VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294121 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-29970 | redhat_vex | sinatra: path traversal possible outside of public_dir when serving static files | fixed: 73 known affected: 25 known not affected: 1829 | 2026-06-28T11:47:34+00:00 | Vulnerability · Source |
| CVE-2017-9725 | redhat_vex | kernel: Incorrect type conversion for size during dma allocation | fixed: 318 known not affected: 31 | 2026-06-28T11:47:33+00:00 | Vulnerability · Source |
| CVE-2017-7486 | redhat_vex | postgresql: pg_user_mappings view discloses foreign server passwords | fixed: 436 known affected: 14 known not affected: 1 | 2026-06-28T11:47:32+00:00 | Vulnerability · Source |
| CVE-2020-10740 | redhat_vex | wildfly: unsafe deserialization in Wildfly Enterprise Java Beans | fixed: 762 known affected: 8 known not affected: 4 | 2026-06-28T11:47:32+00:00 | Vulnerability · Source |
| CVE-2017-7679 | redhat_vex | httpd: mod_mime buffer overread | fixed: 377 known affected: 8 | 2026-06-28T11:47:32+00:00 | Vulnerability · Source |
| CVE-2026-43390 | redhat_vex | kernel: nstree: tighten permission checks for listing | known not affected: 274 | 2026-06-28T11:47:32+00:00 | Vulnerability · Source |
| CVE-2026-44167 | redhat_vex | phpseclib: phpseclib: Denial of Service via untrusted ASN.1 file loading | known not affected: 1 | 2026-06-28T11:47:32+00:00 | Vulnerability · Source |
| CVE-2022-47015 | redhat_vex | mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() | fixed: 843 known affected: 39 known not affected: 107 | 2026-06-28T11:47:31+00:00 | Vulnerability · Source |
| CVE-2017-7472 | redhat_vex | kernel: keyctl_set_reqkey_keyring() leaks thread keyrings | fixed: 207 known affected: 14 known not affected: 1 | 2026-06-28T11:47:31+00:00 | Vulnerability · Source |
| CVE-2026-3293 | redhat_vex | snowflake-jdbc: snowflake-jdbc: Denial of Service via inefficient regular expression processing | known affected: 2 | 2026-06-28T11:47:30+00:00 | Vulnerability · Source |
| CVE-2017-6214 | redhat_vex | kernel: ipv4/tcp: Infinite loop in tcp_splice_read() | fixed: 387 known not affected: 1 | 2026-06-28T11:47:30+00:00 | Vulnerability · Source |
| CVE-2026-43388 | redhat_vex | kernel: mm/damon/core: clear walk_control on inactive context in damos_walk() | known not affected: 274 | 2026-06-28T11:47:28+00:00 | Vulnerability · Source |
| CVE-2013-4480 | redhat_vex | Satellite: Interface to create the initial administrator user remains open after installation | fixed: 48 | 2026-06-28T11:47:27+00:00 | Vulnerability · Source |
| CVE-2025-59474 | redhat_vex | jenkins: Missing permission check allows obtaining agent names | known affected: 1 | 2026-06-28T11:47:26+00:00 | Vulnerability · Source |
| CVE-2010-1297 | redhat_vex | flash-plugin: Arbitrary code execution by opening a specially-crafted PDF file with malicious SWF content (APSA10-01) | fixed: 22 | 2026-06-28T11:47:26+00:00 | Vulnerability · Source |
| CVE-2011-4369 | redhat_vex | acroread: unspecified vulnerability in PRC component (APSB11-30) | fixed: 18 | 2026-06-28T11:47:26+00:00 | Vulnerability · Source |
| CVE-2026-23179 | redhat_vex | kernel: nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() | known affected: 232 known not affected: 42 | 2026-06-28T11:47:26+00:00 | Vulnerability · Source |
| CVE-2026-43381 | redhat_vex | kernel: nouveau/dpcd: return EBUSY for aux xfer if the device is asleep | known not affected: 274 | 2026-06-28T11:47:25+00:00 | Vulnerability · Source |
| CVE-2013-0429 | redhat_vex | OpenJDK: PresentationManager incorrectly shared (CORBA, 7141694) | fixed: 243 known affected: 1 known not affected: 24 | 2026-06-28T11:47:24+00:00 | Vulnerability · Source |
| CVE-2022-45919 | redhat_vex | kernel: use-after-free due to race condition occurring in dvb_ca_en50221.c | fixed: 399 known affected: 42 known not affected: 108 | 2026-06-28T11:47:24+00:00 | Vulnerability · Source |
| CVE-2015-7629 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-25 | fixed: 5 | 2026-06-28T11:47:23+00:00 | Vulnerability · Source |
| CVE-2017-5970 | redhat_vex | kernel: ipv4: Invalid IP options could cause skb->dst drop | fixed: 201 known not affected: 22 | 2026-06-28T11:47:22+00:00 | Vulnerability · Source |
| CVE-2013-2433 | redhat_vex | JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment) | fixed: 313 | 2026-06-28T11:47:21+00:00 | Vulnerability · Source |
| CVE-2026-33743 | redhat_vex | incus: Incus: Denial of Service via specially crafted storage bucket backup | known not affected: 1 | 2026-06-28T11:47:21+00:00 | Vulnerability · Source |
