VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294155 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-6102 | redhat_vex | chromium-browser: URL spoof in Omnibox | fixed: 12 | 2026-06-28T11:14:14+00:00 | Vulnerability · Source |
| CVE-2018-6095 | redhat_vex | chromium-browser: Lack of meaningful user interaction requirement before file upload | fixed: 12 | 2026-06-28T11:14:14+00:00 | Vulnerability · Source |
| CVE-2018-6099 | redhat_vex | chromium-browser: CORS bypass in ServiceWorker | fixed: 12 | 2026-06-28T11:14:14+00:00 | Vulnerability · Source |
| CVE-2015-8412 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:14:13+00:00 | Vulnerability · Source |
| CVE-2015-8426 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:14:13+00:00 | Vulnerability · Source |
| CVE-2015-8413 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:14:13+00:00 | Vulnerability · Source |
| CVE-2015-8411 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:14:13+00:00 | Vulnerability · Source |
| CVE-2015-8402 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:14:12+00:00 | Vulnerability · Source |
| CVE-2018-6078 | redhat_vex | chromium-browser: url spoof in omnibox | fixed: 12 | 2026-06-28T11:14:12+00:00 | Vulnerability · Source |
| CVE-2021-3736 | redhat_vex | kernel: uninitialized kernel stack may lead to information disclosure | known not affected: 198 | 2026-06-28T11:14:10+00:00 | Vulnerability · Source |
| CVE-2017-5973 | redhat_vex | Qemu: usb: infinite loop while doing control transfer in xhci_kick_epctx | fixed: 47 known affected: 10 known not affected: 8 | 2026-06-28T11:14:07+00:00 | Vulnerability · Source |
| CVE-2017-3509 | redhat_vex | OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520) | fixed: 858 known affected: 17 | 2026-06-28T11:14:07+00:00 | Vulnerability · Source |
| CVE-2017-5130 | redhat_vex | chromium-browser: heap overflow in libxml2 | fixed: 12 known affected: 4 known not affected: 11 | 2026-06-28T11:14:07+00:00 | Vulnerability · Source |
| CVE-2020-6450 | redhat_vex | chromium-browser: Use after free in WebAudio | fixed: 14 | 2026-06-28T11:14:07+00:00 | Vulnerability · Source |
| CVE-2011-0565 | redhat_vex | acroread: critical APSB11-03 | fixed: 18 | 2026-06-28T11:14:06+00:00 | Vulnerability · Source |
| CVE-2017-5120 | redhat_vex | chromium-browser: potential https downgrade during redirect navigation | fixed: 12 | 2026-06-28T11:14:05+00:00 | Vulnerability · Source |
| CVE-2017-5070 | redhat_vex | chromium-browser: type confusion in v8 | fixed: 12 | 2026-06-28T11:14:05+00:00 | Vulnerability · Source |
| CVE-2017-5034 | redhat_vex | chromium-browser: use after free in pdfium | fixed: 12 | 2026-06-28T11:14:04+00:00 | Vulnerability · Source |
| CVE-2016-4475 | redhat_vex | foreman: API and UI actions/URLs not limited to the orgs/locations assigned | fixed: 131 known affected: 3 | 2026-06-28T11:14:04+00:00 | Vulnerability · Source |
| CVE-2017-3305 | redhat_vex | mysql: incorrect enforcement of ssl-mode=REQUIRED in MySQL 5.5 and 5.6 | fixed: 60 known not affected: 66 | 2026-06-28T11:14:03+00:00 | Vulnerability · Source |
| CVE-2017-3650 | redhat_vex | mysql: C API unspecified vulnerability (CPU Jul 2017) | fixed: 54 known not affected: 86 | 2026-06-28T11:14:02+00:00 | Vulnerability · Source |
| CVE-2018-11469 | redhat_vex | haproxy: Information disclosure in check_request_for_cacheability function in proto_http.c | fixed: 20 known not affected: 8 | 2026-06-28T11:14:02+00:00 | Vulnerability · Source |
| CVE-2018-11212 | redhat_vex | libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c | fixed: 303 known affected: 5 known not affected: 6 | 2026-06-28T11:14:00+00:00 | Vulnerability · Source |
| CVE-2017-3452 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017) | fixed: 60 known not affected: 65 | 2026-06-28T11:13:59+00:00 | Vulnerability · Source |
| CVE-2026-8972 | redhat_vex | firefox: thunderbird: Privilege escalation in the WebRTC: Audio/Video component | known not affected: 23 | 2026-06-28T11:13:58+00:00 | Vulnerability · Source |
| CVE-2026-48587 | redhat_vex | django: Django: Information disclosure via improper handling of Vary header whitespace | known affected: 19 | 2026-06-28T11:13:57+00:00 | Vulnerability · Source |
