VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294132 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-23252 | redhat_vex | kernel: xfs: get rid of the xchk_xfile_*_descr calls | known affected: 184 known not affected: 90 | 2026-06-28T11:39:39+00:00 | Vulnerability · Source |
| CVE-2025-3625 | redhat_vex | moodle: User DoS and Name Disclosure via IDOR in Moodle MFA Email Factor Revoke Action | known not affected: 1 | 2026-06-28T11:39:39+00:00 | Vulnerability · Source |
| CVE-2026-23254 | redhat_vex | kernel: net: gro: fix outer network offset | known affected: 76 known not affected: 198 | 2026-06-28T11:39:38+00:00 | Vulnerability · Source |
| CVE-2026-43377 | redhat_vex | kernel: ksmbd: Don't log keys in SMB3 signing and encryption key generation | known not affected: 274 | 2026-06-28T11:39:37+00:00 | Vulnerability · Source |
| CVE-2026-40924 | redhat_vex | github.com/tektoncd/pipeline: Tekton Pipelines: Denial of Service via large HTTP response body | known affected: 74 | 2026-06-28T11:39:37+00:00 | Vulnerability · Source |
| CVE-2025-3522 | redhat_vex | thunderbird: Leak of hashed Window credentials via crafted attachment URL | fixed: 144 known affected: 6 | 2026-06-28T11:39:36+00:00 | Vulnerability · Source |
| CVE-2026-40087 | redhat_vex | langchain: incomplete f-string validation in prompt templates | known affected: 10 | 2026-06-28T11:39:35+00:00 | Vulnerability · Source |
| CVE-2026-23200 | redhat_vex | kernel: ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF | known affected: 274 | 2026-06-28T11:39:34+00:00 | Vulnerability · Source |
| CVE-2006-4640 | redhat_vex | security flaw | fixed: 2 | 2026-06-28T11:39:34+00:00 | Vulnerability · Source |
| CVE-2025-34451 | redhat_vex | proxychains-ng: proxychains-ng: Denial of Service due to stack-based buffer overflow via crafted proxy configuration | known not affected: 1 | 2026-06-28T11:39:33+00:00 | Vulnerability · Source |
| CVE-2015-5127 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T11:39:32+00:00 | Vulnerability · Source |
| CVE-2015-5124 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-16 | fixed: 5 | 2026-06-28T11:39:32+00:00 | Vulnerability · Source |
| CVE-2015-5006 | redhat_vex | JDK: local disclosure of kerberos credentials cache | fixed: 346 known affected: 8 | 2026-06-28T11:39:31+00:00 | Vulnerability · Source |
| CVE-2015-4806 | redhat_vex | OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193) | fixed: 1136 | 2026-06-28T11:39:30+00:00 | Vulnerability · Source |
| CVE-2015-4881 | redhat_vex | OpenJDK: missing type checks in IIOPInputStream (CORBA, 8076392) | fixed: 689 | 2026-06-28T11:39:30+00:00 | Vulnerability · Source |
| CVE-2015-4916 | redhat_vex | JDK: unspecified vulnerability fixed in 8u65 (JavaFX) | fixed: 64 | 2026-06-28T11:39:30+00:00 | Vulnerability · Source |
| CVE-2015-4734 | redhat_vex | OpenJDK: kerberos realm name leak (JGSS, 8048030) | fixed: 1035 known affected: 8 | 2026-06-28T11:39:29+00:00 | Vulnerability · Source |
| CVE-2019-15504 | redhat_vex | kernel: double free in drivers/net/wireless/rsi/rsi_91x_usb.c via crafted USB device | known not affected: 92 | 2026-06-28T11:39:28+00:00 | Vulnerability · Source |
| CVE-2026-3539 | redhat_vex | chromium-browser: Object lifecycle issue in DevTools | known not affected: 1 | 2026-06-28T11:39:28+00:00 | Vulnerability · Source |
| CVE-2015-4643 | redhat_vex | php: integer overflow in ftp_genlist() resulting in heap overflow (improved fix for CVE-2015-4022) | fixed: 1046 known affected: 2 | 2026-06-28T11:39:28+00:00 | Vulnerability · Source |
| CVE-2017-11281 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-28 | fixed: 3 | 2026-06-28T11:39:27+00:00 | Vulnerability · Source |
| CVE-2017-11215 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-33 | fixed: 3 | 2026-06-28T11:39:26+00:00 | Vulnerability · Source |
| CVE-2026-43373 | redhat_vex | kernel: net: ncsi: fix skb leak in error paths | known not affected: 274 | 2026-06-28T11:39:25+00:00 | Vulnerability · Source |
| CVE-2015-4148 | redhat_vex | php: SoapClient's do_soap_call() type confusion after unserialize() | fixed: 849 known affected: 56 known not affected: 30 | 2026-06-28T11:39:25+00:00 | Vulnerability · Source |
| CVE-2025-71287 | redhat_vex | kernel: memory: mtk-smi: fix device leak on larb probe | known not affected: 274 | 2026-06-28T11:39:24+00:00 | Vulnerability · Source |
