VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294119 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-26146 | redhat_vex | kernel: reassembling encrypted fragments with non-consecutive packet numbers | fixed: 150 known affected: 150 | 2026-06-28T11:57:21+00:00 | Vulnerability · Source |
| CVE-2018-5712 | redhat_vex | php: Reflected XSS on PHAR 404 page | fixed: 931 known affected: 59 known not affected: 48 | 2026-06-28T11:57:21+00:00 | Vulnerability · Source |
| CVE-2020-26144 | redhat_vex | kernel: accepting unencrypted A-MSDU frames that start with RFC1042 header | fixed: 150 known affected: 150 | 2026-06-28T11:57:20+00:00 | Vulnerability · Source |
| CVE-2020-26137 | redhat_vex | python-urllib3: CRLF injection via HTTP request method | fixed: 502 known affected: 6 known not affected: 134 | 2026-06-28T11:57:20+00:00 | Vulnerability · Source |
| CVE-2019-11041 | redhat_vex | php: Heap buffer over-read in exif_scan_thumbnail() | fixed: 1062 known affected: 118 known not affected: 30 | 2026-06-28T11:57:19+00:00 | Vulnerability · Source |
| CVE-2020-25743 | redhat_vex | QEMU: ide: null pointer dereference while cancelling i/o operation | known affected: 72 known not affected: 22 | 2026-06-28T11:57:19+00:00 | Vulnerability · Source |
| CVE-2020-25742 | redhat_vex | QEMU: scsi: lsi: null pointer dereference during memory move | known not affected: 84 | 2026-06-28T11:57:18+00:00 | Vulnerability · Source |
| CVE-2020-25741 | redhat_vex | QEMU: fdc: null pointer dereference during r/w data transfer | known affected: 79 known not affected: 32 | 2026-06-28T11:57:18+00:00 | Vulnerability · Source |
| CVE-2020-25641 | redhat_vex | kernel: soft-lockups in iov_iter_copy_from_user_atomic() could result in DoS | fixed: 448 known affected: 16 known not affected: 42 | 2026-06-28T11:57:18+00:00 | Vulnerability · Source |
| CVE-2012-0876 | redhat_vex | expat: hash table collisions CPU usage DoS | fixed: 81 known affected: 8 | 2026-06-28T11:57:17+00:00 | Vulnerability · Source |
| CVE-2019-2991 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) | fixed: 337 known not affected: 109 | 2026-06-28T11:57:16+00:00 | Vulnerability · Source |
| CVE-2020-25717 | redhat_vex | samba: Active Directory (AD) domain user could become root on domain members | fixed: 1273 known affected: 29 known not affected: 47 | 2026-06-28T11:57:15+00:00 | Vulnerability · Source |
| CVE-2004-0595 | redhat_vex | security flaw | fixed: 122 | 2026-06-28T11:57:15+00:00 | Vulnerability · Source |
| CVE-2015-1257 | redhat_vex | chromium-browser: Container-overflow in SVG. | fixed: 12 | 2026-06-28T11:57:13+00:00 | Vulnerability · Source |
| CVE-2019-2957 | redhat_vex | mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019) | fixed: 337 known not affected: 109 | 2026-06-28T11:57:12+00:00 | Vulnerability · Source |
| CVE-2019-10199 | redhat_vex | keycloak: CSRF check missing in My Resources functionality in the Account Console | fixed: 3 known affected: 5 | 2026-06-28T11:57:12+00:00 | Vulnerability · Source |
| CVE-2014-0428 | redhat_vex | OpenJDK: insufficient security checks in IIOP streams (CORBA, 8025767) | fixed: 690 known not affected: 21 | 2026-06-28T11:57:11+00:00 | Vulnerability · Source |
| CVE-2015-0319 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T11:57:10+00:00 | Vulnerability · Source |
| CVE-2020-25685 | redhat_vex | dnsmasq: loose query name check in reply_query() makes forging replies easier for an off-path attacker | fixed: 180 known affected: 4 known not affected: 107 | 2026-06-28T11:57:10+00:00 | Vulnerability · Source |
| CVE-2022-28893 | redhat_vex | kernel: use after free in SUNRPC subsystem | fixed: 475 known affected: 42 | 2026-06-28T11:57:10+00:00 | Vulnerability · Source |
| CVE-2026-33599 | redhat_vex | dnsdist: out-of-bounds read in service discovery | known not affected: 1 | 2026-06-28T11:57:09+00:00 | Vulnerability · Source |
| CVE-2014-9767 | redhat_vex | php: ZipArchive:: extractTo allows for directory traversal when creating directories | fixed: 251 known affected: 109 known not affected: 1 | 2026-06-28T11:57:09+00:00 | Vulnerability · Source |
| CVE-2019-2830 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019) | fixed: 291 known not affected: 112 | 2026-06-28T11:57:08+00:00 | Vulnerability · Source |
| CVE-2026-31412 | redhat_vex | kernel: usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() | known not affected: 274 | 2026-06-28T11:57:08+00:00 | Vulnerability · Source |
