VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294149 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2014-3573 | redhat_vex | Engine: XML eXternal Entity (XXE) flaw in backend module | fixed: 16 known affected: 2 | 2026-06-28T11:20:47+00:00 | Vulnerability · Source |
| CVE-2025-71302 | redhat_vex | kernel: drm/panthor: fix for dma-fence safe access rules | known not affected: 274 | 2026-06-28T11:20:46+00:00 | Vulnerability · Source |
| CVE-2016-4448 | redhat_vex | libxml2: Format string vulnerability | fixed: 145 known affected: 2 | 2026-06-28T11:20:45+00:00 | Vulnerability · Source |
| CVE-2026-12049 | redhat_vex | pgAdmin 4: pgAdmin 4: Open redirect vulnerability in multi-factor authentication can lead to phishing | known not affected: 1 | 2026-06-28T11:20:45+00:00 | Vulnerability · Source |
| CVE-2018-16862 | redhat_vex | kernel: cleancache: Infoleak of deleted files after reuse of old inodes | known affected: 49 known not affected: 55 | 2026-06-28T11:20:44+00:00 | Vulnerability · Source |
| CVE-2025-41079 | redhat_vex | Seafile: Seafile: Stored Cross-Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-28T11:20:43+00:00 | Vulnerability · Source |
| CVE-2016-8630 | redhat_vex | kernel: kvm: x86: NULL pointer dereference during instruction decode | fixed: 191 known not affected: 27 | 2026-06-28T11:20:43+00:00 | Vulnerability · Source |
| CVE-2026-10268 | redhat_vex | janet: Janet: Denial of Service via integer overflow in unmarshal_one_fiber function | known not affected: 1 | 2026-06-28T11:20:42+00:00 | Vulnerability · Source |
| CVE-2026-42791 | redhat_vex | erlang: Erlang OTP: Authentication bypass due to improper OCSP certificate validation | known not affected: 41 | 2026-06-28T11:20:41+00:00 | Vulnerability · Source |
| CVE-2014-2414 | redhat_vex | OpenJDK: incorrect caching of data initialized via TCCL (JAXB, 8025030) | fixed: 749 known not affected: 15 | 2026-06-28T11:20:41+00:00 | Vulnerability · Source |
| CVE-2014-0498 | redhat_vex | flash-plugin: multiple flaws lead to arbitrary code execution (APSB14-07) | fixed: 5 | 2026-06-28T11:20:40+00:00 | Vulnerability · Source |
| CVE-2014-2497 | redhat_vex | gd: NULL pointer dereference in gdImageCreateFromXpm() | fixed: 970 known affected: 8 known not affected: 10 | 2026-06-28T11:20:40+00:00 | Vulnerability · Source |
| CVE-2026-12046 | redhat_vex | pgadmin4: pgAdmin 4: Remote Code Execution due to missing authentication on critical functions | known not affected: 1 | 2026-06-28T11:20:39+00:00 | Vulnerability · Source |
| CVE-2014-0492 | redhat_vex | flash-plugin: memory address layout randomization defeat (APSB14-02) | fixed: 5 | 2026-06-28T11:20:38+00:00 | Vulnerability · Source |
| CVE-2026-12007 | redhat_vex | chromium-browser: chromium-browser: Use after free Core | known not affected: 1 | 2026-06-28T11:20:38+00:00 | Vulnerability · Source |
| CVE-2014-0423 | redhat_vex | OpenJDK: XXE issue in decoder (Beans, 8023245) | fixed: 690 known not affected: 21 | 2026-06-28T11:20:37+00:00 | Vulnerability · Source |
| CVE-2026-3889 | redhat_vex | thunderbird: Spoofing issue in Thunderbird | fixed: 148 known affected: 5 | 2026-06-28T11:20:35+00:00 | Vulnerability · Source |
| CVE-2016-8284 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU October 2016) | fixed: 80 known not affected: 79 | 2026-06-28T11:20:35+00:00 | Vulnerability · Source |
| CVE-2026-45884 | redhat_vex | kernel: apparmor: avoid per-cpu hold underflow in aa_get_buffer | known not affected: 274 | 2026-06-28T11:20:34+00:00 | Vulnerability · Source |
| CVE-2016-8283 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Types (CPU October 2016) | fixed: 479 known affected: 18 known not affected: 8 under investigation: 9 | 2026-06-28T11:20:34+00:00 | Vulnerability · Source |
| CVE-2026-46091 | redhat_vex | kernel: media: rc: igorplugusb: heed coherency rules | known not affected: 274 | 2026-06-28T11:20:34+00:00 | Vulnerability · Source |
| CVE-2016-4218 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:20:32+00:00 | Vulnerability · Source |
| CVE-2026-2319 | redhat_vex | chromium-browser: Race in DevTools | known not affected: 1 | 2026-06-28T11:20:31+00:00 | Vulnerability · Source |
| CVE-2026-23365 | redhat_vex | kernel: net: usb: kalmia: validate USB endpoints | known affected: 260 known not affected: 14 | 2026-06-28T11:20:31+00:00 | Vulnerability · Source |
| CVE-2026-4695 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component | fixed: 320 known affected: 8 | 2026-06-28T11:20:30+00:00 | Vulnerability · Source |
