VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-69652 | redhat_vex | binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information | fixed: 3 known affected: 73 | 2026-06-28T07:11:55+00:00 | Vulnerability · Source |
| CVE-2025-69649 | redhat_vex | binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed header fields | fixed: 3 known affected: 73 | 2026-06-28T07:11:54+00:00 | Vulnerability · Source |
| CVE-2025-69648 | redhat_vex | binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data | fixed: 3 known affected: 73 | 2026-06-28T07:11:53+00:00 | Vulnerability · Source |
| CVE-2008-1196 | redhat_vex | Buffer overflow security vulnerabilities in Java Web Start | fixed: 439 | 2026-06-28T07:11:49+00:00 | Vulnerability · Source |
| CVE-2008-1192 | redhat_vex | Java Plugin same-origin-policy bypass | fixed: 434 | 2026-06-28T07:11:48+00:00 | Vulnerability · Source |
| CVE-2008-1188 | redhat_vex | Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190) | fixed: 245 | 2026-06-28T07:11:47+00:00 | Vulnerability · Source |
| CVE-2008-0628 | redhat_vex | java-1.6.0 default external entity processing | fixed: 24 | 2026-06-28T07:11:45+00:00 | Vulnerability · Source |
| CVE-2025-69412 | redhat_vex | messagelib: messagelib: Spoofing of threat data due to ignored SSL errors | known not affected: 1 | 2026-06-28T07:11:45+00:00 | Vulnerability · Source |
| CVE-2007-6243 | redhat_vex | Flash Player cross-domain and cross-site scripting flaws | fixed: 30 | 2026-06-28T07:11:44+00:00 | Vulnerability · Source |
| CVE-2025-69230 | redhat_vex | aiohttp: aiohttp: Denial of Service via specially crafted invalid cookies | known affected: 114 | 2026-06-28T07:11:42+00:00 | Vulnerability · Source |
| CVE-2007-3410 | redhat_vex | RealPlayer/HelixPlayer buffer overflow | fixed: 34 | 2026-06-28T07:11:42+00:00 | Vulnerability · Source |
| CVE-2025-69229 | redhat_vex | aiohttp: AIOHTTP: Denial of Service via excessive CPU usage in chunked message handling | known affected: 114 | 2026-06-28T07:11:42+00:00 | Vulnerability · Source |
| CVE-2015-1273 | redhat_vex | chromium-browser: Heap-buffer-overflow in pdfium. | fixed: 12 | 2026-06-28T07:11:39+00:00 | Vulnerability · Source |
| CVE-2006-3016 | redhat_vex | security flaw | fixed: 335 | 2026-06-28T07:11:39+00:00 | Vulnerability · Source |
| CVE-2025-69225 | redhat_vex | aiohttp: aiohttp: Request smuggling vulnerability via non-ASCII decimals in Range header | known affected: 114 | 2026-06-28T07:11:39+00:00 | Vulnerability · Source |
| CVE-2024-40913 | redhat_vex | kernel: cachefiles: defer exposing anon_fd until after copy_to_user() succeeds | fixed: 280 known affected: 42 known not affected: 78 | 2026-06-28T07:11:38+00:00 | Vulnerability · Source |
| CVE-2025-69224 | redhat_vex | aiohttp: aiohttp: Request smuggling via non-ASCII characters in HTTP parser | known affected: 114 | 2026-06-28T07:11:38+00:00 | Vulnerability · Source |
| CVE-2025-69217 | redhat_vex | coturn: coturn: Authentication bypass and port prediction via predictable random number generation | known not affected: 1 | 2026-06-28T07:11:38+00:00 | Vulnerability · Source |
| CVE-2025-69204 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via integer overflow in SVG image processing | known affected: 14 | 2026-06-28T07:11:37+00:00 | Vulnerability · Source |
| CVE-2025-68937 | redhat_vex | forgejo: Forgejo: Server shell access via symlink mishandling in template repositories | known not affected: 1 | 2026-06-28T07:11:37+00:00 | Vulnerability · Source |
| CVE-2005-2700 | redhat_vex | security flaw | fixed: 154 | 2026-06-28T07:11:37+00:00 | Vulnerability · Source |
| CVE-2025-69211 | redhat_vex | nestjs: NestJS framework: Security bypass allows unauthorized access to protected routes | known not affected: 1 | 2026-06-28T07:11:37+00:00 | Vulnerability · Source |
| CVE-2025-69194 | redhat_vex | wget2: Arbitrary File Write via Metalink Path Traversal in GNU Wget2 | known not affected: 1 | 2026-06-28T07:11:37+00:00 | Vulnerability · Source |
| CVE-2025-69195 | redhat_vex | wget2: GNU Wget2: Memory corruption and crash via filename sanitization logic with attacker-controlled URLs | known not affected: 1 | 2026-06-28T07:11:36+00:00 | Vulnerability · Source |
| CVE-2025-6920 | redhat_vex | ai-inference-server: Authentication Bypass via Unprotected Inference Endpoint in API | known affected: 2 | 2026-06-28T07:11:36+00:00 | Vulnerability · Source |
| CVE-2025-68950 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via circular references in MVG files | known affected: 14 | 2026-06-28T07:11:35+00:00 | Vulnerability · Source |
