VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294119 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-6050 | redhat_vex | chromium-browser: url spoof in omnibox | fixed: 12 | 2026-06-28T11:57:56+00:00 | Vulnerability · Source |
| CVE-2019-11478 | redhat_vex | Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service | fixed: 987 known affected: 1 | 2026-06-28T11:57:56+00:00 | Vulnerability · Source |
| CVE-2018-6039 | redhat_vex | chromium-browser: xss in devtools | fixed: 12 | 2026-06-28T11:57:55+00:00 | Vulnerability · Source |
| CVE-2018-6037 | redhat_vex | chromium-browser: insufficient user gesture requirements in autofill | fixed: 12 | 2026-06-28T11:57:55+00:00 | Vulnerability · Source |
| CVE-2018-6036 | redhat_vex | chromium-browser: integer underflow in webassembly | fixed: 12 | 2026-06-28T11:57:54+00:00 | Vulnerability · Source |
| CVE-2015-1271 | redhat_vex | chromium-browser: Heap-buffer-overflow in pdfium | fixed: 12 | 2026-06-28T11:57:54+00:00 | Vulnerability · Source |
| CVE-2020-27832 | redhat_vex | quay: persistent XSS in repository notification display | fixed: 6 | 2026-06-28T11:57:53+00:00 | Vulnerability · Source |
| CVE-2018-5814 | redhat_vex | kernel: Race condition errors in USB over IP functionality can cause denial of service | known not affected: 88 | 2026-06-28T11:57:53+00:00 | Vulnerability · Source |
| CVE-2020-27777 | redhat_vex | kernel: powerpc: RTAS calls can be used to compromise kernel integrity | fixed: 275 known affected: 31 known not affected: 27 | 2026-06-28T11:57:51+00:00 | Vulnerability · Source |
| CVE-2026-40394 | redhat_vex | Varnish Cache: Varnish Enterprise: Varnish Cache and Varnish Enterprise: Denial of Service via workspace overflow | known not affected: 14 | 2026-06-28T11:57:51+00:00 | Vulnerability · Source |
| CVE-2015-1270 | redhat_vex | ICU: Uninitialized memory read fixed in Chrome 44.0.2403.89 | fixed: 12 known affected: 5 known not affected: 6 | 2026-06-28T11:57:49+00:00 | Vulnerability · Source |
| CVE-2020-27820 | redhat_vex | kernel: use-after-free in nouveau kernel module | fixed: 150 known affected: 30 known not affected: 121 | 2026-06-28T11:57:49+00:00 | Vulnerability · Source |
| CVE-2019-13682 | redhat_vex | chromium-browser: Site isolation bypass | fixed: 14 | 2026-06-28T11:57:48+00:00 | Vulnerability · Source |
| CVE-2019-13663 | redhat_vex | chromium-browser: IDN spoof | fixed: 14 | 2026-06-28T11:57:47+00:00 | Vulnerability · Source |
| CVE-2026-3102 | redhat_vex | exiftool: PNG file MacOS.pm SetMacOSTags OS command injection | known not affected: 1 | 2026-06-28T11:57:47+00:00 | Vulnerability · Source |
| CVE-2026-32722 | redhat_vex | bloomberg.github.io/memray: Memray-generated HTML reports vulnerable to Stored XSS via unescaped command-line metadata | known not affected: 1 | 2026-06-28T11:57:46+00:00 | Vulnerability · Source |
| CVE-2019-5842 | redhat_vex | chromium-browser: Use-after-free in Blink | fixed: 14 | 2026-06-28T11:57:44+00:00 | Vulnerability · Source |
| CVE-2013-1487 | redhat_vex | JDK: unspecified vulnerability fixed in 6u41 and 7u15 (Deployment) | fixed: 313 known not affected: 8 | 2026-06-28T11:57:44+00:00 | Vulnerability · Source |
| CVE-2013-1690 | redhat_vex | Mozilla: Execution of unmapped memory through onreadystatechange event (MFSA 2013-53) | fixed: 140 known affected: 1 | 2026-06-28T11:57:44+00:00 | Vulnerability · Source |
| CVE-2013-0762 | redhat_vex | Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02) | fixed: 140 known affected: 1 | 2026-06-28T11:57:43+00:00 | Vulnerability · Source |
| CVE-2018-6041 | redhat_vex | chromium-browser: url spoof in navigation | fixed: 12 | 2026-06-28T11:57:43+00:00 | Vulnerability · Source |
| CVE-2019-5821 | redhat_vex | chromium-browser: Integer overflow in PDFium | fixed: 14 | 2026-06-28T11:57:43+00:00 | Vulnerability · Source |
| CVE-2018-6045 | redhat_vex | chromium-browser: insufficient isolation of devtools from extensions | fixed: 12 | 2026-06-28T11:57:43+00:00 | Vulnerability · Source |
| CVE-2019-5792 | redhat_vex | chromium-browser: Integer overflow in PDFium | fixed: 14 | 2026-06-28T11:57:42+00:00 | Vulnerability · Source |
| CVE-2020-27661 | redhat_vex | QEMU: divide by zero in dwc2_handle_packet() in hw/usb/hcd-dwc2.c | known not affected: 111 | 2026-06-28T11:57:42+00:00 | Vulnerability · Source |
| CVE-2019-5763 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in V8 | fixed: 12 | 2026-06-28T11:57:41+00:00 | Vulnerability · Source |
| CVE-2015-8401 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:57:41+00:00 | Vulnerability · Source |
