VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294162 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-1914 | redhat_vex | JDK: unspecified partial Java sandbox restrictions bypass | fixed: 393 | 2026-06-28T11:03:04+00:00 | Vulnerability · Source |
| CVE-2016-5547 | redhat_vex | OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705) | fixed: 817 | 2026-06-28T11:03:04+00:00 | Vulnerability · Source |
| CVE-2016-5617 | redhat_vex | mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016) | fixed: 436 known affected: 55 known not affected: 8 | 2026-06-28T11:03:01+00:00 | Vulnerability · Source |
| CVE-2026-12048 | redhat_vex | pgAdmin 4: pgAdmin 4: Cross-site scripting allows arbitrary HTML injection and redirection to malicious sites | known not affected: 1 | 2026-06-28T11:03:01+00:00 | Vulnerability · Source |
| CVE-2016-5573 | redhat_vex | OpenJDK: insufficient checks of JDWP packets (Hotspot, 8159519) | fixed: 1091 | 2026-06-28T11:03:01+00:00 | Vulnerability · Source |
| CVE-2026-12706 | redhat_vex | ffmpeg: ffmpeg: heap use-after-free read in RASC decoder decode_move() | known affected: 8 known not affected: 2 | 2026-06-28T11:03:00+00:00 | Vulnerability · Source |
| CVE-2026-12293 | redhat_vex | firefox: thunderbird: Use-after-free in the Graphics: WebGPU component | known not affected: 23 | 2026-06-28T11:02:59+00:00 | Vulnerability · Source |
| CVE-2016-5423 | redhat_vex | postgresql: CASE/WHEN with inlining can cause untrusted pointer dereference | fixed: 524 known affected: 15 | 2026-06-28T11:02:59+00:00 | Vulnerability · Source |
| CVE-2016-5483 | redhat_vex | mysql: Incorrect input validation allowing code execution via mysqldump | fixed: 459 known affected: 28 | 2026-06-28T11:02:58+00:00 | Vulnerability · Source |
| CVE-2025-3406 | redhat_vex | stb: Nothings stb Header Array out-of-bounds read | known not affected: 1 | 2026-06-28T11:02:53+00:00 | Vulnerability · Source |
| CVE-2026-12301 | redhat_vex | firefox: thunderbird: Memory safety bug fixed in Firefox 152 | known not affected: 23 | 2026-06-28T11:02:53+00:00 | Vulnerability · Source |
| CVE-2016-5403 | redhat_vex | Qemu: virtio: unbounded memory allocation on host via guest leading to DoS | fixed: 184 known affected: 3 known not affected: 5 | 2026-06-28T11:02:52+00:00 | Vulnerability · Source |
| CVE-2026-42497 | redhat_vex | perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction | known affected: 8 | 2026-06-28T11:02:52+00:00 | Vulnerability · Source |
| CVE-2015-1299 | redhat_vex | chromium-browser: Use-after-free in Blink | fixed: 12 | 2026-06-28T11:02:50+00:00 | Vulnerability · Source |
| CVE-2015-1230 | redhat_vex | chromium-browser: Type confusion in v8 | fixed: 15 | 2026-06-28T11:02:49+00:00 | Vulnerability · Source |
| CVE-2021-43267 | redhat_vex | kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type | fixed: 365 known not affected: 152 | 2026-06-28T11:02:43+00:00 | Vulnerability · Source |
| CVE-2014-5333 | redhat_vex | flash-plugin: multiple code execution or security bypass flaws (APSB14-18) | fixed: 5 | 2026-06-28T11:02:36+00:00 | Vulnerability · Source |
| CVE-2015-0406 | redhat_vex | JDK: unspecified vulnerability fixed in 6u91, 7u75 and 8u31 (Deployment) | fixed: 527 known not affected: 7 | 2026-06-28T11:02:34+00:00 | Vulnerability · Source |
| CVE-2025-52566 | redhat_vex | llama-cpp: llama.cpp heap overflow | known not affected: 1 | 2026-06-28T11:02:33+00:00 | Vulnerability · Source |
| CVE-2012-5261 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T11:02:33+00:00 | Vulnerability · Source |
| CVE-2012-5260 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T11:02:33+00:00 | Vulnerability · Source |
| CVE-2012-4166 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-19) | fixed: 5 | 2026-06-28T11:02:32+00:00 | Vulnerability · Source |
| CVE-2012-5073 | redhat_vex | OpenJDK: LogManager security bypass (Libraries, 7169884) | fixed: 588 known affected: 9 | 2026-06-28T11:02:32+00:00 | Vulnerability · Source |
| CVE-2019-10217 | redhat_vex | Ansible: gcp modules do not flag sensitive data fields properly | fixed: 8 known not affected: 10 | 2026-06-28T11:02:31+00:00 | Vulnerability · Source |
| CVE-2026-53442 | redhat_vex | jenkins: Jenkins: Information disclosure of secrets via unencrypted storage | known affected: 1 | 2026-06-28T11:02:30+00:00 | Vulnerability · Source |
