VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294121 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-23369 | redhat_vex | kernel: i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" | known affected: 198 known not affected: 76 | 2026-06-28T11:51:08+00:00 | Vulnerability · Source |
| CVE-2026-23991 | redhat_vex | github.com/theupdateframework/go-tuf/v2: go-tuf client DoS via malformed server response | known affected: 35 | 2026-06-28T11:51:08+00:00 | Vulnerability · Source |
| CVE-2020-11993 | redhat_vex | httpd: mod_http2 concurrent pool usage | fixed: 361 known affected: 3 known not affected: 16 | 2026-06-28T11:51:07+00:00 | Vulnerability · Source |
| CVE-2013-0273 | redhat_vex | pidgin: Meanwhile protocol missing nul termination of long Lotus Sametime usernames | fixed: 113 known affected: 1 | 2026-06-28T11:51:07+00:00 | Vulnerability · Source |
| CVE-2013-0272 | redhat_vex | pidgin: MXit protocol stack-based buffer overflow when processing HTTP headers | fixed: 113 known affected: 1 | 2026-06-28T11:51:06+00:00 | Vulnerability · Source |
| CVE-2023-35825 | redhat_vex | kernel: r592: race condition leading to use-after-free in r592_remove() | fixed: 666 known affected: 64 | 2026-06-28T11:51:06+00:00 | Vulnerability · Source |
| CVE-2018-17467 | redhat_vex | chromium-browser: URL spoof in Omnibox | fixed: 12 | 2026-06-28T11:51:05+00:00 | Vulnerability · Source |
| CVE-2018-8822 | redhat_vex | kernel: Memory corruption in ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c | known not affected: 88 | 2026-06-28T11:51:05+00:00 | Vulnerability · Source |
| CVE-2026-23952 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via processing of MSL comment tags | known affected: 14 | 2026-06-28T11:51:04+00:00 | Vulnerability · Source |
| CVE-2014-3597 | redhat_vex | php: multiple buffer over-reads in php_parserr | fixed: 970 known not affected: 1 | 2026-06-28T11:51:03+00:00 | Vulnerability · Source |
| CVE-2025-67481 | redhat_vex | MediaWiki: MediaWiki: Cross-site Scripting vulnerability via improper input neutralization | known not affected: 1 | 2026-06-28T11:51:02+00:00 | Vulnerability · Source |
| CVE-2026-23920 | redhat_vex | zabbix: Zabbix: Arbitrary code execution via newline injection in script input validation | known not affected: 1 | 2026-06-28T11:51:01+00:00 | Vulnerability · Source |
| CVE-2026-28861 | redhat_vex | webkitgtk: A malicious website may be able to access script message handlers intended for other origins | known not affected: 27 | 2026-06-28T11:51:01+00:00 | Vulnerability · Source |
| CVE-2020-11984 | redhat_vex | httpd: mod_proxy_uwsgi buffer overflow | fixed: 361 known affected: 3 known not affected: 16 | 2026-06-28T11:51:01+00:00 | Vulnerability · Source |
| CVE-2022-44020 | redhat_vex | VirtualBMC: removes password protection from the managed libvirt XML domain | fixed: 2 known not affected: 5 | 2026-06-28T11:51:01+00:00 | Vulnerability · Source |
| CVE-2021-35591 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Oct 2021) | fixed: 125 known not affected: 134 | 2026-06-28T11:51:00+00:00 | Vulnerability · Source |
| CVE-2020-11884 | redhat_vex | Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation | fixed: 287 known not affected: 72 | 2026-06-28T11:50:59+00:00 | Vulnerability · Source |
| CVE-2007-5238 | redhat_vex | Vulnerabilities in Java Web Start allow to determine the location of the Java Web Start cache | fixed: 375 | 2026-06-28T11:50:58+00:00 | Vulnerability · Source |
| CVE-2026-12014 | redhat_vex | chromium-browser: chromium-browser: Use after free Cast | known not affected: 1 | 2026-06-28T11:50:58+00:00 | Vulnerability · Source |
| CVE-2019-1387 | redhat_vex | git: Remote code execution in recursive clones with nested submodules | fixed: 362 known not affected: 15 | 2026-06-28T11:50:57+00:00 | Vulnerability · Source |
| CVE-2026-31754 | redhat_vex | kernel: usb: cdns3: gadget: fix state inconsistency on gadget init failure | known affected: 76 known not affected: 198 | 2026-06-28T11:50:56+00:00 | Vulnerability · Source |
| CVE-2025-61646 | redhat_vex | MediaWiki: MediaWiki: Information disclosure via user interaction in EnhancedChangesList.Php | known not affected: 1 | 2026-06-28T11:50:56+00:00 | Vulnerability · Source |
| CVE-2026-23889 | redhat_vex | pnpm: pnpm: Arbitrary file write via path traversal on Windows | known affected: 2 | 2026-06-28T11:50:55+00:00 | Vulnerability · Source |
| CVE-2026-43174 | redhat_vex | kernel: io_uring/zcrx: fix post open error handling | known not affected: 274 | 2026-06-28T11:50:55+00:00 | Vulnerability · Source |
