VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294137 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-5856 | redhat_vex | kernel: Use-after-free in sound/soc/qcom/qdsp6/q6asm.c allows for kernel panic | known not affected: 104 | 2026-06-28T11:34:25+00:00 | Vulnerability · Source |
| CVE-2019-15214 | redhat_vex | kernel: use-after-free in sound/core/init.c and sound/core/info.c | fixed: 294 known affected: 70 | 2026-06-28T11:34:23+00:00 | Vulnerability · Source |
| CVE-2017-10384 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Oct 2017) | fixed: 462 known affected: 17 known not affected: 21 under investigation: 9 | 2026-06-28T11:34:23+00:00 | Vulnerability · Source |
| CVE-2007-0071 | redhat_vex | Flash Player input validation error | fixed: 10 | 2026-06-28T11:34:21+00:00 | Vulnerability · Source |
| CVE-2017-10135 | redhat_vex | OpenJDK: PKCS#8 implementation timing attack (JCE, 8176760) | fixed: 586 | 2026-06-28T11:34:20+00:00 | Vulnerability · Source |
| CVE-2017-10274 | redhat_vex | OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026) | fixed: 620 | 2026-06-28T11:34:20+00:00 | Vulnerability · Source |
| CVE-2019-15213 | redhat_vex | kernel: use-after-free caused by malicious USB device in drivers/media/usb/dvb-usb/dvb-usb-init.c | known affected: 89 known not affected: 15 | 2026-06-28T11:34:18+00:00 | Vulnerability · Source |
| CVE-2016-9566 | redhat_vex | nagios: Privilege escalation issue | fixed: 34 known affected: 1 known not affected: 3 | 2026-06-28T11:34:18+00:00 | Vulnerability · Source |
| CVE-2020-15180 | redhat_vex | mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep | fixed: 704 known affected: 21 known not affected: 13 | 2026-06-28T11:34:15+00:00 | Vulnerability · Source |
| CVE-2020-14385 | redhat_vex | kernel: metadata validator in XFS may cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt | fixed: 618 known not affected: 32 | 2026-06-28T11:34:14+00:00 | Vulnerability · Source |
| CVE-2008-5349 | redhat_vex | OpenJDK RSA public key length denial-of-service (6497740) | fixed: 472 | 2026-06-28T11:34:11+00:00 | Vulnerability · Source |
| CVE-2018-5873 | redhat_vex | kernel: use-after-free in __ns_get_path() | known not affected: 88 | 2026-06-28T11:34:11+00:00 | Vulnerability · Source |
| CVE-2016-4161 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T11:34:09+00:00 | Vulnerability · Source |
| CVE-2019-15212 | redhat_vex | kernel: double-free caused by malicious USB device in drivers/usb/misc/rio500.c | known affected: 15 known not affected: 78 | 2026-06-28T11:34:07+00:00 | Vulnerability · Source |
| CVE-2008-3113 | redhat_vex | Java Web Start arbitrary file creation/deletion file with user permissions (6704077) | fixed: 388 | 2026-06-28T11:34:06+00:00 | Vulnerability · Source |
| CVE-2019-15031 | redhat_vex | kernel: powerpc: local user can read vector registers of other users' processes via an interrupt | fixed: 145 known affected: 16 known not affected: 55 | 2026-06-28T11:34:04+00:00 | Vulnerability · Source |
| CVE-2017-5031 | redhat_vex | chromium-browser: use after free in angle | fixed: 12 | 2026-06-28T11:34:03+00:00 | Vulnerability · Source |
| CVE-2016-7131 | redhat_vex | php: wddx_deserialize null dereference with invalid xml | fixed: 251 known affected: 110 | 2026-06-28T11:34:01+00:00 | Vulnerability · Source |
| CVE-2022-3239 | redhat_vex | kernel: media: em28xx: initialize refcount before kref_get | fixed: 475 known not affected: 42 | 2026-06-28T11:34:01+00:00 | Vulnerability · Source |
| CVE-2016-9084 | redhat_vex | kernel: Integer overflow when using kzalloc in vfio driver | fixed: 191 known not affected: 27 | 2026-06-28T11:34:01+00:00 | Vulnerability · Source |
| CVE-2019-18807 | redhat_vex | kernel: memory leak in sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c | known not affected: 93 | 2026-06-28T11:33:55+00:00 | Vulnerability · Source |
| CVE-2008-0726 | redhat_vex | Acroread memory corruption | fixed: 20 | 2026-06-28T11:33:51+00:00 | Vulnerability · Source |
| CVE-2016-7020 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:33:51+00:00 | Vulnerability · Source |
| CVE-2019-17631 | redhat_vex | JDK: Unrestricted access to diagnostic operations | fixed: 114 known not affected: 13 | 2026-06-28T11:33:51+00:00 | Vulnerability · Source |
| CVE-2007-4559 | redhat_vex | python: tarfile module directory traversal | fixed: 825 known affected: 31 known not affected: 60 | 2026-06-28T11:33:50+00:00 | Vulnerability · Source |
