VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294144 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-6941 | redhat_vex | radare2: radare2: Arbitrary file read/write via path traversal in project notes handling | known not affected: 1 | 2026-06-28T11:23:57+00:00 | Vulnerability · Source |
| CVE-2018-5391 | redhat_vex | kernel: IP fragments with random offsets allow a remote denial of service (FragmentSmack) | fixed: 1041 known affected: 1 known not affected: 41 | 2026-06-28T11:23:56+00:00 | Vulnerability · Source |
| CVE-2026-31644 | redhat_vex | kernel: net: lan966x: fix use-after-free and leak in lan966x_fdma_reload() | known not affected: 274 | 2026-06-28T11:23:56+00:00 | Vulnerability · Source |
| CVE-2026-31614 | redhat_vex | kernel: smb: client: fix off-by-8 bounds check in check_wsl_eas() | known affected: 260 known not affected: 14 | 2026-06-28T11:23:55+00:00 | Vulnerability · Source |
| CVE-2026-27125 | redhat_vex | svelte: Svelte SSR attribute spreading includes inherited properties from prototype chain | known affected: 1 | 2026-06-28T11:23:55+00:00 | Vulnerability · Source |
| CVE-2026-34513 | redhat_vex | aiohttp: AIOHTTP: Denial of Service due to unbounded DNS cache | known affected: 88 | 2026-06-28T11:23:53+00:00 | Vulnerability · Source |
| CVE-2026-27026 | redhat_vex | pypdf: pypdf: Denial of Service via malformed PDF /FlateDecode stream | known affected: 6 | 2026-06-28T11:23:51+00:00 | Vulnerability · Source |
| CVE-2018-18347 | redhat_vex | chromium-browser: Inappropriate implementation in Navigation | fixed: 12 | 2026-06-28T11:23:51+00:00 | Vulnerability · Source |
| CVE-2013-5838 | redhat_vex | OpenJDK: Vulnerability in Libraries component (Libraries, 7023639) | fixed: 228 | 2026-06-28T11:23:49+00:00 | Vulnerability · Source |
| CVE-2013-5812 | redhat_vex | JDK: unspecified vulnerability fixed in 7u45 (Deployment) | fixed: 364 known not affected: 8 | 2026-06-28T11:23:49+00:00 | Vulnerability · Source |
| CVE-2013-5884 | redhat_vex | OpenJDK: insufficient security checks in CORBA stub factories (CORBA, 8026193) | fixed: 583 known not affected: 21 | 2026-06-28T11:23:48+00:00 | Vulnerability · Source |
| CVE-2019-19768 | redhat_vex | kernel: use-after-free in __blk_add_trace in kernel/trace/blktrace.c | fixed: 1110 known affected: 15 | 2026-06-28T11:23:46+00:00 | Vulnerability · Source |
| CVE-2013-3743 | redhat_vex | JDK: unspecified vulnerability fixed in 6u51 and 5u51 (AWT) | fixed: 283 known not affected: 20 | 2026-06-28T11:23:45+00:00 | Vulnerability · Source |
| CVE-2018-17463 | redhat_vex | chromium-browser: Remote code execution in V8 | fixed: 12 | 2026-06-28T11:23:45+00:00 | Vulnerability · Source |
| CVE-2018-17470 | redhat_vex | chromium-browser: Memory corruption in GPU Internals | fixed: 12 | 2026-06-28T11:23:45+00:00 | Vulnerability · Source |
| CVE-2018-7262 | redhat_vex | ceph: Unauthenticated malformed HTTP requests handled by rgw_civetweb.cc:RGW::init_env() can lead to denial of service | fixed: 64 known not affected: 38 | 2026-06-28T11:23:43+00:00 | Vulnerability · Source |
| CVE-2013-2463 | redhat_vex | OpenJDK: Incorrect image attribute verification (2D, 8012438) | fixed: 555 | 2026-06-28T11:23:41+00:00 | Vulnerability · Source |
| CVE-2026-12318 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS | known not affected: 23 | 2026-06-28T11:23:40+00:00 | Vulnerability · Source |
| CVE-2023-28321 | redhat_vex | curl: IDN wildcard match may lead to Improper Cerificate Validation | fixed: 250 known affected: 12 known not affected: 94 | 2026-06-28T11:23:38+00:00 | Vulnerability · Source |
| CVE-2013-2456 | redhat_vex | OpenJDK: ObjectOutputStream access checks (Serialization, 8008132) | fixed: 555 | 2026-06-28T11:23:37+00:00 | Vulnerability · Source |
| CVE-2018-16081 | redhat_vex | chromium-browser: Local file access in DevTools | fixed: 12 | 2026-06-28T11:23:35+00:00 | Vulnerability · Source |
| CVE-2024-53059 | redhat_vex | kernel: wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() | fixed: 305 known affected: 50 known not affected: 62 | 2026-06-28T11:23:33+00:00 | Vulnerability · Source |
| CVE-2020-10687 | redhat_vex | Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests | fixed: 930 known affected: 2 | 2026-06-28T11:23:33+00:00 | Vulnerability · Source |
| CVE-2013-0441 | redhat_vex | OpenJDK: missing serialization restriction (CORBA, 7201066) | fixed: 450 known affected: 1 known not affected: 8 | 2026-06-28T11:23:32+00:00 | Vulnerability · Source |
