VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294118 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-31616 | redhat_vex | kernel: usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() | known not affected: 274 | 2026-06-28T12:03:47+00:00 | Vulnerability · Source |
| CVE-2026-3062 | redhat_vex | chromium-browser: Out of bounds read and write in Tint | known not affected: 1 | 2026-06-28T12:03:47+00:00 | Vulnerability · Source |
| CVE-2026-31964 | redhat_vex | htslib: HTSlib: Denial of Service via NULL pointer dereference in CRAM decoding | known not affected: 1 | 2026-06-28T12:03:46+00:00 | Vulnerability · Source |
| CVE-2026-27898 | redhat_vex | vaultwarden: Vaultwarden: Information disclosure via API partial update | known not affected: 1 | 2026-06-28T12:03:46+00:00 | Vulnerability · Source |
| CVE-2014-8106 | redhat_vex | qemu: cirrus: insufficient blit region checks | fixed: 135 known affected: 1 | 2026-06-28T12:03:46+00:00 | Vulnerability · Source |
| CVE-2012-1717 | redhat_vex | OpenJDK: insecure temporary file permissions (JRE, 7143606) | fixed: 584 known affected: 2 | 2026-06-28T12:03:46+00:00 | Vulnerability · Source |
| CVE-2020-25673 | redhat_vex | kernel: non-blocking socket in llcp_sock_connect() | known not affected: 210 | 2026-06-28T12:03:46+00:00 | Vulnerability · Source |
| CVE-2019-2449 | redhat_vex | JDK: unspecified vulnerability fixed in 8u201 (Deployment) | fixed: 114 | 2026-06-28T12:03:45+00:00 | Vulnerability · Source |
| CVE-2014-6520 | redhat_vex | mysql: unspecified vulnerability related to SERVER:DDL (CPU October 2014) | fixed: 278 under investigation: 9 | 2026-06-28T12:03:44+00:00 | Vulnerability · Source |
| CVE-2020-13791 | redhat_vex | QEMU: ati-vga: OOB access while reading PCI configuration may lead to DoS | known not affected: 93 | 2026-06-28T12:03:44+00:00 | Vulnerability · Source |
| CVE-2012-0756 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-03) | fixed: 5 | 2026-06-28T12:03:43+00:00 | Vulnerability · Source |
| CVE-2014-6271 | redhat_vex | bash: specially-crafted environment variables can be used to inject shell commands | fixed: 164 | 2026-06-28T12:03:43+00:00 | Vulnerability · Source |
| CVE-2025-71223 | redhat_vex | kernel: smb/server: fix refcount leak in smb2_open() | known affected: 76 known not affected: 198 | 2026-06-28T12:03:42+00:00 | Vulnerability · Source |
| CVE-2026-35359 | redhat_vex | rust-coreutils: cp: information disclosure via Time-of-Check to Time-of-Use symlink swap | known not affected: 1 | 2026-06-28T12:03:41+00:00 | Vulnerability · Source |
| CVE-2019-20810 | redhat_vex | kernel: go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for a failure path, which causes a memory leak | known not affected: 104 | 2026-06-28T12:03:37+00:00 | Vulnerability · Source |
| CVE-2020-24588 | redhat_vex | kernel: wifi frame payload being parsed incorrectly as an L2 frame | fixed: 150 known affected: 43 known not affected: 106 | 2026-06-28T12:03:37+00:00 | Vulnerability · Source |
| CVE-2014-3521 | redhat_vex | luci: unauthorized administrative access granted to non-administrative users | fixed: 13 known affected: 1 known not affected: 2 | 2026-06-28T12:03:36+00:00 | Vulnerability · Source |
| CVE-2020-24587 | redhat_vex | kernel: Reassembling fragments encrypted under different keys | fixed: 150 known affected: 44 known not affected: 106 | 2026-06-28T12:03:35+00:00 | Vulnerability · Source |
| CVE-2011-4516 | redhat_vex | jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409) | fixed: 180 | 2026-06-28T12:03:35+00:00 | Vulnerability · Source |
| CVE-2016-4222 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T12:03:34+00:00 | Vulnerability · Source |
| CVE-2016-4343 | redhat_vex | php: Uninitialized pointer in phar_make_dirstream() | fixed: 251 known affected: 109 known not affected: 1 | 2026-06-28T12:03:34+00:00 | Vulnerability · Source |
| CVE-2026-8522 | redhat_vex | chromium-browser: chromium-browser: Use after free in Downloads | known not affected: 1 | 2026-06-28T12:03:33+00:00 | Vulnerability · Source |
| CVE-2011-3547 | redhat_vex | OpenJDK: InputStream skip() information leak (Networking/IO, 7000600) | fixed: 679 known affected: 2 | 2026-06-28T12:03:33+00:00 | Vulnerability · Source |
| CVE-2011-3557 | redhat_vex | OpenJDK: RMI registry privileged code execution (RMI, 7083012) | fixed: 610 known affected: 3 | 2026-06-28T12:03:31+00:00 | Vulnerability · Source |
| CVE-2011-3556 | redhat_vex | OpenJDK: RMI DGC server remote code execution (RMI, 7077466) | fixed: 679 known affected: 2 | 2026-06-28T12:03:30+00:00 | Vulnerability · Source |
