VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294119 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-48843 | redhat_vex | roundcubemail: information disclosure and Server-Side Request Forgery via insufficient CSS sanitization | known not affected: 1 | 2026-06-28T11:58:53+00:00 | Vulnerability · Source |
| CVE-2026-40260 | redhat_vex | pypdf: pypdf: Denial of Service due to memory exhaustion via manipulated XMP metadata | known affected: 10 known not affected: 1 | 2026-06-28T11:58:53+00:00 | Vulnerability · Source |
| CVE-2019-19813 | redhat_vex | kernel: use-after-free in __mutex_lock in kernel/locking/mutex.c | known not affected: 104 | 2026-06-28T11:58:52+00:00 | Vulnerability · Source |
| CVE-2026-31599 | redhat_vex | kernel: media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections | known not affected: 274 | 2026-06-28T11:58:51+00:00 | Vulnerability · Source |
| CVE-2026-7897 | redhat_vex | chromium-browser: chromium-browser: Use after free in Mobile | known not affected: 1 | 2026-06-28T11:58:50+00:00 | Vulnerability · Source |
| CVE-2019-19767 | redhat_vex | kernel: use-after-free in __ext4_expand_extra_isize and ext4_xattr_set_entry related to fs/ext4/inode.c and fs/ext4/super.c | fixed: 379 known affected: 12 known not affected: 16 | 2026-06-28T11:58:50+00:00 | Vulnerability · Source |
| CVE-2014-7926 | redhat_vex | ICU: regexp engine incorrect handling of a zero length quantifier | fixed: 15 known affected: 11 | 2026-06-28T11:58:49+00:00 | Vulnerability · Source |
| CVE-2026-3113 | redhat_vex | Mattermost: Mattermost: Information disclosure via improper permissions on bulk exports | known not affected: 1 | 2026-06-28T11:58:49+00:00 | Vulnerability · Source |
| CVE-2019-20922 | redhat_vex | nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS | fixed: 7 known affected: 9 known not affected: 74 | 2026-06-28T11:58:47+00:00 | Vulnerability · Source |
| CVE-2019-9514 | redhat_vex | HTTP/2: flood using HEADERS frames results in unbounded memory growth | fixed: 1496 known affected: 109 known not affected: 163 | 2026-06-28T11:58:45+00:00 | Vulnerability · Source |
| CVE-2026-31596 | redhat_vex | kernel: ocfs2: handle invalid dinode in ocfs2_group_extend | known not affected: 274 | 2026-06-28T11:58:43+00:00 | Vulnerability · Source |
| CVE-2014-4650 | redhat_vex | python: CGIHTTPServer module does not properly handle URL-encoded path separators in URLs | fixed: 305 known affected: 17 known not affected: 8 | 2026-06-28T11:58:43+00:00 | Vulnerability · Source |
| CVE-2019-19070 | redhat_vex | kernel: A memory leak in the spi_gpio_probe() function in drivers/spi/spi-gpio.c allows for a DoS | known not affected: 104 | 2026-06-28T11:58:42+00:00 | Vulnerability · Source |
| CVE-2019-13704 | redhat_vex | chromium-browser: CSP bypass | fixed: 14 | 2026-06-28T11:58:41+00:00 | Vulnerability · Source |
| CVE-2026-7967 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Navigation | known not affected: 1 | 2026-06-28T11:58:39+00:00 | Vulnerability · Source |
| CVE-2019-18813 | redhat_vex | kernel: memory leak in dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c | known not affected: 93 | 2026-06-28T11:58:39+00:00 | Vulnerability · Source |
| CVE-2019-18812 | redhat_vex | kernel: memory leak in sof_dfsentry_write() function in sound/soc/sof/debug.c | known not affected: 93 | 2026-06-28T11:58:39+00:00 | Vulnerability · Source |
| CVE-2025-64076 | redhat_vex | cbor2: cbor2: Integer Underflow and Memory Leak leading to Denial of Service | known not affected: 1 | 2026-06-28T11:58:39+00:00 | Vulnerability · Source |
| CVE-2019-13631 | redhat_vex | kernel: OOB writes in parse_hid_report_descriptor in drivers/input/tablet/gtco.c | fixed: 150 known affected: 55 known not affected: 1 | 2026-06-28T11:58:38+00:00 | Vulnerability · Source |
| CVE-2019-19919 | redhat_vex | nodejs-handlebars: prototype pollution leading to remote code execution via crafted payloads | fixed: 1 known affected: 5 | 2026-06-28T11:58:37+00:00 | Vulnerability · Source |
| CVE-2019-15608 | redhat_vex | yarn: TOCTOU vulnerability leads to cache pollution | known not affected: 1 | 2026-06-28T11:58:36+00:00 | Vulnerability · Source |
| CVE-2019-15606 | redhat_vex | nodejs: HTTP header values do not have trailing optional whitespace trimmed | fixed: 222 known not affected: 1 | 2026-06-28T11:58:36+00:00 | Vulnerability · Source |
| CVE-2019-17573 | redhat_vex | cxf: reflected XSS in the services listing page | fixed: 1404 known affected: 7 | 2026-06-28T11:58:35+00:00 | Vulnerability · Source |
| CVE-2019-10768 | redhat_vex | AngularJS: Prototype pollution in merge function could result in code injection | fixed: 11 known affected: 6 known not affected: 4 | 2026-06-28T11:58:34+00:00 | Vulnerability · Source |