| CVE-2020-36694 | redhat_vex | kernel: netfilter: use-after-free in the packet processing context | fixed: 150 known affected: 28 known not affected: 122 | 2026-06-28T11:23:32+00:00 | Vulnerability · Source |
| CVE-2026-31475 | redhat_vex | kernel: ASoC: sma1307: fix double free of devm_kzalloc() memory | known not affected: 274 | 2026-06-28T11:23:32+00:00 | Vulnerability · Source |
| CVE-2015-6759 | redhat_vex | chromium-browser: Information leakage in LocalStorage | fixed: 12 | 2026-06-28T11:23:32+00:00 | Vulnerability · Source |
| CVE-2015-6677 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-23 | fixed: 5 | 2026-06-28T11:23:31+00:00 | Vulnerability · Source |
| CVE-2021-34556 | redhat_vex | kernel: BPF program can obtain sensitive information from kernel memory via a speculative store bypass side-channel attack because of the possibility of uninitialized memory locations on the BPF stack | known affected: 91 known not affected: 107 | 2026-06-28T11:23:29+00:00 | Vulnerability · Source |
| CVE-2018-3693 | redhat_vex | Kernel: speculative bounds check bypass store | fixed: 544 known affected: 13 known not affected: 32 | 2026-06-28T11:23:29+00:00 | Vulnerability · Source |
| CVE-2015-0421 | redhat_vex | JDK: unspecified vulnerability fixed in 8u31 (Install) | fixed: 42 known not affected: 7 | 2026-06-28T11:23:29+00:00 | Vulnerability · Source |
| CVE-2015-5584 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-23 | fixed: 5 | 2026-06-28T11:23:28+00:00 | Vulnerability · Source |
| CVE-2024-53097 | redhat_vex | kernel: mm: krealloc: Fix MTE false alarm in __do_krealloc | fixed: 305 known affected: 50 known not affected: 62 | 2026-06-28T11:23:27+00:00 | Vulnerability · Source |
| CVE-2017-1000111 | redhat_vex | kernel: Heap out-of-bounds read in AF_PACKET sockets | fixed: 387 known affected: 16 known not affected: 1 | 2026-06-28T11:23:26+00:00 | Vulnerability · Source |
| CVE-2015-5579 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-23 | fixed: 5 | 2026-06-28T11:23:24+00:00 | Vulnerability · Source |
| CVE-2019-19922 | redhat_vex | kernel: when cpu.cfs_quota_us is used allows attackers to cause a denial of service against non-cpu-bound applications | fixed: 175 known affected: 15 known not affected: 40 | 2026-06-28T11:23:24+00:00 | Vulnerability · Source |
| CVE-2021-3446 | redhat_vex | libtpms: return of wrong initialization vector when certain symmetric ciphers are used | known affected: 9 known not affected: 2 | 2026-06-28T11:23:22+00:00 | Vulnerability · Source |
| CVE-2015-5577 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-23 | fixed: 5 | 2026-06-28T11:23:22+00:00 | Vulnerability · Source |
| CVE-2012-5263 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T11:23:21+00:00 | Vulnerability · Source |
| CVE-2015-5555 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T11:23:21+00:00 | Vulnerability · Source |
| CVE-2015-5554 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T11:23:21+00:00 | Vulnerability · Source |
| CVE-2023-28322 | redhat_vex | curl: more POST-after-PUT confusion | fixed: 421 known affected: 12 known not affected: 94 | 2026-06-28T11:23:20+00:00 | Vulnerability · Source |
| CVE-2023-28464 | redhat_vex | Kernel: double free in hci_conn_cleanup of the bluetooth subsystem | fixed: 429 known affected: 50 known not affected: 14 | 2026-06-28T11:23:17+00:00 | Vulnerability · Source |
| CVE-2026-23409 | redhat_vex | kernel: apparmor: fix differential encoding verification | known not affected: 274 | 2026-06-28T11:23:16+00:00 | Vulnerability · Source |
| CVE-2018-3646 | redhat_vex | Kernel: hw: cpu: L1 terminal fault (L1TF) | fixed: 988 known not affected: 32 | 2026-06-28T11:23:16+00:00 | Vulnerability · Source |
| CVE-2015-5295 | redhat_vex | openstack-heat: Vulnerability in Heat template validation leading to DoS | fixed: 24 known affected: 6 | 2026-06-28T11:23:15+00:00 | Vulnerability · Source |
| CVE-2018-16882 | redhat_vex | Kernel: KVM: nVMX: use after free in posted interrupt processing | known not affected: 104 | 2026-06-28T11:23:13+00:00 | Vulnerability · Source |
| CVE-2018-3639 | redhat_vex | hw: cpu: speculative store bypass | fixed: 5137 known affected: 11 known not affected: 79 | 2026-06-28T11:23:11+00:00 | Vulnerability · Source |
| CVE-2023-38546 | redhat_vex | curl: cookie injection with none file | fixed: 510 known affected: 11 known not affected: 147 | 2026-06-28T11:23:11+00:00 | Vulnerability · Source |
| CVE-2010-0202 | redhat_vex | Acroread: Multiple code execution flaws (APSB10-09) | fixed: 12 | 2026-06-28T11:23:08+00:00 | Vulnerability · Source |