VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294119 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-15095 | redhat_vex | npm: sensitive information exposure through logs | fixed: 200 known affected: 1 | 2026-06-28T11:53:03+00:00 | Vulnerability · Source |
| CVE-2019-13706 | redhat_vex | chromium-browser: Out-of-bounds read in PDFium | fixed: 14 | 2026-06-28T11:53:02+00:00 | Vulnerability · Source |
| CVE-2020-14416 | redhat_vex | kernel: slcan : race over tty->disc_data can lead use-after-free | known affected: 93 | 2026-06-28T11:53:01+00:00 | Vulnerability · Source |
| CVE-2020-14394 | redhat_vex | QEMU: infinite loop in xhci_ring_chain_length() in hw/usb/hcd-xhci.c | known affected: 111 | 2026-06-28T11:52:59+00:00 | Vulnerability · Source |
| CVE-2020-14390 | redhat_vex | kernel: out-of-bounds write in fbcon_redraw_softback | known affected: 93 | 2026-06-28T11:52:59+00:00 | Vulnerability · Source |
| CVE-2019-13753 | redhat_vex | sqlite: fts3: incorrectly removed corruption check | fixed: 89 known affected: 6 known not affected: 7 | 2026-06-28T11:52:59+00:00 | Vulnerability · Source |
| CVE-2026-43453 | redhat_vex | kernel: netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() | known affected: 232 known not affected: 42 | 2026-06-28T11:52:59+00:00 | Vulnerability · Source |
| CVE-2017-9373 | redhat_vex | Qemu: ide: ahci host memory leakage during hotunplug | fixed: 47 known affected: 10 known not affected: 9 | 2026-06-28T11:52:58+00:00 | Vulnerability · Source |
| CVE-2025-68789 | redhat_vex | kernel: hwmon: (ibmpex) fix use-after-free in high/low store | known affected: 274 | 2026-06-28T11:52:58+00:00 | Vulnerability · Source |
| CVE-2010-2213 | redhat_vex | flash-plugin: multiple security flaws (APSB10-16) | fixed: 22 | 2026-06-28T11:52:57+00:00 | Vulnerability · Source |
| CVE-2020-14378 | redhat_vex | dpdk: partial Denial of Service due to Integer Underflow | known affected: 5 known not affected: 128 | 2026-06-28T11:52:56+00:00 | Vulnerability · Source |
| CVE-2012-0506 | redhat_vex | OpenJDK: mutable repository identifiers (CORBA, 7110704) | fixed: 487 known affected: 7 | 2026-06-28T11:52:55+00:00 | Vulnerability · Source |
| CVE-2012-0547 | redhat_vex | OpenJDK: AWT hardening fixes (AWT, 7163201) | fixed: 424 known affected: 9 known not affected: 8 | 2026-06-28T11:52:53+00:00 | Vulnerability · Source |
| CVE-2018-20509 | redhat_vex | kernel: print_binder_ref_olocked function in drivers/android/binder.c leads to information disclosure | known not affected: 93 | 2026-06-28T11:52:53+00:00 | Vulnerability · Source |
| CVE-2026-31491 | redhat_vex | kernel: RDMA/irdma: Harden depth calculation functions | known affected: 184 known not affected: 90 | 2026-06-28T11:52:53+00:00 | Vulnerability · Source |
| CVE-2025-65518 | redhat_vex | plesk: Plesk Obsidian: Denial of Service via crafted request to get_password.php | known not affected: 1 | 2026-06-28T11:52:53+00:00 | Vulnerability · Source |
| CVE-2012-0753 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-03) | fixed: 5 | 2026-06-28T11:52:53+00:00 | Vulnerability · Source |
| CVE-2020-14377 | redhat_vex | dpdk: write_back_data buffer over read (cipher->para.dst_data_len & desc->len) | known not affected: 133 | 2026-06-28T11:52:51+00:00 | Vulnerability · Source |
| CVE-2008-3105 | redhat_vex | OpenJDK JAX-WS unauthorized URL access (6542088) | fixed: 196 | 2026-06-28T11:52:51+00:00 | Vulnerability · Source |
| CVE-2020-14376 | redhat_vex | dpdk: buffer overflow copying iv_data from guest to host (prepare_sym_cipher_op & prepare_sym_chain_op) | known not affected: 133 | 2026-06-28T11:52:51+00:00 | Vulnerability · Source |
| CVE-2026-25211 | redhat_vex | llamastack/llama-stack: Sensitive Information Exposure Through Log Files in Llama Stack PGVector Integration | known not affected: 1 | 2026-06-28T11:52:50+00:00 | Vulnerability · Source |
| CVE-2026-34094 | redhat_vex | mediawiki: customized help link for page protection indicator is relative to subpage name, because the link target is missing the "/wiki/" prefix | known not affected: 1 | 2026-06-28T11:52:50+00:00 | Vulnerability · Source |
| CVE-2005-2933 | redhat_vex | security flaw | fixed: 443 | 2026-06-28T11:52:50+00:00 | Vulnerability · Source |
| CVE-2026-25075 | redhat_vex | strongSwan: strongSwan: Denial of Service via integer underflow in EAP-TTLS AVP parser | known not affected: 1 | 2026-06-28T11:52:50+00:00 | Vulnerability · Source |
| CVE-2010-4471 | redhat_vex | OpenJDK Java2D font-related system property leak (6985453) | fixed: 494 | 2026-06-28T11:52:50+00:00 | Vulnerability · Source |
| CVE-2010-4448 | redhat_vex | OpenJDK DNS cache poisoning by untrusted applets (6981922) | fixed: 702 | 2026-06-28T11:52:49+00:00 | Vulnerability · Source |
