VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296244 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-2585 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2019) | fixed: 291 known not affected: 123 | 2026-06-28T07:28:37+00:00 | Vulnerability · Source |
| CVE-2019-2528 | redhat_vex | mysql: Server: Partition unspecified vulnerability (CPU Jan 2019) | fixed: 291 known affected: 8 known not affected: 98 | 2026-06-28T07:28:36+00:00 | Vulnerability · Source |
| CVE-2019-2530 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019) | fixed: 291 known not affected: 106 | 2026-06-28T07:28:35+00:00 | Vulnerability · Source |
| CVE-2019-2529 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019) | fixed: 401 known affected: 57 known not affected: 40 | 2026-06-28T07:28:34+00:00 | Vulnerability · Source |
| CVE-2019-25076 | redhat_vex | openvswitch: DoS via crafted packet | known affected: 131 | 2026-06-28T07:28:33+00:00 | Vulnerability · Source |
| CVE-2019-2507 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019) | fixed: 291 known affected: 8 known not affected: 98 | 2026-06-28T07:28:33+00:00 | Vulnerability · Source |
| CVE-2019-2503 | redhat_vex | mysql: Server: Connection Handling unspecified vulnerability (CPU Jan 2019) | fixed: 831 known affected: 57 known not affected: 19 | 2026-06-28T07:28:31+00:00 | Vulnerability · Source |
| CVE-2026-32235 | redhat_vex | @backstage/plugin-auth-backend: @backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass | fixed: 1 known affected: 1 known not affected: 2 | 2026-06-28T07:28:31+00:00 | Vulnerability · Source |
| CVE-2026-32239 | redhat_vex | capnproto: Cap'n Proto has an integer overflow in KJ-HTTP | known affected: 3 | 2026-06-28T07:28:31+00:00 | Vulnerability · Source |
| CVE-2019-20934 | redhat_vex | kernel: use-after-free in show_numa_stats function | fixed: 291 known affected: 31 known not affected: 48 | 2026-06-28T07:28:30+00:00 | Vulnerability · Source |
| CVE-2026-32175 | redhat_vex | dotnet: .NET: improper handling of files allows an attacker to write to certain locations | known not affected: 133 | 2026-06-28T07:28:30+00:00 | Vulnerability · Source |
| CVE-2019-2502 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jan 2019) | fixed: 291 known not affected: 106 | 2026-06-28T07:28:30+00:00 | Vulnerability · Source |
| CVE-2019-2486 | redhat_vex | mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019) | fixed: 291 known affected: 8 known not affected: 98 | 2026-06-28T07:28:28+00:00 | Vulnerability · Source |
| CVE-2019-2482 | redhat_vex | mysql: Server: PS unspecified vulnerability (CPU Jan 2019) | fixed: 291 known affected: 8 known not affected: 98 | 2026-06-28T07:28:28+00:00 | Vulnerability · Source |
| CVE-2019-2495 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Jan 2019) | fixed: 291 known not affected: 106 | 2026-06-28T07:28:28+00:00 | Vulnerability · Source |
| CVE-2019-2494 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Jan 2019) | fixed: 291 known not affected: 106 | 2026-06-28T07:28:28+00:00 | Vulnerability · Source |
| CVE-2026-32107 | redhat_vex | xrdp: xrdp: Privilege Escalation via improper privilege management | known not affected: 1 | 2026-06-28T07:28:27+00:00 | Vulnerability · Source |
| CVE-2026-32105 | redhat_vex | xrdp: xrdp: Data integrity compromised due to missing MAC signature verification in Classic RDP Security | known not affected: 1 | 2026-06-28T07:28:27+00:00 | Vulnerability · Source |
| CVE-2019-2182 | redhat_vex | kernel: possible execution path in MMU code leads to local escalation of privilege | known not affected: 104 | 2026-06-28T07:28:27+00:00 | Vulnerability · Source |
| CVE-2019-2215 | redhat_vex | kernel: Use-after-free in binder.c | known not affected: 104 | 2026-06-28T07:28:27+00:00 | Vulnerability · Source |
| CVE-2026-31965 | redhat_vex | htslib: HTSlib: Information disclosure or denial of service via out-of-bounds read in CRAM record processing | known not affected: 1 | 2026-06-28T07:28:26+00:00 | Vulnerability · Source |
| CVE-2026-31972 | redhat_vex | samtools: SAMtools: Information Disclosure and Denial of Service via use-after-free vulnerability in mpileup command | known not affected: 1 | 2026-06-28T07:28:25+00:00 | Vulnerability · Source |
| CVE-2026-31973 | redhat_vex | samtools: SAMtools: Denial of Service due to NULL pointer dereference in cram-size command | known not affected: 1 | 2026-06-28T07:28:25+00:00 | Vulnerability · Source |
| CVE-2019-20920 | redhat_vex | nodejs-handlebars: lookup helper fails to properly validate templates allowing for arbitrary JavaScript execution | fixed: 7 known affected: 9 known not affected: 74 | 2026-06-28T07:28:25+00:00 | Vulnerability · Source |
| CVE-2026-31899 | redhat_vex | CairoSVG: CairoSVG: Denial of Service via recursive <use> element amplification | known not affected: 1 | 2026-06-28T07:28:24+00:00 | Vulnerability · Source |
