VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294464 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-6392 | redhat_vex | chromium-browser: Insufficient policy enforcement in extensions | fixed: 14 | 2026-06-28T07:38:58+00:00 | Vulnerability · Source |
| CVE-2020-6393 | redhat_vex | chromium-browser: Insufficient policy enforcement in Blink | fixed: 14 | 2026-06-28T07:38:58+00:00 | Vulnerability · Source |
| CVE-2020-6391 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Blink | fixed: 14 | 2026-06-28T07:38:58+00:00 | Vulnerability · Source |
| CVE-2020-6389 | redhat_vex | chromium-browser: Out of bounds write in WebRTC | fixed: 14 | 2026-06-28T07:38:58+00:00 | Vulnerability · Source |
| CVE-2020-6382 | redhat_vex | chromium-browser: Type Confusion in JavaScript | fixed: 14 | 2026-06-28T07:38:57+00:00 | Vulnerability · Source |
| CVE-2020-6385 | redhat_vex | chromium-browser: Insufficient policy enforcement in storage | fixed: 14 | 2026-06-28T07:38:57+00:00 | Vulnerability · Source |
| CVE-2020-6384 | redhat_vex | chromium-browser: Use after free in WebAudio | fixed: 14 | 2026-06-28T07:38:57+00:00 | Vulnerability · Source |
| CVE-2020-6377 | redhat_vex | chromium-browser: Use after free in audio | fixed: 14 | 2026-06-28T07:38:56+00:00 | Vulnerability · Source |
| CVE-2020-6378 | redhat_vex | chromium-browser: use-after-free in speech recognizer | fixed: 14 | 2026-06-28T07:38:56+00:00 | Vulnerability · Source |
| CVE-2020-6381 | redhat_vex | chromium-browser: Integer overflow in JavaScript | fixed: 14 | 2026-06-28T07:38:56+00:00 | Vulnerability · Source |
| CVE-2021-46662 | redhat_vex | mariadb: Crash in set_var.cc via certain UPDATE queries with nested subqueries | fixed: 734 known affected: 34 | 2026-06-28T07:38:56+00:00 | Vulnerability · Source |
| CVE-2020-5238 | redhat_vex | cmark-gfm: Exponential time to parse certain inputs could lead to DoS | fixed: 6 | 2026-06-28T07:38:56+00:00 | Vulnerability · Source |
| CVE-2020-6379 | redhat_vex | chromium-browser: use-after-free in speech recognizer | fixed: 14 | 2026-06-28T07:38:56+00:00 | Vulnerability · Source |
| CVE-2026-44699 | redhat_vex | libjwt: libjwt: Authentication bypass via algorithm confusion in JWT verification | known not affected: 1 | 2026-06-28T07:38:55+00:00 | Vulnerability · Source |
| CVE-2026-44742 | redhat_vex | Postorius: Postorius: Cross-Site Scripting via unescaped HTML in message subject | known not affected: 1 | 2026-06-28T07:38:55+00:00 | Vulnerability · Source |
| CVE-2026-4454 | redhat_vex | chromium-browser: Use after free in Network | known not affected: 1 | 2026-06-28T07:38:54+00:00 | Vulnerability · Source |
| CVE-2020-5313 | redhat_vex | python-pillow: out-of-bounds read in ImagingFliDecode when loading FLI images | fixed: 109 known affected: 6 | 2026-06-28T07:38:54+00:00 | Vulnerability · Source |
| CVE-2026-44664 | redhat_vex | fast-xml-builder: fast-xml-builder: Arbitrary XML/HTML injection via insufficient sanitization of XML comments | known affected: 1 known not affected: 5 | 2026-06-28T07:38:54+00:00 | Vulnerability · Source |
| CVE-2020-5236 | redhat_vex | waitress: header with invalid characters can lead to DoS | known affected: 4 known not affected: 7 | 2026-06-28T07:38:53+00:00 | Vulnerability · Source |
| CVE-2020-5310 | redhat_vex | python-pillow: Integer overflow leading to buffer overflow in ImagingLibTiffDecode | fixed: 11 known not affected: 18 | 2026-06-28T07:38:53+00:00 | Vulnerability · Source |
| CVE-2020-5312 | redhat_vex | python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c | fixed: 176 known affected: 1 | 2026-06-28T07:38:53+00:00 | Vulnerability · Source |
| CVE-2026-44638 | redhat_vex | libsixel: libsixel: Denial of Service due to NULL pointer dereference during memory allocation | known not affected: 1 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2026-44515 | redhat_vex | Nextcloud News: Nextcloud News: Blind Server-Side Request Forgery (SSRF) via crafted feed URLs | known not affected: 1 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2026-44636 | redhat_vex | libsixel: integer overflow in encoder | known not affected: 1 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2026-4461 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | known not affected: 1 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2026-44602 | redhat_vex | Tor: Tor: Denial of service via out-of-order CERT cell | known not affected: 1 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2020-5260 | redhat_vex | git: Crafted URL containing new lines can cause credential leak | fixed: 421 known not affected: 13 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2026-4464 | redhat_vex | chromium-browser: Integer overflow in ANGLE | known not affected: 1 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2026-4463 | redhat_vex | chromium-browser: Heap buffer overflow in WebRTC | known not affected: 1 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2026-44637 | redhat_vex | libsixel: libsixel: Arbitrary code execution or denial of service due to signed integer overflow | known not affected: 1 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2026-44600 | redhat_vex | Tor: Tor: Denial of Service due to mishandling of conflux out-of-order queue accounting | known not affected: 1 | 2026-06-28T07:38:51+00:00 | Vulnerability · Source |
| CVE-2021-45417 | redhat_vex | aide: heap-based buffer overflow on outputs larger than B64_BUF | fixed: 74 known not affected: 20 | 2026-06-28T07:38:51+00:00 | Vulnerability · Source |
| CVE-2026-44601 | redhat_vex | Tor: Tor: Client crash due to double close of a circuit | known not affected: 1 | 2026-06-28T07:38:51+00:00 | Vulnerability · Source |
| CVE-2026-4455 | redhat_vex | chromium-browser: Heap buffer overflow in PDFium | known not affected: 1 | 2026-06-28T07:38:49+00:00 | Vulnerability · Source |
| CVE-2026-4457 | redhat_vex | chromium-browser: Type Confusion in V8 | known not affected: 1 | 2026-06-28T07:38:49+00:00 | Vulnerability · Source |
| CVE-2026-4451 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Navigation | known not affected: 1 | 2026-06-28T07:38:49+00:00 | Vulnerability · Source |
| CVE-2026-4450 | redhat_vex | chromium-browser: Out of bounds write in V8 | known not affected: 1 | 2026-06-28T07:38:48+00:00 | Vulnerability · Source |
| CVE-2020-3757 | redhat_vex | flash-plugin: Arbitrary Code Execution vulnerability (APSB20-06) | fixed: 3 | 2026-06-28T07:38:48+00:00 | Vulnerability · Source |
| CVE-2026-4448 | redhat_vex | chromium-browser: Heap buffer overflow in ANGLE | known not affected: 1 | 2026-06-28T07:38:48+00:00 | Vulnerability · Source |
| CVE-2026-4449 | redhat_vex | chromium-browser: Use after free in Blink | known not affected: 1 | 2026-06-28T07:38:48+00:00 | Vulnerability · Source |
| CVE-2026-4444 | redhat_vex | chromium-browser: Stack buffer overflow in WebRTC | known not affected: 1 | 2026-06-28T07:38:47+00:00 | Vulnerability · Source |
| CVE-2026-4447 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | known not affected: 1 | 2026-06-28T07:38:47+00:00 | Vulnerability · Source |
| CVE-2026-4445 | redhat_vex | WebRTC: Google Chrome: Chromium: WebRTC in Google Chrome: Heap corruption via crafted HTML page | known not affected: 1 | 2026-06-28T07:38:47+00:00 | Vulnerability · Source |
| CVE-2026-4442 | redhat_vex | chromium-browser: Heap buffer overflow in CSS | known not affected: 1 | 2026-06-28T07:38:46+00:00 | Vulnerability · Source |
| CVE-2026-4441 | redhat_vex | chromium-browser: Use after free in Base | known not affected: 1 | 2026-06-28T07:38:46+00:00 | Vulnerability · Source |
| CVE-2026-4443 | redhat_vex | chromium-browser: Heap buffer overflow in WebAudio | known not affected: 1 | 2026-06-28T07:38:46+00:00 | Vulnerability · Source |
| CVE-2026-4440 | redhat_vex | chromium-browser: Out of bounds read and write in WebGL | known not affected: 1 | 2026-06-28T07:38:43+00:00 | Vulnerability · Source |
| CVE-2020-36558 | redhat_vex | kernel: race condition in VT_RESIZEX ioctl when vc_cons[i].d is already NULL leading to NULL pointer dereference | fixed: 464 known affected: 108 known not affected: 14 | 2026-06-28T07:38:42+00:00 | Vulnerability · Source |
| CVE-2026-44378 | redhat_vex | botan: Botan: Denial of Service via malformed BER data parsing | known not affected: 1 | 2026-06-28T07:38:41+00:00 | Vulnerability · Source |
| CVE-2026-44374 | redhat_vex | Backstage: @backstage/plugin-catalog-backend-module-unprocessed: @backstage/plugin-catalog-unprocessed-entities-common: @backstage/plugin-catalog-unprocessed-entities: Backstage: Information disclosure due to missing authorization checks | known not affected: 1 | 2026-06-28T07:38:40+00:00 | Vulnerability · Source |