| CVE-2020-24490 | redhat_vex | kernel: net: bluetooth: heap buffer overflow when processing extended advertising report events | fixed: 150 known not affected: 56 | 2026-06-28T12:03:29+00:00 | Vulnerability · Source |
| CVE-2011-2425 | redhat_vex | flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) | fixed: 23 | 2026-06-28T12:03:27+00:00 | Vulnerability · Source |
| CVE-2019-2481 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019) | fixed: 391 known affected: 18 known not affected: 79 | 2026-06-28T12:03:25+00:00 | Vulnerability · Source |
| CVE-2016-3841 | redhat_vex | kernel: use-after-free via crafted IPV6 sendmsg for raw / tcp / udp / l2tp sockets. | fixed: 482 known affected: 12 known not affected: 1 | 2026-06-28T12:03:24+00:00 | Vulnerability · Source |
| CVE-2019-19965 | redhat_vex | kernel: NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery | known affected: 104 | 2026-06-28T12:03:24+00:00 | Vulnerability · Source |
| CVE-2014-3192 | redhat_vex | chromium: use-after-free in DOM, fixed in Chrome 38.0.2125.101 | fixed: 15 known affected: 9 | 2026-06-28T12:03:23+00:00 | Vulnerability · Source |
| CVE-2014-3191 | redhat_vex | chromium: multiple security fixes in Chrome 38.0.2125.101 | fixed: 15 | 2026-06-28T12:03:21+00:00 | Vulnerability · Source |
| CVE-2020-1968 | redhat_vex | openssl: Information exposure when DH secret are reused across multiple TLS connections | known affected: 25 known not affected: 11 | 2026-06-28T12:03:21+00:00 | Vulnerability · Source |
| CVE-2019-12818 | redhat_vex | kernel: null-pointer dereference in function nfc_llcp_build_tlv in net/nfc/llcp_commands.c | known not affected: 104 | 2026-06-28T12:03:20+00:00 | Vulnerability · Source |
| CVE-2018-20169 | redhat_vex | kernel: usb: missing size check in the __usb_get_extra_descriptor() leading to DoS | fixed: 706 known affected: 31 known not affected: 6 | 2026-06-28T12:03:20+00:00 | Vulnerability · Source |
| CVE-2019-19925 | redhat_vex | sqlite: zipfileUpdate in ext/misc/zipfile.c mishandles a NULL pathname during an update of a ZIP archive | fixed: 89 known not affected: 13 | 2026-06-28T12:03:19+00:00 | Vulnerability · Source |
| CVE-2026-2966 | redhat_vex | Mongoose: Mongoose: Information disclosure due to insufficiently random values in DNS transaction ID handling | known not affected: 1 | 2026-06-28T12:03:19+00:00 | Vulnerability · Source |
| CVE-2021-20263 | redhat_vex | QEMU: virtiofsd: 'security.capabilities' is not dropped with xattrmap option | known affected: 24 known not affected: 85 | 2026-06-28T12:03:18+00:00 | Vulnerability · Source |
| CVE-2021-20261 | redhat_vex | kernel: panic on multiple access to floppy device | known affected: 29 known not affected: 169 | 2026-06-28T12:03:17+00:00 | Vulnerability · Source |
| CVE-2019-12454 | redhat_vex | kernel: unspecified impact in function wcd9335_codec_enable_dec in sound/soc/codecs/wcd9335.c | known not affected: 104 | 2026-06-28T12:03:17+00:00 | Vulnerability · Source |
| CVE-2020-1746 | redhat_vex | ansible: Information disclosure issue in ldap_attr and ldap_entry modules | fixed: 22 known affected: 10 known not affected: 3 | 2026-06-28T12:03:16+00:00 | Vulnerability · Source |
| CVE-2026-8570 | redhat_vex | chromium-browser: chromium-browser: Type Confusion in V8 | known not affected: 1 | 2026-06-28T12:03:14+00:00 | Vulnerability · Source |
| CVE-2019-19524 | redhat_vex | kernel: a malicious USB device in the drivers/input/ff-memless.c leads to use-after-free | fixed: 379 known affected: 26 known not affected: 1 | 2026-06-28T12:03:14+00:00 | Vulnerability · Source |
| CVE-2021-20255 | redhat_vex | QEMU: net: eepro100: stack overflow via infinite recursion | known affected: 6 known not affected: 96 | 2026-06-28T12:03:13+00:00 | Vulnerability · Source |
| CVE-2011-2094 | redhat_vex | acroread: multiple code execution flaws (APSB11-16) | fixed: 18 | 2026-06-28T12:03:12+00:00 | Vulnerability · Source |
| CVE-2006-5330 | redhat_vex | security flaw | fixed: 8 | 2026-06-28T12:03:10+00:00 | Vulnerability · Source |
| CVE-2020-1717 | redhat_vex | Keycloak: A logged in user can do an account email enumeration attack | known affected: 4 | 2026-06-28T12:03:10+00:00 | Vulnerability · Source |
| CVE-2026-8586 | redhat_vex | chromium-browser: chromium-browser: Inappropriate implementation in Chromoting | known not affected: 1 | 2026-06-28T12:03:09+00:00 | Vulnerability · Source |
| CVE-2026-8582 | redhat_vex | chromium-browser: chromium-browser: Object lifecycle issue in Dawn | known not affected: 1 | 2026-06-28T12:03:09+00:00 | Vulnerability · Source |
| CVE-2026-33258 | redhat_vex | pdns-recursor: crafted zones can cause increased resource usage | known not affected: 1 | 2026-06-28T12:03:09+00:00 | Vulnerability · Source |