| CVE-2026-43032 | redhat_vex | kernel: NFC: pn533: bound the UART receive buffer | known not affected: 274 | 2026-06-28T11:20:28+00:00 | Vulnerability · Source |
| CVE-2025-70034 | redhat_vex | ssh2: ssh2: Denial of Service due to inefficient regular expression complexity | known affected: 2 known not affected: 20 | 2026-06-28T11:20:25+00:00 | Vulnerability · Source |
| CVE-2014-0588 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-24) | fixed: 6 | 2026-06-28T11:20:24+00:00 | Vulnerability · Source |
| CVE-2016-4147 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:20:24+00:00 | Vulnerability · Source |
| CVE-2014-0540 | redhat_vex | flash-plugin: multiple code execution or security bypass flaws (APSB14-18) | fixed: 5 | 2026-06-28T11:20:23+00:00 | Vulnerability · Source |
| CVE-2014-0531 | redhat_vex | flash-plugin: multiple cross-site scripting flaws (APSB14-16) | fixed: 5 | 2026-06-28T11:20:22+00:00 | Vulnerability · Source |
| CVE-2014-0429 | redhat_vex | OpenJDK: Incorrect mlib/raster image validation (2D, 8027841) | fixed: 856 known not affected: 7 | 2026-06-28T11:20:22+00:00 | Vulnerability · Source |
| CVE-2014-0446 | redhat_vex | OpenJDK: Protect logger handlers (Libraries, 8029740) | fixed: 856 known not affected: 7 | 2026-06-28T11:20:22+00:00 | Vulnerability · Source |
| CVE-2026-33542 | redhat_vex | github.com/lxc/incus: Incus: Image cache poisoning due to insufficient image fingerprint validation | known not affected: 1 | 2026-06-28T11:20:22+00:00 | Vulnerability · Source |
| CVE-2026-34073 | redhat_vex | python-cryptography: Cryptography: Security bypass due to improper DNS name constraint validation | fixed: 1 known affected: 178 known not affected: 2 | 2026-06-28T11:20:22+00:00 | Vulnerability · Source |
| CVE-2014-0416 | redhat_vex | OpenJDK: insecure subject principals set handling (JAAS, 8024306) | fixed: 690 known not affected: 21 | 2026-06-28T11:20:21+00:00 | Vulnerability · Source |
| CVE-2010-3625 | redhat_vex | acroread: multiple code execution flaws (APSB10-21) | fixed: 12 known not affected: 2 | 2026-06-28T11:20:19+00:00 | Vulnerability · Source |
| CVE-2025-71239 | redhat_vex | kernel: audit: add fchmodat2() to change attributes class | known affected: 14 known not affected: 260 | 2026-06-28T11:20:18+00:00 | Vulnerability · Source |
| CVE-2025-43966 | redhat_vex | libheif: "NULL Pointer Dereference in ImageItem_iden in libheif | known not affected: 1 | 2026-06-28T11:20:18+00:00 | Vulnerability · Source |
| CVE-2018-9568 | redhat_vex | kernel: Memory corruption due to incorrect socket cloning | fixed: 820 known affected: 1 known not affected: 64 | 2026-06-28T11:20:16+00:00 | Vulnerability · Source |
| CVE-2026-31730 | redhat_vex | kernel: misc: fastrpc: possible double-free of cctx->remote_heap | known not affected: 274 | 2026-06-28T11:20:16+00:00 | Vulnerability · Source |
| CVE-2015-7312 | redhat_vex | kernel: multiple race conditions in aufs | known not affected: 93 | 2026-06-28T11:20:13+00:00 | Vulnerability · Source |
| CVE-2024-56566 | redhat_vex | kernel: mm/slub: Avoid list corruption when removing a slab from the full list | fixed: 305 known affected: 70 known not affected: 118 | 2026-06-28T11:20:12+00:00 | Vulnerability · Source |
| CVE-2024-56605 | redhat_vex | kernel: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() | fixed: 305 known affected: 98 known not affected: 14 | 2026-06-28T11:20:10+00:00 | Vulnerability · Source |
| CVE-2013-7285 | redhat_vex | XStream: remote code execution due to insecure XML deserialization | fixed: 16 known affected: 3 known not affected: 3 | 2026-06-28T11:20:05+00:00 | Vulnerability · Source |
| CVE-2018-16396 | redhat_vex | ruby: Tainted flags are not propagated in Array#pack and String#unpack with some directives | fixed: 811 known affected: 13 known not affected: 47 | 2026-06-28T11:20:03+00:00 | Vulnerability · Source |
| CVE-2013-6954 | redhat_vex | libpng: unhandled zero-length PLTE chunk or NULL palette | fixed: 484 known not affected: 20 | 2026-06-28T11:20:02+00:00 | Vulnerability · Source |
| CVE-2022-3522 | redhat_vex | kernel: race condition in hugetlb_no_page() in mm/hugetlb.c | fixed: 514 known not affected: 42 | 2026-06-28T11:19:59+00:00 | Vulnerability · Source |
| CVE-2026-40719 | redhat_vex | MaraDNS: MaraDNS: Denial of Service via unresolvable authoritative nameserver address | known not affected: 1 | 2026-06-28T11:19:59+00:00 | Vulnerability · Source |
| CVE-2026-10230 | redhat_vex | assimp: Assimp: Local heap-based buffer overflow in Half-Life 1 MDL Loader | known affected: 4 known not affected: 4 | 2026-06-28T11:19:59+00:00 | Vulnerability · Source |