VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294149 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-9912 | redhat_vex | chromium-browser: Inappropriate implementation in GPU | known not affected: 1 | 2026-06-28T11:22:28+00:00 | Vulnerability · Source |
| CVE-2024-50169 | redhat_vex | kernel: vsock: Update rx_bytes on read_skb() | fixed: 305 known affected: 50 known not affected: 62 | 2026-06-28T11:22:27+00:00 | Vulnerability · Source |
| CVE-2021-47560 | redhat_vex | kernel: mlxsw: spectrum: Protect driver from buggy firmware | fixed: 651 known affected: 28 known not affected: 14 | 2026-06-28T11:22:27+00:00 | Vulnerability · Source |
| CVE-2025-49466 | redhat_vex | aerc: Aerc Attachment Path Traversal Vulnerability | known not affected: 1 | 2026-06-28T11:22:26+00:00 | Vulnerability · Source |
| CVE-2021-47556 | redhat_vex | kernel: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() | fixed: 346 known affected: 42 | 2026-06-28T11:22:26+00:00 | Vulnerability · Source |
| CVE-2014-7924 | redhat_vex | chromium-browser: use-after-free in IndexedDB | fixed: 15 | 2026-06-28T11:22:26+00:00 | Vulnerability · Source |
| CVE-2024-49878 | redhat_vex | kernel: resource: fix region_intersects() vs add_memory_driver_managed() | fixed: 305 known affected: 64 known not affected: 48 | 2026-06-28T11:22:25+00:00 | Vulnerability · Source |
| CVE-2026-12045 | redhat_vex | pgadmin4: pgAdmin 4: Remote code execution via prompt injection in AI Assistant | known not affected: 1 | 2026-06-28T11:22:25+00:00 | Vulnerability · Source |
| CVE-2007-5240 | redhat_vex | Applets or Applications are allowed to display an oversized window | fixed: 430 | 2026-06-28T11:22:24+00:00 | Vulnerability · Source |
| CVE-2026-9995 | redhat_vex | chromium-browser: Use after free in WebXR | known not affected: 1 | 2026-06-28T11:22:18+00:00 | Vulnerability · Source |
| CVE-2026-10007 | redhat_vex | chromium-browser: Use after free in SVG | known not affected: 1 | 2026-06-28T11:22:16+00:00 | Vulnerability · Source |
| CVE-2015-8047 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:22:15+00:00 | Vulnerability · Source |
| CVE-2020-16166 | redhat_vex | kernel: information exposure in drivers/char/random.c and kernel/time/timer.c | fixed: 397 known affected: 44 known not affected: 64 | 2026-06-28T11:22:15+00:00 | Vulnerability · Source |
| CVE-2015-2783 | redhat_vex | php: buffer over-read in Phar metadata parsing | fixed: 1063 known affected: 27 known not affected: 1 | 2026-06-28T11:22:15+00:00 | Vulnerability · Source |
| CVE-2023-28756 | redhat_vex | ruby: ReDoS vulnerability in Time | fixed: 834 known affected: 95 | 2026-06-28T11:22:13+00:00 | Vulnerability · Source |
| CVE-2026-9924 | redhat_vex | chromium-browser: Heap buffer overflow in ANGLE | known not affected: 1 | 2026-06-28T11:22:11+00:00 | Vulnerability · Source |
| CVE-2021-3544 | redhat_vex | QEMU: vhost-user-gpu: multiple memory leaks | known affected: 17 known not affected: 109 | 2026-06-28T11:22:11+00:00 | Vulnerability · Source |
| CVE-2013-6639 | redhat_vex | v8: DoS (out-of-bounds write) in DehoistArrayIndex function in hydrogen.cc | fixed: 36 known affected: 9 known not affected: 1819 | 2026-06-28T11:22:07+00:00 | Vulnerability · Source |
| CVE-2025-58148 | redhat_vex | xen: x86: Incorrect input sanitisation in Viridian hypercalls | known not affected: 1 | 2026-06-28T11:22:07+00:00 | Vulnerability · Source |
| CVE-2026-40505 | redhat_vex | MuPDF: MuPDF mutool: Terminal manipulation through unsanitized PDF metadata | known not affected: 1 | 2026-06-28T11:22:07+00:00 | Vulnerability · Source |
| CVE-2017-0750 | redhat_vex | kernel: Out-of-bounds write in f2fs allows code execution when mounted malicious file system | known not affected: 88 | 2026-06-28T11:22:07+00:00 | Vulnerability · Source |
| CVE-2026-40560 | redhat_vex | Starman: Starman: HTTP Request Smuggling via improper header precedence | known not affected: 1 | 2026-06-28T11:22:03+00:00 | Vulnerability · Source |
| CVE-2021-3516 | redhat_vex | libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c | fixed: 193 known affected: 12 known not affected: 4 | 2026-06-28T11:22:00+00:00 | Vulnerability · Source |
| CVE-2026-40499 | redhat_vex | radare2: radare2: Arbitrary command execution via command injection in PDB parser | known not affected: 1 | 2026-06-28T11:22:00+00:00 | Vulnerability · Source |
| CVE-2018-18311 | redhat_vex | perl: Integer overflow leading to buffer overflow in Perl_my_setenv() | fixed: 934 known affected: 52 known not affected: 55 | 2026-06-28T11:21:58+00:00 | Vulnerability · Source |
