VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294140 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-5363 | redhat_vex | openstack-neutron: MAC source address spoofing vulnerability | fixed: 49 known affected: 15 known not affected: 12 | 2026-06-28T11:31:20+00:00 | Vulnerability · Source |
| CVE-2016-5325 | redhat_vex | nodejs: reason argument in ServerResponse#writeHead() not properly validated | fixed: 93 known affected: 5 known not affected: 1 | 2026-06-28T11:31:19+00:00 | Vulnerability · Source |
| CVE-2025-27148 | redhat_vex | gradle: Gradle vulnerable to local privilege escalation through system temporary directory | known not affected: 1 | 2026-06-28T11:31:19+00:00 | Vulnerability · Source |
| CVE-2016-5362 | redhat_vex | openstack-neutron: DHCP spoofing vulnerability | fixed: 49 known affected: 15 known not affected: 12 | 2026-06-28T11:31:18+00:00 | Vulnerability · Source |
| CVE-2020-14386 | redhat_vex | kernel: memory corruption in net/packet/af_packet.c leads to elevation of privilege | fixed: 413 known not affected: 45 | 2026-06-28T11:31:18+00:00 | Vulnerability · Source |
| CVE-2016-5009 | redhat_vex | crash: mon_command crashes ceph monitors on receiving empty prefix | fixed: 71 known not affected: 11 | 2026-06-28T11:31:17+00:00 | Vulnerability · Source |
| CVE-2025-5472 | redhat_vex | llama-index: Denial of Service in llama_index | known affected: 12 | 2026-06-28T11:31:15+00:00 | Vulnerability · Source |
| CVE-2005-2628 | redhat_vex | security flaw | fixed: 2 | 2026-06-28T11:31:14+00:00 | Vulnerability · Source |
| CVE-2026-22996 | redhat_vex | kernel: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv | known affected: 246 known not affected: 28 | 2026-06-28T11:31:14+00:00 | Vulnerability · Source |
| CVE-2023-2680 | redhat_vex | QEMU: hcd-ehci: DMA reentrancy issue (incomplete fix for CVE-2021-3750) | fixed: 114 known not affected: 58 | 2026-06-28T11:31:11+00:00 | Vulnerability · Source |
| CVE-2026-23320 | redhat_vex | kernel: usb: gadget: f_ncm: align net_device lifecycle with bind/unbind | known affected: 76 known not affected: 198 | 2026-06-28T11:31:07+00:00 | Vulnerability · Source |
| CVE-2019-12614 | redhat_vex | kernel: null pointer dereference in dlpar_parse_cc_property in arch/powerrc/platforms/pseries/dlpar.c causing denial of service | fixed: 319 known not affected: 54 | 2026-06-28T11:31:07+00:00 | Vulnerability · Source |
| CVE-2025-2588 | redhat_vex | augeas: Hercules Augeas fa.c re_case_expand null pointer dereference | known affected: 3 | 2026-06-28T11:31:06+00:00 | Vulnerability · Source |
| CVE-2026-43162 | redhat_vex | kernel: media: tegra-video: Fix memory leak in __tegra_channel_try_format() | known not affected: 274 | 2026-06-28T11:31:04+00:00 | Vulnerability · Source |
| CVE-2026-22748 | redhat_vex | Spring Security: Spring Security: Integrity impact due to improper JSON Web Token (JWT) validation | known affected: 18 | 2026-06-28T11:31:04+00:00 | Vulnerability · Source |
| CVE-2020-14389 | redhat_vex | keycloak: user can manage resources with just "view-profile" role using new Account Console | fixed: 14 known not affected: 5 | 2026-06-28T11:31:02+00:00 | Vulnerability · Source |
| CVE-2016-5224 | redhat_vex | chromium-browser: same-origin bypass in svg | fixed: 12 | 2026-06-28T11:31:02+00:00 | Vulnerability · Source |
| CVE-2016-5226 | redhat_vex | chromium-browser: limited xss in blink | fixed: 12 | 2026-06-28T11:31:02+00:00 | Vulnerability · Source |
| CVE-2016-5223 | redhat_vex | chromium-browser: integer overflow in pdfium | fixed: 12 | 2026-06-28T11:31:01+00:00 | Vulnerability · Source |
| CVE-2016-5221 | redhat_vex | chromium-browser: integer overflow in angle | fixed: 12 | 2026-06-28T11:30:59+00:00 | Vulnerability · Source |
| CVE-2016-5218 | redhat_vex | chromium-browser: address spoofing in omnibox | fixed: 12 | 2026-06-28T11:30:58+00:00 | Vulnerability · Source |
| CVE-2016-5211 | redhat_vex | chromium-browser: use after free in pdfium | fixed: 12 | 2026-06-28T11:30:56+00:00 | Vulnerability · Source |
| CVE-2020-14888 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020) | fixed: 155 known not affected: 92 | 2026-06-28T11:30:55+00:00 | Vulnerability · Source |
| CVE-2026-2242 | redhat_vex | janet-lang: janet-lang: Denial of Service via out-of-bounds read | known not affected: 1 | 2026-06-28T11:30:54+00:00 | Vulnerability · Source |
| CVE-2016-5205 | redhat_vex | chromium-browser: universal xss in blink | fixed: 12 | 2026-06-28T11:30:54+00:00 | Vulnerability · Source |
