VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296252 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-3699 | redhat_vex | kernel: ACPI table override allowed when securelevel is enabled | fixed: 191 known affected: 12 known not affected: 15 | 2026-06-28T07:21:29+00:00 | Vulnerability · Source |
| CVE-2016-3672 | redhat_vex | kernel: unlimiting the stack disables ASLR | fixed: 191 known affected: 27 | 2026-06-28T07:21:29+00:00 | Vulnerability · Source |
| CVE-2026-23949 | redhat_vex | jaraco.context: jaraco.context: Path traversal via malicious tar archives | known not affected: 1 | 2026-06-28T07:21:29+00:00 | Vulnerability · Source |
| CVE-2016-3503 | redhat_vex | JDK: unspecified vulnerability fixed in 6u121, 7u111, and 8u101 (Install) | fixed: 260 | 2026-06-28T07:21:29+00:00 | Vulnerability · Source |
| CVE-2026-23921 | redhat_vex | Zabbix: Zabbix: Arbitrary database data exfiltration and administrator account compromise via blind SQL injection in API | known not affected: 1 | 2026-06-28T07:21:28+00:00 | Vulnerability · Source |
| CVE-2016-3615 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: DML (CPU July 2016) | fixed: 502 known affected: 9 under investigation: 9 | 2026-06-28T07:21:27+00:00 | Vulnerability · Source |
| CVE-2016-3614 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016) | fixed: 80 known not affected: 62 | 2026-06-28T07:21:27+00:00 | Vulnerability · Source |
| CVE-2026-23918 | redhat_vex | Apache HTTP Server: Apache HTTP Server: Remote Code Execution via Double Free in HTTP/2 Protocol | fixed: 4 known not affected: 58 | 2026-06-28T07:21:26+00:00 | Vulnerability · Source |
| CVE-2026-23919 | redhat_vex | Zabbix Server: Zabbix Proxy: Duktape: Zabbix Server and Proxy: Information disclosure via reused JavaScript contexts | known not affected: 1 | 2026-06-28T07:21:26+00:00 | Vulnerability · Source |
| CVE-2016-3598 | redhat_vex | OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985) | fixed: 647 known not affected: 13 | 2026-06-28T07:21:26+00:00 | Vulnerability · Source |
| CVE-2016-3606 | redhat_vex | OpenJDK: insufficient bytecode verification (Hotspot, 8155981) | fixed: 613 | 2026-06-28T07:21:26+00:00 | Vulnerability · Source |
| CVE-2016-3508 | redhat_vex | OpenJDK: missing entity replacement limits (JAXP, 8149962) | fixed: 713 | 2026-06-28T07:21:25+00:00 | Vulnerability · Source |
| CVE-2016-3498 | redhat_vex | JDK: unspecified vulnerability fixed in 7u111 and 8u101 (JavaFX) | fixed: 160 | 2026-06-28T07:21:24+00:00 | Vulnerability · Source |
| CVE-2016-3501 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016) | fixed: 80 known not affected: 62 | 2026-06-28T07:21:24+00:00 | Vulnerability · Source |
| CVE-2016-3492 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016) | fixed: 479 known affected: 18 known not affected: 8 under investigation: 9 | 2026-06-28T07:21:24+00:00 | Vulnerability · Source |
| CVE-2016-3452 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016) | fixed: 406 known affected: 9 known not affected: 11 under investigation: 9 | 2026-06-28T07:21:23+00:00 | Vulnerability · Source |
| CVE-2016-3427 | redhat_vex | OpenJDK: unrestricted deserialization of authentication credentials (JMX, 8144430) | fixed: 1119 | 2026-06-28T07:21:22+00:00 | Vulnerability · Source |
| CVE-2016-3471 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016) | fixed: 406 known affected: 9 known not affected: 11 under investigation: 9 | 2026-06-28T07:21:22+00:00 | Vulnerability · Source |
| CVE-2016-3426 | redhat_vex | OpenJDK: non-constant time GCM authentication tag comparison (JCE, 8143945) | fixed: 658 known not affected: 28 | 2026-06-28T07:21:22+00:00 | Vulnerability · Source |
| CVE-2026-23907 | redhat_vex | org.apache.pdfbox:pdfbox-examples: Apache PDFBox Example: Path Traversal via specially crafted filenames allows arbitrary file write | known affected: 17 | 2026-06-28T07:21:21+00:00 | Vulnerability · Source |
| CVE-2026-23890 | redhat_vex | pnpm: pnpm: Arbitrary code execution via path traversal in bin linking | known affected: 2 | 2026-06-28T07:21:21+00:00 | Vulnerability · Source |
| CVE-2016-3157 | redhat_vex | kernel: xen: Privilege escalation on 64-bit Xen PV domains with IO port access privileges (XSA-171) | known affected: 32 known not affected: 56 | 2026-06-28T07:21:21+00:00 | Vulnerability · Source |
| CVE-2016-2857 | redhat_vex | Qemu: net: out of bounds read in net_checksum_calculate() | fixed: 122 known affected: 2 known not affected: 6 | 2026-06-28T07:21:17+00:00 | Vulnerability · Source |
