VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294162 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-67477 | redhat_vex | MediaWiki: MediaWiki: Cross-site Scripting vulnerability | known not affected: 1 | 2026-06-28T10:55:57+00:00 | Vulnerability · Source |
| CVE-2015-0243 | redhat_vex | postgresql: buffer overflow flaws in contrib/pgcrypto | fixed: 347 known affected: 17 | 2026-06-28T10:55:56+00:00 | Vulnerability · Source |
| CVE-2015-0236 | redhat_vex | libvirt: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save images and snapshots objects | fixed: 153 known affected: 1 under investigation: 7 | 2026-06-28T10:55:54+00:00 | Vulnerability · Source |
| CVE-2026-27172 | redhat_vex | org.apache.camel/camel-consul: Apache Camel camel-consul: Arbitrary code execution via deserialization of untrusted data | known not affected: 5 | 2026-06-28T10:55:54+00:00 | Vulnerability · Source |
| CVE-2025-30087 | redhat_vex | bestpractical.com/request-tracker: Best Practical RT search URL XSS Vulnerability | known not affected: 1 | 2026-06-28T10:55:52+00:00 | Vulnerability · Source |
| CVE-2021-2144 | redhat_vex | mysql: Server: Parser unspecified vulnerability (CPU Apr 2021) | fixed: 1147 known affected: 13 known not affected: 50 | 2026-06-28T10:55:52+00:00 | Vulnerability · Source |
| CVE-2022-32148 | redhat_vex | golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working | fixed: 1720 known affected: 67 known not affected: 2031 | 2026-06-28T10:55:51+00:00 | Vulnerability · Source |
| CVE-2015-0138 | redhat_vex | JDK: ephemeral RSA keys accepted for non-export SSL/TLS cipher suites (FREAK) | fixed: 393 | 2026-06-28T10:55:50+00:00 | Vulnerability · Source |
| CVE-2024-2201 | redhat_vex | hw: cpu: intel: Native Branch History Injection (BHI) | fixed: 768 known affected: 36 known not affected: 5 | 2026-06-28T10:55:48+00:00 | Vulnerability · Source |
| CVE-2026-33002 | redhat_vex | jenkins: Jenkins: Origin validation bypass via DNS rebinding in CLI WebSocket endpoint | known affected: 1 known not affected: 1 | 2026-06-28T10:55:47+00:00 | Vulnerability · Source |
| CVE-2016-8612 | redhat_vex | mod_cluster: Protocol parsing logic error | fixed: 130 known affected: 4 known not affected: 1 | 2026-06-28T08:30:25+00:00 | Vulnerability · Source |
| CVE-2016-7130 | redhat_vex | php: wddx_deserialize null dereference | fixed: 251 known affected: 110 | 2026-06-28T08:30:25+00:00 | Vulnerability · Source |
| CVE-2013-0609 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T08:30:23+00:00 | Vulnerability · Source |
| CVE-2013-0606 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T08:30:23+00:00 | Vulnerability · Source |
| CVE-2013-0604 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T08:30:22+00:00 | Vulnerability · Source |
| CVE-2013-0504 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-08) | fixed: 4 | 2026-06-28T08:30:22+00:00 | Vulnerability · Source |
| CVE-2025-67724 | redhat_vex | tornado: Tornado Header Injection and XSS via reason argument | known affected: 67 | 2026-06-28T08:30:21+00:00 | Vulnerability · Source |
| CVE-2018-20615 | redhat_vex | haproxy: Mishandling of priority flag in short HEADERS frame by HTTP/2 decoder allows for crash | fixed: 111 known affected: 1 known not affected: 15 | 2026-06-28T08:30:19+00:00 | Vulnerability · Source |
| CVE-2026-25598 | redhat_vex | harden-runner: Harden-Runner: Outbound network connections can evade audit logging via specific socket system calls. | known affected: 12 known not affected: 8 | 2026-06-28T08:30:18+00:00 | Vulnerability · Source |
| CVE-2023-27539 | redhat_vex | rubygem-rack: denial of service in header parsing | fixed: 92 known affected: 5 known not affected: 2043 | 2026-06-28T08:30:18+00:00 | Vulnerability · Source |
| CVE-2026-27588 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddyhttp: Caddy: Access control bypass due to case-sensitive host matching | known not affected: 1 | 2026-06-28T08:30:17+00:00 | Vulnerability · Source |
| CVE-2026-27589 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddyhttp: Caddy: Unauthorized configuration modification via cross-origin requests to the admin API | known not affected: 1 | 2026-06-28T08:30:17+00:00 | Vulnerability · Source |
| CVE-2026-27587 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddyhttp: Caddy: Access control bypass due to improper handling of percent-escape sequences in HTTP path matcher | known not affected: 1 | 2026-06-28T08:30:17+00:00 | Vulnerability · Source |
