VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-0668 | redhat_vex | MediaWiki: MediaWiki VisualData Extension: Denial of Service via inefficient regular expression | known not affected: 1 | 2026-06-28T07:14:05+00:00 | Vulnerability · Source |
| CVE-2016-4111 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T07:14:04+00:00 | Vulnerability · Source |
| CVE-2026-0543 | redhat_vex | Kibana: Kibana: Denial of Service due to improper input validation in Email Connector | known affected: 7 | 2026-06-28T07:14:04+00:00 | Vulnerability · Source |
| CVE-2026-0530 | redhat_vex | kibana: allocation of resources without limits or throttling via specially crafted request | known affected: 1 | 2026-06-28T07:14:01+00:00 | Vulnerability · Source |
| CVE-2025-9908 | redhat_vex | event-driven-ansible: Sensitive Internal Headers Disclosure in AAP EDA Event Streams | fixed: 324 known not affected: 425 | 2026-06-28T07:14:01+00:00 | Vulnerability · Source |
| CVE-2026-0396 | redhat_vex | dnsdist: dnsdist: HTML injection via crafted DNS queries | known not affected: 1 | 2026-06-28T07:14:01+00:00 | Vulnerability · Source |
| CVE-2012-1148 | redhat_vex | expat: Memory leak in poolGrow | fixed: 79 known affected: 10 | 2026-06-28T07:14:00+00:00 | Vulnerability · Source |
| CVE-2025-9906 | redhat_vex | keras: Arbitrary Code execution in Keras Safe Mode | fixed: 2 known affected: 1 known not affected: 206 | 2026-06-28T07:14:00+00:00 | Vulnerability · Source |
| CVE-2024-40945 | redhat_vex | kernel: iommu: Return right value in iommu_sva_bind_device() | fixed: 280 known affected: 98 known not affected: 22 | 2026-06-28T07:13:59+00:00 | Vulnerability · Source |
| CVE-2025-9866 | redhat_vex | chromium-browser: Inappropriate implementation in Extensions in Google Chrome | known not affected: 1 | 2026-06-28T07:13:58+00:00 | Vulnerability · Source |
| CVE-2025-9905 | redhat_vex | keras: Arbitary Code execution in Keras load_model() | fixed: 3 known affected: 1 known not affected: 244 | 2026-06-28T07:13:58+00:00 | Vulnerability · Source |
| CVE-2025-9384 | redhat_vex | tcpreplay: appneta tcpreplay parse_args.c tcpedit_post_args null pointer dereference | known not affected: 1 | 2026-06-28T07:13:54+00:00 | Vulnerability · Source |
| CVE-2025-9649 | redhat_vex | tcpreplay: appneta tcpreplay send_packets.c calc_sleep_time divide by zero | known not affected: 1 | 2026-06-28T07:13:54+00:00 | Vulnerability · Source |
| CVE-2025-9688 | redhat_vex | Mupen64Plus: Mupen64Plus is_viewer.c write_is_viewer integer overflow | known not affected: 1 | 2026-06-28T07:13:54+00:00 | Vulnerability · Source |
| CVE-2025-9636 | redhat_vex | pgadmin4: Cross-Origin Opener Policy Vulnerability in pgAdmin 4 | known not affected: 1 | 2026-06-28T07:13:54+00:00 | Vulnerability · Source |
| CVE-2024-40940 | redhat_vex | kernel: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail | fixed: 280 known affected: 70 known not affected: 50 | 2026-06-28T07:13:54+00:00 | Vulnerability · Source |
| CVE-2025-9572 | redhat_vex | foreman: Satellite: GraphQL API permission bypass leads to information disclosure | fixed: 144 known not affected: 13 | 2026-06-28T07:13:53+00:00 | Vulnerability · Source |
| CVE-2025-9386 | redhat_vex | tcpreplay: appneta tcpreplay tcprewrite get.c get_l2len_protocol use after free | known not affected: 1 | 2026-06-28T07:13:52+00:00 | Vulnerability · Source |
| CVE-2025-9385 | redhat_vex | tcpreplay: appneta tcpreplay tcprewrite edit_packet.c fix_ipv6_checksums use after free | known not affected: 1 | 2026-06-28T07:13:52+00:00 | Vulnerability · Source |
| CVE-2025-9340 | redhat_vex | org.bouncycastle/bc-fips: Bouncy Castle for Java bc-fips: Out-of-bounds Write vulnerability allows local information disclosure, data modification, or denial of service. | known not affected: 2 | 2026-06-28T07:13:51+00:00 | Vulnerability · Source |
| CVE-2025-9341 | redhat_vex | org.bouncycastle/bc-fips: Bouncy Castle for Java FIPS: Denial of Service via excessive memory allocation | known not affected: 2 | 2026-06-28T07:13:51+00:00 | Vulnerability · Source |
| CVE-2025-9300 | redhat_vex | libsixel: buffer overflow in img2sixel when processing crafted image files | known not affected: 1 | 2026-06-28T07:13:50+00:00 | Vulnerability · Source |
| CVE-2011-3571 | redhat_vex | OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299) | fixed: 197 known affected: 7 | 2026-06-28T07:13:48+00:00 | Vulnerability · Source |