| CVE-2017-3071 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-15 | fixed: 3 | 2026-06-28T11:13:54+00:00 | Vulnerability · Source |
| CVE-2025-44904 | redhat_vex | hdf5: Heap Buffer Overflow in HDF5 H5VM_memcpyvv Function | known affected: 1 | 2026-06-28T11:13:54+00:00 | Vulnerability · Source |
| CVE-2019-3846 | redhat_vex | kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c | fixed: 517 known affected: 1 known not affected: 26 | 2026-06-28T11:13:53+00:00 | Vulnerability · Source |
| CVE-2017-3082 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-17 | fixed: 3 | 2026-06-28T11:13:52+00:00 | Vulnerability · Source |
| CVE-2017-2926 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-02 | fixed: 3 known affected: 1 | 2026-06-28T11:13:51+00:00 | Vulnerability · Source |
| CVE-2017-2934 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-02 | fixed: 3 known affected: 1 | 2026-06-28T11:13:50+00:00 | Vulnerability · Source |
| CVE-2026-12467 | redhat_vex | chromium-browser: chromium-browser: Use after free in Extensions | known not affected: 1 | 2026-06-28T11:13:50+00:00 | Vulnerability · Source |
| CVE-2025-62291 | redhat_vex | strongswan: strongSwan: Arbitrary Code Execution and Denial of Service via crafted EAP-MSCHAPv2 message | known not affected: 1 | 2026-06-28T11:13:48+00:00 | Vulnerability · Source |
| CVE-2018-10861 | redhat_vex | ceph: ceph-mon does not perform authorization on OSD pool ops | fixed: 205 known not affected: 15 | 2026-06-28T11:13:48+00:00 | Vulnerability · Source |
| CVE-2024-26861 | redhat_vex | kernel: wireguard: receive: annotate data-race around receiving_counter.counter | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T11:13:45+00:00 | Vulnerability · Source |
| CVE-2017-2671 | redhat_vex | kernel: ping socket / AF_LLC connect() sin_family race | fixed: 381 known not affected: 8 | 2026-06-28T11:13:45+00:00 | Vulnerability · Source |
| CVE-2021-3732 | redhat_vex | kernel: overlayfs: Mounting overlayfs inside an unprivileged user namespace can reveal files | fixed: 150 known affected: 15 known not affected: 134 | 2026-06-28T11:13:45+00:00 | Vulnerability · Source |
| CVE-2026-23100 | redhat_vex | kernel: mm/hugetlb: fix hugetlb_pmd_shared() | known affected: 90 known not affected: 184 | 2026-06-28T11:13:43+00:00 | Vulnerability · Source |
| CVE-2017-2647 | redhat_vex | kernel: Null pointer dereference in search_keyring | fixed: 503 known not affected: 18 | 2026-06-28T11:13:42+00:00 | Vulnerability · Source |
| CVE-2018-4937 | redhat_vex | flash-plugin: Remote Code Execution vulnerabilities (APSB18-08) | fixed: 3 | 2026-06-28T11:13:41+00:00 | Vulnerability · Source |
| CVE-2018-4934 | redhat_vex | flash-plugin: Information Disclosure vulnerabilities (APSB18-08) | fixed: 3 | 2026-06-28T11:13:41+00:00 | Vulnerability · Source |
| CVE-2010-3643 | redhat_vex | flash-plugin: security bulletin APSB10-26 | fixed: 9 | 2026-06-28T11:13:41+00:00 | Vulnerability · Source |
| CVE-2026-5897 | redhat_vex | chromium-browser: Incorrect security UI in Downloads | known not affected: 1 | 2026-06-28T11:13:41+00:00 | Vulnerability · Source |
| CVE-2025-58782 | redhat_vex | org.apache.jackrabbit/jackrabbit-core: org.apache.jackrabbit/jackrabbit-jcr-commons: Apache Jackrabbit JNDI injection | known affected: 5 known not affected: 3 | 2026-06-28T11:13:41+00:00 | Vulnerability · Source |
| CVE-2018-11806 | redhat_vex | QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams | fixed: 141 known affected: 9 known not affected: 17 | 2026-06-28T11:13:39+00:00 | Vulnerability · Source |
| CVE-2018-3721 | redhat_vex | lodash: Prototype pollution in utilities function | fixed: 1 known affected: 4 known not affected: 12 | 2026-06-28T11:13:38+00:00 | Vulnerability · Source |
| CVE-2008-3111 | redhat_vex | Java Web Start Buffer overflow vulnerabilities (6557220) | fixed: 194 | 2026-06-28T11:13:38+00:00 | Vulnerability · Source |
| CVE-2026-4706 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component | fixed: 320 known affected: 8 | 2026-06-28T11:13:38+00:00 | Vulnerability · Source |
| CVE-2026-5913 | redhat_vex | chromium-browser: Out of bounds read in Blink | known not affected: 1 | 2026-06-28T11:13:37+00:00 | Vulnerability · Source |