VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296249 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-30942 | redhat_vex | flare: Flare: Information disclosure via authenticated path traversal | known not affected: 1 | 2026-06-28T07:24:41+00:00 | Vulnerability · Source |
| CVE-2019-2989 | redhat_vex | OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) | fixed: 901 | 2026-06-28T07:24:41+00:00 | Vulnerability · Source |
| CVE-2026-30851 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddyhttp/reverseproxy: Caddy: Privilege escalation via identity injection due to unstripped client headers | known not affected: 1 | 2026-06-28T07:24:40+00:00 | Vulnerability · Source |
| CVE-2026-30930 | redhat_vex | glances: SQL injection via process names in TimescaleDB export | known not affected: 1 | 2026-06-28T07:24:40+00:00 | Vulnerability · Source |
| CVE-2019-1301 | redhat_vex | dotnet: System.Net.Sockets.dll Socket.ConnectAsync Denial of Service | fixed: 76 | 2026-06-28T07:24:38+00:00 | Vulnerability · Source |
| CVE-2019-12984 | redhat_vex | kernel: null pointer dereference in function nfc_genl_deactivate_target() in net/nfc/netlink.c | known not affected: 104 | 2026-06-28T07:24:38+00:00 | Vulnerability · Source |
| CVE-2019-2784 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Jul 2019) | fixed: 291 known not affected: 112 | 2026-06-28T07:24:38+00:00 | Vulnerability · Source |
| CVE-2026-30853 | redhat_vex | calibre: Calibre: Arbitrary file write via crafted RocketBook (.rb) file | known not affected: 1 | 2026-06-28T07:24:37+00:00 | Vulnerability · Source |
| CVE-2019-2780 | redhat_vex | mysql: Server: Components / Services unspecified vulnerability (CPU Jul 2019) | fixed: 291 known not affected: 112 | 2026-06-28T07:24:37+00:00 | Vulnerability · Source |
| CVE-2026-30852 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddyhttp: Caddy: Information disclosure via double-expansion of user-controlled input | known not affected: 1 | 2026-06-28T07:24:37+00:00 | Vulnerability · Source |
| CVE-2026-30827 | redhat_vex | express-rate-limit: express-rate-limit: Denial of Service for IPv4 clients due to incorrect IPv6 subnet masking | fixed: 8 known affected: 2 known not affected: 163 | 2026-06-28T07:24:35+00:00 | Vulnerability · Source |
| CVE-2026-30836 | redhat_vex | github.com/smallstep/certificates: Step CA: Unauthenticated certificate issuance via SCEP Update Request | known not affected: 1 | 2026-06-28T07:24:35+00:00 | Vulnerability · Source |
| CVE-2026-30230 | redhat_vex | flare: Flare: Unauthorized information disclosure due to improper access control in the thumbnail endpoint. | known not affected: 1 | 2026-06-28T07:24:35+00:00 | Vulnerability · Source |
| CVE-2026-3063 | redhat_vex | chromium-browser: Inappropriate implementation in DevTools | known not affected: 1 | 2026-06-28T07:24:34+00:00 | Vulnerability · Source |
| CVE-2026-30656 | redhat_vex | fio: fio: Denial of Service via NULL pointer dereference when parsing job files | known not affected: 19 | 2026-06-28T07:24:34+00:00 | Vulnerability · Source |
| CVE-2026-30587 | redhat_vex | Seafile Server: Seadoc editor: seahub: seadoc-editor: Seafile Server: Arbitrary client-side code execution via Stored Cross-Site Scripting in Seadoc editor | known not affected: 1 | 2026-06-28T07:24:32+00:00 | Vulnerability · Source |
| CVE-2019-2587 | redhat_vex | mysql: Server: Partition unspecified vulnerability (CPU Apr 2019) | fixed: 291 known not affected: 123 | 2026-06-28T07:24:31+00:00 | Vulnerability · Source |
| CVE-2026-30231 | redhat_vex | flare: Flare: Information disclosure via inconsistent access checks for private files | known not affected: 1 | 2026-06-28T07:24:31+00:00 | Vulnerability · Source |
| CVE-2019-12455 | redhat_vex | kernel: null pointer dereference in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c causing denial of service | known not affected: 104 | 2026-06-28T07:24:29+00:00 | Vulnerability · Source |
| CVE-2026-29976 | redhat_vex | hcxpcapngtool: hcxtools: ZerBea hcxpcapngtool: Information disclosure via buffer overflow in getradiotapfield() function | known not affected: 1 | 2026-06-28T07:24:28+00:00 | Vulnerability · Source |
| CVE-2019-12379 | redhat_vex | kernel: memory leak in con_insert_unipair in drivers/tty/vt/consolemap.c | known not affected: 104 | 2026-06-28T07:24:25+00:00 | Vulnerability · Source |
| CVE-2023-0590 | redhat_vex | kernel: use-after-free due to race condition in qdisc_graft() | fixed: 710 known affected: 42 | 2026-06-28T07:24:24+00:00 | Vulnerability · Source |
| CVE-2019-12381 | redhat_vex | kernel: unchecked kmalloc of new_ra in ip_ra_control leads to denial of service | known affected: 1 known not affected: 103 | 2026-06-28T07:24:24+00:00 | Vulnerability · Source |
| CVE-2019-12380 | redhat_vex | kernel: memory allocation failure in the efi subsystem leads to denial of service | known affected: 88 known not affected: 16 | 2026-06-28T07:24:23+00:00 | Vulnerability · Source |
