VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294458 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-0138 | redhat_vex | JDK: ephemeral RSA keys accepted for non-export SSL/TLS cipher suites (FREAK) | fixed: 393 | 2026-06-28T10:55:50+00:00 | Vulnerability · Source |
| CVE-2024-2201 | redhat_vex | hw: cpu: intel: Native Branch History Injection (BHI) | fixed: 768 known affected: 36 known not affected: 5 | 2026-06-28T10:55:48+00:00 | Vulnerability · Source |
| CVE-2026-33002 | redhat_vex | jenkins: Jenkins: Origin validation bypass via DNS rebinding in CLI WebSocket endpoint | known affected: 1 known not affected: 1 | 2026-06-28T10:55:47+00:00 | Vulnerability · Source |
| CVE-2016-8612 | redhat_vex | mod_cluster: Protocol parsing logic error | fixed: 130 known affected: 4 known not affected: 1 | 2026-06-28T08:30:25+00:00 | Vulnerability · Source |
| CVE-2016-7130 | redhat_vex | php: wddx_deserialize null dereference | fixed: 251 known affected: 110 | 2026-06-28T08:30:25+00:00 | Vulnerability · Source |
| CVE-2013-0609 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T08:30:23+00:00 | Vulnerability · Source |
| CVE-2013-0606 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T08:30:23+00:00 | Vulnerability · Source |
| CVE-2013-0604 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T08:30:22+00:00 | Vulnerability · Source |
| CVE-2013-0504 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-08) | fixed: 4 | 2026-06-28T08:30:22+00:00 | Vulnerability · Source |
| CVE-2025-67724 | redhat_vex | tornado: Tornado Header Injection and XSS via reason argument | known affected: 67 | 2026-06-28T08:30:21+00:00 | Vulnerability · Source |
| CVE-2018-20615 | redhat_vex | haproxy: Mishandling of priority flag in short HEADERS frame by HTTP/2 decoder allows for crash | fixed: 111 known affected: 1 known not affected: 15 | 2026-06-28T08:30:19+00:00 | Vulnerability · Source |
| CVE-2026-25598 | redhat_vex | harden-runner: Harden-Runner: Outbound network connections can evade audit logging via specific socket system calls. | known affected: 12 known not affected: 8 | 2026-06-28T08:30:18+00:00 | Vulnerability · Source |
| CVE-2023-27539 | redhat_vex | rubygem-rack: denial of service in header parsing | fixed: 92 known affected: 5 known not affected: 2043 | 2026-06-28T08:30:18+00:00 | Vulnerability · Source |
| CVE-2026-27588 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddyhttp: Caddy: Access control bypass due to case-sensitive host matching | known not affected: 1 | 2026-06-28T08:30:17+00:00 | Vulnerability · Source |
| CVE-2026-27589 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddyhttp: Caddy: Unauthorized configuration modification via cross-origin requests to the admin API | known not affected: 1 | 2026-06-28T08:30:17+00:00 | Vulnerability · Source |
| CVE-2026-27587 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddyhttp: Caddy: Access control bypass due to improper handling of percent-escape sequences in HTTP path matcher | known not affected: 1 | 2026-06-28T08:30:17+00:00 | Vulnerability · Source |
| CVE-2015-5233 | redhat_vex | foreman: reports show/destroy not restricted by host authorization | fixed: 179 known affected: 2 | 2026-06-28T08:30:16+00:00 | Vulnerability · Source |
| CVE-2014-9162 | redhat_vex | flash-plugin: Information disclosure vulnerability (APSB14-27) | fixed: 5 | 2026-06-28T08:30:15+00:00 | Vulnerability · Source |
| CVE-2014-9164 | redhat_vex | flash-plugin: Multiple code-execution flaws (APSB14-27) | fixed: 5 | 2026-06-28T08:30:15+00:00 | Vulnerability · Source |
| CVE-2015-1283 | redhat_vex | chromium-browser: Heap-buffer-overflow in expat. | fixed: 12 | 2026-06-28T08:30:14+00:00 | Vulnerability · Source |
| CVE-2014-9130 | redhat_vex | libyaml: assert failure when processing wrapped strings | fixed: 147 known affected: 7 known not affected: 3 | 2026-06-28T08:30:14+00:00 | Vulnerability · Source |
| CVE-2015-1280 | redhat_vex | chromium-browser: Memory corruption in skia | fixed: 12 | 2026-06-28T08:30:14+00:00 | Vulnerability · Source |
| CVE-2015-1217 | redhat_vex | chromium-browser: Type confusion in v8 bindings | fixed: 15 | 2026-06-28T08:30:13+00:00 | Vulnerability · Source |
| CVE-2015-1277 | redhat_vex | chromium-browser: Use-after-free in accessibility. | fixed: 12 | 2026-06-28T08:30:13+00:00 | Vulnerability · Source |
