VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294121 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-43319 | redhat_vex | kernel: spi: spidev: fix lock inversion between spi_lock and buf_lock | known affected: 76 known not affected: 198 | 2026-06-28T11:46:31+00:00 | Vulnerability · Source |
| CVE-2017-3319 | redhat_vex | mysql: Server: X Plugin unspecified vulnerability (CPU Jan 2017) | fixed: 54 known not affected: 66 | 2026-06-28T11:46:31+00:00 | Vulnerability · Source |
| CVE-2021-22947 | redhat_vex | curl: Server responses received before STARTTLS processed after TLS handshake | fixed: 105 known affected: 13 known not affected: 11 | 2026-06-28T11:46:29+00:00 | Vulnerability · Source |
| CVE-2026-43317 | redhat_vex | kernel: most: core: fix leak on early registration failure | known not affected: 274 | 2026-06-28T11:46:29+00:00 | Vulnerability · Source |
| CVE-2026-46171 | redhat_vex | kernel: riscv: kvm: fix vector context allocation leak | known not affected: 274 | 2026-06-28T11:46:28+00:00 | Vulnerability · Source |
| CVE-2026-35540 | redhat_vex | roundcubemail: Roundcube Webmail: SSRF via insufficient CSS sanitization | known not affected: 1 | 2026-06-28T11:46:27+00:00 | Vulnerability · Source |
| CVE-2010-2166 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:46:27+00:00 | Vulnerability · Source |
| CVE-2026-43306 | redhat_vex | kernel: bpf: crypto: Use the correct destructor kfunc type | known affected: 76 known not affected: 198 | 2026-06-28T11:46:27+00:00 | Vulnerability · Source |
| CVE-2017-2636 | redhat_vex | kernel: Race condition access to n_hdlc.tbuf causes double free in n_hdlc_release() | fixed: 730 known not affected: 1 | 2026-06-28T11:46:26+00:00 | Vulnerability · Source |
| CVE-2026-28415 | redhat_vex | Gradio: Gradio: Open Redirect vulnerability allows redirection to arbitrary external URLs. | known not affected: 1 | 2026-06-28T11:46:24+00:00 | Vulnerability · Source |
| CVE-2022-47951 | redhat_vex | openstack: Arbitrary file access through custom VMDK flat descriptor | fixed: 113 known not affected: 39 | 2026-06-28T11:46:24+00:00 | Vulnerability · Source |
| CVE-2009-1856 | redhat_vex | acroread: multiple security fixes in version 8.1.6 (APSB09-07) | fixed: 20 | 2026-06-28T11:46:22+00:00 | Vulnerability · Source |
| CVE-2018-1097 | redhat_vex | foreman: Ovirt admin password exposed by foreman API | fixed: 1110 known not affected: 1 | 2026-06-28T11:46:20+00:00 | Vulnerability · Source |
| CVE-2022-48619 | redhat_vex | kernel: event code falling outside of a bitmap in input_set_capability() leads to panic | fixed: 150 known affected: 42 known not affected: 108 | 2026-06-28T11:46:19+00:00 | Vulnerability · Source |
| CVE-2022-47929 | redhat_vex | kernel: NULL pointer dereference in traffic control subsystem | fixed: 514 known affected: 42 | 2026-06-28T11:46:17+00:00 | Vulnerability · Source |
| CVE-2026-23090 | redhat_vex | kernel: slimbus: core: fix device reference leak on report present | known not affected: 274 | 2026-06-28T11:46:16+00:00 | Vulnerability · Source |
| CVE-2026-30479 | redhat_vex | MapServer: MapServer: Arbitrary code execution via Dynamic-link Library Injection | known not affected: 1 | 2026-06-28T11:46:16+00:00 | Vulnerability · Source |
| CVE-2017-18344 | redhat_vex | kernel: out-of-bounds access in the show_timer function in kernel/time/posix-timers.c | fixed: 672 known not affected: 56 | 2026-06-28T11:46:15+00:00 | Vulnerability · Source |
| CVE-2017-18174 | redhat_vex | kernel: Double free vulnerability in drivers/pinctrl/pinctrl-amd.c:amd_gpio_remove() function can lead to kernel panic | known not affected: 88 | 2026-06-28T11:46:14+00:00 | Vulnerability · Source |
| CVE-2017-18255 | redhat_vex | kernel: Integer overflow in events/core.c:perf_cpu_time_max_percent_handler() can allow for denial of service | known not affected: 88 | 2026-06-28T11:46:13+00:00 | Vulnerability · Source |
| CVE-2017-18224 | redhat_vex | kernel: race condition due to concurrent access to extent tree in fs/ocfs2/aops.c | known not affected: 88 | 2026-06-28T11:46:12+00:00 | Vulnerability · Source |
| CVE-2017-18221 | redhat_vex | kernel: Race condition in __munlock_pagevec function in mm/mlock.c | known affected: 1 known not affected: 87 | 2026-06-28T11:46:12+00:00 | Vulnerability · Source |
| CVE-2017-18222 | redhat_vex | kernel: Memory corruption in ethtool_get_strings function in hns driver | known not affected: 88 | 2026-06-28T11:46:12+00:00 | Vulnerability · Source |
| CVE-2017-18218 | redhat_vex | kernel: Use-after-free vulnerability in drivers/net/ethernet/hisilicon/hns/hns_enet.c allows local attacker to cause denial of service | known not affected: 88 | 2026-06-28T11:46:11+00:00 | Vulnerability · Source |
