VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294155 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2021-3929 | redhat_vex | QEMU: nvme: DMA reentrancy issue leads to use-after-free | known not affected: 104 | 2026-06-28T11:11:30+00:00 | Vulnerability · Source |
| CVE-2026-10988 | redhat_vex | chromium-browser: Use after free in Views | known not affected: 1 | 2026-06-28T11:11:28+00:00 | Vulnerability · Source |
| CVE-2026-11035 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Custom Tabs | known not affected: 1 | 2026-06-28T11:11:27+00:00 | Vulnerability · Source |
| CVE-2018-12207 | redhat_vex | hw: Machine Check Error on Page Size Change (IFU) | fixed: 1142 known affected: 1 known not affected: 26 | 2026-06-28T11:11:26+00:00 | Vulnerability · Source |
| CVE-2026-11210 | redhat_vex | chromium-browser: Insufficient policy enforcement in Safe Browsing | known not affected: 1 | 2026-06-28T11:11:23+00:00 | Vulnerability · Source |
| CVE-2026-11283 | redhat_vex | chromium-browser: Policy bypass in Shortcuts | known not affected: 1 | 2026-06-28T11:11:22+00:00 | Vulnerability · Source |
| CVE-2006-1494 | redhat_vex | security flaw | fixed: 335 | 2026-06-28T11:11:20+00:00 | Vulnerability · Source |
| CVE-2026-11136 | redhat_vex | chromium-browser: Use after free in Canvas | known not affected: 1 | 2026-06-28T11:11:20+00:00 | Vulnerability · Source |
| CVE-2023-3019 | redhat_vex | QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() | fixed: 2930 known affected: 37 | 2026-06-28T11:11:18+00:00 | Vulnerability · Source |
| CVE-2023-6693 | redhat_vex | QEMU: virtio-net: stack buffer overflow in virtio_net_flush_tx() | fixed: 1054 known affected: 37 | 2026-06-28T11:11:17+00:00 | Vulnerability · Source |
| CVE-2016-5219 | redhat_vex | chromium-browser: use after free in v8 | fixed: 12 | 2026-06-28T11:11:16+00:00 | Vulnerability · Source |
| CVE-2026-11271 | redhat_vex | chromium-browser: Incorrect security UI in Passwords | known not affected: 1 | 2026-06-28T11:11:16+00:00 | Vulnerability · Source |
| CVE-2026-6491 | redhat_vex | libvips: heap-based buffer over-read in im_minpos_vec() in libvips/deprecated/vips7compat.c | known not affected: 1 | 2026-06-28T11:11:13+00:00 | Vulnerability · Source |
| CVE-2021-46823 | redhat_vex | python-ldap: Regular expression denial of service in LDAP schema parser | known affected: 8 known not affected: 2 | 2026-06-28T11:11:11+00:00 | Vulnerability · Source |
| CVE-2017-15010 | redhat_vex | nodejs-tough-cookie: Regular expression denial of service | fixed: 149 known not affected: 3 | 2026-06-28T11:11:11+00:00 | Vulnerability · Source |
| CVE-2017-14970 | redhat_vex | openvswitch: Multiple memory leaks in lib/ofp-util.c while parsing malformed OpenFlow group mod messages | known not affected: 48 | 2026-06-28T11:11:10+00:00 | Vulnerability · Source |
| CVE-2017-13711 | redhat_vex | QEMU: Slirp: use-after-free when sending response | fixed: 70 known affected: 17 known not affected: 1 | 2026-06-28T11:11:10+00:00 | Vulnerability · Source |
| CVE-2026-0905 | redhat_vex | chromium-browser: Insufficient policy enforcement in Network | known not affected: 1 | 2026-06-28T11:11:10+00:00 | Vulnerability · Source |
| CVE-2026-11257 | redhat_vex | chromium-browser: Inappropriate implementation in Browser | known not affected: 1 | 2026-06-28T11:11:10+00:00 | Vulnerability · Source |
| CVE-2004-0631 | redhat_vex | security flaw | fixed: 1 | 2026-06-28T11:11:09+00:00 | Vulnerability · Source |
| CVE-2017-12934 | redhat_vex | php: heap use after free in ext/standard/var_unserializer.re | fixed: 254 known not affected: 86 | 2026-06-28T11:11:08+00:00 | Vulnerability · Source |
| CVE-2021-3923 | redhat_vex | kernel: stack information leak in infiniband RDMA | fixed: 150 known affected: 42 known not affected: 106 | 2026-06-28T11:11:07+00:00 | Vulnerability · Source |
| CVE-2017-12933 | redhat_vex | php: buffer over-read in finish_nested_data function | fixed: 254 known affected: 86 | 2026-06-28T11:11:06+00:00 | Vulnerability · Source |
| CVE-2017-13673 | redhat_vex | QEMU: VGA: reachable assert failure during display update | fixed: 46 known affected: 32 | 2026-06-28T11:11:06+00:00 | Vulnerability · Source |
| CVE-2017-12155 | redhat_vex | openstack-tripleo-heat-templates: Ceph client keyring is world-readable when deployed by director | fixed: 10 known affected: 9 known not affected: 1 | 2026-06-28T11:11:05+00:00 | Vulnerability · Source |
| CVE-2015-3098 | redhat_vex | flash-plugin: same-origin-policy bypass fixed in APSB15-11 | fixed: 5 | 2026-06-28T11:11:04+00:00 | Vulnerability · Source |
