VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304389 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-7181 | redhat_vex | nss: use-after-poison in sec_asn1d_parse_leaf() (MFSA 2015-133) | fixed: 706 known affected: 1 | 2026-06-27T08:24:47+00:00 | Vulnerability · Source |
| CVE-2015-7222 | redhat_vex | Mozilla: Integer underflow and buffer overflow processing MP4 metadata in libstagefright (MFSA 2015-147) | fixed: 75 known not affected: 5 | 2026-06-27T08:23:31+00:00 | Vulnerability · Source |
| CVE-2015-8605 | redhat_vex | dhcp: UDP payload length not properly checked | known affected: 12 | 2026-06-27T08:19:28+00:00 | Vulnerability · Source |
| CVE-2015-8467 | redhat_vex | samba: Denial of service attack against Windows Active Directory server. | known not affected: 96 | 2026-06-27T08:19:23+00:00 | Vulnerability · Source |
| CVE-2015-8724 | redhat_vex | wireshark: 802.11 decryption crash (wnpa-sec-2015-42) | known affected: 9 | 2026-06-27T08:19:19+00:00 | Vulnerability · Source |
| CVE-2015-8723 | redhat_vex | wireshark: 802.11 decryption crash (wnpa-sec-2015-42) | known affected: 9 | 2026-06-27T08:19:17+00:00 | Vulnerability · Source |
| CVE-2015-8733 | redhat_vex | wireshark: Sniffer file parser crash (wnpa-sec-2015-51) | known affected: 9 | 2026-06-27T08:16:16+00:00 | Vulnerability · Source |
| CVE-2015-8869 | redhat_vex | ocaml: sizes arguments are sign-extended from 32 to 64 bits | fixed: 342 | 2026-06-27T08:16:08+00:00 | Vulnerability · Source |
| CVE-2015-8103 | redhat_vex | jenkins: Remote code execution vulnerability due to unsafe deserialization in Jenkins remoting (SECURITY-218) | fixed: 310 | 2026-06-27T08:13:59+00:00 | Vulnerability · Source |
| CVE-2015-8836 | redhat_vex | fuseiso: Integer overflow, leading to heap buffer overflow when reading certain ISO ZF blocks | known affected: 1 | 2026-06-27T08:11:18+00:00 | Vulnerability · Source |
| CVE-2015-8726 | redhat_vex | wireshark: VeriWave file parser crashes (wnpa-sec-2015-44) | known affected: 9 | 2026-06-27T08:11:09+00:00 | Vulnerability · Source |
| CVE-2015-8851 | redhat_vex | nodejs-node-uuid: insecure entropy source - Math.random() | fixed: 14 known affected: 1 | 2026-06-27T08:11:04+00:00 | Vulnerability · Source |
| CVE-2015-9382 | redhat_vex | freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read | fixed: 8677 known affected: 7 known not affected: 3 | 2026-06-27T08:06:05+00:00 | Vulnerability · Source |
| CVE-2015-9381 | redhat_vex | freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash | fixed: 8677 known affected: 1 known not affected: 3 | 2026-06-27T08:06:00+00:00 | Vulnerability · Source |
| CVE-2015-9541 | redhat_vex | qt: XML entity expansion vulnerability | fixed: 363 known affected: 38 known not affected: 8 | 2026-06-27T08:05:47+00:00 | Vulnerability · Source |
| CVE-2016-0794 | redhat_vex | libreoffice: Multiple out-of-bounds overflows in lwp filter | fixed: 668 known affected: 133 known not affected: 1 | 2026-06-27T07:49:35+00:00 | Vulnerability · Source |
| CVE-2016-0782 | redhat_vex | activemq: Cross-site scripting vulnerabilities in web console | fixed: 2 known affected: 3 known not affected: 1 | 2026-06-27T07:49:32+00:00 | Vulnerability · Source |
| CVE-2016-0791 | redhat_vex | jenkins: Non-constant time comparison of CSRF crumbs (SECURITY-245) | fixed: 77 | 2026-06-27T07:49:31+00:00 | Vulnerability · Source |
| CVE-2016-0795 | redhat_vex | libreoffice: Multiple out-of-bounds overflows in lwp filter | fixed: 668 known affected: 133 known not affected: 1 | 2026-06-27T07:49:26+00:00 | Vulnerability · Source |
| CVE-2016-0771 | redhat_vex | samba: Out-of-bounds read in internal DNS server | known not affected: 96 | 2026-06-27T07:49:23+00:00 | Vulnerability · Source |
| CVE-2016-0789 | redhat_vex | jenkins: HTTP response splitting vulnerability (SECURITY-238) | fixed: 77 | 2026-06-27T07:49:18+00:00 | Vulnerability · Source |
| CVE-2016-0741 | redhat_vex | 389-ds-base: worker threads do not detect abnormally closed connections causing DoS | fixed: 27 known not affected: 4 | 2026-06-27T07:49:16+00:00 | Vulnerability · Source |
| CVE-2016-0749 | redhat_vex | spice: heap-based memory corruption within smartcard handling | fixed: 39 known affected: 1 | 2026-06-27T07:49:14+00:00 | Vulnerability · Source |
| CVE-2016-0790 | redhat_vex | jenkins: Non-constant time comparison of API token (SECURITY-241) | fixed: 77 | 2026-06-27T07:49:10+00:00 | Vulnerability · Source |
| CVE-2016-0792 | redhat_vex | jenkins: Remote code execution through remote API (SECURITY-247) | fixed: 77 | 2026-06-27T07:49:08+00:00 | Vulnerability · Source |