| CVE-2018-13095 | redhat_vex | kernel: NULL pointer dereference in fs/xfs/libxfs/xfs_inode_buf.c | fixed: 230 known affected: 12 known not affected: 47 | 2026-06-28T11:47:19+00:00 | Vulnerability · Source |
| CVE-2020-10726 | redhat_vex | dpdk: librte_vhost VHOST_USER_GET_INFLIGHT_FD message flooding to result in a DoS | fixed: 43 known affected: 10 known not affected: 145 | 2026-06-28T11:47:19+00:00 | Vulnerability · Source |
| CVE-2013-2426 | redhat_vex | OpenJDK: ConcurrentHashMap incorrectly calls defaultReadObject() method (Libraries, 8009063) | fixed: 272 known not affected: 13 | 2026-06-28T11:47:18+00:00 | Vulnerability · Source |
| CVE-2017-15289 | redhat_vex | Qemu: cirrus: OOB access issue in mode4and5 write functions | fixed: 107 known affected: 2 known not affected: 5 | 2026-06-28T11:47:18+00:00 | Vulnerability · Source |
| CVE-2020-10718 | redhat_vex | wildfly: exposed setting of TCCL via the EmbeddedManagedProcess API | fixed: 640 known affected: 10 known not affected: 4 | 2026-06-28T11:47:18+00:00 | Vulnerability · Source |
| CVE-2017-9375 | redhat_vex | Qemu: usb: xhci infinite recursive call via xhci_kick_ep | fixed: 47 known affected: 10 known not affected: 8 | 2026-06-28T11:47:17+00:00 | Vulnerability · Source |
| CVE-2006-2426 | redhat_vex | Untrusted applet causes DoS by filling up disk space | fixed: 168 | 2026-06-28T11:47:16+00:00 | Vulnerability · Source |
| CVE-2017-9374 | redhat_vex | Qemu: usb: ehci host memory leakage during hotunplug | fixed: 47 known affected: 10 known not affected: 8 | 2026-06-28T11:47:14+00:00 | Vulnerability · Source |
| CVE-2026-43361 | redhat_vex | kernel: btrfs: fix transaction abort when snapshotting received subvolumes | known affected: 118 known not affected: 156 | 2026-06-28T11:47:14+00:00 | Vulnerability · Source |
| CVE-2026-43485 | redhat_vex | kernel: nouveau/gsp: drop WARN_ON in ACPI probes | known not affected: 274 | 2026-06-28T11:47:13+00:00 | Vulnerability · Source |
| CVE-2026-43364 | redhat_vex | kernel: ublk: fix NULL pointer dereference in ublk_ctrl_set_size() | known affected: 76 known not affected: 198 | 2026-06-28T11:47:13+00:00 | Vulnerability · Source |
| CVE-2020-10713 | redhat_vex | grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process | fixed: 823 known affected: 5 known not affected: 100 | 2026-06-28T11:47:13+00:00 | Vulnerability · Source |
| CVE-2010-2175 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:47:12+00:00 | Vulnerability · Source |
| CVE-2020-10711 | redhat_vex | Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic | fixed: 1288 known not affected: 1 | 2026-06-28T11:47:12+00:00 | Vulnerability · Source |
| CVE-2026-12015 | redhat_vex | chromium-browser: chromium-browser: Use after free Autofill | known not affected: 1 | 2026-06-28T11:47:12+00:00 | Vulnerability · Source |
| CVE-2020-27838 | redhat_vex | keycloak: Exploiting the client registration API | known affected: 1 known not affected: 6 | 2026-06-28T11:47:09+00:00 | Vulnerability · Source |
| CVE-2017-5551 | redhat_vex | kernel: S_ISGD is not cleared when setting posix ACLs in tmpfs (CVE-2016-7097 incomplete fix) | fixed: 381 known affected: 1 known not affected: 7 | 2026-06-28T11:47:08+00:00 | Vulnerability · Source |
| CVE-2023-2513 | redhat_vex | kernel: ext4: use-after-free in ext4_xattr_set_entry() | fixed: 793 known affected: 42 known not affected: 7 | 2026-06-28T11:47:08+00:00 | Vulnerability · Source |
| CVE-2026-43358 | redhat_vex | kernel: btrfs: add missing RCU unlock in error path in try_release_subpage_extent_buffer() | known affected: 14 known not affected: 260 | 2026-06-28T11:47:04+00:00 | Vulnerability · Source |
| CVE-2026-43356 | redhat_vex | kernel: iio: imu: adis: Fix NULL pointer dereference in adis_init | known not affected: 274 | 2026-06-28T11:47:04+00:00 | Vulnerability · Source |
| CVE-2020-10684 | redhat_vex | Ansible: code injection when using ansible_facts as a subkey | fixed: 22 known affected: 10 | 2026-06-28T11:47:02+00:00 | Vulnerability · Source |
| CVE-2017-2596 | redhat_vex | Kernel: kvm: page reference leakage in handle_vmon | fixed: 185 known not affected: 34 | 2026-06-28T11:47:02+00:00 | Vulnerability · Source |
| CVE-2013-5899 | redhat_vex | JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment) | fixed: 420 known not affected: 7 | 2026-06-28T11:47:02+00:00 | Vulnerability · Source |
| CVE-2017-8379 | redhat_vex | Qemu: input: host memory lekage via keyboard events | fixed: 36 known affected: 7 known not affected: 16 | 2026-06-28T11:47:00+00:00 | Vulnerability · Source |
| CVE-2012-5252 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T11:46:58+00:00 | Vulnerability · Source |
| CVE-2017-5121 | redhat_vex | chromium-browser: out-of-bounds access in v8 | fixed: 12 | 2026-06-28T11:46:57+00:00 | Vulnerability · Source |