| CVE-2015-5233 | redhat_vex | foreman: reports show/destroy not restricted by host authorization | fixed: 179 known affected: 2 | 2026-06-28T08:30:16+00:00 | Vulnerability · Source |
| CVE-2014-9162 | redhat_vex | flash-plugin: Information disclosure vulnerability (APSB14-27) | fixed: 5 | 2026-06-28T08:30:15+00:00 | Vulnerability · Source |
| CVE-2014-9164 | redhat_vex | flash-plugin: Multiple code-execution flaws (APSB14-27) | fixed: 5 | 2026-06-28T08:30:15+00:00 | Vulnerability · Source |
| CVE-2015-1283 | redhat_vex | chromium-browser: Heap-buffer-overflow in expat. | fixed: 12 | 2026-06-28T08:30:14+00:00 | Vulnerability · Source |
| CVE-2014-9130 | redhat_vex | libyaml: assert failure when processing wrapped strings | fixed: 147 known affected: 7 known not affected: 3 | 2026-06-28T08:30:14+00:00 | Vulnerability · Source |
| CVE-2015-1280 | redhat_vex | chromium-browser: Memory corruption in skia | fixed: 12 | 2026-06-28T08:30:14+00:00 | Vulnerability · Source |
| CVE-2015-1217 | redhat_vex | chromium-browser: Type confusion in v8 bindings | fixed: 15 | 2026-06-28T08:30:13+00:00 | Vulnerability · Source |
| CVE-2015-1277 | redhat_vex | chromium-browser: Use-after-free in accessibility. | fixed: 12 | 2026-06-28T08:30:13+00:00 | Vulnerability · Source |
| CVE-2026-23736 | redhat_vex | seroval: seroval: Prototype pollution via improper input validation during JSON deserialization | known not affected: 1 | 2026-06-28T08:30:12+00:00 | Vulnerability · Source |
| CVE-2016-7418 | redhat_vex | php: Null pointer dereference in php_wddx_push_element | fixed: 254 known affected: 140 | 2026-06-28T08:30:12+00:00 | Vulnerability · Source |
| CVE-2016-7417 | redhat_vex | php: Missing type check when unserializing SplArray | fixed: 254 known affected: 140 | 2026-06-28T08:30:11+00:00 | Vulnerability · Source |
| CVE-2026-27699 | redhat_vex | basic-ftp: basic-ftp: File overwrite due to path traversal | known not affected: 1 | 2026-06-28T08:30:10+00:00 | Vulnerability · Source |
| CVE-2026-27888 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF | fixed: 2 known affected: 2 known not affected: 209 | 2026-06-28T08:30:09+00:00 | Vulnerability · Source |
| CVE-2026-27626 | redhat_vex | olivetin: OliveTin: Remote Code Execution via shell metacharacter injection and webhook processing | known not affected: 1 | 2026-06-28T08:30:09+00:00 | Vulnerability · Source |
| CVE-2025-7777 | redhat_vex | mirror-registry: host header injection in mirror-registry | known affected: 1 | 2026-06-28T08:30:08+00:00 | Vulnerability · Source |
| CVE-2025-5198 | redhat_vex | stackrox: XSS in Stackrox | known affected: 10 | 2026-06-28T08:30:08+00:00 | Vulnerability · Source |
| CVE-2026-26271 | redhat_vex | freerdp: FreeRDP: Denial of Service via crafted RDP Window Icon data | known affected: 31 | 2026-06-28T08:30:07+00:00 | Vulnerability · Source |
| CVE-2012-5676 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-27) | fixed: 5 | 2026-06-28T08:30:07+00:00 | Vulnerability · Source |
| CVE-2025-66400 | redhat_vex | mdast-util-to-hast: mdast-util-to-hast: Markdown code elements can appear as regular page content | known affected: 30 | 2026-06-28T08:30:05+00:00 | Vulnerability · Source |
| CVE-2014-0539 | redhat_vex | flash-plugin: security protection bypass (APSB14-17) | fixed: 5 | 2026-06-28T08:30:04+00:00 | Vulnerability · Source |
| CVE-2025-57347 | redhat_vex | dagre-d3-es: dagre-d3-es prototype pollution | known not affected: 1 | 2026-06-28T08:30:02+00:00 | Vulnerability · Source |
| CVE-2013-5324 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-21) | fixed: 4 | 2026-06-28T08:29:57+00:00 | Vulnerability · Source |
| CVE-2010-0199 | redhat_vex | Acroread: Multiple code execution flaws (APSB10-09) | fixed: 12 | 2026-06-28T08:29:57+00:00 | Vulnerability · Source |
| CVE-2025-9907 | redhat_vex | event-driven-ansible: Event Stream Test Mode Exposes Sensitive Headers in AAP EDA | fixed: 324 known not affected: 425 | 2026-06-28T08:29:57+00:00 | Vulnerability · Source |
| CVE-2009-3877 | redhat_vex | OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877 | fixed: 644 | 2026-06-28T08:29:54+00:00 | Vulnerability · Source |
| CVE-2009-3874 | redhat_vex | OpenJDK ImageI/O JPEG heap overflow (6874643) | fixed: 640 | 2026-06-28T08:29:54+00:00 | Vulnerability · Source |
| CVE-2009-3881 | redhat_vex | OpenJDK resurrected classloaders can still have children (6636650) | fixed: 168 | 2026-06-28T08:29:54+00:00 | Vulnerability · Source |