VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294018 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-10979 | redhat_vex | postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code | fixed: 3121 known affected: 11 | 2026-06-29T23:42:13+00:00 | Vulnerability · Source |
| CVE-2023-54253 | redhat_vex | kernel: btrfs: set page extent mapped after read_folio in relocate_one_page | known affected: 42 known not affected: 232 | 2026-06-29T23:39:59+00:00 | Vulnerability · Source |
| CVE-2023-54251 | redhat_vex | kernel: net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX | fixed: 480 known affected: 22 known not affected: 166 | 2026-06-29T23:39:58+00:00 | Vulnerability · Source |
| CVE-2023-54249 | redhat_vex | kernel: bus: mhi: ep: Only send -ENOTCONN status if client driver is available | known not affected: 274 | 2026-06-29T23:39:51+00:00 | Vulnerability · Source |
| CVE-2023-54236 | redhat_vex | kernel: net/net_failover: fix txq exceeding warning | known affected: 184 known not affected: 90 | 2026-06-29T23:39:36+00:00 | Vulnerability · Source |
| CVE-2023-54231 | redhat_vex | kernel: net: libwx: fix memory leak in wx_setup_rx_resources | known not affected: 274 | 2026-06-29T23:39:36+00:00 | Vulnerability · Source |
| CVE-2023-54229 | redhat_vex | kernel: wifi: fix registration of 6Ghz-only phy without the full channel range | fixed: 279 known affected: 70 known not affected: 118 | 2026-06-29T23:39:31+00:00 | Vulnerability · Source |
| CVE-2023-5616 | redhat_vex | gnome-control-center: Remote login misconfiguration in GNOME Control Center | known affected: 7 | 2026-06-29T23:39:27+00:00 | Vulnerability · Source |
| CVE-2024-46981 | redhat_vex | redis: Redis' Lua library commands may lead to remote code execution | fixed: 212 known affected: 5 known not affected: 2 | 2026-06-29T23:37:27+00:00 | Vulnerability · Source |
| CVE-2024-52811 | redhat_vex | ngtcp2: Acks not validated before logged to qlog leads to buffer overflow in ngtcp2 | known not affected: 35 | 2026-06-29T23:36:26+00:00 | Vulnerability · Source |
| CVE-2025-21700 | redhat_vex | kernel: net: sched: Disallow replacing of child qdisc from one parent to another | known affected: 274 | 2026-06-29T23:34:00+00:00 | Vulnerability · Source |
| CVE-2025-21695 | redhat_vex | kernel: platform/x86: dell-uart-backlight: fix serdev race | known not affected: 274 | 2026-06-29T23:33:55+00:00 | Vulnerability · Source |
| CVE-2025-21692 | redhat_vex | kernel: net: sched: fix ets qdisc OOB Indexing | known affected: 232 known not affected: 42 | 2026-06-29T23:33:47+00:00 | Vulnerability · Source |
| CVE-2025-21689 | redhat_vex | kernel: USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() | fixed: 305 known affected: 112 known not affected: 76 | 2026-06-29T23:33:43+00:00 | Vulnerability · Source |
| CVE-2025-21688 | redhat_vex | kernel: drm/v3d: Assign job pointer to NULL before signaling the fence | known affected: 28 known not affected: 246 | 2026-06-29T23:33:41+00:00 | Vulnerability · Source |
| CVE-2025-21683 | redhat_vex | kernel: bpf: Fix bpf_sk_select_reuseport() memory leak | known affected: 274 | 2026-06-29T23:33:36+00:00 | Vulnerability · Source |
| CVE-2025-21681 | redhat_vex | kernel: openvswitch: fix lockup on tx to unregistering netdev with carrier | known affected: 274 | 2026-06-29T23:33:32+00:00 | Vulnerability · Source |
| CVE-2025-21680 | redhat_vex | kernel: pktgen: Avoid out-of-bounds access in get_imix_entries | fixed: 309 known affected: 42 known not affected: 156 | 2026-06-29T23:33:29+00:00 | Vulnerability · Source |
| CVE-2025-21679 | redhat_vex | kernel: btrfs: add the missing error handling inside get_canonical_dev_path | known affected: 42 known not affected: 232 | 2026-06-29T23:33:25+00:00 | Vulnerability · Source |
| CVE-2025-21675 | redhat_vex | kernel: net/mlx5: Clear port select structure when fail to create | known not affected: 274 | 2026-06-29T23:33:20+00:00 | Vulnerability · Source |
| CVE-2025-21674 | redhat_vex | kernel: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel | known not affected: 274 | 2026-06-29T23:33:18+00:00 | Vulnerability · Source |
| CVE-2025-21673 | redhat_vex | kernel: smb: client: fix double free of TCP_Server_Info::hostname | known affected: 156 known not affected: 118 | 2026-06-29T23:33:15+00:00 | Vulnerability · Source |
| CVE-2025-21670 | redhat_vex | kernel: vsock/bpf: return early if transport is not assigned | known affected: 184 known not affected: 90 | 2026-06-29T23:33:09+00:00 | Vulnerability · Source |
| CVE-2025-21668 | redhat_vex | kernel: pmdomain: imx8mp-blk-ctrl: add missing loop break condition | fixed: 305 known affected: 22 known not affected: 166 | 2026-06-29T23:33:05+00:00 | Vulnerability · Source |
