VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294161 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2014-3668 | redhat_vex | php: xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime() | fixed: 967 known not affected: 1 | 2026-06-28T11:07:35+00:00 | Vulnerability · Source |
| CVE-2016-9596 | redhat_vex | libxml2: stack exhaustion while parsing xml files in recovery mode (unfixed CVE-2016-3627 in JBCS) | fixed: 1 known affected: 1 known not affected: 11 | 2026-06-28T11:07:35+00:00 | Vulnerability · Source |
| CVE-2026-45624 | redhat_vex | ImageMagick: ImageMagick: Data exposure due to image processing vulnerability | known affected: 14 | 2026-06-28T11:07:34+00:00 | Vulnerability · Source |
| CVE-2014-6517 | redhat_vex | OpenJDK: StAX parser parameter entity XXE (JAXP, 8039533) | fixed: 522 known not affected: 23 | 2026-06-28T11:07:33+00:00 | Vulnerability · Source |
| CVE-2024-36941 | redhat_vex | kernel: wifi: nl80211: don't free NULL coalescing rule | fixed: 927 known affected: 64 known not affected: 11 | 2026-06-28T11:07:33+00:00 | Vulnerability · Source |
| CVE-2014-6593 | redhat_vex | OpenJDK: incorrect tracking of ChangeCipherSpec during SSL/TLS handshake (JSSE, 8057555) | fixed: 948 known not affected: 24 | 2026-06-28T11:07:33+00:00 | Vulnerability · Source |
| CVE-2014-5008 | redhat_vex | snoopy: incomplete fixes for command execution flaws | fixed: 18 known affected: 7 | 2026-06-28T11:07:31+00:00 | Vulnerability · Source |
| CVE-2014-3514 | redhat_vex | rubygem-activerecord: Strong Parameter bypass with create_with | fixed: 15 known not affected: 11 | 2026-06-28T11:07:31+00:00 | Vulnerability · Source |
| CVE-2014-3200 | redhat_vex | chromium: multiple unspecified issues fixed in Chrome 38.0.2125.101 | fixed: 15 known affected: 9 | 2026-06-28T11:07:30+00:00 | Vulnerability · Source |
| CVE-2019-5780 | redhat_vex | chromium-browser: Insufficient policy enforcement | fixed: 12 | 2026-06-28T11:07:29+00:00 | Vulnerability · Source |
| CVE-2007-6637 | redhat_vex | Flash Player content injection flaw | fixed: 10 | 2026-06-28T11:07:29+00:00 | Vulnerability · Source |
| CVE-2017-15423 | redhat_vex | chromium-browser: issue with spake implementation in boringssl | fixed: 12 | 2026-06-28T11:07:29+00:00 | Vulnerability · Source |
| CVE-2014-0536 | redhat_vex | flash-plugin: arbitrary code execution flaws (APSB14-16) | fixed: 5 | 2026-06-28T11:07:29+00:00 | Vulnerability · Source |
| CVE-2014-0584 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-24) | fixed: 6 | 2026-06-28T11:07:29+00:00 | Vulnerability · Source |
| CVE-2014-0504 | redhat_vex | flash-plugin: exposure of clipboard contents (APSB14-08) | fixed: 5 | 2026-06-28T11:07:28+00:00 | Vulnerability · Source |
| CVE-2019-5809 | redhat_vex | chromium-browser: Use after free in Blink | fixed: 14 | 2026-06-28T11:07:27+00:00 | Vulnerability · Source |
| CVE-2014-0459 | redhat_vex | lcms: insufficient ICC profile version validation (OpenJDK 2D, 8031335) | fixed: 404 known affected: 3 known not affected: 37 under investigation: 5 | 2026-06-28T11:07:26+00:00 | Vulnerability · Source |
| CVE-2014-0375 | redhat_vex | JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment) | fixed: 420 known not affected: 7 | 2026-06-28T11:07:25+00:00 | Vulnerability · Source |
| CVE-2026-46055 | redhat_vex | kernel: apparmor: Fix string overrun due to missing termination | known not affected: 274 | 2026-06-28T11:07:25+00:00 | Vulnerability · Source |
| CVE-2025-14969 | redhat_vex | hibernate-reactive-core: Hibernate Reactive: Denial of Service due to connection leak on HTTP client disconnect | fixed: 1 known not affected: 6 | 2026-06-28T11:07:24+00:00 | Vulnerability · Source |
| CVE-2016-9576 | redhat_vex | kernel: Use after free in SCSI generic device interface | fixed: 381 known not affected: 8 | 2026-06-28T11:07:23+00:00 | Vulnerability · Source |
| CVE-2016-9083 | redhat_vex | kernel: State machine confusion bug in vfio driver leading to memory corruption | fixed: 191 known not affected: 27 | 2026-06-28T11:07:22+00:00 | Vulnerability · Source |
| CVE-2026-11158 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Downloads | known not affected: 1 | 2026-06-28T11:07:21+00:00 | Vulnerability · Source |
| CVE-2013-2415 | redhat_vex | OpenJDK: temporary files created with insecure permissions (JAX-WS, 8003542) | fixed: 272 known not affected: 13 | 2026-06-28T11:07:20+00:00 | Vulnerability · Source |
| CVE-2014-0199 | redhat_vex | ovirt-engine-reports: setup script logs database password in cleartext | fixed: 2 | 2026-06-28T11:07:19+00:00 | Vulnerability · Source |
