VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296181 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-3942 | redhat_vex | chromium-browser: Incorrect security UI in PictureInPicture | known not affected: 1 | 2026-06-28T07:32:26+00:00 | Vulnerability · Source |
| CVE-2020-14366 | redhat_vex | keycloak: path traversal in resources | fixed: 1 known affected: 1 known not affected: 5 | 2026-06-28T07:32:25+00:00 | Vulnerability · Source |
| CVE-2026-39804 | redhat_vex | bandit: Bandit: Denial of Service due to memory exhaustion via WebSocket permessage-deflate compression | known not affected: 1 | 2026-06-28T07:32:24+00:00 | Vulnerability · Source |
| CVE-2020-14364 | redhat_vex | QEMU: usb: out-of-bounds r/w access issue while processing usb packets | fixed: 3886 known affected: 19 known not affected: 35 | 2026-06-28T07:32:24+00:00 | Vulnerability · Source |
| CVE-2026-3945 | redhat_vex | tinyproxy: tinyproxy: Denial of Service via integer overflow in HTTP chunked transfer encoding parser | known not affected: 1 | 2026-06-28T07:32:24+00:00 | Vulnerability · Source |
| CVE-2026-39402 | redhat_vex | lxc: lxc-user-nic: OpenVSwitch: LXC: Denial of Service in lxc-user-nic due to logic flaw in network interface deletion | known not affected: 1 | 2026-06-28T07:32:24+00:00 | Vulnerability · Source |
| CVE-2020-14702 | redhat_vex | mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020) | fixed: 337 known not affected: 92 | 2026-06-28T07:32:23+00:00 | Vulnerability · Source |
| CVE-2026-3938 | redhat_vex | chromium-browser: Insufficient policy enforcement in Clipboard | known not affected: 1 | 2026-06-28T07:32:23+00:00 | Vulnerability · Source |
| CVE-2026-3940 | redhat_vex | chromium-browser: Insufficient policy enforcement in DevTools | known not affected: 1 | 2026-06-28T07:32:23+00:00 | Vulnerability · Source |
| CVE-2026-39377 | redhat_vex | nbconvert: nbconvert: Arbitrary file write via crafted Jupyter notebook cell attachment filenames | known affected: 18 known not affected: 1 | 2026-06-28T07:32:23+00:00 | Vulnerability · Source |
| CVE-2026-41570 | redhat_vex | phpunit: argument injection via newline in PHP INI values forwarded to child processes | known not affected: 1 | 2026-06-28T07:32:20+00:00 | Vulnerability · Source |
| CVE-2020-14651 | redhat_vex | mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020) | fixed: 337 known not affected: 92 | 2026-06-28T07:32:20+00:00 | Vulnerability · Source |
| CVE-2020-14641 | redhat_vex | mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020) | fixed: 337 known not affected: 92 | 2026-06-28T07:32:20+00:00 | Vulnerability · Source |
| CVE-2020-14631 | redhat_vex | mysql: Server: Security: Audit unspecified vulnerability (CPU Jul 2020) | fixed: 337 known not affected: 92 | 2026-06-28T07:32:20+00:00 | Vulnerability · Source |
| CVE-2026-3913 | redhat_vex | chromium-browser: Heap buffer overflow in WebML | known not affected: 1 | 2026-06-28T07:32:20+00:00 | Vulnerability · Source |
| CVE-2020-14643 | redhat_vex | mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020) | fixed: 337 known not affected: 92 | 2026-06-28T07:32:20+00:00 | Vulnerability · Source |
| CVE-2020-14340 | redhat_vex | xnio: file descriptor leak caused by growing amounts of NIO Selector file handles may lead to DoS | fixed: 372 known affected: 13 known not affected: 5 | 2026-06-28T07:32:19+00:00 | Vulnerability · Source |
| CVE-2026-39324 | redhat_vex | github.com/rack/rack-session: Rack::Session: Unauthorized access via crafted session cookies | known not affected: 1 | 2026-06-28T07:32:18+00:00 | Vulnerability · Source |
| CVE-2020-14332 | redhat_vex | Ansible: module_args does not censor properly in --check mode | fixed: 4 known affected: 4 known not affected: 7 | 2026-06-28T07:32:18+00:00 | Vulnerability · Source |
| CVE-2020-14583 | redhat_vex | OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920) | fixed: 753 known affected: 7 | 2026-06-28T07:32:18+00:00 | Vulnerability · Source |
| CVE-2026-39350 | redhat_vex | Istio: github.com/istio/istio: Istio: Authorization bypass via incorrect interpretation of dots in service account names | known affected: 1 | 2026-06-28T07:32:18+00:00 | Vulnerability · Source |
| CVE-2026-3923 | redhat_vex | chromium-browser: Use after free in WebMIDI | known not affected: 1 | 2026-06-28T07:32:17+00:00 | Vulnerability · Source |
| CVE-2026-3926 | redhat_vex | chromium-browser: Out of bounds read in V8 | known not affected: 1 | 2026-06-28T07:32:17+00:00 | Vulnerability · Source |
| CVE-2026-3929 | redhat_vex | chromium-browser: Side-channel information leakage in ResourceTiming | known not affected: 1 | 2026-06-28T07:32:17+00:00 | Vulnerability · Source |
| CVE-2026-3919 | redhat_vex | chromium-browser: Use after free in Extensions | known not affected: 1 | 2026-06-28T07:32:17+00:00 | Vulnerability · Source |