| CVE-2011-3563 | redhat_vex | OpenJDK: JavaSound incorrect bounds check (Sound, 7088367) | fixed: 487 known affected: 7 | 2026-06-28T07:13:47+00:00 | Vulnerability · Source |
| CVE-2025-9019 | redhat_vex | tcpreplay: tcpreplay Heap Overflow Vulnerability | known not affected: 1 | 2026-06-28T07:13:45+00:00 | Vulnerability · Source |
| CVE-2025-8881 | redhat_vex | chromium-browser: Chrome File Picker Cross-Origin Data Leak | known not affected: 1 | 2026-06-28T07:13:45+00:00 | Vulnerability · Source |
| CVE-2011-3389 | redhat_vex | HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) | fixed: 610 known affected: 28 | 2026-06-28T07:13:45+00:00 | Vulnerability · Source |
| CVE-2025-8879 | redhat_vex | chromium-browser: Chrome Heap Overflow | known not affected: 1 | 2026-06-28T07:13:45+00:00 | Vulnerability · Source |
| CVE-2025-8866 | redhat_vex | yugabytedb: YugabyteDB authentication bypass | known affected: 2 | 2026-06-28T07:13:43+00:00 | Vulnerability · Source |
| CVE-2025-8869 | redhat_vex | pip: pip missing checks on symbolic link extraction | known affected: 105 | 2026-06-28T07:13:43+00:00 | Vulnerability · Source |
| CVE-2025-8865 | redhat_vex | yugabytedb: YugabyteDB null pointer dereference | known affected: 2 | 2026-06-28T07:13:43+00:00 | Vulnerability · Source |
| CVE-2011-2707 | redhat_vex | kernel: exposure of sensitive information via a crafted PTRACE_SETXTREGS request | known affected: 14 known not affected: 90 | 2026-06-28T07:13:42+00:00 | Vulnerability · Source |
| CVE-2025-40929 | redhat_vex | Cpanel-JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON | known not affected: 1 | 2026-06-28T07:13:39+00:00 | Vulnerability · Source |
| CVE-2025-8671 | redhat_vex | upstream: | known not affected: 1 | 2026-06-28T07:13:39+00:00 | Vulnerability · Source |
| CVE-2011-2460 | redhat_vex | flash-plugin: mulitple code execution flaws (APSB11-28) | fixed: 5 | 2026-06-28T07:13:39+00:00 | Vulnerability · Source |
| CVE-2011-2099 | redhat_vex | acroread: multiple code execution flaws (APSB11-16) | fixed: 18 | 2026-06-28T07:13:38+00:00 | Vulnerability · Source |
| CVE-2011-2426 | redhat_vex | flash-plugin: critical flaws fixed in APSB11-26 | fixed: 23 | 2026-06-28T07:13:38+00:00 | Vulnerability · Source |
| CVE-2011-2437 | redhat_vex | acroread: multiple code execution flaws (APSB11-24) | fixed: 18 | 2026-06-28T07:13:38+00:00 | Vulnerability · Source |
| CVE-2011-2098 | redhat_vex | acroread: multiple code execution flaws (APSB11-16) | fixed: 18 | 2026-06-28T07:13:37+00:00 | Vulnerability · Source |
| CVE-2025-8582 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Core in Google Chrome | known not affected: 1 | 2026-06-28T07:13:37+00:00 | Vulnerability · Source |
| CVE-2025-8577 | redhat_vex | chromium-browser: Inappropriate implementation in Picture In Picture in Google Chrome | known not affected: 1 | 2026-06-28T07:13:36+00:00 | Vulnerability · Source |
| CVE-2011-1948 | redhat_vex | plone: A reflected cross site scripting vulnerability | fixed: 13 known affected: 1 | 2026-06-28T07:13:36+00:00 | Vulnerability · Source |
| CVE-2025-8578 | redhat_vex | chromium-browser: Use after free in Cast in Google Chrome | known not affected: 1 | 2026-06-28T07:13:36+00:00 | Vulnerability · Source |
| CVE-2016-1681 | redhat_vex | chromium-browser: heap overflow in pdfium | fixed: 12 | 2026-06-28T07:13:35+00:00 | Vulnerability · Source |
| CVE-2025-8262 | redhat_vex | github.com/yarnpkg/yarn: Yarn Regex Complexity Vulnerability | known not affected: 1 | 2026-06-28T07:13:35+00:00 | Vulnerability · Source |
| CVE-2025-8129 | redhat_vex | koa: KoaJS Koa HTTP Header response.js back redirect | known affected: 18 | 2026-06-28T07:13:34+00:00 | Vulnerability · Source |
| CVE-2025-8101 | redhat_vex | linkifyjs: Linkify Prototype Pollution | known not affected: 3 | 2026-06-28T07:13:33+00:00 | Vulnerability · Source |
| CVE-2025-8011 | redhat_vex | chromium-browser: Chromium type confusion | known not affected: 1 | 2026-06-28T07:13:32+00:00 | Vulnerability · Source |
| CVE-2011-0611 | redhat_vex | flash-plugin: crash and potential arbitrary code execution (APSB11-07) | fixed: 5 | 2026-06-28T07:13:32+00:00 | Vulnerability · Source |
| CVE-2011-0589 | redhat_vex | acroread: critical APSB11-03 | fixed: 18 | 2026-06-28T07:13:31+00:00 | Vulnerability · Source |