VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296252 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-26064 | redhat_vex | calibre: Calibre: Remote Code Execution via Path Traversal | known not affected: 1 | 2026-06-28T07:22:39+00:00 | Vulnerability · Source |
| CVE-2026-26014 | redhat_vex | github.com/pion/dtls: Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key | known affected: 2 | 2026-06-28T07:22:38+00:00 | Vulnerability · Source |
| CVE-2026-26013 | redhat_vex | langchain: SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages | known affected: 6 | 2026-06-28T07:22:37+00:00 | Vulnerability · Source |
| CVE-2026-25994 | redhat_vex | pjsip: PJSIP: heap buffer overflow in ICE with long username | known not affected: 1 | 2026-06-28T07:22:37+00:00 | Vulnerability · Source |
| CVE-2016-7097 | redhat_vex | kernel: Setting a POSIX ACL via setxattr doesn't clear the setgid bit | fixed: 381 known affected: 1 known not affected: 7 | 2026-06-28T07:22:37+00:00 | Vulnerability · Source |
| CVE-2016-6992 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-32 | fixed: 5 | 2026-06-28T07:22:35+00:00 | Vulnerability · Source |
| CVE-2016-6662 | redhat_vex | mysql: general_log can write to configuration files, leading to privilege escalation (CPU Oct 2016) | fixed: 615 known affected: 1 known not affected: 5 | 2026-06-28T07:22:34+00:00 | Vulnerability · Source |
| CVE-2016-7039 | redhat_vex | kernel: remotely triggerable unbounded recursion in the vlan gro code leading to a kernel crash | fixed: 230 known not affected: 15 | 2026-06-28T07:22:34+00:00 | Vulnerability · Source |
| CVE-2016-7031 | redhat_vex | ceph: RGW permits bucket listing when authenticated_users=read | fixed: 83 known not affected: 26 | 2026-06-28T07:22:33+00:00 | Vulnerability · Source |
| CVE-2016-6987 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-32 | fixed: 5 | 2026-06-28T07:22:33+00:00 | Vulnerability · Source |
| CVE-2016-6984 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-32 | fixed: 5 | 2026-06-28T07:22:33+00:00 | Vulnerability · Source |
| CVE-2016-6663 | redhat_vex | mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016) | fixed: 591 known affected: 19 known not affected: 8 under investigation: 1 | 2026-06-28T07:22:32+00:00 | Vulnerability · Source |
| CVE-2016-6519 | redhat_vex | openstack-manila-ui: persistent XSS in metadata field | fixed: 6 known not affected: 1 | 2026-06-28T07:22:32+00:00 | Vulnerability · Source |
| CVE-2026-25955 | redhat_vex | freerdp: FreeRDP: Denial of Service via use-after-free in xf_AppUpdateWindowFromSurface | known affected: 31 | 2026-06-28T07:22:31+00:00 | Vulnerability · Source |
| CVE-2026-25959 | redhat_vex | freerdp: FreeRDP: Denial of Service via heap use-after-free in clipboard handling | known affected: 31 | 2026-06-28T07:22:31+00:00 | Vulnerability · Source |
| CVE-2026-25952 | redhat_vex | freerdp: FreeRDP: Denial of service due to use-after-free vulnerability | fixed: 781 known affected: 5 | 2026-06-28T07:22:30+00:00 | Vulnerability · Source |
| CVE-2026-25954 | redhat_vex | freerdp: FreeRDP: Use-after-free vulnerability leading to denial of service | known affected: 31 | 2026-06-28T07:22:30+00:00 | Vulnerability · Source |
| CVE-2026-25953 | redhat_vex | freerdp: FreeRDP: Denial of Service due to use-after-free vulnerability in window handling | known affected: 31 | 2026-06-28T07:22:30+00:00 | Vulnerability · Source |
| CVE-2016-6317 | redhat_vex | rubygem-activerecord: unsafe query generation in Active Record | fixed: 36 known not affected: 12 | 2026-06-28T07:22:29+00:00 | Vulnerability · Source |
| CVE-2026-25942 | redhat_vex | freerdp: FreeRDP: Denial of Service via out-of-bounds read from malicious server input | known affected: 31 | 2026-06-28T07:22:29+00:00 | Vulnerability · Source |
| CVE-2016-6316 | redhat_vex | rubygem-actionview: cross-site scripting flaw in Action View | fixed: 108 known affected: 1 | 2026-06-28T07:22:29+00:00 | Vulnerability · Source |
| CVE-2016-5767 | redhat_vex | gd: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow | fixed: 469 known affected: 84 known not affected: 12 | 2026-06-28T07:22:28+00:00 | Vulnerability · Source |
| CVE-2026-31961 | redhat_vex | github.com/anchore/quill: Quill: Denial of Service via unbounded memory allocation | known not affected: 1 | 2026-06-28T07:22:27+00:00 | Vulnerability · Source |
| CVE-2016-6288 | redhat_vex | php: Buffer over-read in php_url_parse_ex | fixed: 251 known affected: 110 | 2026-06-28T07:22:27+00:00 | Vulnerability · Source |
