VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294557 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-61022 | redhat_vex | virtuoso-opensource: openlink virtuoso-opensource: Denial of Service via crafted SQL statements | known affected: 3 | 2026-06-28T07:33:39+00:00 | Vulnerability · Source |
| CVE-2020-1758 | redhat_vex | keycloak: improper verification of certificate with host mismatch could result in information disclosure | fixed: 10 known affected: 1 known not affected: 3 | 2026-06-28T07:33:38+00:00 | Vulnerability · Source |
| CVE-2025-71382 | redhat_vex | mupdf: MuPDF: Denial of Service via uncontrolled recursion in EPUB CSS rendering | known not affected: 1 | 2026-06-28T07:33:38+00:00 | Vulnerability · Source |
| CVE-2020-1753 | redhat_vex | Ansible: kubectl connection plugin leaks sensitive information | fixed: 22 known affected: 6 known not affected: 4 | 2026-06-28T07:33:38+00:00 | Vulnerability · Source |
| CVE-2026-41071 | redhat_vex | libheif: libheif: Information disclosure or denial of service via crafted HEIF file | known not affected: 1 | 2026-06-28T07:33:37+00:00 | Vulnerability · Source |
| CVE-2026-41076 | redhat_vex | rt: RT: Authentication bypass allows unauthorized access via specific LDAP configurations | known not affected: 1 | 2026-06-28T07:33:37+00:00 | Vulnerability · Source |
| CVE-2026-41054 | redhat_vex | haveged: haveged: Privilege escalation due to insufficient credential check | known not affected: 1 | 2026-06-28T07:33:36+00:00 | Vulnerability · Source |
| CVE-2021-2226 | redhat_vex | mysql: Server: Information Schema unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:33:34+00:00 | Vulnerability · Source |
| CVE-2020-1740 | redhat_vex | ansible: secrets readable after ansible-vault edit | fixed: 22 known affected: 10 known not affected: 7 | 2026-06-28T07:33:34+00:00 | Vulnerability · Source |
| CVE-2020-1739 | redhat_vex | ansible: svn module leaks password when specified as a parameter | fixed: 22 known affected: 10 known not affected: 7 | 2026-06-28T07:33:34+00:00 | Vulnerability · Source |
| CVE-2026-41015 | redhat_vex | radare2: radare2: Command injection via PDB name in rabin2 -PP allows arbitrary code execution | known not affected: 1 | 2026-06-28T07:33:34+00:00 | Vulnerability · Source |
| CVE-2020-17380 | redhat_vex | QEMU: heap buffer overflow in sdhci_sdma_transfer_multi_blocks() in hw/sd/sdhci.c | known not affected: 104 | 2026-06-28T07:33:34+00:00 | Vulnerability · Source |
| CVE-2026-41000 | redhat_vex | Spring Web Services: Spring Web Services: Replay protection bypass due to improper cache integration | known affected: 1 | 2026-06-28T07:33:33+00:00 | Vulnerability · Source |
| CVE-2020-1737 | redhat_vex | ansible: Extract-Zip function in win_unzip module does not check extracted path | fixed: 22 known affected: 10 known not affected: 7 | 2026-06-28T07:33:32+00:00 | Vulnerability · Source |
| CVE-2020-1736 | redhat_vex | ansible: atomic_move primitive sets permissive permissions | fixed: 8 known affected: 10 known not affected: 7 | 2026-06-28T07:33:32+00:00 | Vulnerability · Source |
| CVE-2020-1735 | redhat_vex | ansible: path injection on dest parameter in fetch module | fixed: 22 known affected: 10 known not affected: 7 | 2026-06-28T07:33:31+00:00 | Vulnerability · Source |
| CVE-2020-1714 | redhat_vex | keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution | fixed: 22 known affected: 3 known not affected: 1 | 2026-06-28T07:33:30+00:00 | Vulnerability · Source |
| CVE-2020-1733 | redhat_vex | ansible: insecure temporary directory when running become_user from become directive | fixed: 18 known affected: 11 known not affected: 7 | 2026-06-28T07:33:30+00:00 | Vulnerability · Source |
| CVE-2020-1732 | redhat_vex | Soteria: security identity corruption across concurrent threads | fixed: 635 known affected: 8 known not affected: 5 | 2026-06-28T07:33:29+00:00 | Vulnerability · Source |
| CVE-2020-1718 | redhat_vex | keycloak: security issue on reset credential flow | fixed: 14 known affected: 2 known not affected: 1 | 2026-06-28T07:33:27+00:00 | Vulnerability · Source |
| CVE-2020-1711 | redhat_vex | QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server | fixed: 2096 known affected: 17 known not affected: 17 | 2026-06-28T07:33:26+00:00 | Vulnerability · Source |
| CVE-2026-40959 | redhat_vex | luanti: Luanti: Lua sandbox escape via crafted mod | known not affected: 1 | 2026-06-28T07:33:26+00:00 | Vulnerability · Source |
| CVE-2020-1697 | redhat_vex | keycloak: stored XSS in client settings via application links | fixed: 3 known affected: 4 known not affected: 1 | 2026-06-28T07:33:26+00:00 | Vulnerability · Source |