| CVE-2020-14356 | redhat_vex | kernel: Use After Free vulnerability in cgroup BPF component | fixed: 150 known not affected: 45 | 2026-06-28T11:52:46+00:00 | Vulnerability · Source |
| CVE-2023-23914 | redhat_vex | curl: HSTS ignored on multiple requests | fixed: 12 known affected: 4 known not affected: 132 | 2026-06-28T11:52:45+00:00 | Vulnerability · Source |
| CVE-2020-14353 | redhat_vex | kernel: keys: for keyctl prevent creating a different user's keyrings in RHEL-6.10 | known not affected: 104 | 2026-06-28T11:52:45+00:00 | Vulnerability · Source |
| CVE-2020-14351 | redhat_vex | kernel: performance counters race condition use-after-free | fixed: 902 known affected: 43 known not affected: 53 | 2026-06-28T11:52:44+00:00 | Vulnerability · Source |
| CVE-2020-14343 | redhat_vex | PyYAML: incomplete fix for CVE-2020-1747 | fixed: 243 known affected: 1 known not affected: 1507 | 2026-06-28T11:52:42+00:00 | Vulnerability · Source |
| CVE-2026-31562 | redhat_vex | kernel: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register | known not affected: 274 | 2026-06-28T11:52:41+00:00 | Vulnerability · Source |
| CVE-2026-31728 | redhat_vex | kernel: usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop | known affected: 76 known not affected: 198 | 2026-06-28T11:52:40+00:00 | Vulnerability · Source |
| CVE-2026-31559 | redhat_vex | kernel: LoongArch: Fix missing NULL checks for kstrdup() | known not affected: 274 | 2026-06-28T11:52:40+00:00 | Vulnerability · Source |
| CVE-2026-2474 | redhat_vex | crypt-urandom: Crypt::URandom for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom() | known not affected: 1 | 2026-06-28T11:52:39+00:00 | Vulnerability · Source |
| CVE-2026-24686 | redhat_vex | github.com/theupdateframework/go-tuf/v2: go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names | known affected: 27 | 2026-06-28T11:52:39+00:00 | Vulnerability · Source |
| CVE-2025-32014 | redhat_vex | estree-util-value-to-estree: estree-util-value-to-estree allows prototype pollution in generated ESTree | known not affected: 1 | 2026-06-28T11:52:38+00:00 | Vulnerability · Source |
| CVE-2013-3343 | redhat_vex | flash-plugin: code execution flaw (APSB13-16) | fixed: 4 | 2026-06-28T11:52:38+00:00 | Vulnerability · Source |
| CVE-2026-24480 | redhat_vex | QGIS: QGIS GitHub Actions workflow: Remote Code Execution and repository compromise via insecure `pull_request_target` configuration | known not affected: 1 | 2026-06-28T11:52:37+00:00 | Vulnerability · Source |
| CVE-2026-31558 | redhat_vex | kernel: LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust | known not affected: 274 | 2026-06-28T11:52:37+00:00 | Vulnerability · Source |
| CVE-2013-2466 | redhat_vex | JDK: unspecified vulnerability fixed in 7u25 (Deployment) | fixed: 325 known not affected: 8 | 2026-06-28T11:52:37+00:00 | Vulnerability · Source |
| CVE-2026-32642 | redhat_vex | Apache Artemis: Apache ActiveMQ Artemis: Apache Artemis and Apache ActiveMQ Artemis: Unauthorized address creation due to incorrect authorization during JMS topic subscription. | fixed: 1 known affected: 15 | 2026-06-28T11:52:37+00:00 | Vulnerability · Source |
| CVE-2023-23455 | redhat_vex | Kernel: denial of service in atm_tc_enqueue in net/sched/sch_atm.c due to type confusion | fixed: 399 known affected: 42 known not affected: 108 | 2026-06-28T11:52:36+00:00 | Vulnerability · Source |
| CVE-2017-9227 | redhat_vex | oniguruma: Out-of-bounds stack read in mbc_enc_len() during regular expression searching | fixed: 254 known affected: 174 under investigation: 4 | 2026-06-28T11:52:35+00:00 | Vulnerability · Source |
| CVE-2017-9242 | redhat_vex | kernel: Incorrect overwrite check in __ip6_append_data() | fixed: 185 known not affected: 34 | 2026-06-28T11:52:35+00:00 | Vulnerability · Source |
| CVE-2017-9229 | redhat_vex | oniguruma: Invalid pointer dereference in left_adjust_char_head() | fixed: 257 known affected: 174 under investigation: 3 | 2026-06-28T11:52:34+00:00 | Vulnerability · Source |
| CVE-2025-62820 | redhat_vex | nebula: incorrect handling of CIDR in some configurations allows arbitrary source IP addresses within the network | known not affected: 1 | 2026-06-28T11:52:33+00:00 | Vulnerability · Source |
| CVE-2013-2176 | redhat_vex | rhev-m: rhev-apt service unquoted search path | fixed: 1 | 2026-06-28T11:52:33+00:00 | Vulnerability · Source |
| CVE-2008-5359 | redhat_vex | OpenJDK Buffer overflow in image processing (6726779) | fixed: 587 | 2026-06-28T11:52:33+00:00 | Vulnerability · Source |
| CVE-2026-24133 | redhat_vex | jsPDF: jsPDF: Denial of Service due to excessive memory allocation from crafted BMP images | known affected: 6 | 2026-06-28T11:52:32+00:00 | Vulnerability · Source |