VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296252 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-1075 | redhat_vex | kernel: net/tls: tls_is_tx_ready() checked list_entry | fixed: 666 known affected: 24 known not affected: 42 | 2026-06-28T07:17:50+00:00 | Vulnerability · Source |
| CVE-2026-22851 | redhat_vex | freerdp: FreeRDP RDPGFX ResetGraphics race | known affected: 31 | 2026-06-28T07:17:47+00:00 | Vulnerability · Source |
| CVE-2026-22780 | redhat_vex | Rizin: Rizin: Heap overflow allows arbitrary code execution via malicious mach0 file | known not affected: 1 | 2026-06-28T07:17:46+00:00 | Vulnerability · Source |
| CVE-2026-22776 | redhat_vex | cpp-httplib: cpp-httplib: Denial of Service due to excessive memory usage from compressed HTTP request bodies | known not affected: 1 | 2026-06-28T07:17:46+00:00 | Vulnerability · Source |
| CVE-2026-22815 | redhat_vex | aiohttp: AIOHTTP: Denial of Service via insufficient header/trailer handling | known affected: 88 | 2026-06-28T07:17:46+00:00 | Vulnerability · Source |
| CVE-2026-22770 | redhat_vex | ImageMagick: ImageMagick: Denial of Service due to improper pointer initialization | known affected: 14 | 2026-06-28T07:17:45+00:00 | Vulnerability · Source |
| CVE-2026-22732 | redhat_vex | Spring Security: Spring Security: Security policy bypass and information disclosure due to unwritten HTTP headers | known affected: 18 | 2026-06-28T07:17:44+00:00 | Vulnerability · Source |
| CVE-2026-22746 | redhat_vex | Spring Security: Spring Security: Timing attack defense bypass allows information disclosure | known affected: 18 | 2026-06-28T07:17:44+00:00 | Vulnerability · Source |
| CVE-2015-6837 | redhat_vex | php: NULL pointer dereference in XSLTProcessor class | fixed: 240 known affected: 110 | 2026-06-28T07:17:42+00:00 | Vulnerability · Source |
| CVE-2026-22703 | redhat_vex | github.com/sigstore/cosign: Cosign verification accepts any valid Rekor entry under certain conditions | known affected: 35 | 2026-06-28T07:17:42+00:00 | Vulnerability · Source |
| CVE-2026-22702 | redhat_vex | virtualenv: virtualenv: Local attacker can redirect file operations via TOCTOU race condition | known affected: 55 | 2026-06-28T07:17:42+00:00 | Vulnerability · Source |
| CVE-2015-6834 | redhat_vex | php: multiple unserialization use-after-free issues | fixed: 240 known affected: 80 known not affected: 30 | 2026-06-28T07:17:41+00:00 | Vulnerability · Source |
| CVE-2015-6831 | redhat_vex | php: Use After Free Vulnerability in unserialize() | fixed: 240 known affected: 111 | 2026-06-28T07:17:41+00:00 | Vulnerability · Source |
| CVE-2015-6779 | redhat_vex | chromium-browser: Scheme bypass in PDFium | fixed: 12 | 2026-06-28T07:17:41+00:00 | Vulnerability · Source |
| CVE-2015-6832 | redhat_vex | php: dangling pointer in the unserialization of ArrayObject items | fixed: 240 known affected: 111 | 2026-06-28T07:17:41+00:00 | Vulnerability · Source |
| CVE-2015-6776 | redhat_vex | chromium-browser: Out of bounds access in PDFium | fixed: 12 | 2026-06-28T07:17:40+00:00 | Vulnerability · Source |
| CVE-2015-6774 | redhat_vex | chromium-browser: Use-after-free in Extensions | fixed: 12 | 2026-06-28T07:17:40+00:00 | Vulnerability · Source |
| CVE-2015-6770 | redhat_vex | chromium-browser: Cross-origin bypass in DOM | fixed: 12 | 2026-06-28T07:17:39+00:00 | Vulnerability · Source |
| CVE-2015-6772 | redhat_vex | chromium-browser: Cross-origin bypass in DOM | fixed: 12 | 2026-06-28T07:17:39+00:00 | Vulnerability · Source |
| CVE-2026-22701 | redhat_vex | filelock: filelock Time-of-Check-Time-of-Use (TOCTOU) in SoftFileLock | known affected: 136 | 2026-06-28T07:17:38+00:00 | Vulnerability · Source |
| CVE-2015-6679 | redhat_vex | flash-plugin: information leaks and hardening bypass fixed in APSB15-23 | fixed: 5 | 2026-06-28T07:17:37+00:00 | Vulnerability · Source |
| CVE-2026-2256 | redhat_vex | ModelScope: ModelScope, Red Hat AI Inference Server, Red Hat OpenShift AI: Arbitrary code execution via crafted prompt input | known affected: 5 | 2026-06-28T07:17:36+00:00 | Vulnerability · Source |
| CVE-2018-16435 | redhat_vex | lcms2: Integer overflow in AllocateDataSet() in cmscgats.c leading to heap-based buffer overflow | fixed: 12 known affected: 5 known not affected: 178 | 2026-06-28T07:17:36+00:00 | Vulnerability · Source |
