VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294132 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-46205 | redhat_vex | kernel: staging: media: atomisp: Disallow all private IOCTLs | known not affected: 274 | 2026-06-28T11:40:55+00:00 | Vulnerability · Source |
| CVE-2021-26341 | redhat_vex | hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch | fixed: 514 known affected: 42 | 2026-06-28T11:40:54+00:00 | Vulnerability · Source |
| CVE-2026-7911 | redhat_vex | chromium-browser: Use after free in Aura | known not affected: 1 | 2026-06-28T11:40:53+00:00 | Vulnerability · Source |
| CVE-2025-2828 | redhat_vex | langchain-community: SSRF Vulnerability in langchain-community | known not affected: 42 | 2026-06-28T11:40:53+00:00 | Vulnerability · Source |
| CVE-2007-4324 | redhat_vex | Flash movie can determine whether a TCP port is open | fixed: 20 | 2026-06-28T11:40:51+00:00 | Vulnerability · Source |
| CVE-2016-0636 | redhat_vex | OpenJDK: missing type safety checks for MethodHandle calls across class loaders, incorrect CVE-2013-5838 fix (Hotspot, 8151666) | fixed: 488 | 2026-06-28T11:40:51+00:00 | Vulnerability · Source |
| CVE-2025-8341 | redhat_vex | github.com/grafana/grafana-infinity-datasource: Grafana Infinity datasource plugin URL Bypass Vulnerability | known affected: 1 | 2026-06-28T11:40:50+00:00 | Vulnerability · Source |
| CVE-2011-0558 | redhat_vex | flash-plugin: multiple code execution flaws (APSB11-02) | fixed: 8 | 2026-06-28T11:40:49+00:00 | Vulnerability · Source |
| CVE-2019-6974 | redhat_vex | Kernel: KVM: potential use-after-free via kvm_ioctl_create_device() | fixed: 430 known not affected: 75 | 2026-06-28T11:40:48+00:00 | Vulnerability · Source |
| CVE-2026-31971 | redhat_vex | htslib: HTSlib: CRAM decoder vulnerable to buffer overflow | known not affected: 1 | 2026-06-28T11:40:48+00:00 | Vulnerability · Source |
| CVE-2015-8956 | redhat_vex | kernel: NULL dereference in RFCOMM bind callback | fixed: 191 known affected: 27 | 2026-06-28T11:40:48+00:00 | Vulnerability · Source |
| CVE-2025-57109 | redhat_vex | Kitware VTK: vtk: Kitware VTK (Visualization Toolkit) is vulnerable to Heap Use-After-Free in vtkGLTFImporter::ImportActors | known not affected: 1 | 2026-06-28T11:40:48+00:00 | Vulnerability · Source |
| CVE-2015-8876 | redhat_vex | php: Zend/zend_exceptions.c does not validate certain Exception objects | fixed: 251 known affected: 28 known not affected: 82 | 2026-06-28T11:40:45+00:00 | Vulnerability · Source |
| CVE-2022-48804 | redhat_vex | kernel: vt_ioctl: fix array_index_nospec in vt_setactivate | fixed: 709 known affected: 50 known not affected: 22 | 2026-06-28T11:40:45+00:00 | Vulnerability · Source |
| CVE-2019-6778 | redhat_vex | QEMU: slirp: heap buffer overflow in tcp_emu() | fixed: 107 known affected: 17 known not affected: 17 | 2026-06-28T11:40:44+00:00 | Vulnerability · Source |
| CVE-2026-40858 | redhat_vex | org.apache.camel/camel-infinispan: Apache Camel camel-infinispan: Arbitrary code execution via deserialization of untrusted data | fixed: 2 known affected: 2 known not affected: 7 | 2026-06-28T11:40:44+00:00 | Vulnerability · Source |
| CVE-2026-7907 | redhat_vex | chromium-browser: Use after free in DOM | known not affected: 1 | 2026-06-28T11:40:44+00:00 | Vulnerability · Source |
| CVE-2015-8866 | redhat_vex | php: libxml_disable_entity_loader setting is shared between threads | fixed: 251 known affected: 110 | 2026-06-28T11:40:41+00:00 | Vulnerability · Source |
| CVE-2015-8863 | redhat_vex | jq: heap-buffer-overflow in tokenadd() function | fixed: 9 known not affected: 7 | 2026-06-28T11:40:41+00:00 | Vulnerability · Source |
| CVE-2015-8660 | redhat_vex | kernel: Permission bypass on overlayfs during copy_up | fixed: 207 known not affected: 15 | 2026-06-28T11:40:39+00:00 | Vulnerability · Source |
| CVE-2021-26708 | redhat_vex | kernel: race conditions caused by wrong locking in net/vmw_vsock/af_vsock.c | fixed: 150 known not affected: 149 | 2026-06-28T11:40:37+00:00 | Vulnerability · Source |
| CVE-2022-48760 | redhat_vex | kernel: USB: core: Fix hang in usb_kill_urb by adding memory barriers | fixed: 150 known affected: 150 | 2026-06-28T11:40:37+00:00 | Vulnerability · Source |
| CVE-2015-8635 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-01 | fixed: 5 | 2026-06-28T11:40:36+00:00 | Vulnerability · Source |
