VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294149 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-53190 | redhat_vex | kernel: wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures | fixed: 305 known affected: 98 known not affected: 90 | 2026-06-28T11:21:34+00:00 | Vulnerability · Source |
| CVE-2026-43973 | redhat_vex | gun: gun: Denial of Service via unbounded HTTP/1.1 response buffering | known not affected: 1 | 2026-06-28T11:21:32+00:00 | Vulnerability · Source |
| CVE-2021-3505 | redhat_vex | libtpms: RSA keys weaker than expected | known affected: 9 known not affected: 2 | 2026-06-28T11:21:30+00:00 | Vulnerability · Source |
| CVE-2026-43045 | redhat_vex | kernel: mshv: Fix error handling in mshv_region_pin | known not affected: 274 | 2026-06-28T11:21:28+00:00 | Vulnerability · Source |
| CVE-2026-39855 | redhat_vex | osslsigncode: integer underflow in PE page hash calculation can cause out-of-bounds read | known not affected: 1 | 2026-06-28T11:21:27+00:00 | Vulnerability · Source |
| CVE-2018-16876 | redhat_vex | ansible: Information disclosure in vvv+ mode with no_log on | fixed: 82 known affected: 21 known not affected: 4 | 2026-06-28T11:21:27+00:00 | Vulnerability · Source |
| CVE-2026-40453 | redhat_vex | Apache Camel: org.apache.camel: Apache Camel: Remote Code Execution and Arbitrary File Write via case-variant header injection | fixed: 2 known affected: 2 known not affected: 24 under investigation: 8 | 2026-06-28T11:21:27+00:00 | Vulnerability · Source |
| CVE-2026-23333 | redhat_vex | kernel: netfilter: nft_set_rbtree: validate open interval overlap | known affected: 232 known not affected: 42 | 2026-06-28T11:21:27+00:00 | Vulnerability · Source |
| CVE-2011-0592 | redhat_vex | acroread: critical APSB11-03 | fixed: 18 | 2026-06-28T11:21:26+00:00 | Vulnerability · Source |
| CVE-2018-16871 | redhat_vex | kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence | fixed: 492 known not affected: 15 | 2026-06-28T11:21:26+00:00 | Vulnerability · Source |
| CVE-2016-4975 | redhat_vex | httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir | fixed: 247 known affected: 19 known not affected: 24 | 2026-06-28T11:21:25+00:00 | Vulnerability · Source |
| CVE-2019-20095 | redhat_vex | kernel: memory leak in mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c | fixed: 229 known affected: 75 | 2026-06-28T11:21:25+00:00 | Vulnerability · Source |
| CVE-2019-20794 | redhat_vex | kernel: task processes not being properly ended could lead to resource exhaustion | known affected: 78 known not affected: 121 | 2026-06-28T11:21:23+00:00 | Vulnerability · Source |
| CVE-2022-28614 | redhat_vex | httpd: Out-of-bounds read via ap_rwrite() | fixed: 224 known affected: 17 known not affected: 105 | 2026-06-28T11:21:20+00:00 | Vulnerability · Source |
| CVE-2021-3517 | redhat_vex | libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c | fixed: 193 known affected: 12 known not affected: 4 | 2026-06-28T11:21:20+00:00 | Vulnerability · Source |
| CVE-2026-54055 | redhat_vex | kitty: Kitty: Local privilege escalation via TOCTOU race condition in file transmission protocol | known not affected: 1 | 2026-06-28T11:21:20+00:00 | Vulnerability · Source |
| CVE-2026-43247 | redhat_vex | kernel: media: chips-media: wave5: Fix SError of kernel panic when closed | known not affected: 274 | 2026-06-28T11:21:19+00:00 | Vulnerability · Source |
| CVE-2015-5590 | redhat_vex | php: buffer overflow and stack smashing error in phar_fix_filepath | fixed: 240 known affected: 110 | 2026-06-28T11:21:18+00:00 | Vulnerability · Source |
| CVE-2025-2830 | redhat_vex | thunderbird: Information Disclosure of /tmp directory listing | fixed: 144 known affected: 6 | 2026-06-28T11:21:17+00:00 | Vulnerability · Source |
| CVE-2018-13098 | redhat_vex | kernel: slab out-of-bounds read in fs/f2fs/inode.c | known not affected: 88 | 2026-06-28T11:21:16+00:00 | Vulnerability · Source |
| CVE-2018-13096 | redhat_vex | kernel: out-of-bounds memory access in fs/f2fs/super.c | known not affected: 88 | 2026-06-28T11:21:16+00:00 | Vulnerability · Source |
| CVE-2014-8157 | redhat_vex | jasper: dec->numtiles off-by-one check in jpc_dec_process_sot() (oCERT-2015-001) | fixed: 139 known affected: 1 | 2026-06-28T11:21:15+00:00 | Vulnerability · Source |
| CVE-2018-12904 | redhat_vex | kernel: kvm: nVMX: missing privilege check allows privilege escalation in nested virtualization | known not affected: 88 | 2026-06-28T11:21:14+00:00 | Vulnerability · Source |
| CVE-2021-3537 | redhat_vex | libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode | fixed: 193 known affected: 10 known not affected: 4 | 2026-06-28T11:21:10+00:00 | Vulnerability · Source |
