:48:06+00:00 | Vulnerability · Source |
| CVE-2025-7445 | redhat_vex | sigs.k8s.io/secrets-store-sync-controller: Kubernetes secrets-store-sync-controller discloses service account tokens in logs | known not affected: 1 | 2026-06-27T14:47:27+00:00 | Vulnerability · Source |
| CVE-2025-69848 | redhat_vex | netbox: Netbox Cross site scripting | known not affected: 1 | 2026-06-27T14:45:11+00:00 | Vulnerability · Source |
| CVE-2025-69413 | redhat_vex | Gitea: Gitea: Information disclosure via differing authentication responses | known affected: 8 | 2026-06-27T14:44:58+00:00 | Vulnerability · Source |
| CVE-2025-6921 | redhat_vex | transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers | known affected: 43 | 2026-06-27T14:44:39+00:00 | Vulnerability · Source |
| CVE-2025-69202 | redhat_vex | axios-cache-interceptor: axios-cache-interceptor Vulnerable to Cache Poisoning via Ignored HTTP Vary Header | known not affected: 1 | 2026-06-27T14:44:38+00:00 | Vulnerability · Source |
| CVE-2025-68940 | redhat_vex | gitea: Gitea: Unauthorized branch deletion due to inadequate permission enforcement | known affected: 8 | 2026-06-27T14:44:33+00:00 | Vulnerability · Source |
| CVE-2011-4080 | redhat_vex | kernel: sysctl: restrict write access to dmesg_restrict | fixed: 156 known affected: 14 | 2026-06-27T14:41:49+00:00 | Vulnerability · Source |
| CVE-2011-4609 | redhat_vex | glibc: svc_run() produces high cpu usage when accept() fails with EMFILE error | fixed: 340 | 2026-06-27T14:41:48+00:00 | Vulnerability · Source |
| CVE-2012-0833 | redhat_vex | 389: denial of service when using certificate groups | fixed: 55 | 2026-06-27T14:41:44+00:00 | Vulnerability · Source |
| CVE-2012-0809 | redhat_vex | sudo: format string flaw in sudo_debug() | known not affected: 5 | 2026-06-27T14:41:42+00:00 | Vulnerability · Source |
| CVE-2012-1141 | redhat_vex | freetype: BDF parser _bdf_list_split() fails to properly initialize field array (#35658) | fixed: 102 | 2026-06-27T14:41:37+00:00 | Vulnerability · Source |
| CVE-2012-1131 | redhat_vex | freetype: incorrect type cast allowing input sanity check bypass in ft_smooth_render_generic() (#35604) | fixed: 102 | 2026-06-27T14:41:33+00:00 | Vulnerability · Source |
| CVE-2012-1140 | redhat_vex | freetype: multiple buffer over-read in PS parser conversion functions (#35657) | fixed: 102 | 2026-06-27T14:41:33+00:00 | Vulnerability · Source |
| CVE-2012-1105 | redhat_vex | php-pear-CAS: Debug log and proxy configuration session data stored in /tmp without proper protection | known not affected: 1 | 2026-06-27T14:41:30+00:00 | Vulnerability · Source |
| CVE-2012-1139 | redhat_vex | freetype: data buffer underflow in BDF parser _bdf_parse_glyphs() (#35656) | fixed: 102 | 2026-06-27T14:41:29+00:00 | Vulnerability · Source |
| CVE-2012-1126 | redhat_vex | freetype: heap buffer over-read in BDF parsing _bdf_is_atom() (#35597, #35598) | fixed: 102 | 2026-06-27T14:41:27+00:00 | Vulnerability · Source |
| CVE-2012-1127 | redhat_vex | freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#35599, #35600) | fixed: 102 | 2026-06-27T14:41:24+00:00 | Vulnerability · Source |
| CVE-2012-1135 | redhat_vex | freetype: heap off by one read in boundary check for NPUSHB and NPUSHW instructions in TTF BIC (#35640) | known not affected: 5 | 2026-06-27T14:41:20+00:00 | Vulnerability · Source |
| CVE-2012-1137 | redhat_vex | freetype: heap buffer off-by-one in BDF parsing _bdf_list_ensure() (#35643) | fixed: 102 known not affected: 1 | 2026-06-27T14:41:19+00:00 | Vulnerability · Source |
| CVE-2012-1132 | redhat_vex | freetype: heap buffer over-read in Type1 parser parse_subrs() (#35606) | fixed: 102 | 2026-06-27T14:41:15+00:00 | Vulnerability · Source |
| CVE-2012-1138 | redhat_vex | freetype: heap OOB read in the MIRP instruction implementation in TTF BCI (#35646) | known not affected: 5 | 2026-06-27T14:41:15+00:00 | Vulnerability · Source |
| CVE-2012-1106 | redhat_vex | abrt: Setuid process core dump archived with unsafe GID permissions | fixed: 371 | 2026-06-27T14:41:11+00:00 | Vulnerability · Source |
| CVE-2012-1130 | redhat_vex | freetype: heap buffer over-read in PCF parser pcf_get_properties() (#35603) | fixed: 102 | 2026-06-27T14:41:09+00:00 | Vulnerability · Source |
| CVE-2012-1568 | redhat_vex | kernel: execshield: predictable ascii armour base address | fixed: 235 known not affected: 12 | 2026-06-27T14:41:08+00:00 | Vulnerability · Source |
| CVE-2012-2313 | redhat_vex | kernel: unfiltered netdev rio_ioctl access by users | fixed: 466 known affected: 1 | 2026-06-27T14:41:01+00:00 | Vulnerability · Source |
| CVE-2011-3656 | redhat_vex | Mozilla: Possible XSS via HTTP 0.9 errors and content-sniffing | known affected: 9 | 2026-06-27T14:41:00+00:00 | Vulnerability · Source |
| CVE-2011-4077 | redhat_vex | kernel: xfs: potential buffer overflow in xfs_readlink() | fixed: 260 known not affected: 1 | 2026-06-27T14:40:54+00:00 | Vulnerability · Source |