| CVE-2026-23888 | redhat_vex | pnpm: pnpm: Arbitrary file write via path traversal in binary fetcher leading to remote code execution | known affected: 2 | 2026-06-28T11:50:54+00:00 | Vulnerability · Source |
| CVE-2016-3134 | redhat_vex | kernel: netfilter: missing bounds check in ipt_entry structure | fixed: 207 known affected: 15 | 2026-06-28T11:50:53+00:00 | Vulnerability · Source |
| CVE-2016-3108 | redhat_vex | pulp: Insecure temporary file used when generating certificate for Pulp Nodes | fixed: 639 | 2026-06-28T11:50:52+00:00 | Vulnerability · Source |
| CVE-2018-16082 | redhat_vex | chromium-browser: Stack buffer overflow in SwiftShader | fixed: 12 | 2026-06-28T11:50:52+00:00 | Vulnerability · Source |
| CVE-2019-13764 | redhat_vex | chromium-browser: Type Confusion in V8 | fixed: 14 | 2026-06-28T11:50:52+00:00 | Vulnerability · Source |
| CVE-2018-7740 | redhat_vex | kernel: Denial of service in resv_map_release function in mm/hugetlb.c | fixed: 222 known affected: 28 known not affected: 56 | 2026-06-28T11:50:52+00:00 | Vulnerability · Source |
| CVE-2025-5264 | redhat_vex | firefox: thunderbird: Potential local code execution in “Copy as cURL” command | fixed: 249 known affected: 8 | 2026-06-28T11:50:51+00:00 | Vulnerability · Source |
| CVE-2026-12024 | redhat_vex | chromium-browser: chromium-browser: Insufficient policy enforcement DevTools | known not affected: 1 | 2026-06-28T11:50:51+00:00 | Vulnerability · Source |
| CVE-2026-23874 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via infinite recursion in MSL <write> command | known affected: 14 | 2026-06-28T11:50:51+00:00 | Vulnerability · Source |
| CVE-2014-2490 | redhat_vex | OpenJDK: Event logger format string vulnerability (Hotspot, 8037076) | fixed: 363 known not affected: 20 | 2026-06-28T11:50:51+00:00 | Vulnerability · Source |
| CVE-2014-3193 | redhat_vex | chromium: multiple security fixes in Chrome 38.0.2125.101 | fixed: 15 | 2026-06-28T11:50:50+00:00 | Vulnerability · Source |
| CVE-2012-6712 | redhat_vex | kernel: buffer overflow in drivers/net/wireless/iwlwifi/iwl-agn-sta.c | known affected: 1 known not affected: 103 | 2026-06-28T11:50:49+00:00 | Vulnerability · Source |
| CVE-2025-62349 | redhat_vex | salt: Salt Master authentication protocol downgrade may enable minion impersonation | known not affected: 1 | 2026-06-28T11:50:49+00:00 | Vulnerability · Source |
| CVE-2026-23739 | redhat_vex | Asterisk: Asterisk: Local file disclosure via unsafe XML parsing | known not affected: 1 | 2026-06-28T11:50:48+00:00 | Vulnerability · Source |
| CVE-2026-23158 | redhat_vex | kernel: gpio: virtuser: fix UAF in configfs release path | known not affected: 274 | 2026-06-28T11:50:48+00:00 | Vulnerability · Source |
| CVE-2006-0451 | redhat_vex | memory leaks using ber_scanf when handling bad BER packets (CVE-2006-0453) | fixed: 1 | 2026-06-28T11:50:47+00:00 | Vulnerability · Source |
| CVE-2018-6170 | redhat_vex | chromium-browser: Type confusion in PDFium | fixed: 12 | 2026-06-28T11:50:46+00:00 | Vulnerability · Source |
| CVE-2026-31541 | redhat_vex | kernel: tracing: Fix trace_marker copy link list updates | known not affected: 274 | 2026-06-28T11:50:44+00:00 | Vulnerability · Source |
| CVE-2026-31512 | redhat_vex | kernel: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() | known affected: 260 known not affected: 14 | 2026-06-28T11:50:43+00:00 | Vulnerability · Source |
| CVE-2019-14233 | redhat_vex | Django: the behavior of the underlying HTMLParser leading to DoS | fixed: 9 known affected: 24 known not affected: 6 | 2026-06-28T11:50:43+00:00 | Vulnerability · Source |
| CVE-2026-3910 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | known not affected: 1 | 2026-06-28T11:50:42+00:00 | Vulnerability · Source |
| CVE-2014-0577 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-24) | fixed: 6 | 2026-06-28T11:50:41+00:00 | Vulnerability · Source |
| CVE-2019-14235 | redhat_vex | Django: Potential memory exhaustion in django.utils.encoding.uri_to_iri() | fixed: 9 known affected: 24 known not affected: 6 | 2026-06-28T11:50:41+00:00 | Vulnerability · Source |
| CVE-2026-3909 | redhat_vex | chromium-browser: Out of bounds write in Skia | known not affected: 1 | 2026-06-28T11:50:41+00:00 | Vulnerability · Source |
| CVE-2014-0569 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-22) | fixed: 6 | 2026-06-28T11:50:41+00:00 | Vulnerability · Source |
| CVE-2014-0573 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-24) | fixed: 6 | 2026-06-28T11:50:40+00:00 | Vulnerability · Source |