VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294121 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2012-5280 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-24) | fixed: 5 | 2026-06-28T11:50:40+00:00 | Vulnerability · Source |
| CVE-2014-0564 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-22) | fixed: 6 | 2026-06-28T11:50:40+00:00 | Vulnerability · Source |
| CVE-2018-3665 | redhat_vex | Kernel: FPU state information leakage via lazy FPU restore | fixed: 546 known affected: 1 known not affected: 48 | 2026-06-28T11:50:39+00:00 | Vulnerability · Source |
| CVE-2018-2811 | redhat_vex | JDK: unspecified vulnerability fixed in 8u171 and 10.0.1 (Install) | fixed: 64 | 2026-06-28T11:50:38+00:00 | Vulnerability · Source |
| CVE-2018-2573 | redhat_vex | mysql: Server: GIS unspecified vulnerability (CPU Jan 2018) | fixed: 133 known not affected: 96 | 2026-06-28T11:50:38+00:00 | Vulnerability · Source |
| CVE-2017-9224 | redhat_vex | oniguruma: Out-of-bounds stack read in match_at() during regular expression searching | fixed: 254 known affected: 174 under investigation: 3 | 2026-06-28T11:50:37+00:00 | Vulnerability · Source |
| CVE-2020-14331 | redhat_vex | kernel: kernel: buffer over write in vgacon_scroll | fixed: 335 known affected: 32 known not affected: 6 | 2026-06-28T11:50:36+00:00 | Vulnerability · Source |
| CVE-2013-6668 | redhat_vex | v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.146 | fixed: 704 known affected: 9 | 2026-06-28T11:50:36+00:00 | Vulnerability · Source |
| CVE-2018-3211 | redhat_vex | JDK: unspecified vulnerability fixed in 8u191 and 11.0.1 (Serviceability) | fixed: 64 | 2026-06-28T11:50:35+00:00 | Vulnerability · Source |
| CVE-2020-26141 | redhat_vex | kernel: not verifying TKIP MIC of fragmented frames | fixed: 150 known affected: 44 known not affected: 106 | 2026-06-28T11:50:35+00:00 | Vulnerability · Source |
| CVE-2026-6366 | redhat_vex | drupal: Drupal core: Object Injection vulnerability | known not affected: 1 | 2026-06-28T11:50:33+00:00 | Vulnerability · Source |
| CVE-2018-10184 | redhat_vex | haproxy: Heap buffer overflow in mux_h2.c:h2_process_demux() can allow attackers to cause a denial of service | fixed: 23 known not affected: 52 | 2026-06-28T11:50:31+00:00 | Vulnerability · Source |
| CVE-2012-3159 | redhat_vex | JDK: unspecified vulnerability (Deployment) | fixed: 296 known affected: 8 | 2026-06-28T11:50:31+00:00 | Vulnerability · Source |
| CVE-2018-10124 | redhat_vex | kernel: Undefined behaviour with INT_MIN argument in kernel/signal.c:kill_something_info() allows for denial of service | known not affected: 88 | 2026-06-28T11:50:31+00:00 | Vulnerability · Source |
| CVE-2016-5200 | redhat_vex | chromium-browser: out of bounds memory access in v8 | fixed: 12 | 2026-06-28T11:50:25+00:00 | Vulnerability · Source |
| CVE-2011-0869 | redhat_vex | OpenJDK: unprivileged proxy settings change via SOAPConnection (SAAJ, 7013971) | fixed: 352 known not affected: 11 | 2026-06-28T11:50:25+00:00 | Vulnerability · Source |
| CVE-2013-5891 | redhat_vex | mysql: unspecified vulnerability related to Partition DoS (CPU Jan 2014) | fixed: 90 known not affected: 18 | 2026-06-28T11:50:23+00:00 | Vulnerability · Source |
| CVE-2020-11609 | redhat_vex | kernel: NULL pointer dereference due to incorrect handling of invalid descriptors in stv06xx subsystem | known affected: 104 | 2026-06-28T11:50:23+00:00 | Vulnerability · Source |
| CVE-2020-11608 | redhat_vex | kernel: NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs in drivers/media/usb/gspca/ov519.c | fixed: 150 known affected: 56 | 2026-06-28T11:50:23+00:00 | Vulnerability · Source |
| CVE-2018-13100 | redhat_vex | kernel: divide-by-zero in fs/f2fs/super.c | known not affected: 88 | 2026-06-28T11:50:23+00:00 | Vulnerability · Source |
| CVE-2023-52501 | redhat_vex | kernel: ring-buffer: Do not attempt to read past "commit" | fixed: 280 known affected: 50 known not affected: 70 | 2026-06-28T11:50:22+00:00 | Vulnerability · Source |
| CVE-2013-5832 | redhat_vex | JDK: unspecified vulnerability fixed in 7u45 (Deployment) | fixed: 364 known not affected: 8 | 2026-06-28T11:50:21+00:00 | Vulnerability · Source |
| CVE-2023-52462 | redhat_vex | kernel: bpf: fix check for attempt to corrupt spilled pointer | fixed: 280 known affected: 36 known not affected: 84 | 2026-06-28T11:50:20+00:00 | Vulnerability · Source |
| CVE-2026-44058 | redhat_vex | netatalk: authentication bypass via admin auth user | known not affected: 1 | 2026-06-28T11:50:20+00:00 | Vulnerability · Source |
