VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
306114 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-8596 | redhat_vex | webkitgtk: Multiple memory corruption issues leading to arbitrary code execution | fixed: 984 known affected: 9 | 2026-06-26T23:05:24+00:00 | Vulnerability · Source |
| CVE-2019-8586 | redhat_vex | webkitgtk: Multiple memory corruption issues leading to arbitrary code execution | fixed: 984 known affected: 9 | 2026-06-26T23:05:23+00:00 | Vulnerability · Source |
| CVE-2019-8551 | redhat_vex | webkitgtk: malicious web content leads to cross site scripting | fixed: 984 known affected: 10 | 2026-06-26T23:05:15+00:00 | Vulnerability · Source |
| CVE-2019-9143 | redhat_vex | exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service | fixed: 164 known not affected: 3 | 2026-06-26T22:59:43+00:00 | Vulnerability · Source |
| CVE-2019-9029 | redhat_vex | matio: out-of-bounds read with SEGV in function Mat_VarReadNextInfo5() in mat5.c | known not affected: 1 | 2026-06-26T22:59:40+00:00 | Vulnerability · Source |
| CVE-2019-9192 | redhat_vex | glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c | known not affected: 231 | 2026-06-26T22:59:40+00:00 | Vulnerability · Source |
| CVE-2019-9200 | redhat_vex | poppler: heap-based buffer overflow in function ImageStream::getLine() in Stream.cc | fixed: 358 known not affected: 11 | 2026-06-26T22:59:30+00:00 | Vulnerability · Source |
| CVE-2019-9433 | redhat_vex | libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c | fixed: 102 known affected: 4 | 2026-06-26T22:59:20+00:00 | Vulnerability · Source |
| CVE-2019-9619 | redhat_vex | systemd: not enabled pam_systemd for non-interactive sessions | known not affected: 20 | 2026-06-26T22:55:18+00:00 | Vulnerability · Source |
| CVE-2019-9959 | redhat_vex | poppler: integer overflow in JPXStream::init function leading to memory consumption | fixed: 322 known affected: 11 | 2026-06-26T22:55:16+00:00 | Vulnerability · Source |
| CVE-2019-9937 | redhat_vex | sqlite: null-pointer dereference in function fts5ChunkIterate in sqlite3.c | known affected: 6 known not affected: 13 | 2026-06-26T22:55:13+00:00 | Vulnerability · Source |
| CVE-2019-9631 | redhat_vex | poppler: heap-based buffer over-read in function downsample_row_box_filter in CairoRescaleBox.cc | fixed: 358 known affected: 10 known not affected: 1 | 2026-06-26T22:55:11+00:00 | Vulnerability · Source |
| CVE-2019-9704 | redhat_vex | vixie-cron: calloc return value resulting in remote dos | known affected: 10 | 2026-06-26T22:55:06+00:00 | Vulnerability · Source |
| CVE-2019-9936 | redhat_vex | sqlite: heap-based buffer over-read in function fts5HashEntrySort in sqlite3.c | known affected: 6 known not affected: 13 | 2026-06-26T22:55:02+00:00 | Vulnerability · Source |
| CVE-2020-0181 | redhat_vex | libexif: integer overflow in exif_data_load_data_thumbnail function in exif-data.c | fixed: 31 known affected: 8 | 2026-06-26T22:55:00+00:00 | Vulnerability · Source |
| CVE-2020-0034 | redhat_vex | libvpx: Out of bounds read in vp8_decode_frame in decodeframe.c | fixed: 61 known affected: 4 known not affected: 3 | 2026-06-26T22:54:57+00:00 | Vulnerability · Source |
| CVE-2019-9895 | redhat_vex | putty: multiple vulnerabilities | known not affected: 1 | 2026-06-26T22:54:55+00:00 | Vulnerability · Source |
| CVE-2020-0198 | redhat_vex | libexif: integer overflow in exif_data_load_data_content function in exif-data.c | fixed: 31 known affected: 8 | 2026-06-26T22:54:55+00:00 | Vulnerability · Source |
| CVE-2019-9956 | redhat_vex | imagemagick: stack-based buffer overflow in function PopHexPixel in coders/ps.c | fixed: 218 known affected: 7 known not affected: 1 | 2026-06-26T22:54:53+00:00 | Vulnerability · Source |
| CVE-2019-9633 | redhat_vex | glib: g_socket_client_connected_callback in gio/gsocketclient.c allows to cause denial of service | known not affected: 32 | 2026-06-26T22:54:52+00:00 | Vulnerability · Source |
| CVE-2020-0093 | redhat_vex | libexif: out of bounds read due to a missing bounds check in exif_data_save_data_entry function in exif-data.c | fixed: 92 known affected: 4 | 2026-06-26T22:54:51+00:00 | Vulnerability · Source |
| CVE-2019-9898 | redhat_vex | putty: multiple vulnerabilities | known not affected: 1 | 2026-06-26T22:54:48+00:00 | Vulnerability · Source |
| CVE-2019-9894 | redhat_vex | putty: multiple vulnerabilities | known not affected: 1 | 2026-06-26T22:54:48+00:00 | Vulnerability · Source |
| CVE-2019-9897 | redhat_vex | putty: multiple vulnerabilities | known not affected: 1 | 2026-06-26T22:54:38+00:00 | Vulnerability · Source |
| CVE-2019-9795 | redhat_vex | Mozilla: Type-confusion in IonMonkey JIT compiler | fixed: 113 | 2026-06-26T22:54:27+00:00 | Vulnerability · Source |
