VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294144 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-0308 | redhat_vex | flash-plugin: Multiple code-execution flaws (APSB15-01) | fixed: 5 | 2026-06-28T11:24:25+00:00 | Vulnerability · Source |
| CVE-2015-0328 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T11:24:25+00:00 | Vulnerability · Source |
| CVE-2018-7480 | redhat_vex | kernel: Double free in block/blk-cgroup.c:blkcg_init_queue() can allow a local user to cause a denial of service | known not affected: 88 | 2026-06-28T11:24:23+00:00 | Vulnerability · Source |
| CVE-2018-8777 | redhat_vex | ruby: DoS by large request in WEBrick | fixed: 885 known affected: 32 known not affected: 47 | 2026-06-28T11:24:23+00:00 | Vulnerability · Source |
| CVE-2018-16064 | redhat_vex | chromium-browser: Request privilege escalation in Extensions | fixed: 12 | 2026-06-28T11:24:22+00:00 | Vulnerability · Source |
| CVE-2017-13220 | redhat_vex | kernel: Possible out-of-bound access in Bluetooth subsystem | known not affected: 88 | 2026-06-28T11:24:21+00:00 | Vulnerability · Source |
| CVE-2018-7584 | redhat_vex | php: Stack-based buffer under-read in php_stream_url_wrap_http_ex() in http_fopen_wrapper.c when parsing HTTP response | fixed: 677 known affected: 92 known not affected: 47 | 2026-06-28T11:24:21+00:00 | Vulnerability · Source |
| CVE-2018-2812 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018) | fixed: 186 known not affected: 105 | 2026-06-28T11:24:20+00:00 | Vulnerability · Source |
| CVE-2018-7754 | redhat_vex | kernel: Information Exposure in aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c | known affected: 1 known not affected: 87 | 2026-06-28T11:24:20+00:00 | Vulnerability · Source |
| CVE-2018-6927 | redhat_vex | kernel: Integer overflow in futex.c:futux_requeue can lead to denial of service or unspecified impact | fixed: 255 known affected: 27 known not affected: 32 | 2026-06-28T11:24:20+00:00 | Vulnerability · Source |
| CVE-2018-3276 | redhat_vex | mysql: Server: Memcached unspecified vulnerability (CPU Oct 2018) | fixed: 186 known not affected: 130 | 2026-06-28T11:24:19+00:00 | Vulnerability · Source |
| CVE-2018-3247 | redhat_vex | mysql: Server: Merge unspecified vulnerability (CPU Oct 2018) | fixed: 186 known not affected: 130 | 2026-06-28T11:24:18+00:00 | Vulnerability · Source |
| CVE-2018-2964 | redhat_vex | JDK: unspecified vulnerability fixed in 8u181 and 10.0.2 (Deployment) | fixed: 64 known not affected: 14 | 2026-06-28T11:24:18+00:00 | Vulnerability · Source |
| CVE-2026-23309 | redhat_vex | kernel: tracing: Add NULL pointer check to trigger_data_free() | known not affected: 274 | 2026-06-28T11:24:18+00:00 | Vulnerability · Source |
| CVE-2018-3061 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Jul 2018) | fixed: 186 known not affected: 85 | 2026-06-28T11:24:17+00:00 | Vulnerability · Source |
| CVE-2014-9654 | redhat_vex | icu: insufficient size limit checks in regular expression compiler | fixed: 15 known affected: 10 under investigation: 1 | 2026-06-28T11:24:16+00:00 | Vulnerability · Source |
| CVE-2018-7550 | redhat_vex | QEMU: i386: multiboot OOB access while loading kernel image | fixed: 64 known affected: 9 known not affected: 29 | 2026-06-28T11:24:16+00:00 | Vulnerability · Source |
| CVE-2018-2779 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018) | fixed: 186 known not affected: 105 | 2026-06-28T11:24:16+00:00 | Vulnerability · Source |
| CVE-2021-3424 | redhat_vex | keycloak: Internationalized domain name (IDN) homograph attack to impersonate users | fixed: 10 known not affected: 6 | 2026-06-28T11:24:15+00:00 | Vulnerability · Source |
| CVE-2018-2696 | redhat_vex | mysql: sha256_password authentication DoS via long password | fixed: 133 known not affected: 77 | 2026-06-28T11:24:15+00:00 | Vulnerability · Source |
| CVE-2018-2678 | redhat_vex | OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142) | fixed: 856 known affected: 8 | 2026-06-28T11:24:14+00:00 | Vulnerability · Source |
| CVE-2018-2762 | redhat_vex | mysql: Server: Connection unspecified vulnerability (CPU Apr 2018) | fixed: 186 known not affected: 105 | 2026-06-28T11:24:14+00:00 | Vulnerability · Source |
| CVE-2025-2586 | redhat_vex | ols: Unauthenticated Metrics Flooding in OpenShift Lightspeed Service Leading to Resource Exhaustion | known not affected: 1 | 2026-06-28T11:24:14+00:00 | Vulnerability · Source |
| CVE-2018-2677 | redhat_vex | OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289) | fixed: 856 known affected: 8 | 2026-06-28T11:24:14+00:00 | Vulnerability · Source |
