VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294162 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-1029 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-10 | fixed: 5 | 2026-06-28T11:00:10+00:00 | Vulnerability · Source |
| CVE-2014-2483 | redhat_vex | OpenJDK: Restrict use of privileged annotations (Libraries, 8034985) | fixed: 234 known not affected: 33 | 2026-06-28T11:00:09+00:00 | Vulnerability · Source |
| CVE-2016-1000341 | redhat_vex | bouncycastle: Information exposure in DSA signature generation via timing attack | fixed: 1111 known affected: 5 known not affected: 7 | 2026-06-28T11:00:08+00:00 | Vulnerability · Source |
| CVE-2014-1943 | redhat_vex | file: unrestricted recursion in handling of indirect type rules | fixed: 684 known affected: 28 known not affected: 36 | 2026-06-28T11:00:06+00:00 | Vulnerability · Source |
| CVE-2016-0753 | redhat_vex | rubygem-activerecord: possible input validation circumvention in Active Model | fixed: 112 known not affected: 17 | 2026-06-28T11:00:03+00:00 | Vulnerability · Source |
| CVE-2024-50264 | redhat_vex | kernel: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans | fixed: 709 known affected: 50 known not affected: 14 | 2026-06-28T11:00:02+00:00 | Vulnerability · Source |
| CVE-2016-0799 | redhat_vex | OpenSSL: Fix memory issues in BIO_*printf functions | fixed: 194 known affected: 10 under investigation: 1 | 2026-06-28T11:00:02+00:00 | Vulnerability · Source |
| CVE-2026-10935 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | known not affected: 1 | 2026-06-28T11:00:02+00:00 | Vulnerability · Source |
| CVE-2026-23553 | redhat_vex | xen: x86: incomplete IBPB for vCPU isolation | known not affected: 1 | 2026-06-28T11:00:00+00:00 | Vulnerability · Source |
| CVE-2025-58150 | redhat_vex | xen: x86: buffer overrun with shadow paging + tracing | known not affected: 1 | 2026-06-28T11:00:00+00:00 | Vulnerability · Source |
| CVE-2026-12804 | redhat_vex | lemonldap-ng: Lemonldap-NG: Open Redirect via URL manipulation in SAML Common Domain Cookie Endpoint | known not affected: 1 | 2026-06-28T11:00:00+00:00 | Vulnerability · Source |
| CVE-2016-0772 | redhat_vex | python: smtplib StartTLS stripping attack | fixed: 416 known affected: 1 | 2026-06-28T10:59:59+00:00 | Vulnerability · Source |
| CVE-2016-0751 | redhat_vex | rubygem-actionpack: possible object leak and denial of service attack in Action Pack | fixed: 240 known affected: 3 | 2026-06-28T10:59:59+00:00 | Vulnerability · Source |
| CVE-2026-33610 | redhat_vex | PowerDNS: PowerDNS: Denial of Service due to file descriptor exhaustion from rogue primary server DNS update requests | known not affected: 1 | 2026-06-28T10:59:59+00:00 | Vulnerability · Source |
| CVE-2026-33190 | redhat_vex | github.com/coredns/coredns: CoreDNS: Authentication bypass via flawed TSIG plugin verification on non-plain-DNS transports | known affected: 4 | 2026-06-28T10:59:58+00:00 | Vulnerability · Source |
| CVE-2025-69650 | redhat_vex | binutils: double free in readelf via crafted ELF binary with malformed relocation data | fixed: 3 known affected: 73 | 2026-06-28T10:59:57+00:00 | Vulnerability · Source |
| CVE-2014-0520 | redhat_vex | flash-plugin: security protection bypass (APSB14-14) | fixed: 5 | 2026-06-28T10:59:57+00:00 | Vulnerability · Source |
| CVE-2025-2953 | redhat_vex | torch: PyTorch torch.mkldnn_max_pool2d denial of service | known affected: 1 known not affected: 18 | 2026-06-28T10:59:57+00:00 | Vulnerability · Source |
| CVE-2014-0497 | redhat_vex | flash-plugin: integer underflow flaw leads to arbitrary code execution (APSB14-04) | fixed: 5 | 2026-06-28T10:59:56+00:00 | Vulnerability · Source |
| CVE-2016-0737 | redhat_vex | openstack-swift: Client to proxy DoS through Large Objects | fixed: 42 known not affected: 5 | 2026-06-28T10:59:56+00:00 | Vulnerability · Source |
| CVE-2026-45957 | redhat_vex | kernel: rcu: Fix rcu_read_unlock() deadloop due to softirq | known not affected: 274 | 2026-06-28T10:59:55+00:00 | Vulnerability · Source |
| CVE-2016-0610 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU January 2016) | fixed: 168 known not affected: 38 | 2026-06-28T10:59:54+00:00 | Vulnerability · Source |
| CVE-2016-0728 | redhat_vex | kernel: Possible use-after-free vulnerability in keyring facility | fixed: 309 known not affected: 16 | 2026-06-28T10:59:53+00:00 | Vulnerability · Source |
| CVE-2026-23398 | redhat_vex | kernel: icmp: fix NULL pointer dereference in icmp_tag_validation() | known affected: 246 known not affected: 28 | 2026-06-28T10:59:52+00:00 | Vulnerability · Source |
| CVE-2014-0452 | redhat_vex | OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026801) | fixed: 749 known not affected: 15 | 2026-06-28T10:59:51+00:00 | Vulnerability · Source |