| CVE-2015-6644 | redhat_vex | bouncycastle: Information disclosure in GCMBlockCipher | fixed: 1219 known affected: 2 | 2026-06-28T07:17:36+00:00 | Vulnerability · Source |
| CVE-2026-22691 | redhat_vex | pypdf: pypdf: Denial of Service via malformed PDF startxref entries | known affected: 35 | 2026-06-28T07:17:36+00:00 | Vulnerability · Source |
| CVE-2026-22261 | redhat_vex | suricata: Suricata: Denial of Service due to XFF handling inefficiencies | known not affected: 1 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2026-2241 | redhat_vex | janet-lang: janet-lang: Denial of Service due to out-of-bounds read | known not affected: 1 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2026-22262 | redhat_vex | suricata: Suricata: Denial of service due to stack overflow when saving large datasets | known not affected: 1 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2026-2240 | redhat_vex | janet-lang: janet-lang: Denial of service via out-of-bounds read in janetc_pop_funcdef | known not affected: 1 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2026-22260 | redhat_vex | suricata: Suricata http1: infinite recursion in decompression | known not affected: 1 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2026-22444 | redhat_vex | org.apache.solr/solr-core: Apache Solr: Insufficient file-access checking in standalone core-creation requests | known affected: 1 known not affected: 2 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2015-5605 | redhat_vex | chromium-browser: v8 denial of service | fixed: 12 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2026-22264 | redhat_vex | suricata: Suricata detect/alert: heap-use-after-free on alert queue expansion | known not affected: 1 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2026-22263 | redhat_vex | suricata: Suricata: Denial of Service via inefficient HTTP/1 header parsing | known not affected: 1 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2015-5575 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-23 | fixed: 5 | 2026-06-28T07:17:33+00:00 | Vulnerability · Source |
| CVE-2015-5570 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-23 | fixed: 5 | 2026-06-28T07:17:33+00:00 | Vulnerability · Source |
| CVE-2015-5569 | redhat_vex | flash-plugin: information leak and hardening fixes in APSB15-25 | fixed: 5 | 2026-06-28T07:17:33+00:00 | Vulnerability · Source |
| CVE-2015-5562 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T07:17:32+00:00 | Vulnerability · Source |
| CVE-2015-5559 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T07:17:32+00:00 | Vulnerability · Source |
| CVE-2026-22259 | redhat_vex | suricata: Suricata dnp3: unbounded transaction growth | known not affected: 1 | 2026-06-28T07:17:31+00:00 | Vulnerability · Source |
| CVE-2015-5557 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T07:17:31+00:00 | Vulnerability · Source |
| CVE-2015-5558 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T07:17:31+00:00 | Vulnerability · Source |
| CVE-2026-2219 | redhat_vex | dpkg: dpkg-deb: Denial of Service via improper validation of zstd-compressed archives | known not affected: 1 | 2026-06-28T07:17:31+00:00 | Vulnerability · Source |
| CVE-2026-22022 | redhat_vex | org.apache.solr/solr-core: Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin | known affected: 1 known not affected: 2 | 2026-06-28T07:17:30+00:00 | Vulnerability · Source |
| CVE-2026-22017 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:17:24+00:00 | Vulnerability · Source |
| CVE-2026-22015 | redhat_vex | mysql: Information Schema unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:17:24+00:00 | Vulnerability · Source |
| CVE-2026-21998 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:17:24+00:00 | Vulnerability · Source |
| CVE-2026-22001 | redhat_vex | mysql: Information Schema unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:17:21+00:00 | Vulnerability · Source |
| CVE-2015-5286 | redhat_vex | openstack-glance: Storage overrun by deleting images | fixed: 16 | 2026-06-28T07:17:19+00:00 | Vulnerability · Source |
| CVE-2026-21895 | redhat_vex | RSA: RSA crate: Denial of Service due to malformed prime in private key generation | known affected: 24 | 2026-06-28T07:17:17+00:00 | Vulnerability · Source |