| CVE-2026-40879 | redhat_vex | nest: Nest: Denial of Service via recursive JSON message handling | known not affected: 1 | 2026-06-28T07:33:23+00:00 | Vulnerability · Source |
| CVE-2026-40613 | redhat_vex | coturn: coturn: Denial of Service due to misaligned memory reads from crafted STUN messages | known not affected: 1 | 2026-06-28T07:33:22+00:00 | Vulnerability · Source |
| CVE-2026-40602 | redhat_vex | home-assistant-cli: Jinja2: Home Assistant Command-line interface: Arbitrary code execution via unrestricted Jinja2 template rendering | known not affected: 1 | 2026-06-28T07:33:22+00:00 | Vulnerability · Source |
| CVE-2026-40527 | redhat_vex | radare2: radare2: Arbitrary code execution via crafted ELF binaries with DWARF parameter names | known not affected: 1 | 2026-06-28T07:33:21+00:00 | Vulnerability · Source |
| CVE-2026-40517 | redhat_vex | radare2: radare2: Arbitrary OS command execution via PDB parser command injection | known not affected: 1 | 2026-06-28T07:33:21+00:00 | Vulnerability · Source |
| CVE-2020-16120 | redhat_vex | kernel: incorrect unprivileged overlayfs permission checking may lead to information disclosure | known affected: 1 known not affected: 92 | 2026-06-28T07:33:21+00:00 | Vulnerability · Source |
| CVE-2026-40490 | redhat_vex | async-http-client: AsyncHttpClient: Credential leakage via improper handling of authorization headers during redirects | known affected: 7 | 2026-06-28T07:33:20+00:00 | Vulnerability · Source |
| CVE-2026-40466 | redhat_vex | org.apache.activemq/activemq-all: org.apache.activemq/activemq-broker: Apache ActiveMQ: Arbitrary code execution via improper input validation in HTTP Discovery transport | known affected: 1 known not affected: 13 | 2026-06-28T07:33:20+00:00 | Vulnerability · Source |
| CVE-2020-16016 | redhat_vex | chromium-browser: Inappropriate implementation in base | fixed: 14 | 2026-06-28T07:33:19+00:00 | Vulnerability · Source |
| CVE-2026-40396 | redhat_vex | varnish: Varnish Cache: Denial of Service via workspace overflow during HTTP/1 pipelining | known not affected: 14 | 2026-06-28T07:33:19+00:00 | Vulnerability · Source |
| CVE-2020-16013 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | fixed: 14 | 2026-06-28T07:33:19+00:00 | Vulnerability · Source |
| CVE-2020-15999 | redhat_vex | freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png | fixed: 162 known not affected: 10 | 2026-06-28T07:33:18+00:00 | Vulnerability · Source |
| CVE-2020-16002 | redhat_vex | chromium-browser: Use after free in PDFium | fixed: 14 | 2026-06-28T07:33:18+00:00 | Vulnerability · Source |
| CVE-2020-15991 | redhat_vex | chromium-browser: Use after free in password manager | fixed: 14 | 2026-06-28T07:33:18+00:00 | Vulnerability · Source |
| CVE-2020-16001 | redhat_vex | chromium-browser: Use after free in media | fixed: 14 | 2026-06-28T07:33:18+00:00 | Vulnerability · Source |
| CVE-2020-15992 | redhat_vex | chromium-browser: Insufficient policy enforcement in networking | fixed: 14 | 2026-06-28T07:33:18+00:00 | Vulnerability · Source |
| CVE-2020-15989 | redhat_vex | chromium-browser: Uninitialized use in PDFium | fixed: 14 | 2026-06-28T07:33:17+00:00 | Vulnerability · Source |
| CVE-2020-15990 | redhat_vex | chromium-browser: Use after free in autofill | fixed: 14 | 2026-06-28T07:33:17+00:00 | Vulnerability · Source |
| CVE-2020-15988 | redhat_vex | chromium-browser: Insufficient policy enforcement in downloads | fixed: 14 | 2026-06-28T07:33:17+00:00 | Vulnerability · Source |
| CVE-2020-15987 | redhat_vex | chromium-browser: Use after free in WebRTC | fixed: 14 | 2026-06-28T07:33:17+00:00 | Vulnerability · Source |
| CVE-2020-15981 | redhat_vex | chromium-browser: Out of bounds read in audio | fixed: 14 | 2026-06-28T07:33:16+00:00 | Vulnerability · Source |
| CVE-2020-15986 | redhat_vex | chromium-browser: Integer overflow in media | fixed: 14 | 2026-06-28T07:33:16+00:00 | Vulnerability · Source |
| CVE-2020-15980 | redhat_vex | chromium-browser: Insufficient policy enforcement in Intents | fixed: 14 | 2026-06-28T07:33:16+00:00 | Vulnerability · Source |
| CVE-2020-15983 | redhat_vex | chromium-browser: Insufficient data validation in webUI | fixed: 14 | 2026-06-28T07:33:16+00:00 | Vulnerability · Source |
| CVE-2020-15978 | redhat_vex | chromium-browser: Insufficient data validation in navigation | fixed: 14 | 2026-06-28T07:33:16+00:00 | Vulnerability · Source |
| CVE-2020-15984 | redhat_vex | chromium-browser: Insufficient policy enforcement in Omnibox | fixed: 14 | 2026-06-28T07:33:16+00:00 | Vulnerability · Source |
| CVE-2020-15985 | redhat_vex | chromium-browser: Inappropriate implementation in Blink | fixed: 14 | 2026-06-28T07:33:16+00:00 | Vulnerability · Source |