VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294135 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-3087 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-09 | fixed: 5 | 2026-06-28T11:39:10+00:00 | Vulnerability · Source |
| CVE-2008-2086 | redhat_vex | Java Web Start File Inclusion via System Properties Override | fixed: 575 | 2026-06-28T11:39:08+00:00 | Vulnerability · Source |
| CVE-2019-3896 | redhat_vex | kernel: Double free in lib/idr.c | fixed: 212 known affected: 1 known not affected: 89 | 2026-06-28T11:39:08+00:00 | Vulnerability · Source |
| CVE-2019-3891 | redhat_vex | candlepin: credentials exposure through log files | fixed: 1128 | 2026-06-28T11:39:06+00:00 | Vulnerability · Source |
| CVE-2026-43262 | redhat_vex | kernel: gfs2: fiemap page fault fix | known affected: 198 known not affected: 76 | 2026-06-28T11:39:06+00:00 | Vulnerability · Source |
| CVE-2019-3894 | redhat_vex | wildfly: wrong SecurityIdentity for EE concurrency threads that are reused | fixed: 392 | 2026-06-28T11:39:06+00:00 | Vulnerability · Source |
| CVE-2019-3887 | redhat_vex | Kernel: KVM: nVMX: guest accesses L0 MSR causes potential DoS | fixed: 162 known not affected: 56 | 2026-06-28T11:39:05+00:00 | Vulnerability · Source |
| CVE-2026-46213 | redhat_vex | kernel: HID: appletb-kbd: fix UAF in inactivity-timer cleanup path | known not affected: 274 | 2026-06-28T11:39:05+00:00 | Vulnerability · Source |
| CVE-2014-6493 | redhat_vex | JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment) | fixed: 530 | 2026-06-28T11:39:05+00:00 | Vulnerability · Source |
| CVE-2017-10690 | redhat_vex | puppet: Environment leakage in puppet-agent | fixed: 1110 | 2026-06-28T11:39:05+00:00 | Vulnerability · Source |
| CVE-2019-3882 | redhat_vex | kernel: denial of service vector through vfio DMA mappings | fixed: 358 known affected: 16 known not affected: 27 | 2026-06-28T11:39:05+00:00 | Vulnerability · Source |
| CVE-2015-2620 | redhat_vex | mysql: unspecified vulnerability related to Server:Security:Privileges (CPU July 2015) | fixed: 428 known affected: 17 | 2026-06-28T11:39:04+00:00 | Vulnerability · Source |
| CVE-2019-3875 | redhat_vex | keycloak: missing signatures validation on CRL used to verify client certificates | fixed: 3 known affected: 5 | 2026-06-28T11:39:04+00:00 | Vulnerability · Source |
| CVE-2019-3861 | redhat_vex | libssh2: Out-of-bounds reads with specially crafted SSH packets | fixed: 63 known affected: 12 known not affected: 4 | 2026-06-28T11:39:03+00:00 | Vulnerability · Source |
| CVE-2019-3862 | redhat_vex | libssh2: Out-of-bounds memory comparison with specially crafted message channel request | fixed: 81 known affected: 12 known not affected: 4 | 2026-06-28T11:39:03+00:00 | Vulnerability · Source |
| CVE-2019-3868 | redhat_vex | keycloak: session hijack using the user access token | fixed: 10 known affected: 4 known not affected: 1 | 2026-06-28T11:39:03+00:00 | Vulnerability · Source |
| CVE-2015-2573 | redhat_vex | mysql: unspecified vulnerability related to Server:DDL (CPU April 2015) | fixed: 338 known not affected: 19 under investigation: 9 | 2026-06-28T11:39:03+00:00 | Vulnerability · Source |
| CVE-2019-3860 | redhat_vex | libssh2: Out-of-bounds reads with specially crafted SFTP packets | known affected: 16 known not affected: 4 | 2026-06-28T11:39:03+00:00 | Vulnerability · Source |
| CVE-2019-3859 | redhat_vex | libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read | known affected: 16 known not affected: 4 | 2026-06-28T11:39:02+00:00 | Vulnerability · Source |
| CVE-2020-16003 | redhat_vex | chromium-browser: Use after free in printing | fixed: 14 | 2026-06-28T11:39:01+00:00 | Vulnerability · Source |
| CVE-2017-10309 | redhat_vex | JDK: unspecified vulnerability fixed in 8u151 and 9.0.1 (Deployment) | fixed: 174 | 2026-06-28T11:39:01+00:00 | Vulnerability · Source |
| CVE-2019-3858 | redhat_vex | libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read | fixed: 63 known affected: 12 known not affected: 4 | 2026-06-28T11:39:01+00:00 | Vulnerability · Source |
| CVE-2015-1296 | redhat_vex | chromium-browser: Character spoofing in omnibox | fixed: 12 | 2026-06-28T11:39:00+00:00 | Vulnerability · Source |
| CVE-2017-10167 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017) | fixed: 63 known not affected: 86 | 2026-06-28T11:39:00+00:00 | Vulnerability · Source |