| CVE-2013-5800 | redhat_vex | OpenJDK: default keytab path information leak (JGSS, 8022931) | fixed: 228 known not affected: 24 | 2026-06-28T11:50:20+00:00 | Vulnerability · Source |
| CVE-2013-5788 | redhat_vex | JDK: unspecified vulnerability fixed in 7u45 (Deployment) | fixed: 148 known not affected: 17 | 2026-06-28T11:50:20+00:00 | Vulnerability · Source |
| CVE-2026-44065 | redhat_vex | netatalk: off-by-two in papd lp_write() | known not affected: 1 | 2026-06-28T11:50:20+00:00 | Vulnerability · Source |
| CVE-2025-64702 | redhat_vex | github.com/quic-go/quic-go/http3: quic-go HTTP/3 QPACK Header Expansion DoS | known affected: 8 | 2026-06-28T11:50:18+00:00 | Vulnerability · Source |
| CVE-2013-5458 | redhat_vex | JDK: unspecified sandbox bypass (XML) | fixed: 95 known not affected: 17 | 2026-06-28T11:50:18+00:00 | Vulnerability · Source |
| CVE-2026-23557 | redhat_vex | xenstored: xen: Xenstored: Denial of Service via XS_RESET_WATCHES command | known not affected: 1 | 2026-06-28T11:50:18+00:00 | Vulnerability · Source |
| CVE-2026-2360 | redhat_vex | postgresql16-anonymizer: Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user to gain superuser privileges in PostgreSQL 14 | known not affected: 1 | 2026-06-28T11:50:18+00:00 | Vulnerability · Source |
| CVE-2026-0884 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript Engine component | fixed: 320 known affected: 7 | 2026-06-28T11:50:17+00:00 | Vulnerability · Source |
| CVE-2018-16837 | redhat_vex | Ansible: Information leak in "user" module | fixed: 82 known affected: 7 | 2026-06-28T11:50:16+00:00 | Vulnerability · Source |
| CVE-2018-15967 | redhat_vex | flash-plugin: Information Disclosure vulnerability (APSB18-31) | fixed: 3 | 2026-06-28T11:50:15+00:00 | Vulnerability · Source |
| CVE-2018-16069 | redhat_vex | chromium-browser: Out of bounds read in SwiftShader | fixed: 12 | 2026-06-28T11:50:15+00:00 | Vulnerability · Source |
| CVE-2026-33308 | redhat_vex | mod_gnutls: apache httpd: mod_gnutls: Improper access to resources via client certificate key purpose bypass | known not affected: 1 | 2026-06-28T11:50:15+00:00 | Vulnerability · Source |
| CVE-2018-15981 | redhat_vex | flash-plugin: Arbitrary code execution vulnerability (APSB18-44) | fixed: 3 | 2026-06-28T11:50:15+00:00 | Vulnerability · Source |
| CVE-2011-4517 | redhat_vex | jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409) | fixed: 180 | 2026-06-28T11:50:15+00:00 | Vulnerability · Source |
| CVE-2013-3328 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-14) | fixed: 4 | 2026-06-28T11:50:14+00:00 | Vulnerability · Source |
| CVE-2020-11008 | redhat_vex | git: Crafted URL containing new lines, empty host or lacks a scheme can cause credential leak | fixed: 442 known not affected: 13 | 2026-06-28T11:50:13+00:00 | Vulnerability · Source |
| CVE-2013-3324 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-14) | fixed: 4 | 2026-06-28T11:50:13+00:00 | Vulnerability · Source |
| CVE-2018-11987 | redhat_vex | kernel: Double-free in ion_system_heap.c | known not affected: 104 | 2026-06-28T11:50:13+00:00 | Vulnerability · Source |
| CVE-2016-1639 | redhat_vex | chromium-browser: use-after-free in WebRTC | fixed: 12 | 2026-06-28T11:50:12+00:00 | Vulnerability · Source |
| CVE-2018-2805 | redhat_vex | mysql: GIS Extension unspecified vulnerability (CPU Apr 2018) | fixed: 80 known not affected: 104 | 2026-06-28T11:50:12+00:00 | Vulnerability · Source |
| CVE-2013-2383 | redhat_vex | ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004986) | fixed: 543 known affected: 12 | 2026-06-28T11:50:11+00:00 | Vulnerability · Source |
| CVE-2018-2799 | redhat_vex | OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) | fixed: 770 | 2026-06-28T11:50:10+00:00 | Vulnerability · Source |
| CVE-2018-10546 | redhat_vex | php: Infinite loop in ext/iconv/iconv.c when using stream filter with convert.incov on invalid sequence leads to denial-of-service | fixed: 486 known affected: 88 known not affected: 47 | 2026-06-28T11:50:09+00:00 | Vulnerability · Source |
| CVE-2016-0959 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-01 | fixed: 5 | 2026-06-28T11:50:08+00:00 | Vulnerability · Source |
| CVE-2026-32942 | redhat_vex | PJSIP: PJSIP: Arbitrary code execution or information disclosure via race condition in ICE session handling | known not affected: 1 | 2026-06-28T11:50:07+00:00 | Vulnerability · Source |
| CVE-2018-13785 | redhat_vex | libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service | fixed: 393 known affected: 8 known not affected: 18 | 2026-06-28T11:50:07+00:00 | Vulnerability · Source |