| CVE-2019-2785 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jul 2019) | fixed: 291 known not affected: 112 | 2026-06-28T11:57:06+00:00 | Vulnerability · Source |
| CVE-2019-2769 | redhat_vex | OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) | fixed: 1023 | 2026-06-28T11:57:06+00:00 | Vulnerability · Source |
| CVE-2026-31582 | redhat_vex | kernel: hwmon: (powerz) Fix use-after-free on USB disconnect | known not affected: 274 | 2026-06-28T11:57:04+00:00 | Vulnerability · Source |
| CVE-2014-6531 | redhat_vex | OpenJDK: insufficient ResourceBundle name check (Libraries, 8044274) | fixed: 961 | 2026-06-28T11:57:03+00:00 | Vulnerability · Source |
| CVE-2020-25684 | redhat_vex | dnsmasq: loose address/port check in reply_query() makes forging replies easier for an off-path attacker | fixed: 180 known affected: 4 known not affected: 107 | 2026-06-28T11:57:02+00:00 | Vulnerability · Source |
| CVE-2026-23073 | redhat_vex | kernel: wifi: rsi: Fix memory corruption due to not set vif driver data size | known not affected: 274 | 2026-06-28T11:57:02+00:00 | Vulnerability · Source |
| CVE-2014-2432 | redhat_vex | mysql: unspecified DoS related to Federated (CPU April 2014) | fixed: 190 under investigation: 9 | 2026-06-28T11:57:00+00:00 | Vulnerability · Source |
| CVE-2026-28212 | redhat_vex | Firebird: Firebird: Denial of Service via crafted network packet during op_slice processing | known not affected: 1 | 2026-06-28T11:57:00+00:00 | Vulnerability · Source |
| CVE-2026-31580 | redhat_vex | kernel: bcache: fix cached_dev.sb_bio use-after-free and crash | known not affected: 274 | 2026-06-28T11:57:00+00:00 | Vulnerability · Source |
| CVE-2026-33260 | redhat_vex | dnsdist: insufficient input validation of internal webserver | known not affected: 1 | 2026-06-28T11:57:00+00:00 | Vulnerability · Source |
| CVE-2014-2401 | redhat_vex | JDK: unspecified vulnerability fixed in 5.0u75, 6u75, 7u55 and 8u5 (2D) | fixed: 591 known not affected: 14 | 2026-06-28T11:57:00+00:00 | Vulnerability · Source |
| CVE-2023-26545 | redhat_vex | kernel: mpls: double free on sysctl allocation failure | fixed: 666 known affected: 22 known not affected: 42 | 2026-06-28T11:56:59+00:00 | Vulnerability · Source |
| CVE-2026-26012 | redhat_vex | vaultwarden: Vaultwarden: Information disclosure due to bypassed collection permissions | known not affected: 1 | 2026-06-28T11:56:59+00:00 | Vulnerability · Source |
| CVE-2017-7407 | redhat_vex | curl: --write-out out of bounds read | fixed: 336 known affected: 13 known not affected: 11 | 2026-06-28T11:56:58+00:00 | Vulnerability · Source |
| CVE-2026-41314 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF with large image sizes | known affected: 10 | 2026-06-28T11:56:56+00:00 | Vulnerability · Source |
| CVE-2007-6244 | redhat_vex | flash: XSS via asfunction protocol | fixed: 10 | 2026-06-28T11:56:56+00:00 | Vulnerability · Source |
| CVE-2026-31574 | redhat_vex | kernel: clockevents: Add missing resets of the next_event_forced flag | known affected: 260 known not affected: 14 | 2026-06-28T11:56:54+00:00 | Vulnerability · Source |
| CVE-2026-43470 | redhat_vex | kernel: nfs: return EISDIR on nfs3_proc_create if d_alias is a dir | known affected: 90 known not affected: 184 | 2026-06-28T11:56:51+00:00 | Vulnerability · Source |
| CVE-2026-5447 | redhat_vex | wolfSSL: wolfSSL: Heap buffer overflow via AuthorityKeyIdentifier size confusion | known not affected: 1 | 2026-06-28T11:56:51+00:00 | Vulnerability · Source |
| CVE-2007-1285 | redhat_vex | security flaw | fixed: 608 | 2026-06-28T11:56:51+00:00 | Vulnerability · Source |
| CVE-2026-31577 | redhat_vex | kernel: nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map | known not affected: 274 | 2026-06-28T11:56:50+00:00 | Vulnerability · Source |
| CVE-2018-4935 | redhat_vex | flash-plugin: Remote Code Execution vulnerabilities (APSB18-08) | fixed: 3 | 2026-06-28T11:56:49+00:00 | Vulnerability · Source |
| CVE-2018-5008 | redhat_vex | flash-plugin: Information Disclosure vulnerability (APSB18-24) | fixed: 3 | 2026-06-28T11:56:49+00:00 | Vulnerability · Source |
| CVE-2010-3541 | redhat_vex | OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004) | fixed: 724 | 2026-06-28T11:56:47+00:00 | Vulnerability · Source |
| CVE-2017-3465 | redhat_vex | mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017) | fixed: 54 known not affected: 66 | 2026-06-28T11:56:47+00:00 | Vulnerability · Source |
| CVE-2010-3555 | redhat_vex | JDK unspecified vulnerability in Deployment component | fixed: 270 | 2026-06-28T11:56:47+00:00 | Vulnerability · Source |