| CVE-2020-16006 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | fixed: 14 | 2026-06-28T11:38:59+00:00 | Vulnerability · Source |
| CVE-2020-16004 | redhat_vex | chromium-browser: Use after free in user interface | fixed: 14 | 2026-06-28T11:38:58+00:00 | Vulnerability · Source |
| CVE-2019-15218 | redhat_vex | kernel: null pointer dereference in the drivers/media/usb/siano/smsusb.c driver | known affected: 103 known not affected: 1 | 2026-06-28T11:38:57+00:00 | Vulnerability · Source |
| CVE-2007-6245 | redhat_vex | flash: HTTP headers modification | fixed: 10 | 2026-06-28T11:38:57+00:00 | Vulnerability · Source |
| CVE-2021-28972 | redhat_vex | kernel: Buffer overflow in hotplug/rpadlpar_sysfs.c | known affected: 64 known not affected: 133 | 2026-06-28T11:38:57+00:00 | Vulnerability · Source |
| CVE-2015-0413 | redhat_vex | JDK: unspecified vulnerability fixed in 7u75 and 8u31 (Serviceability) | fixed: 142 known not affected: 7 | 2026-06-28T11:38:57+00:00 | Vulnerability · Source |
| CVE-2020-16000 | redhat_vex | chromium-browser: Inappropriate implementation in Blink | fixed: 14 | 2026-06-28T11:38:57+00:00 | Vulnerability · Source |
| CVE-2019-15505 | redhat_vex | kernel: out of bounds read in drivers/media/usb/dvb-usb/technisat-usb2.c | fixed: 150 known affected: 41 known not affected: 15 | 2026-06-28T11:38:57+00:00 | Vulnerability · Source |
| CVE-2019-15216 | redhat_vex | kernel: null-pointer dereference in drivers/usb/misc/yurex.c driver | known not affected: 104 | 2026-06-28T11:38:56+00:00 | Vulnerability · Source |
| CVE-2026-11246 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in IndexedDB | known not affected: 1 | 2026-06-28T11:38:55+00:00 | Vulnerability · Source |
| CVE-2026-31425 | redhat_vex | kernel: rds: ib: reject FRMR registration before IB connection is established | known affected: 14 known not affected: 260 | 2026-06-28T11:38:55+00:00 | Vulnerability · Source |
| CVE-2015-0331 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T11:38:55+00:00 | Vulnerability · Source |
| CVE-2014-8158 | redhat_vex | jasper: unrestricted stack memory use in jpc_qmfb.c (oCERT-2015-001) | fixed: 139 known not affected: 1 | 2026-06-28T11:38:55+00:00 | Vulnerability · Source |
| CVE-2007-5400 | redhat_vex | RealPlayer: SWF Frame Handling Buffer Overflow | fixed: 10 | 2026-06-28T11:38:55+00:00 | Vulnerability · Source |
| CVE-2025-4096 | redhat_vex | chromium-browser: Heap buffer overflow in HTML in Google Chrome | known not affected: 1 | 2026-06-28T11:38:54+00:00 | Vulnerability · Source |
| CVE-2015-0275 | redhat_vex | kernel: fs: ext4: fallocate zero range page size > block size BUG() | fixed: 198 known not affected: 15 | 2026-06-28T11:38:54+00:00 | Vulnerability · Source |
| CVE-2019-3845 | redhat_vex | katello-installer-base: QMF methods exposed to goferd via qdrouterd | fixed: 149 known not affected: 12 | 2026-06-28T11:38:54+00:00 | Vulnerability · Source |
| CVE-2026-40194 | redhat_vex | phpseclib: phpseclib: Information disclosure via timing attack in SSH HMAC comparison | known not affected: 1 | 2026-06-28T11:38:54+00:00 | Vulnerability · Source |
| CVE-2014-9420 | redhat_vex | Kernel: fs: isofs: infinite loop in CE record entries | fixed: 372 known affected: 1 | 2026-06-28T11:38:53+00:00 | Vulnerability · Source |
| CVE-2026-10891 | redhat_vex | chromium-browser: Use after free in GFX | known not affected: 1 | 2026-06-28T11:38:53+00:00 | Vulnerability · Source |
| CVE-2026-46267 | redhat_vex | kernel: nfc: hci: shdlc: Stop timers and work before freeing context | known not affected: 274 | 2026-06-28T11:38:53+00:00 | Vulnerability · Source |
| CVE-2014-9585 | redhat_vex | kernel: ASLR bruteforce possible for vdso library | fixed: 372 known affected: 1 | 2026-06-28T11:38:53+00:00 | Vulnerability · Source |
| CVE-2014-9705 | redhat_vex | php: heap buffer overflow in enchant_broker_request_dict() | fixed: 849 known affected: 55 known not affected: 31 | 2026-06-28T11:38:53+00:00 | Vulnerability · Source |
| CVE-2026-10903 | redhat_vex | chromium-browser: Use after free in WebRTC | known not affected: 1 | 2026-06-28T11:38:53+00:00 | Vulnerability · Source |
| CVE-2014-8438 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-24) | fixed: 6 | 2026-06-28T11:38:52+00:00 | Vulnerability · Source |
| CVE-2017-14140 | redhat_vex | kernel: Missing permission check in move_pages system call | fixed: 191 known affected: 43 | 2026-06-28T11:38:50+00:00 | Vulnerability · Source |