VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294155 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-1000410 | redhat_vex | kernel: Stack information leak in the EFS element | fixed: 562 known not affected: 1 | 2026-06-28T11:09:53+00:00 | Vulnerability · Source |
| CVE-2016-8650 | redhat_vex | kernel: Null pointer dereference via keyctl | fixed: 387 known not affected: 1 | 2026-06-28T11:09:53+00:00 | Vulnerability · Source |
| CVE-2017-10115 | redhat_vex | OpenJDK: DSA implementation timing attack (JCE, 8175106) | fixed: 854 | 2026-06-28T11:09:53+00:00 | Vulnerability · Source |
| CVE-2016-4275 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-29 | fixed: 5 | 2026-06-28T11:09:51+00:00 | Vulnerability · Source |
| CVE-2016-6294 | redhat_vex | php: Out-of-bounds access in locale_accept_from_http | fixed: 251 known affected: 109 known not affected: 1 | 2026-06-28T11:09:51+00:00 | Vulnerability · Source |
| CVE-2016-8288 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: InnoDB Plugin (CPU October 2016) | fixed: 80 known not affected: 79 | 2026-06-28T11:09:51+00:00 | Vulnerability · Source |
| CVE-2016-6292 | redhat_vex | php: Null pointer dereference in exif_process_user_comment | fixed: 251 known affected: 80 known not affected: 30 | 2026-06-28T11:09:51+00:00 | Vulnerability · Source |
| CVE-2016-5432 | redhat_vex | ovirt-engine: ovirt-engine-provisiondb logs contain DB username and password in plain text | fixed: 23 known affected: 1 | 2026-06-28T11:09:50+00:00 | Vulnerability · Source |
| CVE-2017-1000405 | redhat_vex | kernel: pmd can become dirty without going through a COW cycle | fixed: 50 known not affected: 55 | 2026-06-28T11:09:50+00:00 | Vulnerability · Source |
| CVE-2019-0220 | redhat_vex | httpd: URL normalization inconsistency | fixed: 654 known affected: 10 known not affected: 2 | 2026-06-28T11:09:50+00:00 | Vulnerability · Source |
| CVE-2026-11201 | redhat_vex | chromium-browser: Use after free in ServiceWorker | known not affected: 1 | 2026-06-28T11:09:49+00:00 | Vulnerability · Source |
| CVE-2017-1000380 | redhat_vex | kernel: information leak due to a data race in ALSA timer | fixed: 207 known affected: 31 | 2026-06-28T11:09:49+00:00 | Vulnerability · Source |
| CVE-2017-1000379 | redhat_vex | kernel: Incorrectly mapped contents of PIE executable | fixed: 923 known affected: 16 known not affected: 7 | 2026-06-28T11:09:49+00:00 | Vulnerability · Source |
| CVE-2016-5215 | redhat_vex | chromium-browser: use after free in webaudio | fixed: 12 | 2026-06-28T11:09:48+00:00 | Vulnerability · Source |
| CVE-2016-5214 | redhat_vex | chromium-browser: file download protection bypass | fixed: 12 | 2026-06-28T11:09:48+00:00 | Vulnerability · Source |
| CVE-2016-5166 | redhat_vex | chromium-browser: smb relay attack via save page as | fixed: 12 | 2026-06-28T11:09:47+00:00 | Vulnerability · Source |
| CVE-2016-5185 | redhat_vex | chromium-browser: use after free in blink | fixed: 12 | 2026-06-28T11:09:47+00:00 | Vulnerability · Source |
| CVE-2016-4226 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:09:47+00:00 | Vulnerability · Source |
| CVE-2016-4483 | redhat_vex | libxml2: out-of-bounds read | fixed: 1 known affected: 13 | 2026-06-28T11:09:47+00:00 | Vulnerability · Source |
| CVE-2016-4187 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:09:45+00:00 | Vulnerability · Source |
| CVE-2025-58136 | redhat_vex | Apache Traffic Server: Apache Traffic Server: Denial of Service via POST request handling | known not affected: 1 | 2026-06-28T11:09:45+00:00 | Vulnerability · Source |
| CVE-2016-4136 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:09:45+00:00 | Vulnerability · Source |
| CVE-2016-4237 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:09:45+00:00 | Vulnerability · Source |
| CVE-2016-4189 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:09:45+00:00 | Vulnerability · Source |
