VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-68779 | redhat_vex | kernel: net/mlx5e: Avoid unregistering PSP twice | known affected: 14 known not affected: 260 | 2026-06-28T07:11:11+00:00 | Vulnerability · Source |
| CVE-2025-68776 | redhat_vex | kernel: Linux kernel: Denial of Service via NULL pointer dereference in HSR | known affected: 184 known not affected: 90 | 2026-06-28T07:11:10+00:00 | Vulnerability · Source |
| CVE-2025-68778 | redhat_vex | kernel: btrfs: don't log conflicting inode if it's a dir moved in the current transaction | known affected: 42 known not affected: 232 | 2026-06-28T07:11:10+00:00 | Vulnerability · Source |
| CVE-2025-68771 | redhat_vex | kernel: ocfs2: fix kernel BUG in ocfs2_find_victim_chain | known not affected: 274 | 2026-06-28T07:11:08+00:00 | Vulnerability · Source |
| CVE-2025-68769 | redhat_vex | kernel: f2fs: fix return value of f2fs_recover_fsync_data() | known not affected: 274 | 2026-06-28T07:11:06+00:00 | Vulnerability · Source |
| CVE-2025-68768 | redhat_vex | kernel: inet: frags: flush pending skbs in fqdir_pre_exit() | known affected: 198 known not affected: 76 | 2026-06-28T07:11:06+00:00 | Vulnerability · Source |
| CVE-2025-68767 | redhat_vex | kernel: hfsplus: Verify inode mode when loading from disk | known not affected: 274 | 2026-06-28T07:11:05+00:00 | Vulnerability · Source |
| CVE-2015-3107 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-11 | fixed: 5 | 2026-06-28T07:11:00+00:00 | Vulnerability · Source |
| CVE-2015-3104 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-11 | fixed: 5 | 2026-06-28T07:10:59+00:00 | Vulnerability · Source |
| CVE-2015-3084 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-09 | fixed: 5 | 2026-06-28T07:10:58+00:00 | Vulnerability · Source |
| CVE-2015-3086 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-09 | fixed: 5 | 2026-06-28T07:10:58+00:00 | Vulnerability · Source |
| CVE-2015-3089 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-09 | fixed: 5 | 2026-06-28T07:10:58+00:00 | Vulnerability · Source |
| CVE-2015-2922 | redhat_vex | kernel: denial of service (DoS) attack against IPv6 network stacks due to improper handling of Router Advertisements. | fixed: 372 known affected: 1 | 2026-06-28T07:10:55+00:00 | Vulnerability · Source |
| CVE-2014-8559 | redhat_vex | kernel: fs: deadlock due to incorrect usage of rename_lock | fixed: 198 known not affected: 15 | 2026-06-28T07:10:53+00:00 | Vulnerability · Source |
| CVE-2015-2632 | redhat_vex | ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520) | fixed: 1026 known affected: 5 known not affected: 6 | 2026-06-28T07:10:53+00:00 | Vulnerability · Source |
| CVE-2015-2348 | redhat_vex | php: move_uploaded_file() NUL byte injection in file name | fixed: 586 known affected: 54 known not affected: 60 | 2026-06-28T07:10:52+00:00 | Vulnerability · Source |
| CVE-2015-2305 | redhat_vex | regex: heap overflow in regcomp() on 32-bit architectures | fixed: 394 known affected: 155 known not affected: 36 | 2026-06-28T07:10:50+00:00 | Vulnerability · Source |
| CVE-2025-68618 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via malicious SVG file | known affected: 14 | 2026-06-28T07:10:45+00:00 | Vulnerability · Source |
| CVE-2015-1234 | redhat_vex | chromium-browser: buffer overflow via race condition in GPU | fixed: 15 | 2026-06-28T07:10:43+00:00 | Vulnerability · Source |