| CVE-2025-68943 | redhat_vex | gitea: Gitea: Information disclosure of user login times via sort order | known not affected: 8 | 2026-06-28T07:11:34+00:00 | Vulnerability · Source |
| CVE-2015-4605 | redhat_vex | php: denial of service when processing a crafted file with Fileinfo | fixed: 800 known affected: 26 known not affected: 43 | 2026-06-28T07:11:34+00:00 | Vulnerability · Source |
| CVE-2025-68944 | redhat_vex | gitea: Gitea: Access control bypass in package registries | known affected: 4 known not affected: 4 | 2026-06-28T07:11:34+00:00 | Vulnerability · Source |
| CVE-2025-68942 | redhat_vex | gitea: Gitea: Cross-Site Scripting (XSS) vulnerability via search input | known affected: 4 known not affected: 4 | 2026-06-28T07:11:34+00:00 | Vulnerability · Source |
| CVE-2025-68941 | redhat_vex | gitea: Gitea: Unauthorized access to private resources via public-scoped API tokens | known affected: 8 | 2026-06-28T07:11:33+00:00 | Vulnerability · Source |
| CVE-2025-68920 | redhat_vex | cKermit: From CVEorg collector | known not affected: 1 | 2026-06-28T07:11:32+00:00 | Vulnerability · Source |
| CVE-2025-68938 | redhat_vex | gitea: incorrect authorization for deletion of releases | known affected: 8 | 2026-06-28T07:11:32+00:00 | Vulnerability · Source |
| CVE-2025-68823 | redhat_vex | kernel: Linux kernel: Denial of Service in ublk due to deadlock when reading partition table | known affected: 76 known not affected: 198 | 2026-06-28T07:11:30+00:00 | Vulnerability · Source |
| CVE-2025-68820 | redhat_vex | kernel: ext4: xattr: fix null pointer deref in ext4_raw_inode() | known affected: 246 known not affected: 28 | 2026-06-28T07:11:29+00:00 | Vulnerability · Source |
| CVE-2025-68821 | redhat_vex | kernel: Linux kernel FUSE: Denial of Service via readahead reclaim deadlock | known affected: 90 known not affected: 184 | 2026-06-28T07:11:29+00:00 | Vulnerability · Source |
| CVE-2025-68814 | redhat_vex | kernel: Linux kernel: Memory leak in io_uring's __io_openat_prep() leading to denial of service | known affected: 184 known not affected: 90 | 2026-06-28T07:11:26+00:00 | Vulnerability · Source |
| CVE-2025-68807 | redhat_vex | kernel: block: fix race between wbt_enable_default and IO submission | known affected: 184 known not affected: 90 | 2026-06-28T07:11:23+00:00 | Vulnerability · Source |
| CVE-2025-68802 | redhat_vex | kernel: drm/xe: Limit num_syncs to prevent oversized allocations | known affected: 184 known not affected: 90 | 2026-06-28T07:11:22+00:00 | Vulnerability · Source |
| CVE-2014-9529 | redhat_vex | kernel: use-after-free during key garbage collection | fixed: 372 known not affected: 1 | 2026-06-28T07:11:21+00:00 | Vulnerability · Source |
| CVE-2025-68798 | redhat_vex | kernel: perf/x86/amd: Check event before enable to avoid GPF | known affected: 260 known not affected: 14 | 2026-06-28T07:11:20+00:00 | Vulnerability · Source |
| CVE-2025-68796 | redhat_vex | kernel: f2fs: fix to avoid updating zero-sized extent in extent cache | known not affected: 274 | 2026-06-28T07:11:19+00:00 | Vulnerability · Source |
| CVE-2025-68791 | redhat_vex | kernel: fuse: missing copy_finish in fuse-over-io-uring argument copies | known affected: 14 known not affected: 260 | 2026-06-28T07:11:18+00:00 | Vulnerability · Source |
| CVE-2025-68784 | redhat_vex | kernel: xfs: fix a UAF problem in xattr repair | known affected: 184 known not affected: 90 | 2026-06-28T07:11:16+00:00 | Vulnerability · Source |
| CVE-2025-68790 | redhat_vex | kernel: net/mlx5: Fix double unregister of HCA_PORTS component | known affected: 14 known not affected: 260 | 2026-06-28T07:11:16+00:00 | Vulnerability · Source |
| CVE-2015-3412 | redhat_vex | php: missing null byte checks for paths in various PHP extensions | fixed: 1063 known affected: 28 | 2026-06-28T07:11:15+00:00 | Vulnerability · Source |
| CVE-2025-68783 | redhat_vex | kernel: ALSA: usb-mixer: us16x08: validate meter packet indices | known affected: 260 known not affected: 14 | 2026-06-28T07:11:14+00:00 | Vulnerability · Source |
| CVE-2015-3330 | redhat_vex | php: pipelined request executed in deinitialized interpreter under httpd 2.4 | fixed: 800 known affected: 26 known not affected: 30 | 2026-06-28T07:11:14+00:00 | Vulnerability · Source |
| CVE-2015-3280 | redhat_vex | openstack-nova: Deleting instances in resize state fails | fixed: 65 | 2026-06-28T07:11:12+00:00 | Vulnerability · Source |
| CVE-2025-68780 | redhat_vex | kernel: sched/deadline: only set free_cpus for online runqueues | known affected: 76 known not affected: 198 | 2026-06-28T07:11:12+00:00 | Vulnerability · Source |