| CVE-2020-1728 | redhat_vex | keycloak: security headers missing on REST endpoints | fixed: 13 known affected: 3 known not affected: 1 | 2026-06-28T11:21:54+00:00 | Vulnerability · Source |
| CVE-2018-17477 | redhat_vex | chromium-browser: UI spoof in Extensions | fixed: 12 | 2026-06-28T11:21:54+00:00 | Vulnerability · Source |
| CVE-2014-4698 | redhat_vex | php: ArrayIterator use-after-free due to object change during sorting | fixed: 970 known affected: 2 known not affected: 1 | 2026-06-28T11:21:52+00:00 | Vulnerability · Source |
| CVE-2013-0623 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T11:21:52+00:00 | Vulnerability · Source |
| CVE-2018-17082 | redhat_vex | php: Cross-site scripting (XSS) flaw in Apache2 component via body of 'Transfer-Encoding: chunked' request | fixed: 486 known affected: 88 known not affected: 77 | 2026-06-28T11:21:50+00:00 | Vulnerability · Source |
| CVE-2021-2293 | redhat_vex | mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T11:21:50+00:00 | Vulnerability · Source |
| CVE-2021-3527 | redhat_vex | QEMU: usb: unbounded stack allocation in usbredir | known affected: 102 known not affected: 24 | 2026-06-28T11:21:49+00:00 | Vulnerability · Source |
| CVE-2020-36311 | redhat_vex | kernel: DoS by triggering destruction of a large SEV VM | known affected: 48 known not affected: 149 | 2026-06-28T11:21:48+00:00 | Vulnerability · Source |
| CVE-2020-15971 | redhat_vex | chromium-browser: Use after free in printing | fixed: 14 | 2026-06-28T11:21:46+00:00 | Vulnerability · Source |
| CVE-2026-39805 | redhat_vex | bandit: Bandit: HTTP Request Smuggling via Duplicate Content-Length Headers | known not affected: 1 | 2026-06-28T11:21:46+00:00 | Vulnerability · Source |
| CVE-2026-22740 | redhat_vex | spring-webflux: Spring WebFlux: Denial of Service via temporary file accumulation | known affected: 9 | 2026-06-28T11:21:45+00:00 | Vulnerability · Source |
| CVE-2026-44394 | redhat_vex | openstack-keystone: OpenStack Keystone: Federated token rescoping allows indefinite access | known affected: 10 | 2026-06-28T11:21:44+00:00 | Vulnerability · Source |
| CVE-2020-15961 | redhat_vex | chromium-browser: Insufficient policy enforcement in extensions | fixed: 14 | 2026-06-28T11:21:43+00:00 | Vulnerability · Source |
| CVE-2020-15960 | redhat_vex | chromium-browser: Out of bounds read in storage | fixed: 14 | 2026-06-28T11:21:43+00:00 | Vulnerability · Source |
| CVE-2018-16887 | redhat_vex | katello: stored XSS in subscriptions and repositories pages | fixed: 1128 known not affected: 1 | 2026-06-28T11:21:42+00:00 | Vulnerability · Source |
| CVE-2024-53203 | redhat_vex | kernel: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() | fixed: 305 known affected: 22 known not affected: 90 | 2026-06-28T11:21:41+00:00 | Vulnerability · Source |
| CVE-2021-47527 | redhat_vex | kernel: serial: core: fix transmit-buffer reset and memleak | fixed: 429 known affected: 136 known not affected: 14 | 2026-06-28T11:21:40+00:00 | Vulnerability · Source |
| CVE-2024-53134 | redhat_vex | kernel: pmdomain: imx93-blk-ctrl: correct remove path | fixed: 305 known affected: 22 known not affected: 90 | 2026-06-28T11:21:38+00:00 | Vulnerability · Source |
| CVE-2015-0382 | redhat_vex | mysql: unspecified vulnerability related to Server:Replication (CPU Jan 2015) | fixed: 333 under investigation: 9 | 2026-06-28T11:21:37+00:00 | Vulnerability · Source |
| CVE-2016-9911 | redhat_vex | Qemu: usb: ehci: memory leakage in ehci_init_transfer | fixed: 47 known affected: 10 known not affected: 8 | 2026-06-28T11:21:37+00:00 | Vulnerability · Source |
| CVE-2020-36777 | redhat_vex | kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() | fixed: 150 known affected: 42 known not affected: 108 | 2026-06-28T11:21:37+00:00 | Vulnerability · Source |
| CVE-2025-30193 | redhat_vex | dnsdist: Denial of service via crafted TCP exchange | known not affected: 1 | 2026-06-28T11:21:36+00:00 | Vulnerability · Source |
| CVE-2025-71081 | redhat_vex | kernel: ASoC: stm32: sai: fix OF node leak on probe | known not affected: 274 | 2026-06-28T11:21:35+00:00 | Vulnerability · Source |
| CVE-2026-26940 | redhat_vex | Kibana: Timelion: Kibana Timelion Plugin: Denial of Service via improper input validation in Timelion expressions | known affected: 7 | 2026-06-28T11:21:35+00:00 | Vulnerability · Source |
| CVE-2015-0301 | redhat_vex | flash-plugin: Information disclosure via various methods (APSB15-01) | fixed: 5 | 2026-06-28T11:21:35+00:00 | Vulnerability · Source |