VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-2241 | redhat_vex | janet-lang: janet-lang: Denial of Service due to out-of-bounds read | known not affected: 1 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2026-22262 | redhat_vex | suricata: Suricata: Denial of service due to stack overflow when saving large datasets | known not affected: 1 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2026-2240 | redhat_vex | janet-lang: janet-lang: Denial of service via out-of-bounds read in janetc_pop_funcdef | known not affected: 1 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2026-22260 | redhat_vex | suricata: Suricata http1: infinite recursion in decompression | known not affected: 1 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2026-22444 | redhat_vex | org.apache.solr/solr-core: Apache Solr: Insufficient file-access checking in standalone core-creation requests | known affected: 1 known not affected: 2 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2015-5605 | redhat_vex | chromium-browser: v8 denial of service | fixed: 12 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2026-22264 | redhat_vex | suricata: Suricata detect/alert: heap-use-after-free on alert queue expansion | known not affected: 1 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2026-22263 | redhat_vex | suricata: Suricata: Denial of Service via inefficient HTTP/1 header parsing | known not affected: 1 | 2026-06-28T07:17:35+00:00 | Vulnerability · Source |
| CVE-2015-5575 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-23 | fixed: 5 | 2026-06-28T07:17:33+00:00 | Vulnerability · Source |
| CVE-2015-5570 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-23 | fixed: 5 | 2026-06-28T07:17:33+00:00 | Vulnerability · Source |
| CVE-2015-5569 | redhat_vex | flash-plugin: information leak and hardening fixes in APSB15-25 | fixed: 5 | 2026-06-28T07:17:33+00:00 | Vulnerability · Source |
| CVE-2015-5562 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T07:17:32+00:00 | Vulnerability · Source |
| CVE-2015-5559 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T07:17:32+00:00 | Vulnerability · Source |
| CVE-2026-22259 | redhat_vex | suricata: Suricata dnp3: unbounded transaction growth | known not affected: 1 | 2026-06-28T07:17:31+00:00 | Vulnerability · Source |
| CVE-2015-5557 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T07:17:31+00:00 | Vulnerability · Source |
| CVE-2015-5558 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T07:17:31+00:00 | Vulnerability · Source |
| CVE-2026-2219 | redhat_vex | dpkg: dpkg-deb: Denial of Service via improper validation of zstd-compressed archives | known not affected: 1 | 2026-06-28T07:17:31+00:00 | Vulnerability · Source |
| CVE-2026-22022 | redhat_vex | org.apache.solr/solr-core: Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin | known affected: 1 known not affected: 2 | 2026-06-28T07:17:30+00:00 | Vulnerability · Source |
| CVE-2026-22017 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:17:24+00:00 | Vulnerability · Source |
| CVE-2026-22015 | redhat_vex | mysql: Information Schema unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:17:24+00:00 | Vulnerability · Source |
| CVE-2026-21998 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:17:24+00:00 | Vulnerability · Source |
| CVE-2026-22001 | redhat_vex | mysql: Information Schema unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:17:21+00:00 | Vulnerability · Source |
| CVE-2015-5286 | redhat_vex | openstack-glance: Storage overrun by deleting images | fixed: 16 | 2026-06-28T07:17:19+00:00 | Vulnerability · Source |
| CVE-2026-21895 | redhat_vex | RSA: RSA crate: Denial of Service due to malformed prime in private key generation | known affected: 24 | 2026-06-28T07:17:17+00:00 | Vulnerability · Source |
| CVE-2015-5245 | redhat_vex | Ceph: RGW returns requested bucket name raw in Bucket response header | fixed: 368 known affected: 1 | 2026-06-28T07:17:16+00:00 | Vulnerability · Source |
| CVE-2026-21620 | redhat_vex | erlang: Erlang OTP tftp_file modules: Information disclosure via relative path traversal | known affected: 41 | 2026-06-28T07:17:15+00:00 | Vulnerability · Source |
| CVE-2015-5223 | redhat_vex | openstack-swift: Information leak via Swift tempurls | fixed: 42 known affected: 1 known not affected: 2 | 2026-06-28T07:17:15+00:00 | Vulnerability · Source |