| CVE-2017-12188 | redhat_vex | Kernel: KVM: MMU potential stack buffer overrun during page walks | fixed: 191 known not affected: 43 | 2026-06-28T11:40:34+00:00 | Vulnerability · Source |
| CVE-2017-15425 | redhat_vex | chromium-browser: url spoof in omnibox | fixed: 12 | 2026-06-28T11:40:33+00:00 | Vulnerability · Source |
| CVE-2017-15424 | redhat_vex | chromium-browser: url spoof in omnibox | fixed: 12 | 2026-06-28T11:40:33+00:00 | Vulnerability · Source |
| CVE-2017-15420 | redhat_vex | chromium-browser: url spoofing in omnibox | fixed: 12 | 2026-06-28T11:40:33+00:00 | Vulnerability · Source |
| CVE-2010-3557 | redhat_vex | OpenJDK Swing mutable static (6938813) | fixed: 733 | 2026-06-28T11:40:32+00:00 | Vulnerability · Source |
| CVE-2026-43272 | redhat_vex | kernel: ring-buffer: Fix possible dereference of uninitialized pointer | known affected: 76 known not affected: 198 | 2026-06-28T11:40:31+00:00 | Vulnerability · Source |
| CVE-2017-15415 | redhat_vex | chromium-browser: pointer information disclosure in ipc call | fixed: 12 | 2026-06-28T11:40:31+00:00 | Vulnerability · Source |
| CVE-2017-15413 | redhat_vex | chromium-browser: type confusion in webassembly | fixed: 12 | 2026-06-28T11:40:30+00:00 | Vulnerability · Source |
| CVE-2017-15412 | redhat_vex | libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c | fixed: 91 known affected: 9 known not affected: 4 | 2026-06-28T11:40:30+00:00 | Vulnerability · Source |
| CVE-2026-43264 | redhat_vex | kernel: fbdev: of: display_timing: fix refcount leak in of_get_display_timings() | known affected: 76 known not affected: 198 | 2026-06-28T11:40:29+00:00 | Vulnerability · Source |
| CVE-2010-2174 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:40:29+00:00 | Vulnerability · Source |
| CVE-2010-2177 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:40:29+00:00 | Vulnerability · Source |
| CVE-2010-2173 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:40:29+00:00 | Vulnerability · Source |
| CVE-2025-71232 | redhat_vex | kernel: scsi: qla2xxx: Free sp in error path to fix system crash | known affected: 274 | 2026-06-28T11:40:28+00:00 | Vulnerability · Source |
| CVE-2015-8045 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:40:27+00:00 | Vulnerability · Source |
| CVE-2017-15395 | redhat_vex | chromium-browser: null pointer dereference in imagecapture | fixed: 12 | 2026-06-28T11:40:27+00:00 | Vulnerability · Source |
| CVE-2015-8044 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-28 | fixed: 5 | 2026-06-28T11:40:27+00:00 | Vulnerability · Source |
| CVE-2017-15393 | redhat_vex | chromium-browser: referrer leak in devtools | fixed: 12 | 2026-06-28T11:40:25+00:00 | Vulnerability · Source |
| CVE-2017-15388 | redhat_vex | chromium-browser: out of bounds read in skia | fixed: 12 | 2026-06-28T11:40:24+00:00 | Vulnerability · Source |
| CVE-2020-10701 | redhat_vex | libvirt: guest agent timeout can be set under read-only mode leading to DoS | known not affected: 102 | 2026-06-28T11:40:23+00:00 | Vulnerability · Source |
| CVE-2015-7632 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-25 | fixed: 5 | 2026-06-28T11:40:22+00:00 | Vulnerability · Source |
| CVE-2015-7628 | redhat_vex | flash-plugin: information leak and hardening fixes in APSB15-25 | fixed: 5 | 2026-06-28T11:40:20+00:00 | Vulnerability · Source |
| CVE-2015-7577 | redhat_vex | rubygem-activerecord: Nested attributes rejection proc bypass in Active Record | fixed: 240 known affected: 3 known not affected: 1 | 2026-06-28T11:40:20+00:00 | Vulnerability · Source |
| CVE-2026-43249 | redhat_vex | kernel: 9p/xen: protect xen_9pfs_front_free against concurrent calls | known not affected: 274 | 2026-06-28T11:40:19+00:00 | Vulnerability · Source |
| CVE-2009-2673 | redhat_vex | OpenJDK proxy mechanism allows non-authorized socket connections (6801497) | fixed: 434 | 2026-06-28T11:40:18+00:00 | Vulnerability · Source |
| CVE-2017-15121 | redhat_vex | kernel: vfs: BUG in truncate_inode_pages_range() and fuse client | fixed: 371 known affected: 12 known not affected: 17 | 2026-06-28T11:40:16+00:00 | Vulnerability · Source |
| CVE-2026-43241 | redhat_vex | kernel: ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access | known not affected: 274 | 2026-06-28T11:40:16+00:00 | Vulnerability · Source |