VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294118 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-48846 | redhat_vex | roundcubemail: remote image blocking feature can be bypassed via a crafted CSS var() value in an e-mail message | known not affected: 1 | 2026-06-28T12:03:08+00:00 | Vulnerability · Source |
| CVE-2018-20854 | redhat_vex | kernel: Out-of-bounds read in drivers/phy/mscc/phy-ocelot-serdes.c | known not affected: 104 | 2026-06-28T12:03:08+00:00 | Vulnerability · Source |
| CVE-2026-2903 | redhat_vex | re2c: re2c: Denial of Service via null pointer dereference | known not affected: 1 | 2026-06-28T12:03:07+00:00 | Vulnerability · Source |
| CVE-2004-0836 | redhat_vex | security flaw | fixed: 5 | 2026-06-28T12:03:07+00:00 | Vulnerability · Source |
| CVE-2019-19071 | redhat_vex | kernel: A memory leak in the rsi_send_beacon() function in drivers/net/wireless/rsi/rsi_91x_mgmt.c allows for a DoS | known not affected: 104 | 2026-06-28T12:03:06+00:00 | Vulnerability · Source |
| CVE-2004-0594 | redhat_vex | security flaw | fixed: 122 | 2026-06-28T12:03:06+00:00 | Vulnerability · Source |
| CVE-2004-0488 | redhat_vex | mod_ssl ssl_util_uuencode_binary CA issue | fixed: 72 | 2026-06-28T12:03:06+00:00 | Vulnerability · Source |
| CVE-2021-0512 | redhat_vex | kernel: out-of-bounds write due to a heap buffer overflow in __hidinput_change_resolution_multipliers() of hid-input.c | fixed: 435 known affected: 29 known not affected: 124 | 2026-06-28T12:03:03+00:00 | Vulnerability · Source |
| CVE-2019-18814 | redhat_vex | kernel: use-after-free in aa_audit_rule_init() in security/apparmor/audit.c | known not affected: 93 | 2026-06-28T12:03:03+00:00 | Vulnerability · Source |
| CVE-2025-6589 | redhat_vex | MediaWiki: MediaWiki: Low impact information disclosure for highly privileged users | known not affected: 1 | 2026-06-28T12:03:03+00:00 | Vulnerability · Source |
| CVE-2021-20200 | redhat_vex | kernel: close race between munmap() and expand_upwards()/downwards() | known affected: 27 known not affected: 172 | 2026-06-28T12:03:03+00:00 | Vulnerability · Source |
| CVE-2019-19044 | redhat_vex | kernel: dos in v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c | known not affected: 93 | 2026-06-28T12:03:03+00:00 | Vulnerability · Source |
| CVE-2021-2440 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Jul 2021) | fixed: 155 known not affected: 119 | 2026-06-28T12:03:02+00:00 | Vulnerability · Source |
| CVE-2021-20226 | redhat_vex | kernel: use-after-free in io_uring feature | known not affected: 93 | 2026-06-28T12:03:00+00:00 | Vulnerability · Source |
| CVE-2026-8836 | redhat_vex | lwip: lwIP: Remote code execution via stack-based buffer overflow in SNMPv3 USM Handler | known not affected: 1 | 2026-06-28T12:03:00+00:00 | Vulnerability · Source |
| CVE-2019-13057 | redhat_vex | openldap: Information disclosure issue in slapd component | known affected: 16 known not affected: 7 | 2026-06-28T12:03:00+00:00 | Vulnerability · Source |
| CVE-2026-29076 | redhat_vex | cpp-httplib: cpp-httplib: Denial of Service via crafted HTTP POST request | known not affected: 1 | 2026-06-28T12:02:59+00:00 | Vulnerability · Source |
| CVE-2022-23852 | redhat_vex | expat: Integer overflow in function XML_GetBuffer | fixed: 138 known affected: 13 known not affected: 4 | 2026-06-28T12:02:58+00:00 | Vulnerability · Source |
| CVE-2020-1724 | redhat_vex | keycloak: problem with privacy after user logout | fixed: 12 known affected: 1 known not affected: 3 | 2026-06-28T12:02:57+00:00 | Vulnerability · Source |
| CVE-2022-23816 | redhat_vex | hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions | fixed: 736 known affected: 14 | 2026-06-28T12:02:55+00:00 | Vulnerability · Source |
| CVE-2019-12456 | redhat_vex | kernel: double fetch in the MPT3COMMAND case in _ctl_ioctl_main in drivers/scsi/mpt3sas/mpt3sas_ctl.c | known not affected: 104 | 2026-06-28T12:02:54+00:00 | Vulnerability · Source |
| CVE-2022-28388 | redhat_vex | kernel: double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c | fixed: 634 known affected: 28 known not affected: 14 | 2026-06-28T12:02:51+00:00 | Vulnerability · Source |
| CVE-2021-20195 | redhat_vex | keycloak: The Account console allows stored self-XSS via impersonation mechanism | known not affected: 7 | 2026-06-28T12:02:50+00:00 | Vulnerability · Source |
| CVE-2019-12881 | redhat_vex | kernel: NULL pointer dereference in i915_gem_userptr_get_pages allows local denial of service via crafted ioctl calls | known affected: 13 known not affected: 91 | 2026-06-28T12:02:48+00:00 | Vulnerability · Source |
