VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294121 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-10547 | redhat_vex | php: Reflected XSS vulnerability on PHAR 403 and 404 error pages | fixed: 677 known affected: 61 known not affected: 48 | 2026-06-28T11:45:16+00:00 | Vulnerability · Source |
| CVE-2026-41999 | redhat_vex | pdns: incorrect behaviour of views with TCP PROXY requests | known not affected: 1 | 2026-06-28T11:45:16+00:00 | Vulnerability · Source |
| CVE-2025-68797 | redhat_vex | kernel: char: applicom: fix NULL pointer dereference in ac_ioctl | known not affected: 274 | 2026-06-28T11:45:16+00:00 | Vulnerability · Source |
| CVE-2018-10548 | redhat_vex | php: NULL pointer dereference due to mishandling of ldap_get_dn return value allows DoS via malicious LDAP server reply | fixed: 486 known affected: 88 known not affected: 47 | 2026-06-28T11:45:16+00:00 | Vulnerability · Source |
| CVE-2025-71084 | redhat_vex | kernel: RDMA/cm: Fix leaking the multicast GID table reference | known not affected: 274 | 2026-06-28T11:45:14+00:00 | Vulnerability · Source |
| CVE-2025-71071 | redhat_vex | kernel: iommu/mediatek: fix use-after-free on probe deferral | known not affected: 274 | 2026-06-28T11:45:13+00:00 | Vulnerability · Source |
| CVE-2025-68777 | redhat_vex | kernel: Input: ti_am335x_tsc - fix off-by-one error in wire_order validation | known not affected: 274 | 2026-06-28T11:45:12+00:00 | Vulnerability · Source |
| CVE-2026-46318 | redhat_vex | kernel: Revert "mm/hugetlbfs: update hugetlbfs to use mmap_prepare" | known affected: 14 known not affected: 260 | 2026-06-28T11:45:12+00:00 | Vulnerability · Source |
| CVE-2025-68781 | redhat_vex | kernel: usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal | known not affected: 274 | 2026-06-28T11:45:12+00:00 | Vulnerability · Source |
| CVE-2025-68773 | redhat_vex | kernel: spi: fsl-cpm: Check length parity before switching to 16 bit mode | known not affected: 274 | 2026-06-28T11:45:12+00:00 | Vulnerability · Source |
| CVE-2026-3388 | redhat_vex | squirrel: Squirrel: Denial of Service via uncontrolled recursion in compiler functions | known not affected: 1 | 2026-06-28T11:45:09+00:00 | Vulnerability · Source |
| CVE-2026-34293 | redhat_vex | mysql: DML unspecified vulnerability (CPU Apr 2026) | fixed: 156 known affected: 32 known not affected: 9 | 2026-06-28T11:45:09+00:00 | Vulnerability · Source |
| CVE-2013-2472 | redhat_vex | OpenJDK: Incorrect ShortBandedRaster size checks (2D, 8011253) | fixed: 555 | 2026-06-28T11:45:09+00:00 | Vulnerability · Source |
| CVE-2026-34095 | redhat_vex | mediawiki: action=raw with Special:Mypage subpage title responds with "Content-Type: text/html" on ctype=text/javascript request | known not affected: 1 | 2026-06-28T11:45:09+00:00 | Vulnerability · Source |
| CVE-2017-1289 | redhat_vex | JDK: XML External Entity Injection (XXE) error when processing XML data | fixed: 268 | 2026-06-28T11:45:09+00:00 | Vulnerability · Source |
| CVE-2021-2019 | redhat_vex | mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2021) | fixed: 337 known not affected: 70 | 2026-06-28T11:45:08+00:00 | Vulnerability · Source |
| CVE-2016-9651 | redhat_vex | chromium-browser: private property access in v8 | fixed: 12 | 2026-06-28T11:45:06+00:00 | Vulnerability · Source |
| CVE-2026-3419 | redhat_vex | fastify: Fastify: Bypass of Content-Type validation via malformed Content-Type headers | known affected: 7 | 2026-06-28T11:45:05+00:00 | Vulnerability · Source |
| CVE-2020-0430 | redhat_vex | kernel: possible out-of-bounds read in skb_headlen of /include/linux/skbuff.h | known not affected: 197 | 2026-06-28T11:45:05+00:00 | Vulnerability · Source |
| CVE-2019-14895 | redhat_vex | kernel: heap-based buffer overflow in mwifiex_process_country_ie() function in drivers/net/wireless/marvell/mwifiex/sta_ioctl.c | fixed: 875 known not affected: 15 | 2026-06-28T11:45:05+00:00 | Vulnerability · Source |
| CVE-2019-15118 | redhat_vex | kernel: mishandling recursion in sound/usb/mixer.c leading to kernel stack exhaustion and crash | known affected: 28 known not affected: 76 | 2026-06-28T11:45:04+00:00 | Vulnerability · Source |
| CVE-2017-5058 | redhat_vex | chromium-browser: heap use after free in print preview | fixed: 12 | 2026-06-28T11:45:04+00:00 | Vulnerability · Source |
| CVE-2019-14816 | redhat_vex | kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver | fixed: 880 known not affected: 15 | 2026-06-28T11:45:03+00:00 | Vulnerability · Source |
| CVE-2026-6919 | redhat_vex | Google Chrome: Chromium: chromium-browser: Use after free in DevTools | known not affected: 1 | 2026-06-28T11:45:03+00:00 | Vulnerability · Source |
