VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294149 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-5295 | redhat_vex | openstack-heat: Vulnerability in Heat template validation leading to DoS | fixed: 24 known affected: 6 | 2026-06-28T11:23:15+00:00 | Vulnerability · Source |
| CVE-2018-16882 | redhat_vex | Kernel: KVM: nVMX: use after free in posted interrupt processing | known not affected: 104 | 2026-06-28T11:23:13+00:00 | Vulnerability · Source |
| CVE-2018-3639 | redhat_vex | hw: cpu: speculative store bypass | fixed: 5137 known affected: 11 known not affected: 79 | 2026-06-28T11:23:11+00:00 | Vulnerability · Source |
| CVE-2023-38546 | redhat_vex | curl: cookie injection with none file | fixed: 510 known affected: 11 known not affected: 147 | 2026-06-28T11:23:11+00:00 | Vulnerability · Source |
| CVE-2010-0202 | redhat_vex | Acroread: Multiple code execution flaws (APSB10-09) | fixed: 12 | 2026-06-28T11:23:08+00:00 | Vulnerability · Source |
| CVE-2018-3620 | redhat_vex | Kernel: hw: cpu: L1 terminal fault (L1TF) | fixed: 988 known not affected: 32 | 2026-06-28T11:23:07+00:00 | Vulnerability · Source |
| CVE-2010-0084 | redhat_vex | OpenJDK Policy/PolicyFile leak dynamic ProtectionDomains. (6633872) | fixed: 594 | 2026-06-28T11:23:06+00:00 | Vulnerability · Source |
| CVE-2026-12457 | redhat_vex | chromium-browser: chromium-browser: Insufficient data validation in Extensions | known not affected: 1 | 2026-06-28T11:23:06+00:00 | Vulnerability · Source |
| CVE-2009-4538 | redhat_vex | kernel: e1000e frame fragment issue | fixed: 394 known not affected: 20 | 2026-06-28T11:23:05+00:00 | Vulnerability · Source |
| CVE-2024-53055 | redhat_vex | kernel: wifi: iwlwifi: mvm: fix 6 GHz scan construction | fixed: 305 known affected: 98 known not affected: 14 | 2026-06-28T11:23:04+00:00 | Vulnerability · Source |
| CVE-2018-16880 | redhat_vex | kernel: Out of bounds write in get_rx_bufs() function in drivers/vhost/net.c | known not affected: 104 | 2026-06-28T11:23:03+00:00 | Vulnerability · Source |
| CVE-2018-16067 | redhat_vex | chromium-browser: Out of bounds read in WebAudio | fixed: 12 | 2026-06-28T11:23:03+00:00 | Vulnerability · Source |
| CVE-2026-36499 | redhat_vex | openvswitch: Open vSwitch: Denial of service via resource exhaustion due to missing upper-bound check | known affected: 155 under investigation: 10 | 2026-06-28T11:23:03+00:00 | Vulnerability · Source |
| CVE-2020-8252 | redhat_vex | libuv: buffer overflow in realpath | fixed: 200 known affected: 1 known not affected: 18 | 2026-06-28T11:23:02+00:00 | Vulnerability · Source |
| CVE-2009-1855 | redhat_vex | acroread: multiple security fixes in version 8.1.6 (APSB09-07) | fixed: 20 | 2026-06-28T11:23:00+00:00 | Vulnerability · Source |
| CVE-2009-2670 | redhat_vex | OpenJDK Untrusted applet System properties access (6738524) | fixed: 434 | 2026-06-28T11:23:00+00:00 | Vulnerability · Source |
| CVE-2026-45968 | redhat_vex | kernel: cpuidle: Skip governor when only one idle state is available | known affected: 246 known not affected: 28 | 2026-06-28T11:22:57+00:00 | Vulnerability · Source |
| CVE-2026-23025 | redhat_vex | kernel: mm/page_alloc: prevent pcp corruption with SMP=n | known affected: 198 known not affected: 76 | 2026-06-28T11:22:56+00:00 | Vulnerability · Source |
| CVE-2026-12448 | redhat_vex | chromium-browser: chromium-browser: Inappropriate implementation in WebView | known not affected: 1 | 2026-06-28T11:22:55+00:00 | Vulnerability · Source |
| CVE-2026-53027 | redhat_vex | kernel: fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() | known not affected: 274 | 2026-06-28T11:22:55+00:00 | Vulnerability · Source |
| CVE-2018-2775 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018) | fixed: 186 known not affected: 105 | 2026-06-28T11:22:53+00:00 | Vulnerability · Source |
| CVE-2011-0863 | redhat_vex | JDK: unspecified vulnerability fixed in 6u26 (Deployment) | fixed: 323 known not affected: 11 | 2026-06-28T11:22:53+00:00 | Vulnerability · Source |
| CVE-2018-2773 | redhat_vex | mysql: pid file can be created in a world-writeable directory (CPU Apr 2018) | fixed: 266 known affected: 96 | 2026-06-28T11:22:53+00:00 | Vulnerability · Source |
| CVE-2018-2646 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Jan 2018) | fixed: 63 known not affected: 105 | 2026-06-28T11:22:52+00:00 | Vulnerability · Source |
| CVE-2026-11650 | redhat_vex | chromium-browser: Use after free in V8 | known not affected: 1 | 2026-06-28T11:22:52+00:00 | Vulnerability · Source |