| CVE-2026-10940 | redhat_vex | chromium-browser: Race in Codecs | known not affected: 1 | 2026-06-28T10:59:50+00:00 | Vulnerability · Source |
| CVE-2025-6927 | redhat_vex | MediaWiki: MediaWiki: Information disclosure via block list handling | known not affected: 1 | 2026-06-28T10:59:49+00:00 | Vulnerability · Source |
| CVE-2026-33611 | redhat_vex | powerdns: LMDB: PowerDNS: Database corruption due to invalid record data | known not affected: 1 | 2026-06-28T10:59:49+00:00 | Vulnerability · Source |
| CVE-2010-3549 | redhat_vex | OpenJDK HttpURLConnection request splitting (6952017) | fixed: 724 | 2026-06-28T10:59:48+00:00 | Vulnerability · Source |
| CVE-2024-4769 | redhat_vex | Mozilla: Cross-origin responses could be distinguished between script and non-script content-types | fixed: 234 known affected: 4 | 2026-06-28T10:59:48+00:00 | Vulnerability · Source |
| CVE-2025-69262 | redhat_vex | pnpm: pnpm: Remote code execution via command injection in tokenHelper environment variable substitution | known not affected: 2 | 2026-06-28T10:59:48+00:00 | Vulnerability · Source |
| CVE-2026-9111 | redhat_vex | chromium-browser: Use after free in WebRTC | known not affected: 1 | 2026-06-28T10:59:48+00:00 | Vulnerability · Source |
| CVE-2026-23357 | redhat_vex | kernel: can: mcp251x: fix deadlock in error path of mcp251x_open | known affected: 184 known not affected: 90 | 2026-06-28T10:59:47+00:00 | Vulnerability · Source |
| CVE-2015-8970 | redhat_vex | kernel: crypto: GPF in lrw_crypt caused by null-deref | fixed: 312 known not affected: 22 | 2026-06-28T10:59:47+00:00 | Vulnerability · Source |
| CVE-2024-41077 | redhat_vex | kernel: null_blk: fix validation of block size | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T10:59:47+00:00 | Vulnerability · Source |
| CVE-2026-4407 | redhat_vex | Xpdf: Out-of-bounds array write in Xpdf 4.06 due to missing validation | known not affected: 1 | 2026-06-28T10:59:44+00:00 | Vulnerability · Source |
| CVE-2013-5332 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-28) | fixed: 5 | 2026-06-28T10:59:43+00:00 | Vulnerability · Source |
| CVE-2026-23370 | redhat_vex | kernel: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data | known affected: 184 known not affected: 90 | 2026-06-28T10:59:43+00:00 | Vulnerability · Source |
| CVE-2025-68939 | redhat_vex | gitea: attachments can be renamed to forbidden file extensions via the attachment API | known affected: 8 | 2026-06-28T10:59:42+00:00 | Vulnerability · Source |
| CVE-2021-3635 | redhat_vex | kernel: flowtable list del corruption with kernel BUG at lib/list_debug.c:50 | fixed: 150 known affected: 43 known not affected: 106 | 2026-06-28T10:59:40+00:00 | Vulnerability · Source |
| CVE-2025-71270 | redhat_vex | kernel: LoongArch: Enable exception fixup for specific ADE subcode | known not affected: 274 | 2026-06-28T10:59:40+00:00 | Vulnerability · Source |
| CVE-2015-8844 | redhat_vex | kernel: incorrect restoration of machine specific registers from userspace | fixed: 191 known affected: 1 known not affected: 16 | 2026-06-28T10:59:40+00:00 | Vulnerability · Source |
| CVE-2023-31124 | redhat_vex | c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation | fixed: 245 known affected: 8 | 2026-06-28T10:59:38+00:00 | Vulnerability · Source |
| CVE-2021-46669 | redhat_vex | mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used | fixed: 736 known affected: 19 known not affected: 35 | 2026-06-28T10:59:37+00:00 | Vulnerability · Source |
| CVE-2005-2470 | redhat_vex | security flaw | fixed: 2 | 2026-06-28T10:59:36+00:00 | Vulnerability · Source |
| CVE-2026-3282 | redhat_vex | libvips: vips: libvips: Information Disclosure via out-of-bounds read in vips_unpremultiply_build | known not affected: 1 | 2026-06-28T10:59:35+00:00 | Vulnerability · Source |
| CVE-2026-33490 | redhat_vex | h3: H3: Information disclosure due to incorrect path prefix validation | known not affected: 8 | 2026-06-28T10:59:35+00:00 | Vulnerability · Source |
| CVE-2012-5516 | redhat_vex | rhev-m: MoveDisk ignores the disk's wipe-after-delete property | fixed: 13 known affected: 1 | 2026-06-28T10:59:33+00:00 | Vulnerability · Source |
| CVE-2024-36950 | redhat_vex | kernel: firewire: ohci: mask bus reset interrupts between ISR and bottom half | fixed: 150 known affected: 42 known not affected: 108 | 2026-06-28T10:59:29+00:00 | Vulnerability · Source |
| CVE-2024-36956 | redhat_vex | kernel: thermal/debugfs: Free all thermal zone debug memory on zone removal | fixed: 280 known affected: 50 known not affected: 70 | 2026-06-28T10:59:29+00:00 | Vulnerability · Source |