VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294140 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-18809 | redhat_vex | kernel: memory leak in af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c | fixed: 150 known affected: 1 known not affected: 44 | 2026-06-28T11:28:57+00:00 | Vulnerability · Source |
| CVE-2016-4144 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:28:56+00:00 | Vulnerability · Source |
| CVE-2019-18805 | redhat_vex | kernel: integer overflow in tcp_ack_update_rtt in net/ipv4/tcp_input.c | fixed: 175 known not affected: 55 | 2026-06-28T11:28:56+00:00 | Vulnerability · Source |
| CVE-2016-4142 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:28:55+00:00 | Vulnerability · Source |
| CVE-2018-6554 | redhat_vex | kernel: irda: Memory leak caused by repeated binds of irda socket | known not affected: 88 | 2026-06-28T11:28:54+00:00 | Vulnerability · Source |
| CVE-2016-3112 | redhat_vex | pulp: Agent certificate containing private key is stored in world-readable file | fixed: 639 | 2026-06-28T11:28:54+00:00 | Vulnerability · Source |
| CVE-2025-54119 | redhat_vex | php-adodb: ADOdb: SQL Injection via Meta Queries | known not affected: 1 | 2026-06-28T11:28:54+00:00 | Vulnerability · Source |
| CVE-2016-4135 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:28:53+00:00 | Vulnerability · Source |
| CVE-2016-3074 | redhat_vex | php: Signedness vulnerability causing heap overflow in libgd | fixed: 251 known affected: 117 | 2026-06-28T11:28:52+00:00 | Vulnerability · Source |
| CVE-2013-2417 | redhat_vex | OpenJDK: Network InetAddress serialization information disclosure (Networking, 8000724) | fixed: 543 | 2026-06-28T11:28:52+00:00 | Vulnerability · Source |
| CVE-2016-3070 | redhat_vex | kernel: Null pointer dereference in trace_writeback_dirty_page() | fixed: 191 known affected: 12 known not affected: 15 | 2026-06-28T11:28:52+00:00 | Vulnerability · Source |
| CVE-2018-6172 | redhat_vex | chromium-browser: URL spoof in Omnibox | fixed: 12 | 2026-06-28T11:28:51+00:00 | Vulnerability · Source |
| CVE-2016-2854 | redhat_vex | kernel: aufs module does not properly maintain POSIX ACL xattr data | known not affected: 93 | 2026-06-28T11:28:51+00:00 | Vulnerability · Source |
| CVE-2016-8666 | redhat_vex | kernel: Remotely triggerable recursion in GRE code leading to kernel crash | fixed: 350 known not affected: 15 | 2026-06-28T11:28:49+00:00 | Vulnerability · Source |
| CVE-2015-3214 | redhat_vex | qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function | fixed: 90 known affected: 1 known not affected: 59 | 2026-06-28T11:28:49+00:00 | Vulnerability · Source |
| CVE-2026-11149 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Extensions | known not affected: 1 | 2026-06-28T11:28:49+00:00 | Vulnerability · Source |
| CVE-2025-47815 | redhat_vex | pspp: PSPP: Heap Buffer Overflow | known not affected: 1 | 2026-06-28T11:28:49+00:00 | Vulnerability · Source |
| CVE-2025-33042 | redhat_vex | org.apache.avro/avro: Apache Avro Java SDK: Code injection on Java generated code | fixed: 2 known affected: 14 | 2026-06-28T11:28:49+00:00 | Vulnerability · Source |
| CVE-2016-4121 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T11:28:48+00:00 | Vulnerability · Source |
| CVE-2025-67735 | redhat_vex | netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection | fixed: 2 known affected: 76 | 2026-06-28T11:28:48+00:00 | Vulnerability · Source |
| CVE-2016-4108 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T11:28:46+00:00 | Vulnerability · Source |
| CVE-2019-18811 | redhat_vex | kernel: memory leak in sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c | fixed: 120 known affected: 16 known not affected: 45 | 2026-06-28T11:28:44+00:00 | Vulnerability · Source |
| CVE-2026-11250 | redhat_vex | chromium-browser: Inappropriate implementation in DevTools | known not affected: 1 | 2026-06-28T11:28:42+00:00 | Vulnerability · Source |
| CVE-2019-17666 | redhat_vex | kernel: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel lacks a certain upper-bound check, leading to a buffer overflow | fixed: 1046 known not affected: 1 | 2026-06-28T11:28:41+00:00 | Vulnerability · Source |
| CVE-2014-0461 | redhat_vex | OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794) | fixed: 749 known not affected: 15 | 2026-06-28T11:28:40+00:00 | Vulnerability · Source |
