VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294119 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2013-6415 | redhat_vex | rubygem-actionpack: number_to_currency XSS | fixed: 37 known affected: 4 known not affected: 4 | 2026-06-28T11:55:49+00:00 | Vulnerability · Source |
| CVE-2018-2790 | redhat_vex | OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) | fixed: 846 known affected: 8 | 2026-06-28T11:55:48+00:00 | Vulnerability · Source |
| CVE-2013-5802 | redhat_vex | OpenJDK: javax.xml.transform.TransformerFactory does not properly honor XMLConstants.FEATURE_SECURE_PROCESSING (JAXP, 8012425) | fixed: 634 | 2026-06-28T11:55:48+00:00 | Vulnerability · Source |
| CVE-2019-13748 | redhat_vex | chromium-browser: Insufficient policy enforcement in developer tools | fixed: 14 | 2026-06-28T11:55:48+00:00 | Vulnerability · Source |
| CVE-2019-13673 | redhat_vex | chromium-browser: Cross-origin information leak using devtools | fixed: 14 | 2026-06-28T11:55:47+00:00 | Vulnerability · Source |
| CVE-2018-2769 | redhat_vex | mysql: Server: Pluggable Auth unspecified vulnerability (CPU Apr 2018) | fixed: 186 known not affected: 105 | 2026-06-28T11:55:46+00:00 | Vulnerability · Source |
| CVE-2019-13683 | redhat_vex | chromium-browser: Exceptions leaked by devtools | fixed: 14 | 2026-06-28T11:55:44+00:00 | Vulnerability · Source |
| CVE-2013-5829 | redhat_vex | OpenJDK: Java2d Disposer security bypass (2D, 8017287) | fixed: 634 | 2026-06-28T11:55:44+00:00 | Vulnerability · Source |
| CVE-2013-5825 | redhat_vex | OpenJDK: XML parsing Denial of Service (JAXP, 8014530) | fixed: 634 | 2026-06-28T11:55:44+00:00 | Vulnerability · Source |
| CVE-2019-13701 | redhat_vex | chromium-browser: URL spoof in navigation | fixed: 14 | 2026-06-28T11:55:43+00:00 | Vulnerability · Source |
| CVE-2019-13758 | redhat_vex | chromium-browser: Insufficient policy enforcement in navigation | fixed: 14 | 2026-06-28T11:55:42+00:00 | Vulnerability · Source |
| CVE-2018-2638 | redhat_vex | JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment) | fixed: 169 | 2026-06-28T11:55:41+00:00 | Vulnerability · Source |
| CVE-2018-2603 | redhat_vex | OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387) | fixed: 856 known affected: 8 | 2026-06-28T11:55:41+00:00 | Vulnerability · Source |
| CVE-2019-13751 | redhat_vex | sqlite: fts3: improve detection of corrupted records | fixed: 89 known affected: 6 known not affected: 7 | 2026-06-28T11:55:40+00:00 | Vulnerability · Source |
| CVE-2013-5331 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-28) | fixed: 5 | 2026-06-28T11:55:39+00:00 | Vulnerability · Source |
| CVE-2020-1748 | redhat_vex | Wildfly: Improper authorization issue in WildFlySecurityManager when using alternative protection domain | fixed: 643 known affected: 10 | 2026-06-28T11:55:39+00:00 | Vulnerability · Source |
| CVE-2011-2097 | redhat_vex | acroread: multiple code execution flaws (APSB11-16) | fixed: 18 | 2026-06-28T11:55:39+00:00 | Vulnerability · Source |
| CVE-2019-13696 | redhat_vex | chromium-browser: Use-after-free in V8 | fixed: 14 | 2026-06-28T11:55:38+00:00 | Vulnerability · Source |
| CVE-2020-1745 | redhat_vex | undertow: AJP File Read/Inclusion Vulnerability | fixed: 1455 known affected: 5 known not affected: 23 | 2026-06-28T11:55:38+00:00 | Vulnerability · Source |
| CVE-2013-3345 | redhat_vex | flash-plugin: Multiple code execution flaws (APSB13-17) | fixed: 4 | 2026-06-28T11:55:38+00:00 | Vulnerability · Source |
| CVE-2013-5330 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-26) | fixed: 5 | 2026-06-28T11:55:38+00:00 | Vulnerability · Source |
| CVE-2013-3347 | redhat_vex | flash-plugin: Multiple code execution flaws (APSB13-17) | fixed: 4 | 2026-06-28T11:55:38+00:00 | Vulnerability · Source |
| CVE-2019-13713 | redhat_vex | chromium-browser: Cross-origin data leak | fixed: 14 | 2026-06-28T11:55:37+00:00 | Vulnerability · Source |
| CVE-2020-1744 | redhat_vex | keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP | fixed: 12 known affected: 2 known not affected: 1 | 2026-06-28T11:55:36+00:00 | Vulnerability · Source |
| CVE-2026-4710 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component | fixed: 320 known affected: 8 | 2026-06-28T11:55:36+00:00 | Vulnerability · Source |