| CVE-2026-54417 | redhat_vex | microtar: microtar: Denial of Service via crafted tar archive due to integer overflow | known not affected: 1 | 2026-06-28T11:11:04+00:00 | Vulnerability · Source |
| CVE-2003-0987 | redhat_vex | httpd mod_digest nonce not verified | fixed: 6 | 2026-06-28T11:11:00+00:00 | Vulnerability · Source |
| CVE-2017-11305 | redhat_vex | flash-plugin: unintended reset of global settings preference file vulnerability (APSB17-42) | fixed: 3 | 2026-06-28T11:10:59+00:00 | Vulnerability · Source |
| CVE-2011-2107 | redhat_vex | flash-plugin: Cross-site scripting vulnerability (APSB11-13) | fixed: 23 | 2026-06-28T11:10:58+00:00 | Vulnerability · Source |
| CVE-2017-11143 | redhat_vex | php: Incorrect WDDX deserialization of boolean parameters leads to DoS | fixed: 254 known affected: 87 known not affected: 30 | 2026-06-28T11:10:57+00:00 | Vulnerability · Source |
| CVE-2018-12537 | redhat_vex | vertx: Improper neutralization of CRLF sequences allows remote attackers to inject arbitrary HTTP response headers | fixed: 2 known not affected: 1 | 2026-06-28T11:10:55+00:00 | Vulnerability · Source |
| CVE-2019-19531 | redhat_vex | kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/yurex.c driver leads to denial of service | known not affected: 104 | 2026-06-28T11:10:54+00:00 | Vulnerability · Source |
| CVE-2018-12931 | redhat_vex | kernel: stack-based out-of-bounds write in ntfs_attr_find in the ntfs.ko | fixed: 16 known not affected: 76 | 2026-06-28T11:10:53+00:00 | Vulnerability · Source |
| CVE-2026-23030 | redhat_vex | kernel: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() | known not affected: 274 | 2026-06-28T11:10:49+00:00 | Vulnerability · Source |
| CVE-2017-12193 | redhat_vex | kernel: Null pointer dereference due to incorrect node-splitting in assoc_array implementation | fixed: 207 known affected: 16 known not affected: 15 | 2026-06-28T11:10:48+00:00 | Vulnerability · Source |
| CVE-2017-12190 | redhat_vex | kernel: memory leak when merging buffers in SCSI IO vectors | fixed: 557 known affected: 1 | 2026-06-28T11:10:47+00:00 | Vulnerability · Source |
| CVE-2019-5010 | redhat_vex | python: NULL pointer dereference using a specially crafted X509 certificate | fixed: 290 known affected: 8 known not affected: 42 | 2026-06-28T11:10:47+00:00 | Vulnerability · Source |
| CVE-2026-57283 | redhat_vex | jenkins-pipeline-groovy: Jenkins Pipeline: Groovy Plugin: Cross-site request forgery allows unauthorized configuration changes. | known affected: 3 | 2026-06-28T11:10:46+00:00 | Vulnerability · Source |
| CVE-2017-10378 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017) | fixed: 892 known affected: 17 known not affected: 9 | 2026-06-28T11:10:45+00:00 | Vulnerability · Source |
| CVE-2026-57285 | redhat_vex | Jenkins GitHub Branch Source Plugin: Jenkins GitHub Branch Source Plugin: Information disclosure via missing permission check | known affected: 3 | 2026-06-28T11:10:45+00:00 | Vulnerability · Source |
| CVE-2026-33420 | redhat_vex | Vaultwarden: Vaultwarden: Information disclosure via missing authorization check | known not affected: 1 | 2026-06-28T11:10:45+00:00 | Vulnerability · Source |
| CVE-2017-10313 | redhat_vex | mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2017) | fixed: 63 known not affected: 86 | 2026-06-28T11:10:44+00:00 | Vulnerability · Source |
| CVE-2017-10296 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Oct 2017) | fixed: 63 known not affected: 86 | 2026-06-28T11:10:44+00:00 | Vulnerability · Source |
| CVE-2017-10293 | redhat_vex | JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc) | fixed: 214 | 2026-06-28T11:10:43+00:00 | Vulnerability · Source |
| CVE-2017-9049 | redhat_vex | libxml2: Heap-based buffer over-read in function xmlDictComputeFastKey | fixed: 1 known affected: 13 known not affected: 7 | 2026-06-28T11:10:42+00:00 | Vulnerability · Source |
| CVE-2017-9050 | redhat_vex | libxml2: Heap-based buffer over-read in function xmlDictAddString | fixed: 1 known affected: 16 known not affected: 4 | 2026-06-28T11:10:42+00:00 | Vulnerability · Source |
| CVE-2017-10227 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017) | fixed: 133 known not affected: 77 | 2026-06-28T11:10:42+00:00 | Vulnerability · Source |
| CVE-2017-10285 | redhat_vex | OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966) | fixed: 830 known affected: 8 | 2026-06-28T11:10:42+00:00 | Vulnerability · Source |
| CVE-2017-10193 | redhat_vex | OpenJDK: incorrect key size constraint check (Security, 8179101) | fixed: 600 | 2026-06-28T11:10:41+00:00 | Vulnerability · Source |