VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294559 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-14643 | redhat_vex | mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020) | fixed: 337 known not affected: 92 | 2026-06-28T07:32:20+00:00 | Vulnerability · Source |
| CVE-2020-14340 | redhat_vex | xnio: file descriptor leak caused by growing amounts of NIO Selector file handles may lead to DoS | fixed: 372 known affected: 13 known not affected: 5 | 2026-06-28T07:32:19+00:00 | Vulnerability · Source |
| CVE-2026-39324 | redhat_vex | github.com/rack/rack-session: Rack::Session: Unauthorized access via crafted session cookies | known not affected: 1 | 2026-06-28T07:32:18+00:00 | Vulnerability · Source |
| CVE-2020-14332 | redhat_vex | Ansible: module_args does not censor properly in --check mode | fixed: 4 known affected: 4 known not affected: 7 | 2026-06-28T07:32:18+00:00 | Vulnerability · Source |
| CVE-2020-14583 | redhat_vex | OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920) | fixed: 753 known affected: 7 | 2026-06-28T07:32:18+00:00 | Vulnerability · Source |
| CVE-2026-39350 | redhat_vex | Istio: github.com/istio/istio: Istio: Authorization bypass via incorrect interpretation of dots in service account names | known affected: 1 | 2026-06-28T07:32:18+00:00 | Vulnerability · Source |
| CVE-2026-3923 | redhat_vex | chromium-browser: Use after free in WebMIDI | known not affected: 1 | 2026-06-28T07:32:17+00:00 | Vulnerability · Source |
| CVE-2026-3926 | redhat_vex | chromium-browser: Out of bounds read in V8 | known not affected: 1 | 2026-06-28T07:32:17+00:00 | Vulnerability · Source |
| CVE-2026-3929 | redhat_vex | chromium-browser: Side-channel information leakage in ResourceTiming | known not affected: 1 | 2026-06-28T07:32:17+00:00 | Vulnerability · Source |
| CVE-2026-3919 | redhat_vex | chromium-browser: Use after free in Extensions | known not affected: 1 | 2026-06-28T07:32:17+00:00 | Vulnerability · Source |
| CVE-2026-3928 | redhat_vex | chromium-browser: Insufficient policy enforcement in Extensions | known not affected: 1 | 2026-06-28T07:32:17+00:00 | Vulnerability · Source |
| CVE-2026-39304 | redhat_vex | Apache ActiveMQ Client: Apache ActiveMQ Broker: Apache ActiveMQ: Apache ActiveMQ: Denial of Service due to TLSv1.3 KeyUpdate memory exhaustion | known affected: 3 known not affected: 18 | 2026-06-28T07:32:17+00:00 | Vulnerability · Source |
| CVE-2026-3917 | redhat_vex | chromium-browser: Use after free in Agents | known not affected: 1 | 2026-06-28T07:32:16+00:00 | Vulnerability · Source |
| CVE-2026-3916 | redhat_vex | chromium-browser: Out of bounds read in Web Speech | known not affected: 1 | 2026-06-28T07:32:16+00:00 | Vulnerability · Source |
| CVE-2020-14314 | redhat_vex | kernel: buffer uses out of index in ext3/4 filesystem | fixed: 335 known affected: 32 | 2026-06-28T07:32:16+00:00 | Vulnerability · Source |
| CVE-2026-3918 | redhat_vex | chromium-browser: Use after free in WebMCP | known not affected: 1 | 2026-06-28T07:32:16+00:00 | Vulnerability · Source |
| CVE-2026-3915 | redhat_vex | chromium-browser: Heap buffer overflow in WebML | known not affected: 1 | 2026-06-28T07:32:16+00:00 | Vulnerability · Source |
| CVE-2026-38978 | redhat_vex | transmission: Transmission: Clickjacking weakness in WebUI and RPC response paths | known not affected: 1 | 2026-06-28T07:32:14+00:00 | Vulnerability · Source |
| CVE-2026-3902 | redhat_vex | Django: Django: Header spoofing via ambiguous header mapping | known affected: 11 | 2026-06-28T07:32:14+00:00 | Vulnerability · Source |
| CVE-2020-14301 | redhat_vex | libvirt: leak of sensitive cookie information via dumpxml | fixed: 1756 known affected: 62 known not affected: 40 | 2026-06-28T07:32:09+00:00 | Vulnerability · Source |
| CVE-2020-8277 | redhat_vex | c-ares: ares_parse_{a,aaaa}_reply() insufficient naddrttls validation DoS | fixed: 156 known not affected: 28 | 2026-06-28T07:32:07+00:00 | Vulnerability · Source |
| CVE-2020-13974 | redhat_vex | kernel: integer overflow in k_ascii() in drivers/tty/vt/keyboard.c | fixed: 150 known affected: 29 known not affected: 120 | 2026-06-28T07:32:05+00:00 | Vulnerability · Source |
| CVE-2020-13954 | redhat_vex | cxf: XSS via the styleSheetPath | fixed: 2 known affected: 15 | 2026-06-28T07:32:04+00:00 | Vulnerability · Source |
| CVE-2026-37540 | redhat_vex | OpenAMP: OpenAMP: Integer overflow in ELF loader can lead to arbitrary code execution or privilege escalation | known not affected: 1 | 2026-06-28T07:32:03+00:00 | Vulnerability · Source |
| CVE-2026-35512 | redhat_vex | xrdp: xrdp: Remote Code Execution via heap-based buffer overflow | known not affected: 1 | 2026-06-28T07:32:00+00:00 | Vulnerability · Source |