| CVE-2019-1010083 | redhat_vex | python-flask: unexpected memory usage can lead to denial of service via crafted encoded JSON data | known affected: 10 known not affected: 10 | 2026-06-28T11:58:34+00:00 | Vulnerability · Source |
| CVE-2018-16889 | redhat_vex | ceph: debug logging for v4 auth does not sanitize encryption keys | fixed: 147 known not affected: 39 | 2026-06-28T11:58:32+00:00 | Vulnerability · Source |
| CVE-2019-13648 | redhat_vex | kernel: denial of service in arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c via sigreturn() system call | fixed: 414 known affected: 15 known not affected: 60 | 2026-06-28T11:58:32+00:00 | Vulnerability · Source |
| CVE-2019-17133 | redhat_vex | kernel: buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c | fixed: 845 known affected: 1 known not affected: 48 | 2026-06-28T11:58:31+00:00 | Vulnerability · Source |
| CVE-2019-9448 | redhat_vex | kernel: out of bounds write due to missing bounds check in FingerTipS touchscreen driver leads to local privilege escalation | known not affected: 104 | 2026-06-28T11:58:31+00:00 | Vulnerability · Source |
| CVE-2018-3739 | redhat_vex | nodejs-https-proxy-agent: Unsanitized options passed to Buffer() allow for denial of service | known affected: 6 known not affected: 20 | 2026-06-28T11:58:30+00:00 | Vulnerability · Source |
| CVE-2018-6179 | redhat_vex | chromium-browser: Local file information leak in Extensions | fixed: 12 | 2026-06-28T11:58:29+00:00 | Vulnerability · Source |
| CVE-2018-6177 | redhat_vex | chromium-browser: Cross origin information leak in Blink | fixed: 12 | 2026-06-28T11:58:29+00:00 | Vulnerability · Source |
| CVE-2018-6178 | redhat_vex | chromium-browser: UI spoof in Extensions | fixed: 12 | 2026-06-28T11:58:29+00:00 | Vulnerability · Source |
| CVE-2020-29511 | redhat_vex | go: encoding/xml: XML element instability | known affected: 16 known not affected: 91 | 2026-06-28T11:58:29+00:00 | Vulnerability · Source |
| CVE-2014-3198 | redhat_vex | chromium: OOB reads in PDFium fixed in Chrome 38.0.2125.101 | fixed: 15 | 2026-06-28T11:58:28+00:00 | Vulnerability · Source |
| CVE-2018-6176 | redhat_vex | chromium-browser: Local user privilege escalation in Extensions | fixed: 12 | 2026-06-28T11:58:28+00:00 | Vulnerability · Source |
| CVE-2018-6174 | redhat_vex | chromium-browser: Integer overflow in SwiftShader | fixed: 12 | 2026-06-28T11:58:27+00:00 | Vulnerability · Source |
| CVE-2014-2270 | redhat_vex | file: out-of-bounds access in search rules with offsets from input file | fixed: 684 known affected: 31 known not affected: 33 | 2026-06-28T11:58:27+00:00 | Vulnerability · Source |
| CVE-2020-29510 | redhat_vex | go: encoding/xml: XML directives instability | known affected: 16 known not affected: 91 | 2026-06-28T11:58:26+00:00 | Vulnerability · Source |
| CVE-2019-9248 | redhat_vex | kernel: out of bounds write due to missing bounds check leads to local privilege escalation | known not affected: 104 | 2026-06-28T11:58:25+00:00 | Vulnerability · Source |
| CVE-2018-6171 | redhat_vex | chromium-browser: Use after free in WebBluetooth | fixed: 12 | 2026-06-28T11:58:25+00:00 | Vulnerability · Source |
| CVE-2014-1912 | redhat_vex | python: buffer overflow in socket.recvfrom_into() | fixed: 217 known affected: 16 known not affected: 17 | 2026-06-28T11:58:25+00:00 | Vulnerability · Source |
| CVE-2025-55193 | redhat_vex | activerecord: Active Record ANSI Injection Vulnerability | known affected: 2 | 2026-06-28T11:58:24+00:00 | Vulnerability · Source |
| CVE-2018-6169 | redhat_vex | chromium-browser: Permissions bypass in extension installation | fixed: 12 | 2026-06-28T11:58:24+00:00 | Vulnerability · Source |
| CVE-2019-9345 | redhat_vex | kernel: data separation violation in sdcardfs leads to privilege escalation | known not affected: 104 | 2026-06-28T11:58:24+00:00 | Vulnerability · Source |
| CVE-2018-6149 | redhat_vex | chromium-browser: Out of bounds write in V8 | fixed: 14 | 2026-06-28T11:58:24+00:00 | Vulnerability · Source |
| CVE-2018-6168 | redhat_vex | chromium-browser: CORS bypass in Blink | fixed: 12 | 2026-06-28T11:58:23+00:00 | Vulnerability · Source |
| CVE-2018-6167 | redhat_vex | chromium-browser: URL spoof in Omnibox | fixed: 12 | 2026-06-28T11:58:22+00:00 | Vulnerability · Source |
| CVE-2018-6163 | redhat_vex | chromium-browser: URL spoof in Omnibox | fixed: 12 | 2026-06-28T11:58:22+00:00 | Vulnerability · Source |
| CVE-2018-6162 | redhat_vex | chromium-browser: Heap buffer overflow in WebGL | fixed: 12 | 2026-06-28T11:58:22+00:00 | Vulnerability · Source |