| CVE-2016-0785 | redhat_vex | struts2: forced double OGNL evaluation on raw input in tag attributes | known not affected: 1 | 2026-06-27T07:48:41+00:00 | Vulnerability · Source |
| CVE-2016-0788 | redhat_vex | jenkins: Remote code execution vulnerability in remoting module (SECURITY-232) | fixed: 77 | 2026-06-27T07:48:06+00:00 | Vulnerability · Source |
| CVE-2016-1000022 | redhat_vex | nodejs-negotiator: Regular expression denial-of-service | fixed: 24 | 2026-06-27T07:44:27+00:00 | Vulnerability · Source |
| CVE-2025-67639 | redhat_vex | org.jenkins-ci.main/jenkins-core: Jenkins cross-site request forgery | known affected: 1 | 2026-06-27T07:35:56+00:00 | Vulnerability · Source |
| CVE-2016-10727 | redhat_vex | evolution-data-server: IMAPx Component Information Disclosure | fixed: 145 known not affected: 12 | 2026-06-27T07:34:37+00:00 | Vulnerability · Source |
| CVE-2016-1248 | redhat_vex | vim: Lack of validation of values for few options results in code exection | fixed: 112 known affected: 1 | 2026-06-27T07:34:30+00:00 | Vulnerability · Source |
| CVE-2016-1522 | redhat_vex | graphite2: Null pointer dereference and out-of-bounds access vulnerabilities | fixed: 171 | 2026-06-27T07:34:27+00:00 | Vulnerability · Source |
| CVE-2016-1521 | redhat_vex | graphite2: Out-of-bound read vulnerability triggered by crafted fonts | fixed: 171 | 2026-06-27T07:34:25+00:00 | Vulnerability · Source |
| CVE-2016-1523 | redhat_vex | graphite2: Heap-based buffer overflow in context item handling functionality | fixed: 171 | 2026-06-27T07:33:31+00:00 | Vulnerability · Source |
| CVE-2025-55178 | redhat_vex | llama-stack: llama stack unverified input | known affected: 1 | 2026-06-27T07:31:15+00:00 | Vulnerability · Source |
| CVE-2025-4215 | redhat_vex | uBlock: gorhill uBlock Origin UI 1p-filters.js currentStateChanged redos | known not affected: 1 | 2026-06-27T07:26:17+00:00 | Vulnerability · Source |
| CVE-2026-13218 | redhat_vex | kubevirt: kubevirt: symlink following in WriteToCachedFile allows host file overwrite from virt-launcher | known affected: 2 | 2026-06-27T07:26:02+00:00 | Vulnerability · Source |
| CVE-2025-8864 | redhat_vex | yugabytedb: YugabyteDB token exposure | known affected: 2 | 2026-06-27T07:25:13+00:00 | Vulnerability · Source |
| CVE-2016-1979 | redhat_vex | nss: Use-after-free during processing of DER encoded keys in NSS (MFSA 2016-36) | fixed: 500 | 2026-06-27T07:24:47+00:00 | Vulnerability · Source |
| CVE-2016-1904 | redhat_vex | php: heap buffer overflow in escapeshell functions | known not affected: 140 | 2026-06-27T07:24:46+00:00 | Vulnerability · Source |
| CVE-2016-1841 | redhat_vex | libxslt: Use after free in xsltDocumentFunctionLoadDocument | known affected: 18 | 2026-06-27T07:24:44+00:00 | Vulnerability · Source |
| CVE-2016-1978 | redhat_vex | nss: Use-after-free in NSS during SSL connections in low memory (MFSA 2016-15) | fixed: 500 | 2026-06-27T07:24:38+00:00 | Vulnerability · Source |
| CVE-2016-1905 | redhat_vex | server: patch operation should use patched object to check admission control | fixed: 261 known affected: 1 | 2026-06-27T07:24:36+00:00 | Vulnerability · Source |
| CVE-2016-2086 | redhat_vex | nodejs: Request smuggling vulnerability | known affected: 5 known not affected: 8 | 2026-06-27T07:24:30+00:00 | Vulnerability · Source |
| CVE-2016-2515 | redhat_vex | nodejs-hawk: Long headers or URIs can cause minor DoS | under investigation: 4 | 2026-06-27T07:19:42+00:00 | Vulnerability · Source |
| CVE-2016-2111 | redhat_vex | samba: Spoofing vulnerability when domain controller is configured | fixed: 2600 | 2026-06-27T07:19:41+00:00 | Vulnerability · Source |
| CVE-2016-2392 | redhat_vex | Qemu: usb: null pointer dereference in remote NDIS control message handling | known affected: 14 known not affected: 27 | 2026-06-27T07:19:40+00:00 | Vulnerability · Source |
| CVE-2016-2216 | redhat_vex | nodejs: Response splitting vulnerability using Unicode characters | known affected: 5 known not affected: 8 | 2026-06-27T07:19:36+00:00 | Vulnerability · Source |
| CVE-2016-2115 | redhat_vex | samba: Smb signing not required by default when smb client connection is used for ipc usage | fixed: 2474 known affected: 2 | 2026-06-27T07:19:34+00:00 | Vulnerability · Source |
| CVE-2016-2162 | redhat_vex | struts2: unsanitized text in the Locale object constructed by I18NInterceptor | known not affected: 1 | 2026-06-27T07:19:27+00:00 | Vulnerability · Source |