| CVE-2022-0002 | redhat_vex | hw: cpu: intel: Intra-Mode BTI | fixed: 150 known affected: 42 known not affected: 108 | 2026-06-28T11:30:54+00:00 | Vulnerability · Source |
| CVE-2024-42245 | redhat_vex | kernel: Revert "sched/fair: Make sure to try to detach at least one movable task" | fixed: 280 known affected: 60 known not affected: 60 | 2026-06-28T11:30:53+00:00 | Vulnerability · Source |
| CVE-2016-5186 | redhat_vex | chromium-browser: out of bounds read in devtools | fixed: 12 | 2026-06-28T11:30:51+00:00 | Vulnerability · Source |
| CVE-2016-5174 | redhat_vex | chromium-browser: popup not correctly suppressed | fixed: 12 | 2026-06-28T11:30:49+00:00 | Vulnerability · Source |
| CVE-2026-22045 | redhat_vex | traefik: Traefik: Denial of Service via ACME TLS-ALPN fast path resource exhaustion | fixed: 4 known not affected: 57 | 2026-06-28T11:30:49+00:00 | Vulnerability · Source |
| CVE-2026-44597 | redhat_vex | Tor: Tor: Denial of Service due to out-of-bounds read | known not affected: 1 | 2026-06-28T11:30:48+00:00 | Vulnerability · Source |
| CVE-2016-5172 | redhat_vex | chromium-browser: arbitrary memory read in v8 | fixed: 12 | 2026-06-28T11:30:48+00:00 | Vulnerability · Source |
| CVE-2020-29368 | redhat_vex | kernel: the copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check | fixed: 450 known not affected: 148 | 2026-06-28T11:30:47+00:00 | Vulnerability · Source |
| CVE-2026-22009 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T11:30:46+00:00 | Vulnerability · Source |
| CVE-2026-21883 | redhat_vex | Bokeh: Bokeh: Information disclosure and unauthorized actions via flawed WebSocket origin validation | known affected: 7 | 2026-06-28T11:30:44+00:00 | Vulnerability · Source |
| CVE-2026-23285 | redhat_vex | kernel: drbd: fix null-pointer dereference on local read error | known not affected: 274 | 2026-06-28T11:30:44+00:00 | Vulnerability · Source |
| CVE-2016-6480 | redhat_vex | kernel: scsi: aacraid: double fetch in ioctl_send_fib() | fixed: 371 known affected: 13 | 2026-06-28T11:30:43+00:00 | Vulnerability · Source |
| CVE-2025-65109 | redhat_vex | Minder: Minder does not sandbox http.send in Rego programs | known not affected: 1 | 2026-06-28T11:30:43+00:00 | Vulnerability · Source |
| CVE-2025-61024 | redhat_vex | virtuoso-opensource: virtuoso-opensource: Denial of Service via crafted SQL statements in sqlo_try_in_loop | known affected: 3 | 2026-06-28T11:30:43+00:00 | Vulnerability · Source |
| CVE-2026-21444 | redhat_vex | limtpms: libtpms: Remote data confidentiality compromise via incorrect Initialization Vector (IV) handling | known not affected: 7 | 2026-06-28T11:30:42+00:00 | Vulnerability · Source |
| CVE-2025-61025 | redhat_vex | virtuoso-opensource: virtuoso-opensource: Denial of Service via crafted SQL statements | known not affected: 3 | 2026-06-28T11:30:42+00:00 | Vulnerability · Source |
| CVE-2025-61018 | redhat_vex | virtuoso-opensource: Openlink Virtuoso-opensource: Denial of Service via crafted SQL statements in sqlo_place_dt_set | known not affected: 3 | 2026-06-28T11:30:41+00:00 | Vulnerability · Source |
| CVE-2016-5163 | redhat_vex | chromium-browser: address bar spoofing | fixed: 12 | 2026-06-28T11:30:40+00:00 | Vulnerability · Source |
| CVE-2017-16914 | redhat_vex | kernel: NULL pointer dereference in usb/usbip/stub_tx.c:stub_send_ret_submit() can lead to denial of service via crafted USB over IP packet | known not affected: 88 | 2026-06-28T11:30:39+00:00 | Vulnerability · Source |
| CVE-2026-31477 | redhat_vex | kernel: ksmbd: fix memory leaks and NULL deref in smb2_lock() | known not affected: 274 | 2026-06-28T11:30:39+00:00 | Vulnerability · Source |
| CVE-2026-23390 | redhat_vex | kernel: tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow | known not affected: 274 | 2026-06-28T11:30:38+00:00 | Vulnerability · Source |
| CVE-2025-6270 | redhat_vex | hdf5: HDF5 heap-based overflow | known affected: 1 | 2026-06-28T11:30:37+00:00 | Vulnerability · Source |
| CVE-2026-33262 | redhat_vex | pdns-recursor: insufficient validation of cookie reply | known not affected: 1 | 2026-06-28T11:30:36+00:00 | Vulnerability · Source |
| CVE-2026-45958 | redhat_vex | kernel: drm/exynos: vidi: fix to avoid directly dereferencing user pointer | known not affected: 274 | 2026-06-28T11:30:36+00:00 | Vulnerability · Source |
| CVE-2026-43283 | redhat_vex | kernel: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle | known not affected: 274 | 2026-06-28T11:30:34+00:00 | Vulnerability · Source |