| CVE-2018-1107 | redhat_vex | nodejs-is-my-json-valid: ReDoS when validating JSON fields with email format | fixed: 1 known affected: 2 known not affected: 12 | 2026-06-28T11:57:41+00:00 | Vulnerability · Source |
| CVE-2007-3698 | redhat_vex | Java Secure Socket Extension Does Not Correctly Process SSL/TLS Handshake Requests Resulting in a Denial of Service (DoS) Condition | fixed: 309 | 2026-06-28T11:57:40+00:00 | Vulnerability · Source |
| CVE-2018-6034 | redhat_vex | chromium-browser: integer overflow in blink | fixed: 12 | 2026-06-28T11:57:39+00:00 | Vulnerability · Source |
| CVE-2018-6033 | redhat_vex | chromium-browser: race when opening downloaded files | fixed: 12 | 2026-06-28T11:57:39+00:00 | Vulnerability · Source |
| CVE-2026-25210 | redhat_vex | libexpat: libexpat: Information disclosure and data integrity issues due to integer overflow in buffer reallocation | known not affected: 21 | 2026-06-28T11:57:39+00:00 | Vulnerability · Source |
| CVE-2020-27170 | redhat_vex | kernel: Speculation on pointer arithmetic against bpf_context pointer | fixed: 185 known affected: 64 known not affected: 120 | 2026-06-28T11:57:39+00:00 | Vulnerability · Source |
| CVE-2020-27171 | redhat_vex | kernel: Integer underflow when restricting speculative pointer arithmetic | known affected: 76 known not affected: 121 | 2026-06-28T11:57:38+00:00 | Vulnerability · Source |
| CVE-2019-13659 | redhat_vex | chromium-browser: URL spoof | fixed: 14 | 2026-06-28T11:57:37+00:00 | Vulnerability · Source |
| CVE-2026-31484 | redhat_vex | kernel: io_uring/fdinfo: fix OOB read in SQE_MIXED wrap check | known not affected: 274 | 2026-06-28T11:57:37+00:00 | Vulnerability · Source |
| CVE-2019-5108 | redhat_vex | kernel: triggering AP to send IAPP location updates for stations before the required authentication process has completed can lead to DoS | fixed: 382 known affected: 27 | 2026-06-28T11:57:36+00:00 | Vulnerability · Source |
| CVE-2020-27152 | redhat_vex | Kernel: KVM: host stack overflow due to lazy update IOAPIC | fixed: 150 known not affected: 56 | 2026-06-28T11:57:32+00:00 | Vulnerability · Source |
| CVE-2026-53663 | redhat_vex | react-router: @remix-run/server-runtime: React Router: Insufficient CSRF protection allows integrity impact | known affected: 30 known not affected: 194 | 2026-06-28T11:57:31+00:00 | Vulnerability · Source |
| CVE-2019-1352 | redhat_vex | git: Files inside the .git directory may be overwritten during cloning via NTFS Alternate Data Streams | fixed: 262 known not affected: 32 | 2026-06-28T11:57:30+00:00 | Vulnerability · Source |
| CVE-2020-26560 | redhat_vex | kernel: impersonation attack in Bluetooth Mesh Provisioning | known affected: 27 known not affected: 197 | 2026-06-28T11:57:28+00:00 | Vulnerability · Source |
| CVE-2026-4603 | redhat_vex | jsrsasign: jsrsasign: Cryptographic operations impacted by division by zero via malicious JSON Web Key | known affected: 4 | 2026-06-28T11:57:28+00:00 | Vulnerability · Source |
| CVE-2020-14302 | redhat_vex | keycloak: reusable "state" parameter at redirect_uri endpoint enables possibility of replay attacks | fixed: 10 known not affected: 5 | 2026-06-28T11:57:27+00:00 | Vulnerability · Source |
| CVE-2019-1349 | redhat_vex | git: Recursive submodule cloning allows using git directory twice with synonymous directory name written in .git/ | fixed: 262 known affected: 19 known not affected: 19 | 2026-06-28T11:57:26+00:00 | Vulnerability · Source |
| CVE-2025-66221 | redhat_vex | Werkzeug: Werkzeug: Denial of service via Windows device names in path segments | known not affected: 1 | 2026-06-28T11:57:25+00:00 | Vulnerability · Source |
| CVE-2020-26556 | redhat_vex | kernel: malleable commitment Bluetooth Mesh Provisioning | known affected: 27 known not affected: 197 | 2026-06-28T11:57:24+00:00 | Vulnerability · Source |
| CVE-2020-26555 | redhat_vex | kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack | fixed: 429 known affected: 69 known not affected: 31 | 2026-06-28T11:57:23+00:00 | Vulnerability · Source |
| CVE-2025-64716 | redhat_vex | anubis: XSS via redirect parameter | known not affected: 1 | 2026-06-28T11:57:22+00:00 | Vulnerability · Source |
| CVE-2020-26311 | redhat_vex | Useragent: GHSL-2020-312: Regular Expression Denial of Service (ReDoS) in useragent | known not affected: 2 | 2026-06-28T11:57:22+00:00 | Vulnerability · Source |
| CVE-2015-8050 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:57:21+00:00 | Vulnerability · Source |