| CVE-2017-17855 | redhat_vex | kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging improper use of pointers in place of scalars | known not affected: 88 | 2026-06-28T11:46:10+00:00 | Vulnerability · Source |
| CVE-2010-3563 | redhat_vex | OpenJDK: unspecified vulnerability in Deployment component | fixed: 270 | 2026-06-28T11:46:10+00:00 | Vulnerability · Source |
| CVE-2010-3622 | redhat_vex | acroread: multiple code execution flaws (APSB10-21) | fixed: 12 known not affected: 2 | 2026-06-28T11:46:10+00:00 | Vulnerability · Source |
| CVE-2017-18193 | redhat_vex | kernel: Mishandled extent trees in fs/f2fs/extent_cache.c can allow a local user to cause a denial of service | known not affected: 88 | 2026-06-28T11:46:10+00:00 | Vulnerability · Source |
| CVE-2017-17852 | redhat_vex | kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging mishandling of 32-bit ALU ops | known not affected: 88 | 2026-06-28T11:46:10+00:00 | Vulnerability · Source |
| CVE-2009-2813 | redhat_vex | Samba: Share restriction bypass via home-less directory user account(s) | fixed: 151 | 2026-06-28T11:46:09+00:00 | Vulnerability · Source |
| CVE-2009-2718 | redhat_vex | JDK reposition of untrusted applet security icon in X11 | fixed: 72 | 2026-06-28T11:46:09+00:00 | Vulnerability · Source |
| CVE-2017-2933 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-02 | fixed: 3 known affected: 1 | 2026-06-28T11:46:08+00:00 | Vulnerability · Source |
| CVE-2017-17712 | redhat_vex | kernel: Race condition in raw_sendmsg function allows denial-of-service or kernel addresses leak | fixed: 52 known not affected: 55 | 2026-06-28T11:46:08+00:00 | Vulnerability · Source |
| CVE-2017-17449 | redhat_vex | kernel: Missing namespace check in net/netlink/af_netlink.c allows for network monitors to observe systemwide activity | fixed: 382 known not affected: 47 | 2026-06-28T11:46:07+00:00 | Vulnerability · Source |
| CVE-2018-18358 | redhat_vex | chromium-browser: Insufficient policy enforcement in Proxy | fixed: 12 | 2026-06-28T11:46:07+00:00 | Vulnerability · Source |
| CVE-2021-2032 | redhat_vex | mysql: Information Schema unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T11:46:05+00:00 | Vulnerability · Source |
| CVE-2023-52835 | redhat_vex | kernel: perf/core: Bail out early if the request AUX area is out of bound | fixed: 429 known affected: 150 known not affected: 8 | 2026-06-28T11:46:04+00:00 | Vulnerability · Source |
| CVE-2017-16996 | redhat_vex | kernel: memory corruption caused by BPF verifier bugs can allow for arbitrary code execution | known not affected: 88 | 2026-06-28T11:46:04+00:00 | Vulnerability · Source |
| CVE-2017-16911 | redhat_vex | kernel: vhci_cd driver in usbip/vhci_sysfs.c:port_show_vhci() discloses kernel memory addresses to local attackers | known not affected: 88 | 2026-06-28T11:46:04+00:00 | Vulnerability · Source |
| CVE-2026-46172 | redhat_vex | kernel: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() | known affected: 232 known not affected: 42 | 2026-06-28T11:46:03+00:00 | Vulnerability · Source |
| CVE-2017-16529 | redhat_vex | kernel: out-of-bounds read in snd_usb_create_streams | known affected: 55 known not affected: 33 | 2026-06-28T11:46:01+00:00 | Vulnerability · Source |
| CVE-2017-16525 | redhat_vex | kernel: Use-after-free in usb_serial_console_disconnect() | known affected: 29 known not affected: 59 | 2026-06-28T11:46:00+00:00 | Vulnerability · Source |
| CVE-2026-43467 | redhat_vex | kernel: net/mlx5: Fix crash when moving to switchdev mode | known affected: 90 known not affected: 184 | 2026-06-28T11:45:59+00:00 | Vulnerability · Source |
| CVE-2007-5689 | redhat_vex | java-jre: Applet Privilege Escalation | fixed: 66 | 2026-06-28T11:45:58+00:00 | Vulnerability · Source |
| CVE-2007-5666 | redhat_vex | acroread JavaScript Insecure Libary Search Path | fixed: 20 | 2026-06-28T11:45:58+00:00 | Vulnerability · Source |
| CVE-2025-68384 | redhat_vex | elasticsearch: Elasticsearch Allocation of Resources Without Limits or Throttling | known affected: 14 | 2026-06-28T11:45:57+00:00 | Vulnerability · Source |
| CVE-2007-5659 | redhat_vex | acroread Multiple buffer overflows | fixed: 20 | 2026-06-28T11:45:57+00:00 | Vulnerability · Source |
| CVE-2025-6858 | redhat_vex | hdf5: HDF5 Null Pointer Dereference | known affected: 1 | 2026-06-28T11:45:56+00:00 | Vulnerability · Source |
| CVE-2026-6773 | redhat_vex | firefox: thunderbird: Denial-of-service due to integer overflow in the Graphics: WebGPU component | known not affected: 11 | 2026-06-28T11:45:56+00:00 | Vulnerability · Source |
| CVE-2026-6779 | redhat_vex | firefox: thunderbird: Other issue in the JavaScript Engine component | known not affected: 11 | 2026-06-28T11:45:56+00:00 | Vulnerability · Source |