VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294144 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-41527 | redhat_vex | Kleopatra: KDE Kleopatra: Privilege escalation via KUniqueService mechanism error | known not affected: 1 | 2026-06-28T11:25:30+00:00 | Vulnerability · Source |
| CVE-2008-2549 | redhat_vex | acroread: crash and possible code execution | fixed: 20 | 2026-06-28T11:25:29+00:00 | Vulnerability · Source |
| CVE-2026-12799 | redhat_vex | litellm: BerriAI litellm: Information Disclosure via improper authorization in ui_view_users function | known affected: 6 | 2026-06-28T11:25:29+00:00 | Vulnerability · Source |
| CVE-2026-44353 | redhat_vex | streamlink: Streamlink: Information disclosure via improper URI scheme validation in HLS and DASH parsers | known not affected: 1 | 2026-06-28T11:25:29+00:00 | Vulnerability · Source |
| CVE-2026-12774 | redhat_vex | litellm: BerriAI litellm: Server-Side Request Forgery in MCP Server Connection Testing | known affected: 6 | 2026-06-28T11:25:29+00:00 | Vulnerability · Source |
| CVE-2015-8877 | redhat_vex | gd: gdImageScaleTwoPass function in gd_interpolation.c uses inconsistent allocate and free approaches | fixed: 251 known affected: 28 known not affected: 90 | 2026-06-28T11:25:27+00:00 | Vulnerability · Source |
| CVE-2015-8642 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-01 | fixed: 5 | 2026-06-28T11:25:27+00:00 | Vulnerability · Source |
| CVE-2019-0217 | redhat_vex | httpd: mod_auth_digest: access control bypass due to race condition | fixed: 641 known affected: 10 known not affected: 2 | 2026-06-28T11:25:24+00:00 | Vulnerability · Source |
| CVE-2015-4913 | redhat_vex | mysql: unspecified vulnerability related to Server:DML (CPU October 2015) | fixed: 406 known affected: 16 under investigation: 9 | 2026-06-28T11:25:23+00:00 | Vulnerability · Source |
| CVE-2015-4903 | redhat_vex | OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339) | fixed: 1136 | 2026-06-28T11:25:23+00:00 | Vulnerability · Source |
| CVE-2015-4895 | redhat_vex | mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015) | fixed: 158 known not affected: 35 | 2026-06-28T11:25:22+00:00 | Vulnerability · Source |
| CVE-2015-4800 | redhat_vex | mysql: unspecified vulnerability related to Server:Optimizer (CPU October 2015) | fixed: 80 known not affected: 45 | 2026-06-28T11:25:20+00:00 | Vulnerability · Source |
| CVE-2015-4816 | redhat_vex | mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015) | fixed: 376 known affected: 15 known not affected: 9 under investigation: 9 | 2026-06-28T11:25:19+00:00 | Vulnerability · Source |
| CVE-2015-4803 | redhat_vex | OpenJDK: inefficient use of hash tables and lists during XML parsing (JAXP, 8068842) | fixed: 1035 known affected: 9 | 2026-06-28T11:25:19+00:00 | Vulnerability · Source |
| CVE-2015-4772 | redhat_vex | mysql: unspecified vulnerability related to Server:Partition (CPU July 2015) | fixed: 147 known not affected: 41 | 2026-06-28T11:25:18+00:00 | Vulnerability · Source |
| CVE-2010-4463 | redhat_vex | JDK unspecified vulnerability in Deployment component | fixed: 318 | 2026-06-28T11:25:18+00:00 | Vulnerability · Source |
| CVE-2026-44603 | redhat_vex | Tor: Tor: Denial of Service via malformed BEGIN cell | known not affected: 1 | 2026-06-28T11:25:18+00:00 | Vulnerability · Source |
| CVE-2021-23841 | redhat_vex | openssl: NULL pointer dereference in X509_issuer_and_serial_hash() | fixed: 294 known affected: 16 known not affected: 5 | 2026-06-28T11:25:18+00:00 | Vulnerability · Source |
| CVE-2025-69226 | redhat_vex | aiohttp: aiohttp: Information disclosure of path components via static file path normalization | known affected: 114 | 2026-06-28T11:25:17+00:00 | Vulnerability · Source |
| CVE-2019-19037 | redhat_vex | kernel: null-pointer dereference in ext4_empty_dir in fs/ext4/namei.c | known affected: 16 known not affected: 77 | 2026-06-28T11:25:16+00:00 | Vulnerability · Source |
| CVE-2025-64324 | redhat_vex | kubevirt.io/kubevirt: KubeVirt: Arbitrary file read/write and privilege escalation via hostDisk feature | known affected: 1 | 2026-06-28T11:25:16+00:00 | Vulnerability · Source |
| CVE-2026-43905 | redhat_vex | OpenImageIO: OpenImageIO: Integer overflow leads to heap overflow and potential arbitrary code execution | known not affected: 1 | 2026-06-28T11:25:15+00:00 | Vulnerability · Source |
| CVE-2015-8437 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:25:14+00:00 | Vulnerability · Source |
| CVE-2015-8424 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:25:13+00:00 | Vulnerability · Source |