| CVE-2026-3650 | redhat_vex | gdcm: GDCM: Denial of Service via malformed DICOM files | known not affected: 1 | 2026-06-28T07:31:59+00:00 | Vulnerability · Source |
| CVE-2020-13844 | redhat_vex | kernel: ARM straight-line speculation vulnerability | known affected: 139 known not affected: 60 | 2026-06-28T07:31:59+00:00 | Vulnerability · Source |
| CVE-2020-13631 | redhat_vex | sqlite: Virtual table can be renamed into the name of one of its shadow tables | fixed: 204 known affected: 13 known not affected: 13 | 2026-06-28T07:31:59+00:00 | Vulnerability · Source |
| CVE-2020-13754 | redhat_vex | QEMU: msix: OOB access during mmio operations may lead to DoS | fixed: 1756 known affected: 37 known not affected: 40 | 2026-06-28T07:31:58+00:00 | Vulnerability · Source |
| CVE-2026-3635 | redhat_vex | fastify: request.protocol and request.host spoofable via X-Forwarded-Proto/Host from untrusted connections when trustProxy uses restrictive trust function | known affected: 9 | 2026-06-28T07:31:58+00:00 | Vulnerability · Source |
| CVE-2020-13659 | redhat_vex | QEMU: exec: address_space_map returns NULL without setting length to zero may lead to DoS | known affected: 53 known not affected: 40 | 2026-06-28T07:31:56+00:00 | Vulnerability · Source |
| CVE-2020-13632 | redhat_vex | sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query | fixed: 204 known affected: 7 known not affected: 19 | 2026-06-28T07:31:55+00:00 | Vulnerability · Source |
| CVE-2026-35587 | redhat_vex | glances: Glances: Server-Side Request Forgery allows unauthorized access and credential leakage via public_api parameter | known not affected: 1 | 2026-06-28T07:31:54+00:00 | Vulnerability · Source |
| CVE-2020-13434 | redhat_vex | sqlite: integer overflow in sqlite3_str_vappendf function in printf.c | fixed: 204 known affected: 7 known not affected: 19 | 2026-06-28T07:31:54+00:00 | Vulnerability · Source |
| CVE-2026-3590 | redhat_vex | mattermost: race condition in guest magic link authentication allows token reuse | known not affected: 1 | 2026-06-28T07:31:54+00:00 | Vulnerability · Source |
| CVE-2020-13379 | redhat_vex | grafana: SSRF incorrect access control vulnerability allows unauthenticated users to make grafana send HTTP requests to any URL | fixed: 258 known affected: 4 known not affected: 17 | 2026-06-28T07:31:53+00:00 | Vulnerability · Source |
| CVE-2026-35541 | redhat_vex | roundcubemail: Roundcube Webmail: Unauthorized password change due to type confusion vulnerability | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35543 | redhat_vex | roundcubemail: Roundcube Webmail: Information disclosure and access-control bypass via animated SVG in email | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35538 | redhat_vex | Roundcube Webmail: Roundcube Webmail: IMAP injection and CSRF bypass due to unsanitized search arguments | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35537 | redhat_vex | roundcubemail: Roundcube Webmail: Arbitrary file write via unsafe deserialization in session handler | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35539 | redhat_vex | roundcubemail: Roundcube Webmail: Cross-Site Scripting via HTML attachment preview | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35544 | redhat_vex | roundcubemail: Roundcube Webmail: Security mitigation bypass via insufficient CSS sanitization | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35542 | redhat_vex | roundcubemail: Roundcube Webmail: Information disclosure or access-control bypass via crafted email background attribute | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35545 | redhat_vex | roundcubemail: Roundcube Webmail: Information disclosure and access-control bypass via SVG content in email. | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35444 | redhat_vex | SDL_image: SDL_image: Information disclosure via crafted XCF files | known not affected: 1 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2026-35515 | redhat_vex | @nestjs/core: Nest: Server-Sent Events (SSE) injection and spoofing via unsanitized newline characters | known affected: 2 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2026-3544 | redhat_vex | chromium-browser: Heap buffer overflow in WebCodecs | known not affected: 1 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2026-3545 | redhat_vex | chromium-browser: Insufficient data validation in Navigation | known not affected: 1 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2020-12829 | redhat_vex | qemu: OOB read and write due to integer overflow in sm501_2d_operation() in hw/display/sm501.c | known not affected: 70 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2020-12826 | redhat_vex | kernel: possible to send arbitrary signals to a privileged (suidroot) parent process | fixed: 354 known affected: 43 | 2026-06-28T07:31:50+00:00 | Vulnerability · Source |