| CVE-2006-0996 | redhat_vex | security flaw | fixed: 335 | 2026-06-28T11:22:50+00:00 | Vulnerability · Source |
| CVE-2006-0452 | redhat_vex | recursion causes OOM with bad DN in dn2ancestor | fixed: 1 | 2026-06-28T11:22:50+00:00 | Vulnerability · Source |
| CVE-2018-2618 | redhat_vex | OpenJDK: insufficient strength of key agreement (JCE, 8185292) | fixed: 856 known affected: 8 | 2026-06-28T11:22:49+00:00 | Vulnerability · Source |
| CVE-2018-25020 | redhat_vex | kernel: long jump over an instruction sequence can lead to overflow in the BPF subsystem | known not affected: 197 | 2026-06-28T11:22:48+00:00 | Vulnerability · Source |
| CVE-2019-19769 | redhat_vex | kernel: use-after-free in perf_trace_lock_acquire related to include/trace/events/lock.h | known affected: 12 known not affected: 92 | 2026-06-28T11:22:47+00:00 | Vulnerability · Source |
| CVE-2018-20852 | redhat_vex | python: Cookie domain check returns incorrect results | fixed: 818 known affected: 8 known not affected: 35 | 2026-06-28T11:22:47+00:00 | Vulnerability · Source |
| CVE-2019-19770 | redhat_vex | kernel: use-after-free in debugfs_remove in fs/debugfs/inode.c | fixed: 150 known affected: 56 | 2026-06-28T11:22:47+00:00 | Vulnerability · Source |
| CVE-2018-16845 | redhat_vex | nginx: Denial of service and memory disclosure via mp4 module | fixed: 302 known not affected: 21 | 2026-06-28T11:22:46+00:00 | Vulnerability · Source |
| CVE-2026-11297 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Reader Mode | known not affected: 1 | 2026-06-28T11:22:45+00:00 | Vulnerability · Source |
| CVE-2026-41726 | redhat_vex | spring-kafka: Spring-kafka: Denial of Service due to unbounded heap growth via unique header values | known affected: 2 | 2026-06-28T11:22:45+00:00 | Vulnerability · Source |
| CVE-2018-7566 | redhat_vex | kernel: race condition in snd_seq_write() may lead to UAF or OOB-access | fixed: 556 known not affected: 33 | 2026-06-28T11:22:42+00:00 | Vulnerability · Source |
| CVE-2022-25636 | redhat_vex | kernel: heap out of bounds write in nf_dup_netdev.c | fixed: 428 known not affected: 171 | 2026-06-28T11:22:42+00:00 | Vulnerability · Source |
| CVE-2015-4760 | redhat_vex | ICU: missing boundary checks in layout engine (OpenJDK 2D, 8071715) | fixed: 1026 known affected: 11 | 2026-06-28T11:22:41+00:00 | Vulnerability · Source |
| CVE-2015-5131 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T11:22:40+00:00 | Vulnerability · Source |
| CVE-2015-4860 | redhat_vex | OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688) | fixed: 1136 | 2026-06-28T11:22:40+00:00 | Vulnerability · Source |
| CVE-2020-36516 | redhat_vex | kernel: off-path attacker may inject data or terminate victim's TCP session | fixed: 475 known affected: 42 | 2026-06-28T11:22:38+00:00 | Vulnerability · Source |
| CVE-2019-19528 | redhat_vex | kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver | fixed: 150 known affected: 55 known not affected: 1 | 2026-06-28T11:22:33+00:00 | Vulnerability · Source |
| CVE-2018-20449 | redhat_vex | kernel: reading "callback=" lines in a debugfs file in drivers/dma/qcom/hidma_dbg.c results in information disclosure | known not affected: 104 | 2026-06-28T11:22:32+00:00 | Vulnerability · Source |
| CVE-2020-25220 | redhat_vex | kernel: use-after-free because skcd->no_refcnt was not considered during the backport of CVE-2020-14356 | known not affected: 104 | 2026-06-28T11:22:31+00:00 | Vulnerability · Source |
| CVE-2020-10734 | redhat_vex | keycloak: OIDC logout endpoint CSRF | known affected: 4 | 2026-06-28T11:22:30+00:00 | Vulnerability · Source |
| CVE-2026-11669 | redhat_vex | chromium-browser: Integer overflow in Media | known not affected: 1 | 2026-06-28T11:22:30+00:00 | Vulnerability · Source |
| CVE-2010-2221 | redhat_vex | scsi-target-utils: stack buffer overflow vulnerability | fixed: 9 known affected: 1 known not affected: 2 | 2026-06-28T11:22:30+00:00 | Vulnerability · Source |
| CVE-2018-20225 | redhat_vex | python-pip: when --extra-index-url option is used and package does not already exist in the public index, the installation of malicious package with arbitrary version number is possible. | known affected: 11 | 2026-06-28T11:22:30+00:00 | Vulnerability · Source |
| CVE-2026-53039 | redhat_vex | kernel: ocfs2: validate group add input before caching | known not affected: 274 | 2026-06-28T11:22:29+00:00 | Vulnerability · Source |
| CVE-2025-48997 | redhat_vex | multer: Multer vulnerable to Denial of Service via unhandled exception | fixed: 1 known affected: 1 known not affected: 3 | 2026-06-28T11:22:28+00:00 | Vulnerability · Source |