VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296254 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-5286 | redhat_vex | openstack-glance: Storage overrun by deleting images | fixed: 16 | 2026-06-28T07:17:19+00:00 | Vulnerability · Source |
| CVE-2026-21895 | redhat_vex | RSA: RSA crate: Denial of Service due to malformed prime in private key generation | known affected: 24 | 2026-06-28T07:17:17+00:00 | Vulnerability · Source |
| CVE-2015-5245 | redhat_vex | Ceph: RGW returns requested bucket name raw in Bucket response header | fixed: 368 known affected: 1 | 2026-06-28T07:17:16+00:00 | Vulnerability · Source |
| CVE-2026-21620 | redhat_vex | erlang: Erlang OTP tftp_file modules: Information disclosure via relative path traversal | known affected: 41 | 2026-06-28T07:17:15+00:00 | Vulnerability · Source |
| CVE-2015-5223 | redhat_vex | openstack-swift: Information leak via Swift tempurls | fixed: 42 known affected: 1 known not affected: 2 | 2026-06-28T07:17:15+00:00 | Vulnerability · Source |
| CVE-2026-21619 | redhat_vex | hex_core: hex_core, hex, rebar3: Denial of Service due to uncontrolled resource consumption | known not affected: 1 | 2026-06-28T07:17:14+00:00 | Vulnerability · Source |
| CVE-2026-21428 | redhat_vex | cpp-httplib: cpp-httplib: Server-Side Request Forgery via header injection | known not affected: 1 | 2026-06-28T07:17:14+00:00 | Vulnerability · Source |
| CVE-2026-20912 | redhat_vex | gitea: Gitea: Cross-Repository Authorization Bypass via Release Attachment Linking Leads to Private Attachment Disclosure | known not affected: 9 | 2026-06-28T07:17:14+00:00 | Vulnerability · Source |
| CVE-2015-5201 | redhat_vex | RHEV: vdsm spice disable-ticketing and VM suspend and restore allows auth bypass | fixed: 5 known affected: 2 under investigation: 27 | 2026-06-28T07:17:14+00:00 | Vulnerability · Source |
| CVE-2015-5162 | redhat_vex | openstack-nova/glance/cinder: Malicious image may exhaust resources | fixed: 70 known affected: 2 known not affected: 44 | 2026-06-28T07:17:13+00:00 | Vulnerability · Source |
| CVE-2015-5160 | redhat_vex | libvirt: Ceph id/key leaked in the process list | fixed: 194 known affected: 7 known not affected: 1 | 2026-06-28T07:17:13+00:00 | Vulnerability · Source |
| CVE-2015-5163 | redhat_vex | openstack-glance: Glance v2 API host file disclosure through qcow2 backing file | fixed: 4 known not affected: 2 | 2026-06-28T07:17:13+00:00 | Vulnerability · Source |
| CVE-2015-5156 | redhat_vex | kernel: buffer overflow with fraglist larger than MAX_SKB_FRAGS + 2 in virtio-net | fixed: 362 known affected: 1 known not affected: 12 | 2026-06-28T07:17:12+00:00 | Vulnerability · Source |
| CVE-2015-4906 | redhat_vex | JDK: unspecified vulnerability fixed in 8u65 (JavaFX) | fixed: 64 | 2026-06-28T07:17:11+00:00 | Vulnerability · Source |
| CVE-2026-20750 | redhat_vex | gitea: Gitea Organization Projects Cross-Organization Authorization Bypass via Project ID (IDOR) | known not affected: 9 | 2026-06-28T07:17:11+00:00 | Vulnerability · Source |
| CVE-2015-5122 | redhat_vex | flash-plugin: two code execution issues in APSA15-04 / APSB15-18 | fixed: 5 | 2026-06-28T07:17:11+00:00 | Vulnerability · Source |
| CVE-2015-5123 | redhat_vex | flash-plugin: two code execution issues in APSA15-04 / APSB15-18 | fixed: 5 | 2026-06-28T07:17:11+00:00 | Vulnerability · Source |
| CVE-2015-4910 | redhat_vex | mysql: unspecified vulnerability related to Server:Memcached (CPU October 2015) | fixed: 80 known not affected: 36 | 2026-06-28T07:17:10+00:00 | Vulnerability · Source |
| CVE-2015-4908 | redhat_vex | JDK: unspecified vulnerability fixed in 8u65 (JavaFX) | fixed: 64 | 2026-06-28T07:17:10+00:00 | Vulnerability · Source |
| CVE-2015-4904 | redhat_vex | mysql: unspecified vulnerability related to libmysqld (CPU October 2015) | fixed: 70 known not affected: 45 | 2026-06-28T07:17:10+00:00 | Vulnerability · Source |
| CVE-2015-4901 | redhat_vex | JDK: unspecified vulnerability fixed in 8u65 (JavaFX) | fixed: 64 | 2026-06-28T07:17:09+00:00 | Vulnerability · Source |
| CVE-2015-4893 | redhat_vex | OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733) | fixed: 1035 known affected: 9 | 2026-06-28T07:17:09+00:00 | Vulnerability · Source |
| CVE-2015-4883 | redhat_vex | OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413) | fixed: 1136 | 2026-06-28T07:17:09+00:00 | Vulnerability · Source |
| CVE-2015-4882 | redhat_vex | OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387) | fixed: 1035 known affected: 8 | 2026-06-28T07:17:09+00:00 | Vulnerability · Source |
| CVE-2015-4879 | redhat_vex | mysql: unspecified vulnerability related to Server:DML (CPU October 2015) | fixed: 446 known affected: 15 under investigation: 9 | 2026-06-28T07:17:08+00:00 | Vulnerability · Source |
