VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294140 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-23290 | redhat_vex | kernel: net: usb: pegasus: validate USB endpoints | known affected: 274 | 2026-06-28T11:29:46+00:00 | Vulnerability · Source |
| CVE-2016-5189 | redhat_vex | chromium-browser: url spoofing | fixed: 12 | 2026-06-28T11:29:41+00:00 | Vulnerability · Source |
| CVE-2016-5190 | redhat_vex | chromium-browser: use after free in internals | fixed: 12 | 2026-06-28T11:29:39+00:00 | Vulnerability · Source |
| CVE-2026-43277 | redhat_vex | kernel: APEI/GHES: ensure that won't go past CPER allocated record | known affected: 274 | 2026-06-28T11:29:38+00:00 | Vulnerability · Source |
| CVE-2026-33206 | redhat_vex | calibre: path traversal allows reading arbitrary files when converting a text-based file | known not affected: 1 | 2026-06-28T11:29:37+00:00 | Vulnerability · Source |
| CVE-2026-23294 | redhat_vex | kernel: bpf: Fix race in devmap on PREEMPT_RT | known not affected: 274 | 2026-06-28T11:29:37+00:00 | Vulnerability · Source |
| CVE-2019-11811 | redhat_vex | kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c | fixed: 599 known not affected: 16 | 2026-06-28T11:29:35+00:00 | Vulnerability · Source |
| CVE-2014-6532 | redhat_vex | JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment) | fixed: 530 | 2026-06-28T11:29:35+00:00 | Vulnerability · Source |
| CVE-2016-5183 | redhat_vex | chromium-browser: use after free in pdfium | fixed: 12 | 2026-06-28T11:29:35+00:00 | Vulnerability · Source |
| CVE-2016-5128 | redhat_vex | chromium-browser: same-origin bypass in v8 | fixed: 12 | 2026-06-28T11:29:33+00:00 | Vulnerability · Source |
| CVE-2026-31748 | redhat_vex | kernel: comedi: me_daq: Fix potential overrun of firmware buffer | known not affected: 274 | 2026-06-28T11:29:32+00:00 | Vulnerability · Source |
| CVE-2016-5149 | redhat_vex | chromium-browser: script injection in extensions | fixed: 12 | 2026-06-28T11:29:31+00:00 | Vulnerability · Source |
| CVE-2026-23344 | redhat_vex | kernel: crypto: ccp - Fix use-after-free on error path | known not affected: 274 | 2026-06-28T11:29:30+00:00 | Vulnerability · Source |
| CVE-2020-25643 | redhat_vex | kernel: improper input validation in ppp_cp_parse_cr function leads to memory corruption and read overflow | fixed: 335 known affected: 42 known not affected: 1 | 2026-06-28T11:29:30+00:00 | Vulnerability · Source |
| CVE-2016-5135 | redhat_vex | chromium-browser: content-security-policy bypass | fixed: 12 | 2026-06-28T11:29:29+00:00 | Vulnerability · Source |
| CVE-2026-23928 | redhat_vex | Zabbix: Zabbix: Cross-Site Scripting (XSS) vulnerability allows unauthorized actions via injected JavaScript in widgets. | known not affected: 1 | 2026-06-28T11:29:27+00:00 | Vulnerability · Source |
| CVE-2026-42851 | redhat_vex | kitty: Kitty: Arbitrary code execution via crafted terminal output | known not affected: 1 | 2026-06-28T11:29:26+00:00 | Vulnerability · Source |
| CVE-2017-15422 | redhat_vex | chromium-browser: integer overflow in icu | fixed: 12 known affected: 10 known not affected: 5 | 2026-06-28T11:29:26+00:00 | Vulnerability · Source |
| CVE-2026-46235 | redhat_vex | kernel: media: saa7164: add ioremap return checks and cleanups | known affected: 76 known not affected: 198 | 2026-06-28T11:29:26+00:00 | Vulnerability · Source |
| CVE-2024-4467 | redhat_vex | qemu-kvm: 'qemu-img info' leads to host file read/write | fixed: 5773 known affected: 18 known not affected: 41 | 2026-06-28T11:29:25+00:00 | Vulnerability · Source |
| CVE-2026-4277 | redhat_vex | Django: Django: Privilege Abuse via Forged POST Data in GenericInlineModelAdmin | known affected: 11 | 2026-06-28T11:29:24+00:00 | Vulnerability · Source |
| CVE-2026-42599 | redhat_vex | svelte: Svelte: Cross-Site Scripting via untrusted data in spread attributes | known affected: 2 | 2026-06-28T11:29:21+00:00 | Vulnerability · Source |
| CVE-2026-23463 | redhat_vex | kernel: soc: fsl: qbman: fix race condition in qman_destroy_fq | known affected: 76 known not affected: 198 | 2026-06-28T11:29:20+00:00 | Vulnerability · Source |
| CVE-2016-5127 | redhat_vex | chromium-browser: use-after-free in blink | fixed: 12 | 2026-06-28T11:29:19+00:00 | Vulnerability · Source |