| CVE-2021-3428 | redhat_vex | kernel: integer overflow in ext4_es_cache_extent | fixed: 150 known affected: 1 known not affected: 43 | 2026-06-28T11:24:13+00:00 | Vulnerability · Source |
| CVE-2018-2667 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018) | fixed: 63 known not affected: 105 | 2026-06-28T11:24:13+00:00 | Vulnerability · Source |
| CVE-2018-2663 | redhat_vex | OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284) | fixed: 856 known affected: 8 | 2026-06-28T11:24:13+00:00 | Vulnerability · Source |
| CVE-2026-37457 | redhat_vex | frr: denial of service via crafted FlowSpec component | fixed: 56 | 2026-06-28T11:24:13+00:00 | Vulnerability · Source |
| CVE-2018-2639 | redhat_vex | JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment) | fixed: 169 | 2026-06-28T11:24:12+00:00 | Vulnerability · Source |
| CVE-2026-41075 | redhat_vex | rt: RT: SQL Injection Vulnerability Allows Authenticated Data Access | known not affected: 1 | 2026-06-28T11:24:10+00:00 | Vulnerability · Source |
| CVE-2018-2576 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Jan 2018) | fixed: 63 known not affected: 105 | 2026-06-28T11:24:10+00:00 | Vulnerability · Source |
| CVE-2026-40960 | redhat_vex | luanti: Luanti: Unauthorized access to insecure environment via crafted module | known not affected: 1 | 2026-06-28T11:24:09+00:00 | Vulnerability · Source |
| CVE-2007-6246 | redhat_vex | flash: privilege escalation | fixed: 10 | 2026-06-28T11:24:09+00:00 | Vulnerability · Source |
| CVE-2014-8138 | redhat_vex | jasper: heap overflow in jp2_decode() (oCERT-2014-012) | fixed: 144 known affected: 1 | 2026-06-28T11:24:09+00:00 | Vulnerability · Source |
| CVE-2011-3560 | redhat_vex | OpenJDK: missing checkSetFactory calls in HttpsURLConnection (JSSE, 7096936) | fixed: 610 known affected: 3 | 2026-06-28T11:24:08+00:00 | Vulnerability · Source |
| CVE-2013-3338 | redhat_vex | acroread: multiple code execution flaws (APSB13-15) | fixed: 8 | 2026-06-28T11:24:06+00:00 | Vulnerability · Source |
| CVE-2020-1694 | redhat_vex | keycloak: verify-token-audience support is missing in the NodeJS adapter | fixed: 1 known affected: 2 known not affected: 2 | 2026-06-28T11:24:05+00:00 | Vulnerability · Source |
| CVE-2026-43623 | redhat_vex | microtar: microtar: Arbitrary code execution via stack-based buffer overflow in crafted TAR archives | known not affected: 1 | 2026-06-28T11:24:04+00:00 | Vulnerability · Source |
| CVE-2017-10105 | redhat_vex | JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment) | fixed: 482 | 2026-06-28T11:24:04+00:00 | Vulnerability · Source |
| CVE-2018-7273 | redhat_vex | kernel: Kernel address information leak in drivers/block/floppy.c:show_floppy function potentially allowing KASLR bypass | known affected: 61 known not affected: 27 | 2026-06-28T11:24:03+00:00 | Vulnerability · Source |
| CVE-2017-10067 | redhat_vex | OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392) | fixed: 854 | 2026-06-28T11:24:02+00:00 | Vulnerability · Source |
| CVE-2018-6798 | redhat_vex | perl: heap read overflow in regexec.c | fixed: 217 known not affected: 134 | 2026-06-28T11:24:02+00:00 | Vulnerability · Source |
| CVE-2018-6914 | redhat_vex | ruby: Unintentional file and directory creation with directory traversal in tempfile and tmpdir | fixed: 637 known affected: 32 known not affected: 47 | 2026-06-28T11:24:02+00:00 | Vulnerability · Source |
| CVE-2025-60361 | redhat_vex | radare2: radare2 memory leak | known not affected: 1 | 2026-06-28T11:24:02+00:00 | Vulnerability · Source |
| CVE-2026-11629 | redhat_vex | chromium-browser: Use after free in Ozone | known not affected: 1 | 2026-06-28T11:24:01+00:00 | Vulnerability · Source |
| CVE-2026-2742 | redhat_vex | com.vaadin/flow-server: Vaadin flow-server: Authentication bypass due to inconsistent path matching allows unauthorized session creation. | known affected: 2 | 2026-06-28T11:24:01+00:00 | Vulnerability · Source |
| CVE-2026-12043 | redhat_vex | aws-c-http: aws-c-http: Arbitrary code execution via crafted HTTP/2 HEADERS frames | known not affected: 1 | 2026-06-28T11:24:01+00:00 | Vulnerability · Source |
| CVE-2010-4472 | redhat_vex | OpenJDK untrusted code allowed to replace DSIG/C14N implementation (6994263) | fixed: 184 | 2026-06-28T11:24:00+00:00 | Vulnerability · Source |
| CVE-2018-5750 | redhat_vex | kernel: Kernel address information leak in drivers/acpi/sbshc.c:acpi_smbus_hc_add() function potentially allowing KASLR bypass | fixed: 217 known not affected: 59 | 2026-06-28T11:24:00+00:00 | Vulnerability · Source |
| CVE-2026-6940 | redhat_vex | radare2: radare2: Recursive directory deletion via path traversal during project deletion | known not affected: 1 | 2026-06-28T11:23:58+00:00 | Vulnerability · Source |