| CVE-2018-12714 | redhat_vex | kernel: slab out-of-bounds write in trace/trace_events_filter.c | known not affected: 88 | 2026-06-28T11:21:10+00:00 | Vulnerability · Source |
| CVE-2014-4227 | redhat_vex | JDK: unspecified vulnerability fixed in 6u81, 7u65 and 8u11 (Deployment) | fixed: 468 | 2026-06-28T11:21:09+00:00 | Vulnerability · Source |
| CVE-2014-7927 | redhat_vex | chromium-browser: memory corruption in V8 | fixed: 15 | 2026-06-28T11:21:09+00:00 | Vulnerability · Source |
| CVE-2026-45849 | redhat_vex | kernel: net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj() | known not affected: 274 | 2026-06-28T11:21:09+00:00 | Vulnerability · Source |
| CVE-2018-12633 | redhat_vex | kernel: Double-fetch vulnerability in drivers/virt/vboxguest/vboxguest_linux.c:vbg_misc_device_ioctl() allows information leak and local denial of service | known not affected: 88 | 2026-06-28T11:21:08+00:00 | Vulnerability · Source |
| CVE-2019-20806 | redhat_vex | kernel: NULL pointer dereference in tw5864_handle_frame function in drivers/media/pci/tw5864/tw5864-video.c | known not affected: 104 | 2026-06-28T11:21:07+00:00 | Vulnerability · Source |
| CVE-2025-4051 | redhat_vex | chromium-browser: Insufficient data validation in DevTools in Google Chrome | known not affected: 1 | 2026-06-28T11:21:07+00:00 | Vulnerability · Source |
| CVE-2020-1719 | redhat_vex | Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain | fixed: 1403 known affected: 8 known not affected: 2 | 2026-06-28T11:21:07+00:00 | Vulnerability · Source |
| CVE-2019-2024 | redhat_vex | kernel: media: em28xx: Use-after-free in em28xx/em28xx-dvb.c when disconnecting | known affected: 1 known not affected: 103 | 2026-06-28T11:21:06+00:00 | Vulnerability · Source |
| CVE-2021-3503 | redhat_vex | wildfly: Insufficient RBAC restrictions to metrics data | known not affected: 16 | 2026-06-28T11:21:05+00:00 | Vulnerability · Source |
| CVE-2014-4207 | redhat_vex | mysql: unspecified vulnerability related to SROPTZR (CPU July 2014) | fixed: 278 under investigation: 9 | 2026-06-28T11:21:04+00:00 | Vulnerability · Source |
| CVE-2014-2419 | redhat_vex | mysql: unspecified DoS related to Partition (CPU April 2014) | fixed: 190 under investigation: 9 | 2026-06-28T11:21:04+00:00 | Vulnerability · Source |
| CVE-2014-4049 | redhat_vex | php: heap-based buffer overflow in DNS TXT record parsing | fixed: 970 known not affected: 1 | 2026-06-28T11:21:04+00:00 | Vulnerability · Source |
| CVE-2014-2402 | redhat_vex | OpenJDK: Incorrect NIO channel separation (Libraries, 8026716) | fixed: 404 known not affected: 37 | 2026-06-28T11:21:03+00:00 | Vulnerability · Source |
| CVE-2026-23027 | redhat_vex | kernel: LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() | known not affected: 274 | 2026-06-28T11:21:03+00:00 | Vulnerability · Source |
| CVE-2026-23037 | redhat_vex | kernel: can: etas_es58x: allow partial RX URB allocation to succeed | known not affected: 274 | 2026-06-28T11:21:01+00:00 | Vulnerability · Source |
| CVE-2015-4757 | redhat_vex | mysql: unspecified vulnerability related to Server:Optimizer (CPU July 2015) | fixed: 428 known affected: 17 | 2026-06-28T11:21:00+00:00 | Vulnerability · Source |
| CVE-2014-3654 | redhat_vex | Satellite: Spacewalk contains multiple XSS (stored and reflected) | fixed: 26 | 2026-06-28T11:21:00+00:00 | Vulnerability · Source |
| CVE-2019-20916 | redhat_vex | python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py | fixed: 552 known affected: 2 known not affected: 8 | 2026-06-28T11:20:58+00:00 | Vulnerability · Source |
| CVE-2020-13757 | redhat_vex | python-rsa: decryption of ciphertext leads to DoS | fixed: 4 known affected: 7 known not affected: 12 | 2026-06-28T11:20:57+00:00 | Vulnerability · Source |
| CVE-2018-8014 | redhat_vex | tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins | fixed: 244 known affected: 6 known not affected: 38 | 2026-06-28T11:20:57+00:00 | Vulnerability · Source |
| CVE-2025-59732 | redhat_vex | FFmpeg: FFmpeg: Heap memory corruption when decoding OpenEXR files with DWAA/DWAB compression | known not affected: 1 | 2026-06-28T11:20:55+00:00 | Vulnerability · Source |
| CVE-2024-53681 | redhat_vex | kernel: nvmet: Don't overflow subsysnqn | fixed: 305 known affected: 50 known not affected: 138 | 2026-06-28T11:20:55+00:00 | Vulnerability · Source |
| CVE-2014-3615 | redhat_vex | Qemu: information leakage when guest sets high resolution | fixed: 81 known not affected: 8 | 2026-06-28T11:20:55+00:00 | Vulnerability · Source |
| CVE-2026-43039 | redhat_vex | kernel: net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch | known not affected: 274 | 2026-06-28T11:20:50+00:00 | Vulnerability · Source |
| CVE-2014-3590 | redhat_vex | rhn_satellite_6: cross-site request forgery (CSRF) can force logout | fixed: 929 | 2026-06-28T11:20:48+00:00 | Vulnerability · Source |