VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294136 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-43100 | redhat_vex | kernel: bridge: guard local VLAN-0 FDB helpers against NULL vlan group | known affected: 90 known not affected: 184 | 2026-06-28T11:35:29+00:00 | Vulnerability · Source |
| CVE-2025-48795 | redhat_vex | org.apache.cxf/cxf: Apache CXF denial of service and data exposure | known affected: 3 | 2026-06-28T11:35:28+00:00 | Vulnerability · Source |
| CVE-2026-31761 | redhat_vex | kernel: iio: gyro: mpu3050: Move iio_device_register() to correct location | known not affected: 274 | 2026-06-28T11:35:28+00:00 | Vulnerability · Source |
| CVE-2025-29917 | redhat_vex | suricata: Suricata decode_base64: signature can do large memory allocation | known not affected: 1 | 2026-06-28T11:35:26+00:00 | Vulnerability · Source |
| CVE-2007-0044 | redhat_vex | Acrobat Reader Universal CSRF and session riding | fixed: 20 | 2026-06-28T11:35:26+00:00 | Vulnerability · Source |
| CVE-2010-2180 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:35:26+00:00 | Vulnerability · Source |
| CVE-2010-2206 | redhat_vex | acroread: multiple code execution flaws (APSB10-15) | fixed: 12 | 2026-06-28T11:35:24+00:00 | Vulnerability · Source |
| CVE-2019-16869 | redhat_vex | netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers | fixed: 319 known affected: 3 known not affected: 24 | 2026-06-28T11:35:22+00:00 | Vulnerability · Source |
| CVE-2026-23129 | redhat_vex | kernel: Linux kernel: Denial of Service in DPLL framework due to duplicate pin registrations | known affected: 184 known not affected: 90 | 2026-06-28T11:35:22+00:00 | Vulnerability · Source |
| CVE-2026-31691 | redhat_vex | kernel: igb: remove napi_synchronize() in igb_down() | known affected: 184 known not affected: 90 | 2026-06-28T11:35:21+00:00 | Vulnerability · Source |
| CVE-2019-15921 | redhat_vex | kernel: memory leak in genl_register_family() in net/netlink/genetlink.c | fixed: 154 known affected: 56 | 2026-06-28T11:35:20+00:00 | Vulnerability · Source |
| CVE-2019-16234 | redhat_vex | kernel: null pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c | fixed: 150 known affected: 56 | 2026-06-28T11:35:19+00:00 | Vulnerability · Source |
| CVE-2019-5811 | redhat_vex | chromium-browser: CORS bypass in Blink | fixed: 14 | 2026-06-28T11:35:19+00:00 | Vulnerability · Source |
| CVE-2019-16168 | redhat_vex | sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c | fixed: 126 known not affected: 13 | 2026-06-28T11:35:18+00:00 | Vulnerability · Source |
| CVE-2019-16089 | redhat_vex | kernel: Improper return check in nbd_genl_status function in drivers/block/nbd.c | known affected: 154 known not affected: 56 | 2026-06-28T11:35:18+00:00 | Vulnerability · Source |
| CVE-2019-16231 | redhat_vex | kernel: null-pointer dereference in drivers/net/fjes/fjes_main.c | fixed: 354 known affected: 17 known not affected: 15 | 2026-06-28T11:35:18+00:00 | Vulnerability · Source |
| CVE-2019-16233 | redhat_vex | kernel: null pointer dereference in drivers/scsi/qla2xxx/qla_os.c | fixed: 354 known affected: 28 known not affected: 15 | 2026-06-28T11:35:18+00:00 | Vulnerability · Source |
| CVE-2018-5407 | redhat_vex | openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) | fixed: 383 known affected: 17 known not affected: 6 | 2026-06-28T11:35:17+00:00 | Vulnerability · Source |
| CVE-2019-9003 | redhat_vex | kernel: use-after-free and OOPS in drivers/char/ipmi/ipmi_msghandler.c | fixed: 120 known affected: 16 known not affected: 56 | 2026-06-28T11:35:15+00:00 | Vulnerability · Source |
| CVE-2018-5332 | redhat_vex | kernel: rds_message_alloc_sgs() function doesn't validate value used during DMA page allocation causes heap out-of-bounds write | fixed: 16 known affected: 14 known not affected: 62 | 2026-06-28T11:35:15+00:00 | Vulnerability · Source |
| CVE-2017-0899 | redhat_vex | rubygems: Escape sequence in the "summary" field of gemspec | fixed: 576 known affected: 2 under investigation: 4 | 2026-06-28T11:35:14+00:00 | Vulnerability · Source |
| CVE-2025-29916 | redhat_vex | suricata: Suricata datasets: ruleset declared settings can lead to resource starvation | known not affected: 1 | 2026-06-28T11:35:14+00:00 | Vulnerability · Source |
| CVE-2016-9935 | redhat_vex | php: Invalid read when wddx decodes empty boolean element | fixed: 254 known affected: 87 | 2026-06-28T11:35:14+00:00 | Vulnerability · Source |
| CVE-2019-5822 | redhat_vex | chromium-browser: CORS bypass in download manager | fixed: 14 | 2026-06-28T11:35:13+00:00 | Vulnerability · Source |