| CVE-2026-2968 | redhat_vex | mongoose: Cesanta Mongoose: Improper cryptographic signature verification in Poly1305 Authentication Tag Handler | known not affected: 1 | 2026-06-28T07:24:21+00:00 | Vulnerability · Source |
| CVE-2019-12068 | redhat_vex | qemu: scsi: lsi: potential infinite loop when executing script in lsi_execute_script | known affected: 1 known not affected: 69 | 2026-06-28T07:24:21+00:00 | Vulnerability · Source |
| CVE-2026-2967 | redhat_vex | Mongoose: Mongoose: Remote Denial of Service in TCP Sequence Number Handler | known not affected: 1 | 2026-06-28T07:24:21+00:00 | Vulnerability · Source |
| CVE-2019-12378 | redhat_vex | kernel: unchecked kmalloc of new_ra in ip6_ra_control leads to denial of service | known not affected: 104 | 2026-06-28T07:24:21+00:00 | Vulnerability · Source |
| CVE-2019-12155 | redhat_vex | QEMU: qxl: null pointer dereference while releasing spice resources | fixed: 1716 known affected: 26 known not affected: 6 | 2026-06-28T07:24:20+00:00 | Vulnerability · Source |
| CVE-2026-29514 | redhat_vex | NetBox: NetBox: Remote code execution via malicious Python callables in templates | known not affected: 1 | 2026-06-28T07:24:20+00:00 | Vulnerability · Source |
| CVE-2019-11884 | redhat_vex | kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command | fixed: 386 known affected: 27 | 2026-06-28T07:24:17+00:00 | Vulnerability · Source |
| CVE-2019-11810 | redhat_vex | kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS | fixed: 791 known affected: 13 | 2026-06-28T07:24:17+00:00 | Vulnerability · Source |
| CVE-2019-2422 | redhat_vex | OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290) | fixed: 903 known not affected: 45 | 2026-06-28T07:24:16+00:00 | Vulnerability · Source |
| CVE-2019-2420 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019) | fixed: 291 known affected: 8 known not affected: 98 | 2026-06-28T07:24:15+00:00 | Vulnerability · Source |
| CVE-2026-29185 | redhat_vex | @backstage/integration: Backstage SCM Integration: Unauthorized access to SCM APIs via path traversal | known affected: 2 | 2026-06-28T07:24:14+00:00 | Vulnerability · Source |
| CVE-2026-2913 | redhat_vex | libvips: libvips: Denial of Service via heap-based buffer overflow in vips_source_read_to_memory | known not affected: 4 | 2026-06-28T07:24:12+00:00 | Vulnerability · Source |
| CVE-2026-29089 | redhat_vex | timescaledb: TimescaleDB: Arbitrary code execution via malicious functions in user-writable schemas during extension upgrade | known not affected: 1 | 2026-06-28T07:24:10+00:00 | Vulnerability · Source |
| CVE-2026-29068 | redhat_vex | PJSIP: PJSIP: Denial of Service via malformed RTP payload processing | known not affected: 1 | 2026-06-28T07:24:08+00:00 | Vulnerability · Source |
| CVE-2026-29013 | redhat_vex | libcoap: libcoap: Memory corruption and denial of service via crafted CoAP requests | known not affected: 1 | 2026-06-28T07:24:08+00:00 | Vulnerability · Source |
| CVE-2019-11683 | redhat_vex | kernel: udp_gro_receive_segment in net/ipv4/udp_offload.c allows denial of service or other unspecified impact via UDP packets with 0 payload | known not affected: 104 | 2026-06-28T07:24:07+00:00 | Vulnerability · Source |
| CVE-2026-29043 | redhat_vex | HDF5: HDF5: Remote code execution and denial of service via heap buffer overflow in H5T__ref_mem_setnull | known not affected: 1 | 2026-06-28T07:24:05+00:00 | Vulnerability · Source |
| CVE-2019-11048 | redhat_vex | php: Integer wraparounds when receiving multipart forms | fixed: 605 known affected: 133 | 2026-06-28T07:23:59+00:00 | Vulnerability · Source |
| CVE-2019-11047 | redhat_vex | php: Information disclosure in exif_read_data() | fixed: 605 known affected: 133 | 2026-06-28T07:23:58+00:00 | Vulnerability · Source |
| CVE-2019-11043 | redhat_vex | php: underflow in env_path_info in fpm_main.c | fixed: 2529 known not affected: 32 | 2026-06-28T07:23:57+00:00 | Vulnerability · Source |
| CVE-2019-10773 | redhat_vex | nodejs-yarn: Install functionality can be abused to generate arbitrary symlinks | fixed: 1 | 2026-06-28T07:23:56+00:00 | Vulnerability · Source |
| CVE-2026-28799 | redhat_vex | PJSIP: PJSIP: Denial of Service via heap use-after-free in event subscription | known not affected: 1 | 2026-06-28T07:23:56+00:00 | Vulnerability · Source |
| CVE-2019-10639 | redhat_vex | Kernel: net: using kernel space address bits to derive IP ID may potentially break KASLR | fixed: 477 known affected: 28 known not affected: 15 | 2026-06-28T07:23:55+00:00 | Vulnerability · Source |
| CVE-2019-10746 | redhat_vex | nodejs-mixin-deep: prototype pollution in function mixin-deep | fixed: 86 known affected: 7 known not affected: 6 | 2026-06-28T07:23:55+00:00 | Vulnerability · Source |
| CVE-2026-28741 | redhat_vex | mattermost: CSRF protection bypass allows updating a user's authentication method | known not affected: 1 | 2026-06-28T07:23:53+00:00 | Vulnerability · Source |
| CVE-2019-10638 | redhat_vex | Kernel: net: weak IP ID generation leads to remote device tracking | fixed: 361 known affected: 28 known not affected: 15 | 2026-06-28T07:23:53+00:00 | Vulnerability · Source |