| CVE-2026-23736 | redhat_vex | seroval: seroval: Prototype pollution via improper input validation during JSON deserialization | known not affected: 1 | 2026-06-28T08:30:12+00:00 | Vulnerability · Source |
| CVE-2016-7418 | redhat_vex | php: Null pointer dereference in php_wddx_push_element | fixed: 254 known affected: 140 | 2026-06-28T08:30:12+00:00 | Vulnerability · Source |
| CVE-2016-7417 | redhat_vex | php: Missing type check when unserializing SplArray | fixed: 254 known affected: 140 | 2026-06-28T08:30:11+00:00 | Vulnerability · Source |
| CVE-2026-27699 | redhat_vex | basic-ftp: basic-ftp: File overwrite due to path traversal | known not affected: 1 | 2026-06-28T08:30:10+00:00 | Vulnerability · Source |
| CVE-2026-27888 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF | fixed: 2 known affected: 2 known not affected: 209 | 2026-06-28T08:30:09+00:00 | Vulnerability · Source |
| CVE-2026-27626 | redhat_vex | olivetin: OliveTin: Remote Code Execution via shell metacharacter injection and webhook processing | known not affected: 1 | 2026-06-28T08:30:09+00:00 | Vulnerability · Source |
| CVE-2025-7777 | redhat_vex | mirror-registry: host header injection in mirror-registry | known affected: 1 | 2026-06-28T08:30:08+00:00 | Vulnerability · Source |
| CVE-2025-5198 | redhat_vex | stackrox: XSS in Stackrox | known affected: 10 | 2026-06-28T08:30:08+00:00 | Vulnerability · Source |
| CVE-2026-26271 | redhat_vex | freerdp: FreeRDP: Denial of Service via crafted RDP Window Icon data | known affected: 31 | 2026-06-28T08:30:07+00:00 | Vulnerability · Source |
| CVE-2012-5676 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-27) | fixed: 5 | 2026-06-28T08:30:07+00:00 | Vulnerability · Source |
| CVE-2025-66400 | redhat_vex | mdast-util-to-hast: mdast-util-to-hast: Markdown code elements can appear as regular page content | known affected: 30 | 2026-06-28T08:30:05+00:00 | Vulnerability · Source |
| CVE-2014-0539 | redhat_vex | flash-plugin: security protection bypass (APSB14-17) | fixed: 5 | 2026-06-28T08:30:04+00:00 | Vulnerability · Source |
| CVE-2025-57347 | redhat_vex | dagre-d3-es: dagre-d3-es prototype pollution | known not affected: 1 | 2026-06-28T08:30:02+00:00 | Vulnerability · Source |
| CVE-2013-5324 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-21) | fixed: 4 | 2026-06-28T08:29:57+00:00 | Vulnerability · Source |
| CVE-2010-0199 | redhat_vex | Acroread: Multiple code execution flaws (APSB10-09) | fixed: 12 | 2026-06-28T08:29:57+00:00 | Vulnerability · Source |
| CVE-2025-9907 | redhat_vex | event-driven-ansible: Event Stream Test Mode Exposes Sensitive Headers in AAP EDA | fixed: 324 known not affected: 425 | 2026-06-28T08:29:57+00:00 | Vulnerability · Source |
| CVE-2009-3877 | redhat_vex | OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877 | fixed: 644 | 2026-06-28T08:29:54+00:00 | Vulnerability · Source |
| CVE-2009-3874 | redhat_vex | OpenJDK ImageI/O JPEG heap overflow (6874643) | fixed: 640 | 2026-06-28T08:29:54+00:00 | Vulnerability · Source |
| CVE-2009-3881 | redhat_vex | OpenJDK resurrected classloaders can still have children (6636650) | fixed: 168 | 2026-06-28T08:29:54+00:00 | Vulnerability · Source |
| CVE-2009-3797 | redhat_vex | flash-plugin: multiple code execution flaws (APSB09-19) (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800) | fixed: 2 | 2026-06-28T08:29:53+00:00 | Vulnerability · Source |
| CVE-2009-3793 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T08:29:52+00:00 | Vulnerability · Source |
| CVE-2009-3722 | redhat_vex | KVM: Check cpl before emulating debug register access | fixed: 15 | 2026-06-28T08:29:51+00:00 | Vulnerability · Source |
| CVE-2009-2721 | redhat_vex | JDK Multiple unspecified vulnerabilities in Provider class | fixed: 66 | 2026-06-28T08:29:47+00:00 | Vulnerability · Source |
| CVE-2009-2720 | redhat_vex | JDK DoS with Swing Synthcontext implementation | fixed: 138 | 2026-06-28T08:29:46+00:00 | Vulnerability · Source |
| CVE-2009-2671 | redhat_vex | OpenJDK Proxy mechanism information leaks (6801071) | fixed: 434 | 2026-06-28T08:29:45+00:00 | Vulnerability · Source |
| CVE-2009-1862 | redhat_vex | flash-plugin: Remote code execution vulnerability via malicious SWF (Shockwave Flash) content | fixed: 10 | 2026-06-28T08:29:44+00:00 | Vulnerability · Source |