| CVE-2019-5788 | redhat_vex | chromium-browser: Use after free in FileAPI | fixed: 14 | 2026-06-28T11:35:12+00:00 | Vulnerability · Source |
| CVE-2019-5810 | redhat_vex | chromium-browser: User information disclosure in Autofill | fixed: 14 | 2026-06-28T11:35:12+00:00 | Vulnerability · Source |
| CVE-2019-5787 | redhat_vex | chromium-browser: Use after free in Canvas | fixed: 14 | 2026-06-28T11:35:11+00:00 | Vulnerability · Source |
| CVE-2019-15924 | redhat_vex | kernel: null pointer dereference in drivers/net/ethernet/intel/fm10k/fm10k_main.c | fixed: 154 known affected: 41 known not affected: 15 | 2026-06-28T11:35:11+00:00 | Vulnerability · Source |
| CVE-2026-4732 | redhat_vex | github.com/tildearrow/furnace: tildearrow furnace: Out-of-bounds Read vulnerability allows information disclosure or arbitrary code execution | known not affected: 1 | 2026-06-28T11:35:11+00:00 | Vulnerability · Source |
| CVE-2025-46206 | redhat_vex | mupdf: Mupdf uncontrolled recursion | known not affected: 1 | 2026-06-28T11:35:11+00:00 | Vulnerability · Source |
| CVE-2025-29915 | redhat_vex | Suricata: Suricata af-packet: defrag option can lead to truncated packets affecting visibility | known not affected: 1 | 2026-06-28T11:35:10+00:00 | Vulnerability · Source |
| CVE-2026-43127 | redhat_vex | kernel: ntfs3: fix circular locking dependency in run_unpack_ex | known not affected: 274 | 2026-06-28T11:35:10+00:00 | Vulnerability · Source |
| CVE-2026-31611 | redhat_vex | kernel: ksmbd: require 3 sub-authorities before reading sub_auth[2] | known not affected: 274 | 2026-06-28T11:35:10+00:00 | Vulnerability · Source |
| CVE-2016-9934 | redhat_vex | php: NULL Pointer Dereference in WDDX Packet Deserialization with PDORow | fixed: 254 known affected: 87 | 2026-06-28T11:35:10+00:00 | Vulnerability · Source |
| CVE-2019-5762 | redhat_vex | chromium-browser: Use after free in PDFium | fixed: 12 | 2026-06-28T11:35:09+00:00 | Vulnerability · Source |
| CVE-2019-16229 | redhat_vex | kernel: null pointer dereference in drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | known affected: 76 known not affected: 28 | 2026-06-28T11:35:09+00:00 | Vulnerability · Source |
| CVE-2022-0185 | redhat_vex | kernel: fs_context: heap overflow in legacy parameter handling | fixed: 392 known not affected: 164 | 2026-06-28T11:35:09+00:00 | Vulnerability · Source |
| CVE-2025-58712 | redhat_vex | amq: privilege escalation via excessive /etc/passwd permissions | fixed: 21 known affected: 4 | 2026-06-28T11:35:07+00:00 | Vulnerability · Source |
| CVE-2026-23099 | redhat_vex | kernel: bonding: limit BOND_MODE_8023AD to Ethernet devices | known affected: 274 | 2026-06-28T11:35:07+00:00 | Vulnerability · Source |
| CVE-2026-43076 | redhat_vex | kernel: ocfs2: validate inline data i_size during inode read | known not affected: 274 | 2026-06-28T11:35:03+00:00 | Vulnerability · Source |
| CVE-2026-43115 | redhat_vex | kernel: srcu: Use irq_work to start GP in tiny SRCU | known not affected: 274 | 2026-06-28T11:35:03+00:00 | Vulnerability · Source |
| CVE-2026-54588 | redhat_vex | Poweradmin: Poweradmin: Account takeover via malicious redirect URI in authentication flows | known not affected: 1 | 2026-06-28T11:35:01+00:00 | Vulnerability · Source |
| CVE-2025-27391 | redhat_vex | org.apache.activemq/artemis-core-client: Apache ActiveMQ Artemis: Passwords leaking from broker properties in the debug log | known affected: 14 | 2026-06-28T11:35:01+00:00 | Vulnerability · Source |
| CVE-2025-70559 | redhat_vex | pdfminer.six: pdfminer.six insecure deserialization | known not affected: 1 | 2026-06-28T11:35:01+00:00 | Vulnerability · Source |
| CVE-2026-31602 | redhat_vex | kernel: ALSA: ctxfi: Limit PTP to a single page | known not affected: 274 | 2026-06-28T11:35:01+00:00 | Vulnerability · Source |
| CVE-2009-1098 | redhat_vex | OpenJDK GIF processing buffer overflow vulnerability (6804998) | fixed: 434 | 2026-06-28T11:34:58+00:00 | Vulnerability · Source |
| CVE-2022-28615 | redhat_vex | httpd: Out-of-bounds read in ap_strcmp_match() | fixed: 224 known affected: 17 known not affected: 105 | 2026-06-28T11:34:58+00:00 | Vulnerability · Source |
| CVE-2024-38473 | redhat_vex | httpd: Encoding problem in mod_proxy | fixed: 293 known affected: 9 known not affected: 18 | 2026-06-28T11:34:58+00:00 | Vulnerability · Source |
| CVE-2026-31608 | redhat_vex | kernel: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() | known not affected: 274 | 2026-06-28T11:34:58+00:00 | Vulnerability · Source |
| CVE-2019-2812 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019) | fixed: 291 known not affected: 112 | 2026-06-28T11:34:56+00:00 | Vulnerability · Source |