| CVE-2026-40250 | redhat_vex | OpenEXR: OpenEXR: Integer overflow leads to memory corruption and denial of service | known affected: 18 | 2026-06-28T11:28:40+00:00 | Vulnerability · Source |
| CVE-2026-23070 | redhat_vex | kernel: Octeontx2-af: Add proper checks for fwdata | known affected: 184 known not affected: 90 | 2026-06-28T11:28:39+00:00 | Vulnerability · Source |
| CVE-2026-11281 | redhat_vex | chromium-browser: Integer overflow in Chromoting | known not affected: 1 | 2026-06-28T11:28:39+00:00 | Vulnerability · Source |
| CVE-2026-23356 | redhat_vex | kernel: drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() | known not affected: 274 | 2026-06-28T11:28:37+00:00 | Vulnerability · Source |
| CVE-2026-54388 | redhat_vex | tinyproxy: HTTP Request Smuggling via duplicate Content-Length headers | known not affected: 1 | 2026-06-28T11:28:35+00:00 | Vulnerability · Source |
| CVE-2019-18660 | redhat_vex | kernel: powerpc: incomplete Spectre-RSB mitigation leads to information exposure | fixed: 782 known affected: 17 known not affected: 29 | 2026-06-28T11:28:35+00:00 | Vulnerability · Source |
| CVE-2026-39807 | redhat_vex | bandit: Bandit: Transport-state spoofing leads to information disclosure and security bypass | known not affected: 1 | 2026-06-28T11:28:34+00:00 | Vulnerability · Source |
| CVE-2019-11477 | redhat_vex | Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service | fixed: 987 known not affected: 1 | 2026-06-28T11:28:34+00:00 | Vulnerability · Source |
| CVE-2016-4232 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:28:34+00:00 | Vulnerability · Source |
| CVE-2019-18806 | redhat_vex | kernel: memory leak in ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c | known affected: 93 | 2026-06-28T11:28:34+00:00 | Vulnerability · Source |
| CVE-2011-0802 | redhat_vex | JDK: unspecified vulnerabilities fixed in 6u26 (Sound) | fixed: 637 | 2026-06-28T11:28:34+00:00 | Vulnerability · Source |
| CVE-2016-4230 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:28:33+00:00 | Vulnerability · Source |
| CVE-2026-10918 | redhat_vex | chromium-browser: Use after free in Viz | known not affected: 1 | 2026-06-28T11:28:32+00:00 | Vulnerability · Source |
| CVE-2025-59147 | redhat_vex | suricata-ids: Suricata is Vulnerable to Detection Bypass via Crafted Multiple SYN Packets | known not affected: 1 | 2026-06-28T11:28:31+00:00 | Vulnerability · Source |
| CVE-2025-68786 | redhat_vex | kernel: ksmbd: skip lock-range check on equal size to avoid size==0 underflow | known not affected: 274 | 2026-06-28T11:28:30+00:00 | Vulnerability · Source |
| CVE-2025-65404 | redhat_vex | live555: buffer overflow in MP3 side-info parsing | known not affected: 1 | 2026-06-28T11:28:30+00:00 | Vulnerability · Source |
| CVE-2016-2513 | redhat_vex | python-django: User enumeration through timing difference on password hasher work factor upgrade | fixed: 19 known affected: 3 known not affected: 8 | 2026-06-28T11:28:30+00:00 | Vulnerability · Source |
| CVE-2026-20691 | redhat_vex | webkitgtk: A maliciously crafted webpage may be able to fingerprint the user | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-28T11:28:27+00:00 | Vulnerability · Source |
| CVE-2016-4131 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:28:27+00:00 | Vulnerability · Source |
| CVE-2025-65405 | redhat_vex | live555: use-after-free when creating a Matroska demuxed track (SETUP) | known not affected: 1 | 2026-06-28T11:28:25+00:00 | Vulnerability · Source |
| CVE-2026-11235 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Compositing | known not affected: 1 | 2026-06-28T11:28:22+00:00 | Vulnerability · Source |
| CVE-2016-2384 | redhat_vex | kernel: double-free in usb-audio triggered by invalid USB descriptor | fixed: 371 known affected: 12 known not affected: 1 | 2026-06-28T11:28:22+00:00 | Vulnerability · Source |
| CVE-2026-23233 | redhat_vex | kernel: f2fs: fix to avoid mapping wrong physical block for swapfile | known not affected: 274 | 2026-06-28T11:28:21+00:00 | Vulnerability · Source |
| CVE-2015-8845 | redhat_vex | kernel: incorrect restoration of machine specific registers from userspace | fixed: 191 known affected: 1 known not affected: 16 | 2026-06-28T11:28:20+00:00 | Vulnerability · Source |
| CVE-2016-4073 | redhat_vex | php: mb_strcut() Negative size parameter in memcpy | fixed: 251 known affected: 110 | 2026-06-28T11:28:18+00:00 | Vulnerability · Source |