| CVE-2019-9792 | redhat_vex | Mozilla: IonMonkey leaks JS_OPTIMIZED_OUT magic value to script | fixed: 113 | 2026-06-26T22:54:24+00:00 | Vulnerability · Source |
| CVE-2019-9815 | redhat_vex | Mozilla: Disable hyperthreading on content JavaScript threads on macOS | known not affected: 10 | 2026-06-26T22:54:21+00:00 | Vulnerability · Source |
| CVE-2020-10697 | redhat_vex | Tower: memcached deployment is insecure on OpenShift | known affected: 1 | 2026-06-26T22:49:56+00:00 | Vulnerability · Source |
| CVE-2020-10716 | redhat_vex | rubygem-foreman_ansible: "User input" entry from Job Invocation may contain sensitive data | fixed: 1294 | 2026-06-26T22:49:52+00:00 | Vulnerability · Source |
| CVE-2020-10660 | redhat_vex | vault: Entity's Group membership inadvertently include Groups the Entity no longer has permissions to | known affected: 5 known not affected: 8 | 2026-06-26T22:49:49+00:00 | Vulnerability · Source |
| CVE-2020-0556 | redhat_vex | bluez: Improper access control in subsystem could result in privilege escalation and DoS | fixed: 188 known not affected: 8 | 2026-06-26T22:49:47+00:00 | Vulnerability · Source |
| CVE-2020-0569 | redhat_vex | qt: files placed by attacker can influence the working directory and lead to malicious code execution | fixed: 504 | 2026-06-26T22:49:46+00:00 | Vulnerability · Source |
| CVE-2020-10709 | redhat_vex | Tower: OAuth2 refresh tokens do not respect the expiration | known affected: 1 | 2026-06-26T22:49:40+00:00 | Vulnerability · Source |
| CVE-2020-10184 | redhat_vex | yubikey-val: SQL injection due to missing check of the length of SQL queries | known not affected: 1 | 2026-06-26T22:49:40+00:00 | Vulnerability · Source |
| CVE-2020-10675 | redhat_vex | golang-github-buger-jsonparser: infinite loop via a Delete call | known not affected: 15 | 2026-06-26T22:49:38+00:00 | Vulnerability · Source |
| CVE-2020-10595 | redhat_vex | pam_krb5: incorrect input handling results in single byte buffer overflow which may lead to heap corruption | known not affected: 3 | 2026-06-26T22:49:29+00:00 | Vulnerability · Source |
| CVE-2020-10710 | redhat_vex | foreman-installer: Candlepin plaintext password disclosure while Satellite update | fixed: 73 | 2026-06-26T22:49:28+00:00 | Vulnerability · Source |
| CVE-2020-10030 | redhat_vex | pdns-recursor: stack-based out-of-bounds read via a larger hostname | known not affected: 1 | 2026-06-26T22:49:18+00:00 | Vulnerability · Source |
| CVE-2020-0603 | redhat_vex | dotnet: Memory Corruption in SignalR | fixed: 97 known not affected: 24 | 2026-06-26T22:49:10+00:00 | Vulnerability · Source |
| CVE-2020-0551 | redhat_vex | hw: Load Value Injection | known not affected: 92 | 2026-06-26T22:49:07+00:00 | Vulnerability · Source |
| CVE-2020-10108 | redhat_vex | python-twisted: HTTP request smuggling when presented with two Content-Length headers | fixed: 22 known affected: 11 | 2026-06-26T22:49:06+00:00 | Vulnerability · Source |
| CVE-2020-0602 | redhat_vex | dotnet: Denial of service via backpressure issue | fixed: 97 known not affected: 24 | 2026-06-26T22:49:03+00:00 | Vulnerability · Source |
| CVE-2020-10731 | redhat_vex | openstack-tripleo-heat-templates: No sVirt protection for OSP16 VMs due to disabled SELinux | fixed: 18 known not affected: 4 | 2026-06-26T22:49:02+00:00 | Vulnerability · Source |
| CVE-2020-10661 | redhat_vex | vault: Existing nested-path policies grant access to Namespaces created after-the-fact | known affected: 5 known not affected: 8 | 2026-06-26T22:48:58+00:00 | Vulnerability · Source |
| CVE-2020-10109 | redhat_vex | python-twisted: HTTP request smuggling when presented with a Content-Length and a chunked Transfer-Encoding header | fixed: 11 known affected: 11 known not affected: 2 | 2026-06-26T22:47:58+00:00 | Vulnerability · Source |
| CVE-2020-0550 | redhat_vex | hw: Snoop-Assisted L1D Sampling | known not affected: 91 | 2026-06-26T22:47:52+00:00 | Vulnerability · Source |
| CVE-2020-10759 | redhat_vex | fwupd: Possible bypass in signature verification | fixed: 49 known affected: 3 | 2026-06-26T22:45:00+00:00 | Vulnerability · Source |
| CVE-2020-11525 | redhat_vex | freerdp: out-of-bounds read in bitmap.c | fixed: 153 known affected: 5 | 2026-06-26T22:44:59+00:00 | Vulnerability · Source |
| CVE-2020-11522 | redhat_vex | freerdp: out-of-bounds read in gdi.c | fixed: 153 known affected: 5 | 2026-06-26T22:44:55+00:00 | Vulnerability · Source |
| CVE-2020-11526 | redhat_vex | freerdp: Stream pointer out of bounds in update_recv_secondary_order could lead out of bounds read later | fixed: 153 known affected: 5 | 2026-06-26T22:44:54+00:00 | Vulnerability · Source |