VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294127 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-5030 | redhat_vex | chromium-browser: memory corruption in v8 | fixed: 12 | 2026-06-28T11:43:20+00:00 | Vulnerability · Source |
| CVE-2019-14885 | redhat_vex | EAP: Vault system property security attribute value is revealed on CLI 'reload' command | fixed: 774 | 2026-06-28T11:43:19+00:00 | Vulnerability · Source |
| CVE-2025-71077 | redhat_vex | kernel: tpm: Cap the number of PCR banks | known affected: 246 known not affected: 28 | 2026-06-28T11:43:19+00:00 | Vulnerability · Source |
| CVE-2017-3526 | redhat_vex | OpenJDK: incomplete XML parse tree size enforcement (JAXP, 8169011) | fixed: 590 known affected: 15 | 2026-06-28T11:43:18+00:00 | Vulnerability · Source |
| CVE-2017-3273 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Jan 2017) | fixed: 114 known not affected: 57 | 2026-06-28T11:43:18+00:00 | Vulnerability · Source |
| CVE-2009-2983 | redhat_vex | acroread: Multiple arbitrary code execution fixes in 8.1.7 (APSB09-15) | fixed: 20 | 2026-06-28T11:43:18+00:00 | Vulnerability · Source |
| CVE-2017-3464 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Apr 2017) | fixed: 416 known affected: 27 | 2026-06-28T11:43:17+00:00 | Vulnerability · Source |
| CVE-2017-1000100 | redhat_vex | curl: TFTP sends more than buffer size | fixed: 336 known affected: 21 | 2026-06-28T11:43:17+00:00 | Vulnerability · Source |
| CVE-2017-3468 | redhat_vex | mysql: Server: Security: Encryption unspecified vulnerability (CPU Apr 2017) | fixed: 54 known not affected: 66 | 2026-06-28T11:43:17+00:00 | Vulnerability · Source |
| CVE-2016-9936 | redhat_vex | php: Use After Free in unserialize() | fixed: 254 known affected: 87 | 2026-06-28T11:43:16+00:00 | Vulnerability · Source |
| CVE-2025-8709 | redhat_vex | langchain: SQL Injection in langchain-ai/langchain | known not affected: 48 | 2026-06-28T11:43:16+00:00 | Vulnerability · Source |
| CVE-2016-4544 | redhat_vex | php: Out-of-bounds heap memory read in exif_read_data() caused by malformed input | fixed: 251 known affected: 110 | 2026-06-28T11:43:15+00:00 | Vulnerability · Source |
| CVE-2011-3387 | redhat_vex | java-1.4.2-ibm: DoS via class file parser in IBM Java 1.4.2.SR13.FP9 | fixed: 138 | 2026-06-28T11:43:15+00:00 | Vulnerability · Source |
| CVE-2020-6426 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | fixed: 14 | 2026-06-28T11:43:14+00:00 | Vulnerability · Source |
| CVE-2016-9921 | redhat_vex | Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy | fixed: 47 known affected: 19 | 2026-06-28T11:43:14+00:00 | Vulnerability · Source |
| CVE-2020-6537 | redhat_vex | chromium-browser: Type Confusion in V8 | fixed: 14 | 2026-06-28T11:43:14+00:00 | Vulnerability · Source |
| CVE-2007-1711 | redhat_vex | security flaw | fixed: 384 | 2026-06-28T11:43:14+00:00 | Vulnerability · Source |
| CVE-2016-4143 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:43:13+00:00 | Vulnerability · Source |
| CVE-2026-34943 | redhat_vex | Wasmtime: Wasmtime: Denial of Service due to malformed flags-typed component model value processing | known affected: 1 known not affected: 1 | 2026-06-28T11:43:12+00:00 | Vulnerability · Source |
| CVE-2025-3154 | redhat_vex | xpdf: Out-of-bounds array write due to invalid VerticesPerRow in Xpdf 4.05 | known not affected: 1 | 2026-06-28T11:43:11+00:00 | Vulnerability · Source |
| CVE-2018-1066 | redhat_vex | kernel: Null pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() when empty TargetInfo is returned in NTLMSSP setup negotiation response allowing to crash client's kernel | fixed: 161 known affected: 23 known not affected: 63 | 2026-06-28T11:43:11+00:00 | Vulnerability · Source |
| CVE-2016-9597 | redhat_vex | libxml2: stack overflow before detecting invalid XML file (unfixed CVE-2016-3705 in JBCS) | fixed: 1 known affected: 1 known not affected: 11 | 2026-06-28T11:43:10+00:00 | Vulnerability · Source |
| CVE-2016-9598 | redhat_vex | libxml2: out-of-bounds read (unfixed CVE-2016-4483 in JBCS) | fixed: 1 known not affected: 11 | 2026-06-28T11:43:10+00:00 | Vulnerability · Source |
| CVE-2016-3707 | redhat_vex | kernel-rt: Sending SysRq command via ICMP echo request | fixed: 46 known not affected: 33 | 2026-06-28T11:43:10+00:00 | Vulnerability · Source |