| CVE-2016-4139 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:09:44+00:00 | Vulnerability · Source |
| CVE-2024-30156 | redhat_vex | varnish: HTTP/2 Broken Window Attack may result in denial of service | fixed: 189 known not affected: 8 | 2026-06-28T11:09:44+00:00 | Vulnerability · Source |
| CVE-2016-4149 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:09:44+00:00 | Vulnerability · Source |
| CVE-2016-4151 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:09:43+00:00 | Vulnerability · Source |
| CVE-2016-4181 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:09:43+00:00 | Vulnerability · Source |
| CVE-2016-4183 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T11:09:43+00:00 | Vulnerability · Source |
| CVE-2016-4113 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T11:09:41+00:00 | Vulnerability · Source |
| CVE-2016-4133 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:09:41+00:00 | Vulnerability · Source |
| CVE-2016-4132 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:09:40+00:00 | Vulnerability · Source |
| CVE-2016-3500 | redhat_vex | OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872) | fixed: 713 | 2026-06-28T11:09:40+00:00 | Vulnerability · Source |
| CVE-2024-28182 | redhat_vex | nghttp2: CONTINUATION frames DoS | fixed: 645 known affected: 24 known not affected: 5 | 2026-06-28T11:09:39+00:00 | Vulnerability · Source |
| CVE-2026-8021 | redhat_vex | chromium-browser: Script injection in UI | known not affected: 1 | 2026-06-28T11:09:38+00:00 | Vulnerability · Source |
| CVE-2026-7910 | redhat_vex | chromium-browser: Use after free in Views | known not affected: 1 | 2026-06-28T11:09:37+00:00 | Vulnerability · Source |
| CVE-2015-0192 | redhat_vex | JDK: unspecified Java sandbox restrictions bypass | fixed: 393 | 2026-06-28T11:09:37+00:00 | Vulnerability · Source |
| CVE-2026-11228 | redhat_vex | chromium-browser: Incorrect security UI in File Input | known not affected: 1 | 2026-06-28T11:09:32+00:00 | Vulnerability · Source |
| CVE-2025-27221 | redhat_vex | uri: userinfo leakage in URI#join, URI#merge and URI#+ | fixed: 653 known affected: 3 | 2026-06-28T11:09:32+00:00 | Vulnerability · Source |
| CVE-2009-1097 | redhat_vex | OpenJDK: PNG and GIF processing buffer overflow vulnerabilities (6804996, 6804997) | fixed: 364 | 2026-06-28T11:09:31+00:00 | Vulnerability · Source |
| CVE-2016-2178 | redhat_vex | openssl: Non-constant time codepath followed for certain operations in DSA implementation | fixed: 314 known affected: 9 | 2026-06-28T11:09:30+00:00 | Vulnerability · Source |
| CVE-2024-2494 | redhat_vex | libvirt: negative g_new0 length can lead to unbounded memory allocation | fixed: 1263 known affected: 70 | 2026-06-28T11:09:29+00:00 | Vulnerability · Source |
| CVE-2009-2409 | redhat_vex | deprecate MD2 in SSL cert validation (Kaminsky) | fixed: 857 | 2026-06-28T11:09:28+00:00 | Vulnerability · Source |
| CVE-2016-4449 | redhat_vex | libxml2: Inappropriate fetch of entities content | fixed: 145 known affected: 2 | 2026-06-28T11:09:27+00:00 | Vulnerability · Source |
| CVE-2009-1866 | redhat_vex | flash-plugin: multiple code execution flaws (APSB09-10) | fixed: 10 | 2026-06-28T11:09:27+00:00 | Vulnerability · Source |
| CVE-2018-1102 | redhat_vex | source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go | fixed: 215 | 2026-06-28T11:09:27+00:00 | Vulnerability · Source |
| CVE-2020-7238 | redhat_vex | netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling | fixed: 1830 known affected: 14 known not affected: 3 | 2026-06-28T11:09:25+00:00 | Vulnerability · Source |
| CVE-2026-53065 | redhat_vex | kernel: ASoC: sti: use managed regmap_field allocations | known not affected: 274 | 2026-06-28T11:09:23+00:00 | Vulnerability · Source |
| CVE-2017-1000251 | redhat_vex | kernel: stack buffer overflow in the native Bluetooth stack | fixed: 842 known affected: 16 known not affected: 1 | 2026-06-28T11:09:21+00:00 | Vulnerability · Source |