| CVE-2026-31967 | redhat_vex | htslib: HTSlib: Information disclosure and Denial of Service via unvalidated CRAM mate reference ID | known not affected: 1 | 2026-06-28T07:28:24+00:00 | Vulnerability · Source |
| CVE-2026-31966 | redhat_vex | htslib: htslib: Information disclosure and denial of service due to insufficient CRAM feature data validation | known not affected: 1 | 2026-06-28T07:28:24+00:00 | Vulnerability · Source |
| CVE-2026-31970 | redhat_vex | htslib: HTSlib: BGZF index file reader has a heap buffer overflow | known not affected: 1 | 2026-06-28T07:28:24+00:00 | Vulnerability · Source |
| CVE-2026-31962 | redhat_vex | htslib: htslib: Heap buffer overflow leading to arbitrary code execution via crafted CRAM file | known not affected: 1 | 2026-06-28T07:28:24+00:00 | Vulnerability · Source |
| CVE-2019-20812 | redhat_vex | kernel: af_packet: TPACKET_V3: invalid timer timeout on error | fixed: 120 known affected: 72 | 2026-06-28T07:28:24+00:00 | Vulnerability · Source |
| CVE-2026-31969 | redhat_vex | htslib: HTSlib: CRAM decoder has a heap buffer overflow | known not affected: 1 | 2026-06-28T07:28:24+00:00 | Vulnerability · Source |
| CVE-2026-31963 | redhat_vex | htslib: HTSlib: Arbitrary code execution via crafted CRAM file | known not affected: 1 | 2026-06-28T07:28:24+00:00 | Vulnerability · Source |
| CVE-2026-31968 | redhat_vex | htslib: HTSlib: Buffer overflow in CRAM decoder | known not affected: 1 | 2026-06-28T07:28:24+00:00 | Vulnerability · Source |
| CVE-2026-31935 | redhat_vex | Suricata: Suricata: Denial of Service via HTTP2 continuation frame flooding | known not affected: 1 | 2026-06-28T07:28:23+00:00 | Vulnerability · Source |
| CVE-2026-31937 | redhat_vex | Suricata: Suricata: Denial of Service via DCERPC buffering inefficiency | known not affected: 1 | 2026-06-28T07:28:23+00:00 | Vulnerability · Source |
| CVE-2019-20445 | redhat_vex | netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header | fixed: 557 known affected: 10 known not affected: 20 | 2026-06-28T07:28:23+00:00 | Vulnerability · Source |
| CVE-2026-31932 | redhat_vex | Suricata: Suricata: Denial of Service due to inefficiency in KRB5 buffering | known not affected: 1 | 2026-06-28T07:28:22+00:00 | Vulnerability · Source |
| CVE-2026-31933 | redhat_vex | Suricata: Suricata: Denial of Service due to specially crafted network traffic | known not affected: 1 | 2026-06-28T07:28:22+00:00 | Vulnerability · Source |
| CVE-2019-20382 | redhat_vex | QEMU: vnc: memory leakage upon disconnect | fixed: 811 known affected: 22 known not affected: 8 | 2026-06-28T07:28:20+00:00 | Vulnerability · Source |
| CVE-2026-31890 | redhat_vex | inspektor-gadget: tracing denial of service via event flooding | known not affected: 1 | 2026-06-28T07:28:20+00:00 | Vulnerability · Source |
| CVE-2019-20054 | redhat_vex | kernel: Null pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c | fixed: 379 known affected: 12 known not affected: 15 | 2026-06-28T07:28:18+00:00 | Vulnerability · Source |
| CVE-2023-1582 | redhat_vex | kernel: Soft lockup occurred during __page_mapcount | fixed: 150 known not affected: 150 | 2026-06-28T07:28:18+00:00 | Vulnerability · Source |
| CVE-2019-19966 | redhat_vex | kernel: use-after-free in cpia2_exit in drivers/media/usb/cpia2/cpia2_v4l.c | known affected: 1 known not affected: 103 | 2026-06-28T07:28:18+00:00 | Vulnerability · Source |
| CVE-2026-31838 | redhat_vex | istio: Istio: Authorization policy bypass via Envoy RBAC header matching with multiple header values | known affected: 20 known not affected: 3 under investigation: 15 | 2026-06-28T07:28:18+00:00 | Vulnerability · Source |
| CVE-2026-31842 | redhat_vex | tinyproxy: HTTP Request parsing desynchronization via case-sensitive Transfer-Encoding handling | known not affected: 1 | 2026-06-28T07:28:18+00:00 | Vulnerability · Source |
| CVE-2019-19880 | redhat_vex | sqlite: invalid pointer dereference in exprListAppendList in window.c | fixed: 14 known affected: 13 known not affected: 6 | 2026-06-28T07:28:17+00:00 | Vulnerability · Source |
| CVE-2026-31826 | redhat_vex | pypdf: pypdf: Denial of Service due to excessive memory consumption via crafted PDF | known affected: 6 | 2026-06-28T07:28:17+00:00 | Vulnerability · Source |
| CVE-2026-31817 | redhat_vex | olivetin: OliveTin: Arbitrary file write via directory traversal in log file naming | known not affected: 1 | 2026-06-28T07:28:17+00:00 | Vulnerability · Source |
| CVE-2019-19947 | redhat_vex | kernel: uninitialized memory allocation in drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c leading to information leak | known not affected: 104 | 2026-06-28T07:28:17+00:00 | Vulnerability · Source |
| CVE-2019-19815 | redhat_vex | kernel: NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c | known not affected: 104 | 2026-06-28T07:28:14+00:00 | Vulnerability · Source |