| CVE-2016-9588 | redhat_vex | Kernel: kvm: nVMX: uncaught software exceptions in L1 guest leads to DoS | fixed: 185 known not affected: 34 | 2026-06-28T11:43:09+00:00 | Vulnerability · Source |
| CVE-2008-3522 | redhat_vex | jasper: possible buffer overflow in jas_stream_printf() | fixed: 5 | 2026-06-28T11:43:09+00:00 | Vulnerability · Source |
| CVE-2009-0927 | redhat_vex | security flaw | fixed: 20 | 2026-06-28T11:43:09+00:00 | Vulnerability · Source |
| CVE-2021-25291 | redhat_vex | python-pillow: out-of-bounds read in TiffReadRGBATile in TiffDecode.c | fixed: 1 known affected: 8 known not affected: 14 | 2026-06-28T11:43:08+00:00 | Vulnerability · Source |
| CVE-2019-14843 | redhat_vex | wildfly-security-manager: security manager authorization bypass | fixed: 379 known not affected: 20 | 2026-06-28T11:43:07+00:00 | Vulnerability · Source |
| CVE-2016-9555 | redhat_vex | kernel: Slab out-of-bounds access in sctp_sf_ootb() | fixed: 387 known affected: 1 | 2026-06-28T11:43:06+00:00 | Vulnerability · Source |
| CVE-2006-6745 | redhat_vex | security flaw | fixed: 210 | 2026-06-28T11:43:05+00:00 | Vulnerability · Source |
| CVE-2017-18241 | redhat_vex | kernel: Null pointer dereference in fs/f2fs/segment.c via mounting fs with noflush_merge option allows local denial of service | known not affected: 88 | 2026-06-28T11:43:02+00:00 | Vulnerability · Source |
| CVE-2025-71186 | redhat_vex | kernel: dmaengine: stm32: dmamux: fix device leak on route allocation | known not affected: 274 | 2026-06-28T11:43:02+00:00 | Vulnerability · Source |
| CVE-2010-3644 | redhat_vex | flash-plugin: security bulletin APSB10-26 | fixed: 9 | 2026-06-28T11:43:00+00:00 | Vulnerability · Source |
| CVE-2010-1240 | redhat_vex | acroread: multiple code execution flaws (APSB10-15) | fixed: 12 | 2026-06-28T11:42:59+00:00 | Vulnerability · Source |
| CVE-2011-0560 | redhat_vex | flash-plugin: multiple code execution flaws (APSB11-02) | fixed: 8 | 2026-06-28T11:42:59+00:00 | Vulnerability · Source |
| CVE-2019-14887 | redhat_vex | wildfly: The 'enabled-protocols' value in legacy security is not respected if OpenSSL security provider is in use | fixed: 1202 known affected: 10 known not affected: 2 | 2026-06-28T11:42:59+00:00 | Vulnerability · Source |
| CVE-2009-1493 | redhat_vex | acroread: multiple vulnerabilities in Adobe Reader 8.1.4 | fixed: 20 | 2026-06-28T11:42:58+00:00 | Vulnerability · Source |
| CVE-2017-5026 | redhat_vex | chromium-browser: ui spoofing | fixed: 12 | 2026-06-28T11:42:58+00:00 | Vulnerability · Source |
| CVE-2009-2689 | redhat_vex | OpenJDK JDK13Services grants unnecessary privileges (6777448) | fixed: 96 | 2026-06-28T11:42:56+00:00 | Vulnerability · Source |
| CVE-2009-1867 | redhat_vex | flash-plugin: multiple information disclosure flaws (APSB09-10) | fixed: 10 | 2026-06-28T11:42:56+00:00 | Vulnerability · Source |
| CVE-2016-8910 | redhat_vex | Qemu: net: rtl8139: infinite loop while transmit in C+ mode | fixed: 47 known affected: 18 | 2026-06-28T11:42:56+00:00 | Vulnerability · Source |
| CVE-2016-8909 | redhat_vex | Qemu: audio: intel-hda: infinite loop in processing dma buffer stream | fixed: 47 known affected: 10 known not affected: 8 | 2026-06-28T11:42:55+00:00 | Vulnerability · Source |
| CVE-2026-43435 | redhat_vex | kernel: rust_binder: fix oneway spam detection | known not affected: 274 | 2026-06-28T11:42:55+00:00 | Vulnerability · Source |
| CVE-2019-14838 | redhat_vex | wildfly-core: Incorrect privileges for 'Monitor', 'Auditor' and 'Deployer' user by default | fixed: 387 known affected: 3 known not affected: 4 | 2026-06-28T11:42:54+00:00 | Vulnerability · Source |
| CVE-2017-3459 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017) | fixed: 54 known not affected: 66 | 2026-06-28T11:42:53+00:00 | Vulnerability · Source |
| CVE-2008-2928 | redhat_vex | Server: CGI accept language buffer overflow | fixed: 8 | 2026-06-28T11:42:52+00:00 | Vulnerability · Source |
| CVE-2024-6519 | redhat_vex | qemu-kvm: lsi53c895a: use-after-free local privilege escalation vulnerability | known not affected: 98 | 2026-06-28T11:42:50+00:00 | Vulnerability · Source |
| CVE-2007-2435 | redhat_vex | javaws vulnerabilities | fixed: 339 | 2026-06-28T11:42:49+00:00 | Vulnerability · Source |
| CVE-2015-8043 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-28 | fixed: 5 | 2026-06-28T11:42:48+00:00 | Vulnerability · Source |