| CVE-2026-11701 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Guest View | known not affected: 1 | 2026-06-28T11:45:03+00:00 | Vulnerability · Source |
| CVE-2010-2187 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:45:01+00:00 | Vulnerability · Source |
| CVE-2026-11170 | redhat_vex | chromium-browser: Inappropriate implementation in Chromoting | known not affected: 1 | 2026-06-28T11:45:01+00:00 | Vulnerability · Source |
| CVE-2017-3457 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Apr 2017) | fixed: 54 known not affected: 66 | 2026-06-28T11:45:00+00:00 | Vulnerability · Source |
| CVE-2017-3646 | redhat_vex | mysql: X Plugin unspecified vulnerability (CPU Jul 2017) | fixed: 54 known not affected: 86 | 2026-06-28T11:45:00+00:00 | Vulnerability · Source |
| CVE-2026-10922 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in DevTools | known not affected: 1 | 2026-06-28T11:45:00+00:00 | Vulnerability · Source |
| CVE-2019-15099 | redhat_vex | kernel: a NULL pointer dereference in drivers/net/wireless/ath/ath10k/usb.c leads to a crash | fixed: 175 known affected: 40 known not affected: 15 | 2026-06-28T11:45:00+00:00 | Vulnerability · Source |
| CVE-2026-48850 | redhat_vex | PuTTY: double free vulnerability in RSA KEX code | known not affected: 1 | 2026-06-28T11:44:59+00:00 | Vulnerability · Source |
| CVE-2026-11231 | redhat_vex | chromium-browser: Inappropriate implementation in Safe Browsing | known not affected: 1 | 2026-06-28T11:44:58+00:00 | Vulnerability · Source |
| CVE-2010-2169 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:44:56+00:00 | Vulnerability · Source |
| CVE-2019-15034 | redhat_vex | qemu: hw/display/bochs-display.c does not ensure a sufficient PCI config space allocation leading to a buffer overflow involving the PCIe extended config space | known not affected: 70 | 2026-06-28T11:44:56+00:00 | Vulnerability · Source |
| CVE-2026-11091 | redhat_vex | chromium-browser: Inappropriate implementation in Dawn | known not affected: 1 | 2026-06-28T11:44:56+00:00 | Vulnerability · Source |
| CVE-2019-15117 | redhat_vex | kernel: out of bounds memory access in parse_audio_mixer_unit in sound/usb/mixer.c | known affected: 1 known not affected: 103 | 2026-06-28T11:44:55+00:00 | Vulnerability · Source |
| CVE-2026-10887 | redhat_vex | chromium-browser: Use after free in Chromoting | known not affected: 1 | 2026-06-28T11:44:55+00:00 | Vulnerability · Source |
| CVE-2018-1000204 | redhat_vex | kernel: Infoleak caused by incorrect handling of the SG_IO ioctl | fixed: 26 known not affected: 87 | 2026-06-28T11:44:55+00:00 | Vulnerability · Source |
| CVE-2019-14851 | redhat_vex | nbdkit: assertion failure by issuing commands in the wrong order | known not affected: 59 | 2026-06-28T11:43:46+00:00 | Vulnerability · Source |
| CVE-2025-71118 | redhat_vex | kernel: ACPICA: Avoid walking the Namespace if start_node is NULL | known affected: 274 | 2026-06-28T11:43:44+00:00 | Vulnerability · Source |
| CVE-2017-3251 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2017) | fixed: 54 known not affected: 66 | 2026-06-28T11:43:44+00:00 | Vulnerability · Source |
| CVE-2026-11108 | redhat_vex | chromium-browser: Inappropriate implementation in NFC | known not affected: 1 | 2026-06-28T11:43:44+00:00 | Vulnerability · Source |
| CVE-2026-43457 | redhat_vex | kernel: mctp: i2c: fix skb memory leak in receive path | known not affected: 274 | 2026-06-28T11:43:43+00:00 | Vulnerability · Source |
| CVE-2026-11290 | redhat_vex | chromium-browser: Integer overflow in WebView | known not affected: 1 | 2026-06-28T11:43:43+00:00 | Vulnerability · Source |
| CVE-2012-0503 | redhat_vex | OpenJDK: unrestricted use of TimeZone.setDefault() (i18n, 7110687) | fixed: 487 known affected: 7 | 2026-06-28T11:43:41+00:00 | Vulnerability · Source |
| CVE-2012-0497 | redhat_vex | OpenJDK: insufficient checking of the graphics rendering object (2D, 7112642) | fixed: 213 known not affected: 20 | 2026-06-28T11:43:41+00:00 | Vulnerability · Source |
| CVE-2020-0404 | redhat_vex | kernel: avoid cyclic entity chains due to malformed USB descriptors | fixed: 150 known affected: 29 known not affected: 120 | 2026-06-28T11:43:40+00:00 | Vulnerability · Source |
| CVE-2018-1000004 | redhat_vex | kernel: Race condition in sound system can lead to denial of service | fixed: 557 known affected: 1 known not affected: 32 | 2026-06-28T11:43:40+00:00 | Vulnerability · Source |
| CVE-2020-0305 | redhat_vex | kernel: possible use-after-free due to a race condition in cdev_get of char_dev.c | fixed: 150 known affected: 45 | 2026-06-28T11:43:38+00:00 | Vulnerability · Source |