| CVE-2026-3928 | redhat_vex | chromium-browser: Insufficient policy enforcement in Extensions | known not affected: 1 | 2026-06-28T07:32:17+00:00 | Vulnerability · Source |
| CVE-2026-39304 | redhat_vex | Apache ActiveMQ Client: Apache ActiveMQ Broker: Apache ActiveMQ: Apache ActiveMQ: Denial of Service due to TLSv1.3 KeyUpdate memory exhaustion | known affected: 3 known not affected: 18 | 2026-06-28T07:32:17+00:00 | Vulnerability · Source |
| CVE-2026-3917 | redhat_vex | chromium-browser: Use after free in Agents | known not affected: 1 | 2026-06-28T07:32:16+00:00 | Vulnerability · Source |
| CVE-2026-3916 | redhat_vex | chromium-browser: Out of bounds read in Web Speech | known not affected: 1 | 2026-06-28T07:32:16+00:00 | Vulnerability · Source |
| CVE-2020-14314 | redhat_vex | kernel: buffer uses out of index in ext3/4 filesystem | fixed: 335 known affected: 32 | 2026-06-28T07:32:16+00:00 | Vulnerability · Source |
| CVE-2026-3918 | redhat_vex | chromium-browser: Use after free in WebMCP | known not affected: 1 | 2026-06-28T07:32:16+00:00 | Vulnerability · Source |
| CVE-2026-3915 | redhat_vex | chromium-browser: Heap buffer overflow in WebML | known not affected: 1 | 2026-06-28T07:32:16+00:00 | Vulnerability · Source |
| CVE-2026-38978 | redhat_vex | transmission: Transmission: Clickjacking weakness in WebUI and RPC response paths | known not affected: 1 | 2026-06-28T07:32:14+00:00 | Vulnerability · Source |
| CVE-2026-3902 | redhat_vex | Django: Django: Header spoofing via ambiguous header mapping | known affected: 11 | 2026-06-28T07:32:14+00:00 | Vulnerability · Source |
| CVE-2020-14301 | redhat_vex | libvirt: leak of sensitive cookie information via dumpxml | fixed: 1756 known affected: 62 known not affected: 40 | 2026-06-28T07:32:09+00:00 | Vulnerability · Source |
| CVE-2020-8277 | redhat_vex | c-ares: ares_parse_{a,aaaa}_reply() insufficient naddrttls validation DoS | fixed: 156 known not affected: 28 | 2026-06-28T07:32:07+00:00 | Vulnerability · Source |
| CVE-2020-13974 | redhat_vex | kernel: integer overflow in k_ascii() in drivers/tty/vt/keyboard.c | fixed: 150 known affected: 29 known not affected: 120 | 2026-06-28T07:32:05+00:00 | Vulnerability · Source |
| CVE-2020-13954 | redhat_vex | cxf: XSS via the styleSheetPath | fixed: 2 known affected: 15 | 2026-06-28T07:32:04+00:00 | Vulnerability · Source |
| CVE-2026-37540 | redhat_vex | OpenAMP: OpenAMP: Integer overflow in ELF loader can lead to arbitrary code execution or privilege escalation | known not affected: 1 | 2026-06-28T07:32:03+00:00 | Vulnerability · Source |
| CVE-2026-35512 | redhat_vex | xrdp: xrdp: Remote Code Execution via heap-based buffer overflow | known not affected: 1 | 2026-06-28T07:32:00+00:00 | Vulnerability · Source |
| CVE-2026-3650 | redhat_vex | gdcm: GDCM: Denial of Service via malformed DICOM files | known not affected: 1 | 2026-06-28T07:31:59+00:00 | Vulnerability · Source |
| CVE-2020-13844 | redhat_vex | kernel: ARM straight-line speculation vulnerability | known affected: 139 known not affected: 60 | 2026-06-28T07:31:59+00:00 | Vulnerability · Source |
| CVE-2020-13631 | redhat_vex | sqlite: Virtual table can be renamed into the name of one of its shadow tables | fixed: 204 known affected: 13 known not affected: 13 | 2026-06-28T07:31:59+00:00 | Vulnerability · Source |
| CVE-2020-13754 | redhat_vex | QEMU: msix: OOB access during mmio operations may lead to DoS | fixed: 1756 known affected: 37 known not affected: 40 | 2026-06-28T07:31:58+00:00 | Vulnerability · Source |
| CVE-2026-3635 | redhat_vex | fastify: request.protocol and request.host spoofable via X-Forwarded-Proto/Host from untrusted connections when trustProxy uses restrictive trust function | known affected: 9 | 2026-06-28T07:31:58+00:00 | Vulnerability · Source |
| CVE-2020-13659 | redhat_vex | QEMU: exec: address_space_map returns NULL without setting length to zero may lead to DoS | known affected: 53 known not affected: 40 | 2026-06-28T07:31:56+00:00 | Vulnerability · Source |
| CVE-2020-13632 | redhat_vex | sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query | fixed: 204 known affected: 7 known not affected: 19 | 2026-06-28T07:31:55+00:00 | Vulnerability · Source |
| CVE-2026-35587 | redhat_vex | glances: Glances: Server-Side Request Forgery allows unauthorized access and credential leakage via public_api parameter | known not affected: 1 | 2026-06-28T07:31:54+00:00 | Vulnerability · Source |
| CVE-2020-13434 | redhat_vex | sqlite: integer overflow in sqlite3_str_vappendf function in printf.c | fixed: 204 known affected: 7 known not affected: 19 | 2026-06-28T07:31:54+00:00 | Vulnerability · Source |
| CVE-2026-3590 | redhat_vex | mattermost: race condition in guest magic link authentication allows token reuse | known not affected: 1 | 2026-06-28T07:31:54+00:00 | Vulnerability · Source |