| CVE-2018-16859 | redhat_vex | ansible: become password logged in plaintext when used with PowerShell on Windows | fixed: 9 known affected: 24 known not affected: 13 | 2026-06-28T12:02:47+00:00 | Vulnerability · Source |
| CVE-2020-16009 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | fixed: 14 | 2026-06-28T12:02:46+00:00 | Vulnerability · Source |
| CVE-2021-0342 | redhat_vex | kernel: use after free in tun_get_user of tun.c could lead to local escalation of privilege | fixed: 150 known not affected: 149 | 2026-06-28T12:02:46+00:00 | Vulnerability · Source |
| CVE-2020-16017 | redhat_vex | chromium-browser: Use after free in site isolation | fixed: 14 | 2026-06-28T12:02:45+00:00 | Vulnerability · Source |
| CVE-2019-15902 | redhat_vex | kernel: backporting error in ptrace_get_debugreg() | known not affected: 104 | 2026-06-28T12:02:43+00:00 | Vulnerability · Source |
| CVE-2026-9963 | redhat_vex | chromium-browser: chromium-browser: Uninitialized Use in iOS | known not affected: 1 | 2026-06-28T12:02:43+00:00 | Vulnerability · Source |
| CVE-2021-0941 | redhat_vex | kernel: out-of-bounds read in bpf_skb_change_head() of filter.c due to a use-after-free | fixed: 150 known not affected: 148 | 2026-06-28T12:02:43+00:00 | Vulnerability · Source |
| CVE-2026-11192 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Password Manager | known not affected: 1 | 2026-06-28T12:02:41+00:00 | Vulnerability · Source |
| CVE-2014-1568 | redhat_vex | nss: RSA PKCS#1 signature verification forgery flaw (MFSA 2014-73) | fixed: 672 | 2026-06-28T12:02:41+00:00 | Vulnerability · Source |
| CVE-2020-15708 | redhat_vex | libvirt: incorrect permissions on the UNIX domain socket allows local attacker to escalate privileges | known not affected: 134 | 2026-06-28T12:02:41+00:00 | Vulnerability · Source |
| CVE-2026-10996 | redhat_vex | chromium-browser: Inappropriate implementation in Workers | known not affected: 1 | 2026-06-28T12:02:41+00:00 | Vulnerability · Source |
| CVE-2026-10989 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | known not affected: 1 | 2026-06-28T12:02:41+00:00 | Vulnerability · Source |
| CVE-2025-30187 | redhat_vex | DNSdist: Denial of service via crafted DoH exchange in PowerDNS DNSdist | known not affected: 1 | 2026-06-28T12:02:41+00:00 | Vulnerability · Source |
| CVE-2025-6013 | redhat_vex | github.com/hashicorp/vault: Vault LDAP MFA Bypass | known affected: 10 | 2026-06-28T12:02:40+00:00 | Vulnerability · Source |
| CVE-2026-8965 | redhat_vex | firefox: thunderbird: Information disclosure in the DOM: Security component | known not affected: 23 | 2026-06-28T12:02:40+00:00 | Vulnerability · Source |
| CVE-2026-31421 | redhat_vex | kernel: net/sched: cls_fw: fix NULL pointer dereference on shared blocks | known affected: 274 | 2026-06-28T12:02:39+00:00 | Vulnerability · Source |
| CVE-2019-14897 | redhat_vex | kernel: stack-based buffer overflow in add_ie_rates function in drivers/net/wireless/marvell/libertas/cfg.c | known affected: 14 known not affected: 79 | 2026-06-28T12:02:38+00:00 | Vulnerability · Source |
| CVE-2026-20897 | redhat_vex | gitea: Gitea Git LFS Lock Deletion Broken Access Control (Cross-Repo IDOR) | known not affected: 9 | 2026-06-28T12:02:37+00:00 | Vulnerability · Source |
| CVE-2020-14866 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020) | fixed: 155 known not affected: 92 | 2026-06-28T12:02:36+00:00 | Vulnerability · Source |
| CVE-2020-14860 | redhat_vex | mysql: Server: Security: Roles unspecified vulnerability (CPU Oct 2020) | fixed: 155 known not affected: 92 | 2026-06-28T12:02:35+00:00 | Vulnerability · Source |
| CVE-2010-2210 | redhat_vex | acroread: multiple code execution flaws (APSB10-15) | fixed: 12 | 2026-06-28T12:02:35+00:00 | Vulnerability · Source |
| CVE-2010-2216 | redhat_vex | flash-plugin: multiple security flaws (APSB10-16) | fixed: 22 | 2026-06-28T12:02:35+00:00 | Vulnerability · Source |
| CVE-2010-2201 | redhat_vex | acroread: multiple code execution flaws (APSB10-15) | fixed: 12 | 2026-06-28T12:02:35+00:00 | Vulnerability · Source |
| CVE-2010-2170 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T12:02:34+00:00 | Vulnerability · Source |
| CVE-2020-14848 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Oct 2020) | fixed: 155 known not affected: 92 | 2026-06-28T12:02:34+00:00 | Vulnerability · Source |
| CVE-2010-2207 | redhat_vex | acroread: multiple code execution flaws (APSB10-15) | fixed: 12 | 2026-06-28T12:02:33+00:00 | Vulnerability · Source |