| CVE-2015-4024 | redhat_vex | php: multipart/form-data request parsing CPU usage DoS | fixed: 1046 known affected: 2 | 2026-06-28T11:39:23+00:00 | Vulnerability · Source |
| CVE-2026-46247 | redhat_vex | kernel: clk: qcom: gfx3d: add parent to parent request map | known affected: 76 known not affected: 198 | 2026-06-28T11:39:22+00:00 | Vulnerability · Source |
| CVE-2025-3839 | redhat_vex | epiphany: Insecure External Protocol Invocation in Epiphany | known not affected: 1 | 2026-06-28T11:39:21+00:00 | Vulnerability · Source |
| CVE-2026-34303 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T11:39:21+00:00 | Vulnerability · Source |
| CVE-2008-5358 | redhat_vex | OpenJDK Buffer Overflow in GIF image processing (6766136) | fixed: 196 | 2026-06-28T11:39:21+00:00 | Vulnerability · Source |
| CVE-2019-15239 | redhat_vex | kernel: local attacker can trigger multiple use-after-free conditions results in privilege escalation | fixed: 237 known not affected: 91 | 2026-06-28T11:39:20+00:00 | Vulnerability · Source |
| CVE-2026-40706 | redhat_vex | ntfs-3g: NTFS-3G: Arbitrary code execution via crafted NTFS image | known not affected: 1 | 2026-06-28T11:39:20+00:00 | Vulnerability · Source |
| CVE-2026-25833 | redhat_vex | mbedtls: buffer underflow in x509_inet_pton_ipv6() | known not affected: 1 | 2026-06-28T11:39:20+00:00 | Vulnerability · Source |
| CVE-2008-0667 | redhat_vex | acroread: silent print vulnerability | fixed: 20 | 2026-06-28T11:39:20+00:00 | Vulnerability · Source |
| CVE-2025-32797 | redhat_vex | conda-build: Conda-build Code Execution | known not affected: 1 | 2026-06-28T11:39:18+00:00 | Vulnerability · Source |
| CVE-2026-39860 | redhat_vex | nix: privilege escalation via symlink following during output registration | known not affected: 1 | 2026-06-28T11:39:18+00:00 | Vulnerability · Source |
| CVE-2008-3873 | redhat_vex | flash: clipboard hijack attack | fixed: 10 | 2026-06-28T11:39:18+00:00 | Vulnerability · Source |
| CVE-2025-32444 | redhat_vex | vllm: vLLM Vulnerable to Remote Code Execution via Mooncake Integration | known not affected: 12 | 2026-06-28T11:39:17+00:00 | Vulnerability · Source |
| CVE-2025-71285 | redhat_vex | kernel: net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels | known affected: 232 known not affected: 42 | 2026-06-28T11:39:17+00:00 | Vulnerability · Source |
| CVE-2019-15291 | redhat_vex | kernel: Null pointer dereference in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c | known affected: 91 known not affected: 13 | 2026-06-28T11:39:16+00:00 | Vulnerability · Source |
| CVE-2019-5418 | redhat_vex | rubygem-actionpack: render file directory traversal in Action View | fixed: 75 | 2026-06-28T11:39:16+00:00 | Vulnerability · Source |
| CVE-2026-43293 | redhat_vex | kernel: media: chips-media: wave5: Fix kthread worker destruction in polling mode | known not affected: 274 | 2026-06-28T11:39:16+00:00 | Vulnerability · Source |
| CVE-2025-5643 | redhat_vex | radare2: Radare2 radiff2 cons.c cons_stack_load memory corruption | known not affected: 1 | 2026-06-28T11:39:14+00:00 | Vulnerability · Source |
| CVE-2025-71149 | redhat_vex | kernel: io_uring/poll: correctly handle io_poll_add() return value on update | known affected: 184 known not affected: 90 | 2026-06-28T11:39:14+00:00 | Vulnerability · Source |
| CVE-2014-7907 | redhat_vex | chromium-browser: Use-after-free in blink | fixed: 18 known affected: 9 | 2026-06-28T11:39:14+00:00 | Vulnerability · Source |
| CVE-2025-71203 | redhat_vex | kernel: riscv: Sanitize syscall table indexing under speculation | known not affected: 274 | 2026-06-28T11:39:12+00:00 | Vulnerability · Source |
| CVE-2019-15605 | redhat_vex | nodejs: HTTP request smuggling using malformed Transfer-Encoding header | fixed: 355 known not affected: 1 | 2026-06-28T11:39:11+00:00 | Vulnerability · Source |
| CVE-2015-3087 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-09 | fixed: 5 | 2026-06-28T11:39:10+00:00 | Vulnerability · Source |
| CVE-2008-2086 | redhat_vex | Java Web Start File Inclusion via System Properties Override | fixed: 575 | 2026-06-28T11:39:08+00:00 | Vulnerability · Source |
| CVE-2019-3896 | redhat_vex | kernel: Double free in lib/idr.c | fixed: 212 known affected: 1 known not affected: 89 | 2026-06-28T11:39:08+00:00 | Vulnerability · Source |