| CVE-2015-4872 | redhat_vex | OpenJDK: incomplete constraints enforcement by AlgorithmChecker (Security, 8131291) | fixed: 1136 | 2026-06-28T07:17:08+00:00 | Vulnerability · Source |
| CVE-2015-4870 | redhat_vex | mysql: unspecified vulnerability related to Server:Parser (CPU October 2015) | fixed: 406 known affected: 16 under investigation: 9 | 2026-06-28T07:17:07+00:00 | Vulnerability · Source |
| CVE-2015-4868 | redhat_vex | OpenJDK: CRL checking flaw (Libraries, 8081744) | fixed: 226 known not affected: 28 | 2026-06-28T07:17:07+00:00 | Vulnerability · Source |
| CVE-2015-4866 | redhat_vex | mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015) | fixed: 77 known not affected: 44 | 2026-06-28T07:17:06+00:00 | Vulnerability · Source |
| CVE-2015-4862 | redhat_vex | mysql: unspecified vulnerability related to Server:DML (CPU October 2015) | fixed: 80 known not affected: 45 | 2026-06-28T07:17:06+00:00 | Vulnerability · Source |
| CVE-2015-4858 | redhat_vex | mysql: unspecified vulnerability related to Server:DML (CPU October 2015) | fixed: 406 known affected: 16 under investigation: 9 | 2026-06-28T07:17:06+00:00 | Vulnerability · Source |
| CVE-2015-4843 | redhat_vex | OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891) | fixed: 1136 | 2026-06-28T07:17:05+00:00 | Vulnerability · Source |
| CVE-2015-4844 | redhat_vex | ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042) | fixed: 1136 known affected: 11 | 2026-06-28T07:17:05+00:00 | Vulnerability · Source |
| CVE-2015-4836 | redhat_vex | mysql: unspecified vulnerability related to Server:SP (CPU October 2015) | fixed: 406 known affected: 16 under investigation: 9 | 2026-06-28T07:17:05+00:00 | Vulnerability · Source |
| CVE-2015-4756 | redhat_vex | mysql: unspecified vulnerability related to Server:InnoDB (CPU July 2015) | fixed: 147 known not affected: 41 | 2026-06-28T07:17:03+00:00 | Vulnerability · Source |
| CVE-2015-4805 | redhat_vex | OpenJDK: missing checks for proper initialization in ObjectStreamClass (Serialization, 8103671) | fixed: 1136 | 2026-06-28T07:17:03+00:00 | Vulnerability · Source |
| CVE-2015-4752 | redhat_vex | mysql: unspecified vulnerability related to Server:I_S (CPU July 2015) | fixed: 428 known affected: 17 | 2026-06-28T07:17:02+00:00 | Vulnerability · Source |
| CVE-2015-4737 | redhat_vex | mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU July 2015) | fixed: 428 known affected: 17 | 2026-06-28T07:17:02+00:00 | Vulnerability · Source |
| CVE-2015-4733 | redhat_vex | OpenJDK: RemoteObjectInvocationHandler allows calling finalize() (RMI, 8076409) | fixed: 1026 | 2026-06-28T07:17:01+00:00 | Vulnerability · Source |
| CVE-2015-4600 | redhat_vex | php: type confusion issue in unserialize() with various SOAP methods | fixed: 849 known affected: 56 known not affected: 30 | 2026-06-28T07:17:00+00:00 | Vulnerability · Source |
| CVE-2015-4700 | redhat_vex | kernel: Crafted BPF filters may crash kernel during JIT optimisation | fixed: 182 known not affected: 28 | 2026-06-28T07:17:00+00:00 | Vulnerability · Source |
| CVE-2015-4603 | redhat_vex | php: exception:: getTraceAsString type confusion issue after unserialize | fixed: 1063 known affected: 28 | 2026-06-28T07:17:00+00:00 | Vulnerability · Source |
| CVE-2026-20652 | redhat_vex | webkitgtk: A remote attacker may be able to cause a denial-of-service | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-28T07:16:59+00:00 | Vulnerability · Source |
| CVE-2026-20676 | redhat_vex | webkitgtk: A website may be able to track users through Safari web extensions | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-28T07:16:59+00:00 | Vulnerability · Source |
| CVE-2026-20665 | redhat_vex | webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-28T07:16:59+00:00 | Vulnerability · Source |
| CVE-2015-4022 | redhat_vex | php: integer overflow leading to heap overflow when reading FTP file listing | fixed: 1046 known affected: 2 | 2026-06-28T07:16:55+00:00 | Vulnerability · Source |
| CVE-2015-4432 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-16 | fixed: 5 | 2026-06-28T07:16:55+00:00 | Vulnerability · Source |
| CVE-2015-4431 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-16 | fixed: 5 | 2026-06-28T07:16:53+00:00 | Vulnerability · Source |
| CVE-2026-1998 | redhat_vex | micropython: micropython runtime.c mp_import_all memory corruption | known not affected: 1 | 2026-06-28T07:16:53+00:00 | Vulnerability · Source |
| CVE-2015-4429 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-16 | fixed: 5 | 2026-06-28T07:16:53+00:00 | Vulnerability · Source |