| CVE-2016-6291 | redhat_vex | php: Out-of-bounds access in exif_process_IFD_in_MAKERNOTE | fixed: 251 known affected: 110 | 2026-06-28T07:22:27+00:00 | Vulnerability · Source |
| CVE-2016-6198 | redhat_vex | kernel: vfs: missing detection of hardlinks in vfs_rename() on overlayfs | fixed: 382 known affected: 12 known not affected: 15 | 2026-06-28T07:22:26+00:00 | Vulnerability · Source |
| CVE-2016-5829 | redhat_vex | kernel: Heap buffer overflow in hiddev driver | fixed: 371 known affected: 13 | 2026-06-28T07:22:25+00:00 | Vulnerability · Source |
| CVE-2016-5554 | redhat_vex | OpenJDK: insufficient classloader consistency checks in ClassLoaderWithRepository (JMX, 8157739) | fixed: 1091 | 2026-06-28T07:22:24+00:00 | Vulnerability · Source |
| CVE-2016-5582 | redhat_vex | OpenJDK: incomplete type checks of System.arraycopy arguments (Hotspot, 8160591) | fixed: 721 | 2026-06-28T07:22:22+00:00 | Vulnerability · Source |
| CVE-2016-5773 | redhat_vex | php: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize | fixed: 251 known affected: 109 known not affected: 1 | 2026-06-28T07:22:22+00:00 | Vulnerability · Source |
| CVE-2016-5439 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Privileges (CPU July 2016) | fixed: 80 known not affected: 62 | 2026-06-28T07:22:18+00:00 | Vulnerability · Source |
| CVE-2016-5597 | redhat_vex | OpenJDK: exposure of server authentication credentials to proxy (Networking, 8160838) | fixed: 1091 | 2026-06-28T07:22:18+00:00 | Vulnerability · Source |
| CVE-2026-25731 | redhat_vex | calibre: Calibre: Arbitrary Code Execution via malicious custom template file during ebook conversion | known not affected: 1 | 2026-06-28T07:22:18+00:00 | Vulnerability · Source |
| CVE-2026-25704 | redhat_vex | cosmic-greeter: cosmic-greeter: Privilege escalation via TOCTOU race condition | known not affected: 1 | 2026-06-28T07:22:18+00:00 | Vulnerability · Source |
| CVE-2016-5440 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU July 2016) | fixed: 502 known affected: 9 under investigation: 9 | 2026-06-28T07:22:18+00:00 | Vulnerability · Source |
| CVE-2026-25673 | redhat_vex | django: Django: Denial of Service via slow URL normalization on Windows | known not affected: 12 | 2026-06-28T07:22:16+00:00 | Vulnerability · Source |
| CVE-2016-5419 | redhat_vex | curl: TLS session resumption client cert bypass | fixed: 395 known affected: 15 | 2026-06-28T07:22:15+00:00 | Vulnerability · Source |
| CVE-2016-5385 | redhat_vex | PHP: sets environmental variable based on user supplied Proxy request header | fixed: 1126 known affected: 2 | 2026-06-28T07:22:12+00:00 | Vulnerability · Source |
| CVE-2026-25554 | redhat_vex | opensips: OpenSIPS: Authentication bypass due to SQL injection in JWT processing | known not affected: 1 | 2026-06-28T07:22:12+00:00 | Vulnerability · Source |
| CVE-2026-25537 | redhat_vex | jsonwebtoken: jsonwebtoken has Type Confusion that leads to potential authorization bypass | known affected: 4 | 2026-06-28T07:22:11+00:00 | Vulnerability · Source |
| CVE-2026-25061 | redhat_vex | tcpflow: tcpflow TIM Element OOB Write | known not affected: 1 | 2026-06-28T07:22:08+00:00 | Vulnerability · Source |
| CVE-2016-5220 | redhat_vex | chromium-browser: local file access in pdfium | fixed: 12 | 2026-06-28T07:22:07+00:00 | Vulnerability · Source |
| CVE-2016-5216 | redhat_vex | chromium-browser: use after free in pdfium | fixed: 12 | 2026-06-28T07:22:07+00:00 | Vulnerability · Source |
| CVE-2016-5217 | redhat_vex | chromium-browser: use of unvalidated data in pdfium | fixed: 12 | 2026-06-28T07:22:07+00:00 | Vulnerability · Source |
| CVE-2016-5208 | redhat_vex | chromium-browser: universal xss in blink | fixed: 12 | 2026-06-28T07:22:06+00:00 | Vulnerability · Source |
| CVE-2016-5207 | redhat_vex | chromium-browser: universal xss in blink | fixed: 12 | 2026-06-28T07:22:06+00:00 | Vulnerability · Source |
| CVE-2016-5209 | redhat_vex | chromium-browser: out of bounds write in blink | fixed: 12 | 2026-06-28T07:22:06+00:00 | Vulnerability · Source |
| CVE-2026-24851 | redhat_vex | github.com/openfga/openfga: OpenFGA Improper Policy Enforcement | known affected: 3 | 2026-06-28T07:22:05+00:00 | Vulnerability · Source |
| CVE-2016-5203 | redhat_vex | chromium-browser: use after free in pdfium | fixed: 12 | 2026-06-28T07:22:05+00:00 | Vulnerability · Source |
| CVE-2016-5202 | redhat_vex | chromium-browser: various fixes from internal audits | fixed: 12 | 2026-06-28T07:22:05+00:00 | Vulnerability · Source |