| CVE-2016-6990 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-32 | fixed: 5 | 2026-06-28T11:33:50+00:00 | Vulnerability · Source |
| CVE-2026-23321 | redhat_vex | kernel: mptcp: pm: in-kernel: always mark signal+subflow endp as used | known affected: 76 known not affected: 198 | 2026-06-28T11:33:49+00:00 | Vulnerability · Source |
| CVE-2016-4123 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:33:49+00:00 | Vulnerability · Source |
| CVE-2024-40725 | redhat_vex | httpd: source code disclosure with handlers configured via AddType | known not affected: 54 | 2026-06-28T11:33:49+00:00 | Vulnerability · Source |
| CVE-2025-3875 | redhat_vex | thunderbird: Sender Spoofing via Malformed From Header in Thunderbird | fixed: 118 known affected: 5 | 2026-06-28T11:33:47+00:00 | Vulnerability · Source |
| CVE-2026-37461 | redhat_vex | github.com/osrg/gobgp: gobgp: Denial of Service via crafted BGP UPDATE message | known not affected: 1 | 2026-06-28T11:33:46+00:00 | Vulnerability · Source |
| CVE-2021-30641 | redhat_vex | httpd: Unexpected URL matching with 'MergeSlashes OFF' | fixed: 228 known affected: 21 known not affected: 18 | 2026-06-28T11:33:46+00:00 | Vulnerability · Source |
| CVE-2020-14422 | redhat_vex | python: DoS via inefficiency in IPv{4,6}Interface classes | fixed: 707 known affected: 22 known not affected: 38 | 2026-06-28T11:33:43+00:00 | Vulnerability · Source |
| CVE-2016-8399 | redhat_vex | kernel: net: Out of bounds stack read in memcpy_fromiovec | fixed: 475 known not affected: 13 | 2026-06-28T11:33:43+00:00 | Vulnerability · Source |
| CVE-2024-39884 | redhat_vex | httpd: source code disclosure with handlers configured via AddType | known not affected: 54 | 2026-06-28T11:33:43+00:00 | Vulnerability · Source |
| CVE-2024-39476 | redhat_vex | kernel: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING | fixed: 549 known affected: 64 | 2026-06-28T11:33:39+00:00 | Vulnerability · Source |
| CVE-2025-32901 | redhat_vex | kde-connect: KDE Connect: Application crash via malicious device IDs | known not affected: 1 | 2026-06-28T11:33:39+00:00 | Vulnerability · Source |
| CVE-2013-5898 | redhat_vex | JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment) | fixed: 420 known not affected: 7 | 2026-06-28T11:33:39+00:00 | Vulnerability · Source |
| CVE-2026-10010 | redhat_vex | chromium-browser: Inappropriate implementation in Input | known not affected: 1 | 2026-06-28T11:33:39+00:00 | Vulnerability · Source |
| CVE-2019-15920 | redhat_vex | kernel: use-after-free information leak in SMB2_read | fixed: 120 known affected: 16 known not affected: 56 | 2026-06-28T11:33:39+00:00 | Vulnerability · Source |
| CVE-2007-0046 | redhat_vex | security flaw | fixed: 56 | 2026-06-28T11:33:38+00:00 | Vulnerability · Source |
| CVE-2026-23085 | redhat_vex | kernel: irqchip/gic-v3-its: Avoid truncating memory addresses | known affected: 232 known not affected: 42 | 2026-06-28T11:33:33+00:00 | Vulnerability · Source |
| CVE-2019-16777 | redhat_vex | npm: Global node_modules Binary Overwrite | fixed: 284 known affected: 1 | 2026-06-28T11:33:30+00:00 | Vulnerability · Source |
| CVE-2026-43080 | redhat_vex | kernel: l2tp: Drop large packets with UDP encap | known affected: 260 known not affected: 14 | 2026-06-28T11:33:30+00:00 | Vulnerability · Source |
| CVE-2016-6296 | redhat_vex | php: Heap buffer overflow vulnerability in simplestring_addn in simplestring.c | fixed: 251 known affected: 110 | 2026-06-28T11:33:29+00:00 | Vulnerability · Source |
| CVE-2019-14864 | redhat_vex | Ansible: Splunk and Sumologic callback plugins leak sensitive data in logs | fixed: 18 known affected: 13 known not affected: 4 | 2026-06-28T11:33:28+00:00 | Vulnerability · Source |
| CVE-2025-71266 | redhat_vex | kernel: fs: ntfs3: check return value of indx_find to avoid infinite loop | known not affected: 274 | 2026-06-28T11:33:26+00:00 | Vulnerability · Source |
| CVE-2025-71265 | redhat_vex | kernel: fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata | known not affected: 274 | 2026-06-28T11:33:26+00:00 | Vulnerability · Source |
| CVE-2026-43081 | redhat_vex | kernel: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ | known affected: 76 known not affected: 198 | 2026-06-28T11:33:25+00:00 | Vulnerability · Source |
| CVE-2016-6136 | redhat_vex | kernel: Race condition vulnerability in execve argv arguments | fixed: 371 known affected: 13 | 2026-06-28T11:33:24+00:00 | Vulnerability · Source |