| CVE-2025-21667 | redhat_vex | kernel: iomap: avoid avoid truncating 64-bit offset to 32 bits | known affected: 48 known not affected: 226 | 2026-06-29T23:33:03+00:00 | Vulnerability · Source |
| CVE-2025-21666 | redhat_vex | kernel: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] | fixed: 305 known affected: 98 known not affected: 90 | 2026-06-29T23:32:58+00:00 | Vulnerability · Source |
| CVE-2025-21665 | redhat_vex | kernel: filemap: avoid truncating 64-bit offset to 32 bits | known affected: 42 known not affected: 232 | 2026-06-29T23:32:56+00:00 | Vulnerability · Source |
| CVE-2025-14333 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 | fixed: 320 known affected: 8 | 2026-06-29T23:29:57+00:00 | Vulnerability · Source |
| CVE-2025-14332 | redhat_vex | firefox: Memory safety bugs fixed in Firefox 146 and Thunderbird 146 | known not affected: 12 | 2026-06-29T23:29:55+00:00 | Vulnerability · Source |
| CVE-2025-14331 | redhat_vex | firefox: thunderbird: Same-origin policy bypass in the Request Handling component | fixed: 320 known affected: 8 | 2026-06-29T23:29:53+00:00 | Vulnerability · Source |
| CVE-2025-14330 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component | fixed: 320 known affected: 8 | 2026-06-29T23:29:50+00:00 | Vulnerability · Source |
| CVE-2025-14329 | redhat_vex | firefox: thunderbird: Privilege escalation in the Netmonitor component | fixed: 320 known affected: 8 | 2026-06-29T23:29:47+00:00 | Vulnerability · Source |
| CVE-2025-14328 | redhat_vex | firefox: thunderbird: Privilege escalation in the Netmonitor component | fixed: 320 known affected: 8 | 2026-06-29T23:29:46+00:00 | Vulnerability · Source |
| CVE-2025-14326 | redhat_vex | firefox: Use-after-free in the Audio/Video: GMP component | known not affected: 12 | 2026-06-29T23:29:45+00:00 | Vulnerability · Source |
| CVE-2025-13945 | redhat_vex | wireshark: Improperly Controlled Sequential Memory Allocation in Wireshark | known affected: 8 known not affected: 12 | 2026-06-29T23:29:36+00:00 | Vulnerability · Source |
| CVE-2025-13946 | redhat_vex | wireshark: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark | known affected: 12 known not affected: 8 | 2026-06-29T23:29:35+00:00 | Vulnerability · Source |
| CVE-2025-13836 | redhat_vex | cpython: Excessive read buffering DoS in http.client | fixed: 643 known affected: 4 known not affected: 159 | 2026-06-29T23:29:30+00:00 | Vulnerability · Source |
| CVE-2025-13674 | redhat_vex | Wireshark: Wireshark: BPv7 dissector crash leads to denial of service | known affected: 20 | 2026-06-29T23:29:27+00:00 | Vulnerability · Source |
| CVE-2025-13466 | redhat_vex | body-parser: body-parser denial of service | known affected: 167 | 2026-06-29T23:29:22+00:00 | Vulnerability · Source |
| CVE-2025-13020 | redhat_vex | firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component | fixed: 320 known affected: 8 | 2026-06-29T23:29:18+00:00 | Vulnerability · Source |
| CVE-2025-13019 | redhat_vex | firefox: thunderbird: Same-origin policy bypass in the DOM: Workers component | fixed: 320 known affected: 8 | 2026-06-29T23:29:17+00:00 | Vulnerability · Source |
| CVE-2025-13018 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Security component | fixed: 320 known affected: 8 | 2026-06-29T23:29:14+00:00 | Vulnerability · Source |
| CVE-2025-13017 | redhat_vex | firefox: thunderbird: Same-origin policy bypass in the DOM: Notifications component | fixed: 320 known affected: 8 | 2026-06-29T23:29:12+00:00 | Vulnerability · Source |
| CVE-2025-13014 | redhat_vex | firefox: thunderbird: Use-after-free in the Audio/Video component | fixed: 320 known affected: 8 | 2026-06-29T23:29:10+00:00 | Vulnerability · Source |
| CVE-2025-13013 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Core & HTML component | fixed: 320 known affected: 8 | 2026-06-29T23:29:07+00:00 | Vulnerability · Source |
| CVE-2025-12183 | redhat_vex | lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure | fixed: 13 known affected: 19 known not affected: 170 | 2026-06-29T23:28:57+00:00 | Vulnerability · Source |
| CVE-2025-12084 | redhat_vex | cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service | fixed: 1310 known affected: 76 known not affected: 47 | 2026-06-29T23:28:55+00:00 | Vulnerability · Source |
| CVE-2025-11965 | redhat_vex | io.vertx/vertx-core: Eclipse Vert.x Access Control Flaw | fixed: 1 known affected: 43 | 2026-06-29T23:28:49+00:00 | Vulnerability · Source |
| CVE-2025-11719 | redhat_vex | thunderbird: firefox: Use-after-free caused by the native messaging web extension API on Windows | known not affected: 23 | 2026-06-29T23:28:46+00:00 | Vulnerability · Source |
| CVE-2025-11713 | redhat_vex | thunderbird: firefox: Potential user-assisted code execution in “Copy as cURL” command | known not affected: 23 | 2026-06-29T23:28:46+00:00 | Vulnerability · Source |