VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294121 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-4711 | redhat_vex | firefox: thunderbird: Use-after-free in the Widget: Cocoa component | fixed: 320 known affected: 8 | 2026-06-28T11:48:21+00:00 | Vulnerability · Source |
| CVE-2022-45887 | redhat_vex | kernel: memory leak in ttusb_dec_exit_dvb() in media/usb/ttusb-dec/ttusb_dec.c | fixed: 399 known affected: 42 known not affected: 108 | 2026-06-28T11:48:21+00:00 | Vulnerability · Source |
| CVE-2018-1000028 | redhat_vex | kernel: Improper sorting of GIDs in nfsd can lead to incorrect permissions being applied | known not affected: 104 | 2026-06-28T11:48:19+00:00 | Vulnerability · Source |
| CVE-2012-1535 | redhat_vex | flash-plugin: code execution flaw (APSB12-18) | fixed: 5 | 2026-06-28T11:48:17+00:00 | Vulnerability · Source |
| CVE-2025-5279 | redhat_vex | redshift-connector: SSL Certificate Validation Bypass in Amazon Redshift Python Connector | known not affected: 1 | 2026-06-28T11:48:17+00:00 | Vulnerability · Source |
| CVE-2025-54510 | redhat_vex | AMD Platform Security Processor: AMD EPYC 9005 Series CPUs: AMD Platform Security Processor: Information disclosure via missing lock check | known affected: 76 known not affected: 198 | 2026-06-28T11:48:16+00:00 | Vulnerability · Source |
| CVE-2020-26143 | redhat_vex | kernel: accepting fragmented plaintext frames in protected networks | fixed: 150 known affected: 44 known not affected: 106 | 2026-06-28T11:48:14+00:00 | Vulnerability · Source |
| CVE-2018-14851 | redhat_vex | php: exif: Buffer over-read in exif_process_IFD_in_MAKERNOTE() | fixed: 486 known affected: 88 known not affected: 77 | 2026-06-28T11:48:11+00:00 | Vulnerability · Source |
| CVE-2008-5344 | redhat_vex | Java WebStart unprivileged local file and network access | fixed: 571 | 2026-06-28T11:48:11+00:00 | Vulnerability · Source |
| CVE-2013-0442 | redhat_vex | OpenJDK: insufficient privilege checking issue (AWT, 7192977) | fixed: 543 known affected: 1 | 2026-06-28T11:48:11+00:00 | Vulnerability · Source |
| CVE-2015-6780 | redhat_vex | chromium-browser: Use-after-free in Infobars | fixed: 12 | 2026-06-28T11:48:10+00:00 | Vulnerability · Source |
| CVE-2023-52635 | redhat_vex | kernel: PM / devfreq: Synchronize devfreq_monitor_[start/stop] | fixed: 793 known affected: 22 known not affected: 99 | 2026-06-28T11:48:10+00:00 | Vulnerability · Source |
| CVE-2017-9310 | redhat_vex | Qemu: net: infinite loop in e1000e NIC emulation | fixed: 47 known affected: 1 known not affected: 18 | 2026-06-28T11:48:10+00:00 | Vulnerability · Source |
| CVE-2026-32936 | redhat_vex | github.com/coredns/coredns: CoreDNS: Denial of Service via oversized DNS-over-HTTPS GET requests | fixed: 8 known not affected: 26 | 2026-06-28T11:48:09+00:00 | Vulnerability · Source |
| CVE-2011-0619 | redhat_vex | flash-plugin: crash and potential arbitrary code execution (APSB11-12) | fixed: 5 | 2026-06-28T11:48:09+00:00 | Vulnerability · Source |
| CVE-2017-9075 | redhat_vex | kernel: net: sctp_v6_create_accept_sk function mishandles inheritance | fixed: 381 known affected: 1 known not affected: 7 | 2026-06-28T11:48:07+00:00 | Vulnerability · Source |
| CVE-2020-2604 | redhat_vex | OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422) | fixed: 965 | 2026-06-28T11:48:06+00:00 | Vulnerability · Source |
| CVE-2018-20511 | redhat_vex | kernel: Memory address exposure in drivers/net/appletalk/ipddp.c:ipddp_ioctl() by users with CAP_NET_ADMIN | known not affected: 104 | 2026-06-28T11:48:06+00:00 | Vulnerability · Source |
| CVE-2018-1050 | redhat_vex | samba: NULL pointer dereference in printer server process | fixed: 714 known not affected: 38 | 2026-06-28T11:48:06+00:00 | Vulnerability · Source |
| CVE-2011-0606 | redhat_vex | acroread: critical APSB11-03 | fixed: 18 | 2026-06-28T11:48:06+00:00 | Vulnerability · Source |
| CVE-2026-32935 | redhat_vex | phpseclib: phpseclib: Information disclosure via padding oracle timing attack when using AES in CBC mode | known not affected: 1 | 2026-06-28T11:48:02+00:00 | Vulnerability · Source |
| CVE-2026-23219 | redhat_vex | kernel: mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single | known affected: 76 known not affected: 198 | 2026-06-28T11:48:02+00:00 | Vulnerability · Source |
| CVE-2010-3641 | redhat_vex | flash-plugin: security bulletin APSB10-26 | fixed: 9 | 2026-06-28T11:48:00+00:00 | Vulnerability · Source |
| CVE-2020-10758 | redhat_vex | keycloak: DoS by sending multiple simultaneous requests with a Content-Length header value greater than actual byte count of request body | fixed: 11 known affected: 1 known not affected: 4 | 2026-06-28T11:48:00+00:00 | Vulnerability · Source |