| CVE-2016-4277 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-29 | fixed: 5 | 2026-06-28T11:29:17+00:00 | Vulnerability · Source |
| CVE-2016-3627 | redhat_vex | libxml2: stack exhaustion while parsing xml files in recovery mode | fixed: 145 known affected: 3 | 2026-06-28T11:29:16+00:00 | Vulnerability · Source |
| CVE-2016-5096 | redhat_vex | php: Integer underflow causing arbitrary null write in fread/gzread | fixed: 251 known affected: 110 | 2026-06-28T11:29:16+00:00 | Vulnerability · Source |
| CVE-2016-3587 | redhat_vex | OpenJDK: insufficient protection of MethodHandle.invokeBasic() (Hotspot, 8154475) | fixed: 252 known not affected: 28 | 2026-06-28T11:29:15+00:00 | Vulnerability · Source |
| CVE-2026-23298 | redhat_vex | kernel: can: ucan: Fix infinite loop from zero-length messages | known affected: 48 known not affected: 226 | 2026-06-28T11:29:15+00:00 | Vulnerability · Source |
| CVE-2016-3552 | redhat_vex | JDK: unspecified vulnerability fixed in 8u101 (Install) | fixed: 64 | 2026-06-28T11:29:14+00:00 | Vulnerability · Source |
| CVE-2016-3511 | redhat_vex | JDK: unspecified vulnerability fixed in 7u111 and 8u101 (Deployment) | fixed: 415 | 2026-06-28T11:29:13+00:00 | Vulnerability · Source |
| CVE-2016-3521 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Types (CPU July 2016) | fixed: 502 known affected: 9 under investigation: 9 | 2026-06-28T11:29:13+00:00 | Vulnerability · Source |
| CVE-2016-3550 | redhat_vex | OpenJDK: integer overflows in bytecode streams (Hotspot, 8152479) | fixed: 713 | 2026-06-28T11:29:12+00:00 | Vulnerability · Source |
| CVE-2006-3311 | redhat_vex | security flaw | fixed: 2 | 2026-06-28T11:29:11+00:00 | Vulnerability · Source |
| CVE-2016-4223 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:29:10+00:00 | Vulnerability · Source |
| CVE-2016-3459 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016) | fixed: 168 known not affected: 52 | 2026-06-28T11:29:09+00:00 | Vulnerability · Source |
| CVE-2018-6155 | redhat_vex | chromium-browser: Use after free in WebRTC | fixed: 12 | 2026-06-28T11:29:09+00:00 | Vulnerability · Source |
| CVE-2016-3425 | redhat_vex | OpenJDK: incorrect handling of surrogate pairs in XML attribute values (JAXP, 8143167) | fixed: 713 | 2026-06-28T11:29:08+00:00 | Vulnerability · Source |
| CVE-2016-4219 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:29:08+00:00 | Vulnerability · Source |
| CVE-2026-43417 | redhat_vex | kernel: sched/mmcid: Handle vfork()/CLONE_VM correctly | known not affected: 274 | 2026-06-28T11:29:08+00:00 | Vulnerability · Source |
| CVE-2016-3422 | redhat_vex | JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D) | fixed: 666 | 2026-06-28T11:29:06+00:00 | Vulnerability · Source |
| CVE-2018-6164 | redhat_vex | chromium-browser: Same origin policy bypass in ServiceWorker | fixed: 12 | 2026-06-28T11:29:05+00:00 | Vulnerability · Source |
| CVE-2016-3142 | redhat_vex | php: Out-of-bounds read in phar_parse_zipfile() | fixed: 251 known affected: 109 known not affected: 1 | 2026-06-28T11:29:04+00:00 | Vulnerability · Source |
| CVE-2026-45104 | redhat_vex | mapserver: MapServer: Denial of Service via malformed SLD in WMS SLD_BODY parameter | known not affected: 1 | 2026-06-28T11:29:03+00:00 | Vulnerability · Source |
| CVE-2016-4171 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:29:03+00:00 | Vulnerability · Source |
| CVE-2026-11193 | redhat_vex | chromium-browser: Insufficient policy enforcement in Password Manager | known not affected: 1 | 2026-06-28T11:29:01+00:00 | Vulnerability · Source |
| CVE-2016-4152 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:29:00+00:00 | Vulnerability · Source |
| CVE-2016-4150 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:29:00+00:00 | Vulnerability · Source |
| CVE-2019-10201 | redhat_vex | keycloak: SAML broker does not check existence of signature on document allowing any user impersonation | fixed: 3 known affected: 3 known not affected: 1 | 2026-06-28T11:28:58+00:00 | Vulnerability · Source |
| CVE-2019-10205 | redhat_vex | quay: Red Hat Quay stores robot account tokens in plain text | fixed: 1 | 2026-06-28T11:28:58+00:00 | Vulnerability · Source |