| CVE-2018-16276 | redhat_vex | kernel: incorrect bounds checking in yurex_read in drivers/usb/misc/yurex.c | known not affected: 88 | 2026-06-28T11:25:10+00:00 | Vulnerability · Source |
| CVE-2025-59043 | redhat_vex | openbao: OpenBao vulnerable to denial of service via malicious JSON request processing | known not affected: 1 | 2026-06-28T11:25:10+00:00 | Vulnerability · Source |
| CVE-2015-4430 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-16 | fixed: 5 | 2026-06-28T11:25:09+00:00 | Vulnerability · Source |
| CVE-2015-4433 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-16 | fixed: 5 | 2026-06-28T11:25:08+00:00 | Vulnerability · Source |
| CVE-2026-42144 | redhat_vex | CImg: integer overflow in PNM size check bypasses memory guard (_load_pnm) | known not affected: 1 | 2026-06-28T11:25:08+00:00 | Vulnerability · Source |
| CVE-2026-23108 | redhat_vex | kernel: can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak | known affected: 260 known not affected: 14 | 2026-06-28T11:25:08+00:00 | Vulnerability · Source |
| CVE-2026-44348 | redhat_vex | podofo: PoDoFo: Denial of service due to double-free vulnerability | known not affected: 1 | 2026-06-28T11:25:08+00:00 | Vulnerability · Source |
| CVE-2025-31674 | redhat_vex | drupal: Drupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003 | known not affected: 1 | 2026-06-28T11:25:08+00:00 | Vulnerability · Source |
| CVE-2015-3132 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-16 | fixed: 5 | 2026-06-28T11:25:02+00:00 | Vulnerability · Source |
| CVE-2015-3123 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-16 | fixed: 5 | 2026-06-28T11:25:01+00:00 | Vulnerability · Source |
| CVE-2018-16077 | redhat_vex | chromium-browser: Content security policy bypass in Blink | fixed: 12 | 2026-06-28T11:25:01+00:00 | Vulnerability · Source |
| CVE-2026-12439 | redhat_vex | chromium-browser: chromium-browser: Use after free in Digital Credentials | known not affected: 1 | 2026-06-28T11:25:00+00:00 | Vulnerability · Source |
| CVE-2026-23766 | redhat_vex | istio: Istio: Firewall rule injection via annotation allows limited integrity impact | known affected: 105 | 2026-06-28T11:25:00+00:00 | Vulnerability · Source |
| CVE-2018-15746 | redhat_vex | QEMU: seccomp: blacklist is not applied to all threads | fixed: 86 known affected: 21 known not affected: 23 | 2026-06-28T11:25:00+00:00 | Vulnerability · Source |
| CVE-2015-4026 | redhat_vex | php: pcntl_exec() accepts paths with NUL character | fixed: 1046 known affected: 2 | 2026-06-28T11:24:59+00:00 | Vulnerability · Source |
| CVE-2017-1000364 | redhat_vex | kernel: heap/stack gap jumping via unbounded stack allocations | fixed: 796 known affected: 4 | 2026-06-28T11:24:57+00:00 | Vulnerability · Source |
| CVE-2015-4021 | redhat_vex | php: memory corruption in phar_parse_tarfile caused by empty entry file name | fixed: 1046 known affected: 1 known not affected: 1 | 2026-06-28T11:24:57+00:00 | Vulnerability · Source |
| CVE-2025-40923 | redhat_vex | plack-middleware-session: Plack-Middleware-Session insecure session ids | known not affected: 1 | 2026-06-28T11:24:56+00:00 | Vulnerability · Source |
| CVE-2015-3329 | redhat_vex | php: buffer overflow in phar_set_inode() | fixed: 1063 known affected: 27 known not affected: 1 | 2026-06-28T11:24:56+00:00 | Vulnerability · Source |
| CVE-2010-3656 | redhat_vex | acroread: denial of service flaws (APSB10-21) | fixed: 12 known affected: 2 | 2026-06-28T11:24:56+00:00 | Vulnerability · Source |
| CVE-2026-11308 | redhat_vex | chromium-browser: Inappropriate implementation in Extensions | known not affected: 1 | 2026-06-28T11:24:56+00:00 | Vulnerability · Source |
| CVE-2026-11054 | redhat_vex | chromium-browser: Use after free in WebRTC | known not affected: 1 | 2026-06-28T11:24:55+00:00 | Vulnerability · Source |
| CVE-2019-19005 | redhat_vex | autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact | fixed: 16 known affected: 5 | 2026-06-28T11:24:55+00:00 | Vulnerability · Source |
| CVE-2019-0155 | redhat_vex | hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write | fixed: 1069 known not affected: 17 | 2026-06-28T11:24:55+00:00 | Vulnerability · Source |
| CVE-2026-4456 | redhat_vex | chromium-browser: Use after free in Digital Credentials API | known not affected: 1 | 2026-06-28T11:24:55+00:00 | Vulnerability · Source |
| CVE-2026-4459 | redhat_vex | chromium-browser: Out of bounds read and write in WebAudio | known not affected: 1 | 2026-06-28T11:24:55+00:00 | Vulnerability · Source |