| CVE-2019-13711 | redhat_vex | chromium-browser: Cross-context information leak | fixed: 14 | 2026-06-28T11:55:36+00:00 | Vulnerability · Source |
| CVE-2018-2565 | redhat_vex | mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2018) | fixed: 63 known not affected: 105 | 2026-06-28T11:55:35+00:00 | Vulnerability · Source |
| CVE-2018-14662 | redhat_vex | ceph: authenticated user with read only permissions can steal dm-crypt / LUKS key | fixed: 147 known affected: 22 known not affected: 15 | 2026-06-28T11:55:35+00:00 | Vulnerability · Source |
| CVE-2013-3344 | redhat_vex | flash-plugin: Multiple code execution flaws (APSB13-17) | fixed: 4 | 2026-06-28T11:55:35+00:00 | Vulnerability · Source |
| CVE-2019-17056 | redhat_vex | kernel: unprivileged access to llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC socket type. | known not affected: 93 | 2026-06-28T11:55:34+00:00 | Vulnerability · Source |
| CVE-2019-13666 | redhat_vex | chromium-browser: Side channel using storage size estimate | fixed: 14 | 2026-06-28T11:55:34+00:00 | Vulnerability · Source |
| CVE-2009-1868 | redhat_vex | flash-plugin: multiple code execution flaws (APSB09-10) | fixed: 10 | 2026-06-28T11:55:33+00:00 | Vulnerability · Source |
| CVE-2013-3009 | redhat_vex | JDK: Unspecified security fixes (July 2013) | fixed: 278 | 2026-06-28T11:55:33+00:00 | Vulnerability · Source |
| CVE-2019-13677 | redhat_vex | chromium-browser: Chrome web store origin needs to be isolated | fixed: 14 | 2026-06-28T11:55:32+00:00 | Vulnerability · Source |
| CVE-2020-14365 | redhat_vex | ansible: dnf module install packages with no GPG signature | fixed: 16 known affected: 11 | 2026-06-28T11:55:32+00:00 | Vulnerability · Source |
| CVE-2019-13732 | redhat_vex | chromium-browser: Use after free in WebAudio | fixed: 14 | 2026-06-28T11:55:32+00:00 | Vulnerability · Source |
| CVE-2018-2582 | redhat_vex | OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962) | fixed: 566 known affected: 9 known not affected: 14 | 2026-06-28T11:55:32+00:00 | Vulnerability · Source |
| CVE-2018-2647 | redhat_vex | mysql: Server: Replication unspecified vulnerability (CPU Jan 2018) | fixed: 133 known not affected: 96 | 2026-06-28T11:55:31+00:00 | Vulnerability · Source |
| CVE-2026-31590 | redhat_vex | kernel: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION | known affected: 232 known not affected: 42 | 2026-06-28T11:55:31+00:00 | Vulnerability · Source |
| CVE-2018-2583 | redhat_vex | mysql: Stored Procedure unspecified vulnerability (CPU Jan 2018) | fixed: 133 known not affected: 96 | 2026-06-28T11:55:30+00:00 | Vulnerability · Source |
| CVE-2013-2450 | redhat_vex | OpenJDK: ObjectStreamClass circular reference denial of service (Serialization, 8000638) | fixed: 555 | 2026-06-28T11:55:29+00:00 | Vulnerability · Source |
| CVE-2019-16994 | redhat_vex | kernel: Memory leak in sit_init_net() in net/ipv6/sit.c | fixed: 358 known affected: 43 | 2026-06-28T11:55:29+00:00 | Vulnerability · Source |
| CVE-2019-16995 | redhat_vex | kernel: Memory leak in hsr_dev_finalize() in net/hsr/hsr_device.c | known not affected: 104 | 2026-06-28T11:55:29+00:00 | Vulnerability · Source |
| CVE-2013-2455 | redhat_vex | OpenJDK: getEnclosing* checks (Libraries, 8007812) | fixed: 555 | 2026-06-28T11:55:28+00:00 | Vulnerability · Source |
| CVE-2013-2453 | redhat_vex | OpenJDK: MBeanServer Introspector package access (JMX, 8008124) | fixed: 462 known not affected: 8 | 2026-06-28T11:55:28+00:00 | Vulnerability · Source |
| CVE-2013-2454 | redhat_vex | OpenJDK: SerialJavaObject package restriction (JDBC, 8009554) | fixed: 485 known not affected: 7 | 2026-06-28T11:55:28+00:00 | Vulnerability · Source |
| CVE-2013-2440 | redhat_vex | JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment) | fixed: 313 | 2026-06-28T11:55:28+00:00 | Vulnerability · Source |
| CVE-2013-2449 | redhat_vex | OpenJDK: GnomeFileTypeDetector path access check (Libraries, 8004288) | fixed: 202 known not affected: 24 | 2026-06-28T11:55:26+00:00 | Vulnerability · Source |
| CVE-2013-2439 | redhat_vex | JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Install) | fixed: 106 | 2026-06-28T11:55:26+00:00 | Vulnerability · Source |
| CVE-2026-48852 | redhat_vex | PuTTY: assertion failure in ECDSA signature verification | known not affected: 1 | 2026-06-28T11:55:26+00:00 | Vulnerability · Source |