| CVE-2026-43371 | redhat_vex | kernel: net: macb: Shuffle the tx ring before enabling tx | known not affected: 274 | 2026-06-28T11:02:29+00:00 | Vulnerability · Source |
| CVE-2026-43287 | redhat_vex | kernel: drm: Account property blob allocations to memcg | known affected: 260 known not affected: 14 | 2026-06-28T11:02:29+00:00 | Vulnerability · Source |
| CVE-2021-43389 | redhat_vex | kernel: an array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c | fixed: 150 known not affected: 149 | 2026-06-28T11:02:29+00:00 | Vulnerability · Source |
| CVE-2022-48747 | redhat_vex | kernel: block: Fix wrong offset in bio_truncate() | fixed: 150 known not affected: 150 | 2026-06-28T11:02:28+00:00 | Vulnerability · Source |
| CVE-2026-43212 | redhat_vex | kernel: LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE | known not affected: 274 | 2026-06-28T11:02:25+00:00 | Vulnerability · Source |
| CVE-2016-5195 | redhat_vex | kernel: mm: privilege escalation via MAP_PRIVATE COW breakage | fixed: 977 known not affected: 1 | 2026-06-28T11:02:25+00:00 | Vulnerability · Source |
| CVE-2025-71064 | redhat_vex | kernel: net: hns3: using the num_tqps in the vf driver to apply for resources | known affected: 232 known not affected: 42 | 2026-06-28T11:02:25+00:00 | Vulnerability · Source |
| CVE-2026-43201 | redhat_vex | kernel: APEI/GHES: ARM processor Error: don't go past allocated memory | known affected: 274 | 2026-06-28T11:02:25+00:00 | Vulnerability · Source |
| CVE-2016-5188 | redhat_vex | chromium-browser: ui spoofing | fixed: 12 | 2026-06-28T11:02:24+00:00 | Vulnerability · Source |
| CVE-2026-11072 | redhat_vex | chromium-browser: Use after free in WebView | known not affected: 1 | 2026-06-28T11:02:24+00:00 | Vulnerability · Source |
| CVE-2016-5167 | redhat_vex | chromium-browser: various fixes from internal audits | fixed: 12 | 2026-06-28T11:02:24+00:00 | Vulnerability · Source |
| CVE-2016-5171 | redhat_vex | chromium-browser: use after free in blink | fixed: 12 | 2026-06-28T11:02:24+00:00 | Vulnerability · Source |
| CVE-2016-5159 | redhat_vex | openjpeg: heap overflow in parsing of JPEG2000 code blocks | fixed: 141 | 2026-06-28T11:02:21+00:00 | Vulnerability · Source |
| CVE-2016-5160 | redhat_vex | chromium-browser: extensions web accessible resources bypass | fixed: 12 | 2026-06-28T11:02:21+00:00 | Vulnerability · Source |
| CVE-2016-5158 | redhat_vex | openjpeg: heap overflow due to unsafe use of opj_aligned_malloc | fixed: 141 | 2026-06-28T11:02:20+00:00 | Vulnerability · Source |
| CVE-2016-5151 | redhat_vex | chromium-browser: use after free in pdfium | fixed: 12 | 2026-06-28T11:02:19+00:00 | Vulnerability · Source |
| CVE-2016-5126 | redhat_vex | Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl | fixed: 128 known not affected: 13 | 2026-06-28T11:02:18+00:00 | Vulnerability · Source |
| CVE-2016-5133 | redhat_vex | chromium-browser: origin confusion in proxy authentication | fixed: 12 | 2026-06-28T11:02:18+00:00 | Vulnerability · Source |
| CVE-2016-5143 | redhat_vex | chromium-browser: Parameter sanitization failure in DevTools | fixed: 12 | 2026-06-28T11:02:18+00:00 | Vulnerability · Source |
| CVE-2026-43234 | redhat_vex | kernel: team: avoid NETDEV_CHANGEMTU event when unregistering slave | known affected: 108 known not affected: 166 | 2026-06-28T11:02:16+00:00 | Vulnerability · Source |
| CVE-2025-71238 | redhat_vex | kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation. | fixed: 1619 known affected: 122 | 2026-06-28T11:02:14+00:00 | Vulnerability · Source |
| CVE-2016-5094 | redhat_vex | php: Integer overflow in php_html_entities() | fixed: 251 known affected: 80 known not affected: 30 | 2026-06-28T11:02:14+00:00 | Vulnerability · Source |
| CVE-2025-71184 | redhat_vex | kernel: btrfs: fix NULL dereference on root when tracing inode eviction | known affected: 42 known not affected: 232 | 2026-06-28T11:02:13+00:00 | Vulnerability · Source |
| CVE-2016-4985 | redhat_vex | openstack-ironic: Ironic Node information including credentials exposed to unauthenticated users | fixed: 8 known affected: 1 known not affected: 8 | 2026-06-28T11:02:11+00:00 | Vulnerability · Source |
| CVE-2025-59820 | redhat_vex | Krita: Krita: Heap-based buffer overflow via manipulated TGA file | known not affected: 1 | 2026-06-28T11:02:09+00:00 | Vulnerability · Source |