| CVE-2026-21619 | redhat_vex | hex_core: hex_core, hex, rebar3: Denial of Service due to uncontrolled resource consumption | known not affected: 1 | 2026-06-28T07:17:14+00:00 | Vulnerability · Source |
| CVE-2026-21428 | redhat_vex | cpp-httplib: cpp-httplib: Server-Side Request Forgery via header injection | known not affected: 1 | 2026-06-28T07:17:14+00:00 | Vulnerability · Source |
| CVE-2026-20912 | redhat_vex | gitea: Gitea: Cross-Repository Authorization Bypass via Release Attachment Linking Leads to Private Attachment Disclosure | known not affected: 9 | 2026-06-28T07:17:14+00:00 | Vulnerability · Source |
| CVE-2015-5201 | redhat_vex | RHEV: vdsm spice disable-ticketing and VM suspend and restore allows auth bypass | fixed: 5 known affected: 2 under investigation: 27 | 2026-06-28T07:17:14+00:00 | Vulnerability · Source |
| CVE-2015-5162 | redhat_vex | openstack-nova/glance/cinder: Malicious image may exhaust resources | fixed: 70 known affected: 2 known not affected: 44 | 2026-06-28T07:17:13+00:00 | Vulnerability · Source |
| CVE-2015-5160 | redhat_vex | libvirt: Ceph id/key leaked in the process list | fixed: 194 known affected: 7 known not affected: 1 | 2026-06-28T07:17:13+00:00 | Vulnerability · Source |
| CVE-2015-5163 | redhat_vex | openstack-glance: Glance v2 API host file disclosure through qcow2 backing file | fixed: 4 known not affected: 2 | 2026-06-28T07:17:13+00:00 | Vulnerability · Source |
| CVE-2015-5156 | redhat_vex | kernel: buffer overflow with fraglist larger than MAX_SKB_FRAGS + 2 in virtio-net | fixed: 362 known affected: 1 known not affected: 12 | 2026-06-28T07:17:12+00:00 | Vulnerability · Source |
| CVE-2015-4906 | redhat_vex | JDK: unspecified vulnerability fixed in 8u65 (JavaFX) | fixed: 64 | 2026-06-28T07:17:11+00:00 | Vulnerability · Source |
| CVE-2026-20750 | redhat_vex | gitea: Gitea Organization Projects Cross-Organization Authorization Bypass via Project ID (IDOR) | known not affected: 9 | 2026-06-28T07:17:11+00:00 | Vulnerability · Source |
| CVE-2015-5122 | redhat_vex | flash-plugin: two code execution issues in APSA15-04 / APSB15-18 | fixed: 5 | 2026-06-28T07:17:11+00:00 | Vulnerability · Source |
| CVE-2015-5123 | redhat_vex | flash-plugin: two code execution issues in APSA15-04 / APSB15-18 | fixed: 5 | 2026-06-28T07:17:11+00:00 | Vulnerability · Source |
| CVE-2015-4910 | redhat_vex | mysql: unspecified vulnerability related to Server:Memcached (CPU October 2015) | fixed: 80 known not affected: 36 | 2026-06-28T07:17:10+00:00 | Vulnerability · Source |
| CVE-2015-4908 | redhat_vex | JDK: unspecified vulnerability fixed in 8u65 (JavaFX) | fixed: 64 | 2026-06-28T07:17:10+00:00 | Vulnerability · Source |
| CVE-2015-4904 | redhat_vex | mysql: unspecified vulnerability related to libmysqld (CPU October 2015) | fixed: 70 known not affected: 45 | 2026-06-28T07:17:10+00:00 | Vulnerability · Source |
| CVE-2015-4901 | redhat_vex | JDK: unspecified vulnerability fixed in 8u65 (JavaFX) | fixed: 64 | 2026-06-28T07:17:09+00:00 | Vulnerability · Source |
| CVE-2015-4893 | redhat_vex | OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733) | fixed: 1035 known affected: 9 | 2026-06-28T07:17:09+00:00 | Vulnerability · Source |
| CVE-2015-4883 | redhat_vex | OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413) | fixed: 1136 | 2026-06-28T07:17:09+00:00 | Vulnerability · Source |
| CVE-2015-4882 | redhat_vex | OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387) | fixed: 1035 known affected: 8 | 2026-06-28T07:17:09+00:00 | Vulnerability · Source |
| CVE-2015-4879 | redhat_vex | mysql: unspecified vulnerability related to Server:DML (CPU October 2015) | fixed: 446 known affected: 15 under investigation: 9 | 2026-06-28T07:17:08+00:00 | Vulnerability · Source |
| CVE-2015-4872 | redhat_vex | OpenJDK: incomplete constraints enforcement by AlgorithmChecker (Security, 8131291) | fixed: 1136 | 2026-06-28T07:17:08+00:00 | Vulnerability · Source |
| CVE-2015-4870 | redhat_vex | mysql: unspecified vulnerability related to Server:Parser (CPU October 2015) | fixed: 406 known affected: 16 under investigation: 9 | 2026-06-28T07:17:07+00:00 | Vulnerability · Source |
| CVE-2015-4868 | redhat_vex | OpenJDK: CRL checking flaw (Libraries, 8081744) | fixed: 226 known not affected: 28 | 2026-06-28T07:17:07+00:00 | Vulnerability · Source |