| CVE-2026-11164 | redhat_vex | chromium-browser: Use after free in Blink | known not affected: 1 | 2026-06-28T11:07:19+00:00 | Vulnerability · Source |
| CVE-2014-0154 | redhat_vex | ovirt-engine-webadmin: HttpOnly flag is not included when the session ID is set | fixed: 18 | 2026-06-28T11:07:19+00:00 | Vulnerability · Source |
| CVE-2013-5896 | redhat_vex | OpenJDK: com.sun.corba.se. should be restricted package (CORBA, 8025022) | fixed: 583 known not affected: 21 | 2026-06-28T11:07:18+00:00 | Vulnerability · Source |
| CVE-2013-7421 | redhat_vex | kernel: crypto api unprivileged arbitrary module load via request_module() | fixed: 189 known not affected: 15 | 2026-06-28T11:07:18+00:00 | Vulnerability · Source |
| CVE-2026-34944 | redhat_vex | wasmtime: Wasmtime: Denial of Service due to out-of-bounds read during WebAssembly compilation | known affected: 2 | 2026-06-28T11:07:16+00:00 | Vulnerability · Source |
| CVE-2013-5775 | redhat_vex | JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX) | fixed: 53 | 2026-06-28T11:07:16+00:00 | Vulnerability · Source |
| CVE-2026-11215 | redhat_vex | chromium-browser: Inappropriate implementation in Cronet | known not affected: 1 | 2026-06-28T11:07:16+00:00 | Vulnerability · Source |
| CVE-2013-5888 | redhat_vex | JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment) | fixed: 420 known not affected: 7 | 2026-06-28T11:07:16+00:00 | Vulnerability · Source |
| CVE-2016-1668 | redhat_vex | chromium-browser: same origin bypass in blink v8 bindings | fixed: 12 | 2026-06-28T11:07:14+00:00 | Vulnerability · Source |
| CVE-2013-2412 | redhat_vex | OpenJDK: JConsole SSL support (Serviceability, 8003703) | fixed: 462 known not affected: 8 | 2026-06-28T11:07:14+00:00 | Vulnerability · Source |
| CVE-2013-2192 | redhat_vex | hadoop: man-in-the-middle vulnerability | fixed: 4 known not affected: 1 | 2026-06-28T11:07:14+00:00 | Vulnerability · Source |
| CVE-2026-34945 | redhat_vex | wasmtime: winch: Wasmtime Winch compiler: Information disclosure via incorrect table.size instruction translation | known affected: 2 | 2026-06-28T11:07:12+00:00 | Vulnerability · Source |
| CVE-2025-29891 | redhat_vex | camel-http: org.apache.camel: Apache Camel: Camel Message Header Injection through request parameters | known affected: 13 known not affected: 6 | 2026-06-28T11:07:12+00:00 | Vulnerability · Source |
| CVE-2013-1686 | redhat_vex | Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-50) | fixed: 140 known affected: 1 | 2026-06-28T11:07:10+00:00 | Vulnerability · Source |
| CVE-2026-46062 | redhat_vex | kernel: ntfs3: fix integer overflow in run_unpack() volume boundary check | known not affected: 274 | 2026-06-28T11:07:10+00:00 | Vulnerability · Source |
| CVE-2016-1644 | redhat_vex | chromium-browser: use-after-free in Blink | fixed: 12 | 2026-06-28T11:07:08+00:00 | Vulnerability · Source |
| CVE-2026-11187 | redhat_vex | chromium-browser: Insufficient policy enforcement in Glic | known not affected: 1 | 2026-06-28T11:07:08+00:00 | Vulnerability · Source |
| CVE-2016-1642 | redhat_vex | chromium-browser: various fixes from internal audits | fixed: 12 | 2026-06-28T11:07:08+00:00 | Vulnerability · Source |
| CVE-2013-1372 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-05) | fixed: 4 | 2026-06-28T11:07:06+00:00 | Vulnerability · Source |
| CVE-2013-0801 | redhat_vex | Mozilla: Miscellaneous memory safety hazards (rv:17.0.6) (MFSA 2013-41) | fixed: 140 known affected: 1 | 2026-06-28T11:07:06+00:00 | Vulnerability · Source |
| CVE-2024-35946 | redhat_vex | kernel: wifi: rtw89: fix null pointer access when abort scan | fixed: 709 known affected: 22 known not affected: 50 | 2026-06-28T11:07:04+00:00 | Vulnerability · Source |
| CVE-2026-43011 | redhat_vex | kernel: net/x25: Fix potential double free of skb | known not affected: 274 | 2026-06-28T11:07:01+00:00 | Vulnerability · Source |
| CVE-2013-0787 | redhat_vex | Mozilla: Use-after-free in HTML Editor (MFSA 2013-29) | fixed: 99 known affected: 1 | 2026-06-28T11:07:01+00:00 | Vulnerability · Source |
| CVE-2024-35928 | redhat_vex | kernel: drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init() | fixed: 280 known affected: 98 known not affected: 22 | 2026-06-28T11:06:57+00:00 | Vulnerability · Source |
| CVE-2024-35892 | redhat_vex | kernel: net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() | fixed: 280 known affected: 64 known not affected: 56 | 2026-06-28T11:06:56+00:00 | Vulnerability · Source |