| CVE-2018-16084 | redhat_vex | chromium-browser: User confirmation bypass in external protocol handling | fixed: 12 | 2026-06-28T11:47:59+00:00 | Vulnerability · Source |
| CVE-2009-5147 | redhat_vex | ruby: dlopen could open a library with tainted library name | fixed: 145 known affected: 79 | 2026-06-28T11:47:55+00:00 | Vulnerability · Source |
| CVE-2026-23203 | redhat_vex | kernel: net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue | known not affected: 274 | 2026-06-28T11:47:54+00:00 | Vulnerability · Source |
| CVE-2018-0739 | redhat_vex | openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service | fixed: 314 known affected: 15 known not affected: 6 | 2026-06-28T11:47:54+00:00 | Vulnerability · Source |
| CVE-2017-18208 | redhat_vex | kernel: Inifinite loop vulnerability in mm/madvise.c:madvise_willneed() function allows local denial of service | fixed: 473 known not affected: 56 | 2026-06-28T11:47:52+00:00 | Vulnerability · Source |
| CVE-2026-33596 | redhat_vex | dnsdist: TCP backend stream ID overflow | known not affected: 1 | 2026-06-28T11:47:51+00:00 | Vulnerability · Source |
| CVE-2018-0734 | redhat_vex | openssl: timing side channel attack in the DSA signature algorithm | fixed: 292 known affected: 17 | 2026-06-28T11:47:51+00:00 | Vulnerability · Source |
| CVE-2018-14615 | redhat_vex | kernel: Buffer overflow in fs/f2fs/inline.c:truncate_inline_inode() when unmounting a crafted f2fs image | known not affected: 88 | 2026-06-28T11:47:51+00:00 | Vulnerability · Source |
| CVE-2015-5041 | redhat_vex | JDK: J9 JVM allows code to invoke non-public interface methods | fixed: 346 | 2026-06-28T11:47:51+00:00 | Vulnerability · Source |
| CVE-2021-2437 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2021) | fixed: 155 known not affected: 119 | 2026-06-28T11:47:50+00:00 | Vulnerability · Source |
| CVE-2008-1190 | redhat_vex | Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190) | fixed: 434 | 2026-06-28T11:47:50+00:00 | Vulnerability · Source |
| CVE-2007-1286 | redhat_vex | security flaw | fixed: 384 | 2026-06-28T11:47:49+00:00 | Vulnerability · Source |
| CVE-2017-17975 | redhat_vex | kernel: use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c | known not affected: 88 | 2026-06-28T11:47:48+00:00 | Vulnerability · Source |
| CVE-2022-45884 | redhat_vex | kernel: use-after-free due to race condition occurring in dvb_register_device() | fixed: 399 known affected: 42 known not affected: 108 | 2026-06-28T11:47:46+00:00 | Vulnerability · Source |
| CVE-2015-2613 | redhat_vex | JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833) | fixed: 305 known affected: 11 known not affected: 58 | 2026-06-28T11:47:44+00:00 | Vulnerability · Source |
| CVE-2015-3105 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-11 | fixed: 5 | 2026-06-28T11:47:43+00:00 | Vulnerability · Source |
| CVE-2018-3728 | redhat_vex | hoek: Prototype pollution in utilities function | fixed: 126 known affected: 5 known not affected: 12 | 2026-06-28T11:47:43+00:00 | Vulnerability · Source |
| CVE-2013-0450 | redhat_vex | OpenJDK: RequiredModelMBean missing access control context checks (JMX, 8000537) | fixed: 543 known affected: 1 | 2026-06-28T11:47:42+00:00 | Vulnerability · Source |
| CVE-2015-2637 | redhat_vex | JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D) | fixed: 636 | 2026-06-28T11:47:41+00:00 | Vulnerability · Source |
| CVE-2025-68787 | redhat_vex | kernel: netrom: Fix memory leak in nr_sendmsg() | known not affected: 274 | 2026-06-28T11:47:40+00:00 | Vulnerability · Source |
| CVE-2025-59788 | redhat_vex | Nextcloud: Nextcloud: Cross-site scripting (XSS) in PDF viewer allows arbitrary JavaScript execution | known not affected: 1 | 2026-06-28T11:47:38+00:00 | Vulnerability · Source |
| CVE-2011-0600 | redhat_vex | acroread: critical APSB11-03 | fixed: 18 | 2026-06-28T11:47:37+00:00 | Vulnerability · Source |
| CVE-2026-33433 | redhat_vex | github.com/traefik/traefik: Traefik: Authentication bypass via non-canonical HTTP header injection | fixed: 4 known not affected: 57 | 2026-06-28T11:47:37+00:00 | Vulnerability · Source |
| CVE-2015-0395 | redhat_vex | OpenJDK: phantom references handling issue in garbage collector (Hotspot, 8047125) | fixed: 801 known not affected: 38 | 2026-06-28T11:47:36+00:00 | Vulnerability · Source |
| CVE-2015-0327 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T11:47:36+00:00 | Vulnerability · Source |
| CVE-2015-0326 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T11:47:35+00:00 | Vulnerability · Source |