| CVE-2018-18337 | redhat_vex | chromium-browser: Use after free in Blink | fixed: 12 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2026-23737 | redhat_vex | seroval: seroval: Arbitrary Code Execution via Improper JSON Deserialization | known not affected: 1 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2016-2847 | redhat_vex | kernel: pipe: limit the per-user amount of pages allocated in pipes | fixed: 302 known affected: 27 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2026-23738 | redhat_vex | asterisk: embedded /httpstatus page echos user supplied values without sanitization | known not affected: 1 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2026-23740 | redhat_vex | Asterisk: Asterisk: Arbitrary code execution and file overwrite as root via insecure ast_coredumper file handling | known not affected: 1 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2016-2853 | redhat_vex | kernel: aufs module does not properly restrict the mount namespace | known not affected: 93 | 2026-06-28T07:21:16+00:00 | Vulnerability · Source |
| CVE-2026-2369 | redhat_vex | libsoup: libsoup: Buffer overread due to integer underflow when handling zero-length resources | known affected: 4 known not affected: 12 | 2026-06-28T07:21:15+00:00 | Vulnerability · Source |
| CVE-2026-23558 | redhat_vex | xen: Xen: Privilege escalation or denial of service due to race condition in grant table version change | known not affected: 1 | 2026-06-28T07:21:15+00:00 | Vulnerability · Source |
| CVE-2026-2361 | redhat_vex | PostgreSQL Anonymizer: Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user with create privilege to gain superuser privileges | known not affected: 1 | 2026-06-28T07:21:15+00:00 | Vulnerability · Source |
| CVE-2026-23554 | redhat_vex | xen: Xen: Information disclosure and potential privilege escalation via use-after-free in EPT paging | known not affected: 1 | 2026-06-28T07:21:15+00:00 | Vulnerability · Source |
| CVE-2026-23555 | redhat_vex | Xen: Xenstored: Denial of Service via illegal Xenstore node path | known not affected: 1 | 2026-06-28T07:21:15+00:00 | Vulnerability · Source |
| CVE-2018-17475 | redhat_vex | chromium-browser: URL spoof in Omnibox | fixed: 12 | 2026-06-28T07:21:12+00:00 | Vulnerability · Source |
| CVE-2026-23527 | redhat_vex | h3: h3: HTTP Request Smuggling due to improper case-sensitive parsing of Transfer-Encoding header | known not affected: 1 | 2026-06-28T07:21:12+00:00 | Vulnerability · Source |
| CVE-2026-23472 | redhat_vex | kernel: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN | known affected: 260 known not affected: 14 | 2026-06-28T07:21:10+00:00 | Vulnerability · Source |
| CVE-2026-23473 | redhat_vex | kernel: io_uring/poll: fix multishot recv missing EOF on wakeup race | known affected: 184 known not affected: 90 | 2026-06-28T07:21:10+00:00 | Vulnerability · Source |
| CVE-2026-23475 | redhat_vex | kernel: spi: fix statistics allocation | known affected: 184 known not affected: 90 | 2026-06-28T07:21:10+00:00 | Vulnerability · Source |
| CVE-2026-23474 | redhat_vex | kernel: mtd: Avoid boot crash in RedBoot partition table parser | known not affected: 274 | 2026-06-28T07:21:10+00:00 | Vulnerability · Source |
| CVE-2026-23470 | redhat_vex | kernel: drm/imagination: Fix deadlock in soft reset sequence | known not affected: 274 | 2026-06-28T07:21:09+00:00 | Vulnerability · Source |
| CVE-2026-23469 | redhat_vex | kernel: drm/imagination: Synchronize interrupts before suspending the GPU | known not affected: 274 | 2026-06-28T07:21:08+00:00 | Vulnerability · Source |
| CVE-2026-23465 | redhat_vex | kernel: btrfs: log new dentries when logging parent dir of a conflicting inode | known affected: 90 known not affected: 184 | 2026-06-28T07:21:08+00:00 | Vulnerability · Source |
| CVE-2026-23454 | redhat_vex | kernel: net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown | known affected: 232 known not affected: 42 | 2026-06-28T07:21:06+00:00 | Vulnerability · Source |
| CVE-2026-23453 | redhat_vex | kernel: net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode | known not affected: 274 | 2026-06-28T07:21:05+00:00 | Vulnerability · Source |
| CVE-2026-23452 | redhat_vex | kernel: PM: runtime: Fix a race condition related to device removal | known affected: 274 | 2026-06-28T07:21:05+00:00 | Vulnerability · Source |
| CVE-2026-23438 | redhat_vex | kernel: net: mvpp2: guard flow control update with global_tx_fc in buffer switching | known not affected: 274 | 2026-06-28T07:21:04+00:00 | Vulnerability · Source |
| CVE-2026-23448 | redhat_vex | kernel: net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check | known affected: 274 | 2026-06-28T07:21:04+00:00 | Vulnerability · Source |
| CVE-2026-23447 | redhat_vex | kernel: net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check | known affected: 246 known not affected: 28 | 2026-06-28T07:21:03+00:00 | Vulnerability · Source |
| CVE-2026-23446 | redhat_vex | kernel: net: usb: aqc111: Do not perform PM inside suspend callback | known not affected: 274 | 2026-06-28T07:21:02+00:00 | Vulnerability · Source |