| CVE-2025-6857 | redhat_vex | hdf5: HDF5 Stack Buffer Overflow | known affected: 1 | 2026-06-28T07:10:42+00:00 | Vulnerability · Source |
| CVE-2015-1209 | redhat_vex | chromium-browser: use-after-free in DOM | fixed: 15 known affected: 9 | 2026-06-28T07:10:42+00:00 | Vulnerability · Source |
| CVE-2025-68480 | redhat_vex | github.com/marshmallow-code/marshmallow: Marshmallow: Denial of Service via crafted request to Schema.load function | known affected: 2 | 2026-06-28T07:10:40+00:00 | Vulnerability · Source |
| CVE-2015-0304 | redhat_vex | flash-plugin: Multiple code-execution flaws (APSB15-01) | fixed: 5 | 2026-06-28T07:10:39+00:00 | Vulnerability · Source |
| CVE-2025-68469 | redhat_vex | ImageMagick: heap-based buffer overflow via a crafted TIFF file | known affected: 14 | 2026-06-28T07:10:39+00:00 | Vulnerability · Source |
| CVE-2015-0237 | redhat_vex | vdsm: Users attempting a live storage migration create snapshot without snapshot creation permissions | fixed: 20 | 2026-06-28T07:10:38+00:00 | Vulnerability · Source |
| CVE-2025-68463 | redhat_vex | python-biopython: python-biopython: Information disclosure via XML External Entity (XXE) vulnerability in Bio.Entrez | known not affected: 1 | 2026-06-28T07:10:38+00:00 | Vulnerability · Source |
| CVE-2025-68431 | redhat_vex | libheif: libheif has Potential Heap Buffer Over-Read | known not affected: 1 | 2026-06-28T07:10:37+00:00 | Vulnerability · Source |
| CVE-2025-68460 | redhat_vex | roundcubemail: Roundcube Webmail: Information Disclosure via HTML Style Sanitizer | known not affected: 1 | 2026-06-28T07:10:37+00:00 | Vulnerability · Source |
| CVE-2025-68422 | redhat_vex | Kibana: Kibana: Privilege escalation and information disclosure via improper authorization | known affected: 1 | 2026-06-28T07:10:37+00:00 | Vulnerability · Source |
| CVE-2025-68390 | redhat_vex | elasticsearch: Elasticsearch Allocation of Resources Without Limits or Throttling | known affected: 14 | 2026-06-28T07:10:36+00:00 | Vulnerability · Source |
| CVE-2025-68387 | redhat_vex | Kibana: Kibana: Cross-site scripting (XSS) via improper input neutralization in Vega AST evaluator | known affected: 1 | 2026-06-28T07:10:36+00:00 | Vulnerability · Source |
| CVE-2025-68389 | redhat_vex | Kibana: Kibana: Denial of Service via excessive resource allocation from crafted HTTP requests | known affected: 1 | 2026-06-28T07:10:36+00:00 | Vulnerability · Source |
| CVE-2025-68385 | redhat_vex | Kibana: Kibana: Cross-site Scripting (XSS) vulnerability allows authenticated users to embed malicious scripts | known not affected: 1 | 2026-06-28T07:10:35+00:00 | Vulnerability · Source |
| CVE-2014-4252 | redhat_vex | OpenJDK: Prevent instantiation of service with non-public constructor (Security, 8035004) | fixed: 840 | 2026-06-28T07:10:24+00:00 | Vulnerability · Source |
| CVE-2014-3194 | redhat_vex | chromium: use-after-free issue in Web Workers fixed in Chrome 38.0.2125.101 | fixed: 15 known not affected: 9 | 2026-06-28T07:09:56+00:00 | Vulnerability · Source |
| CVE-2014-2430 | redhat_vex | mysql: unspecified DoS related to Performance Schema (CPU April 2014) | fixed: 190 under investigation: 9 | 2026-06-28T07:09:44+00:00 | Vulnerability · Source |
| CVE-2014-2427 | redhat_vex | OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163) | fixed: 856 known not affected: 7 | 2026-06-28T07:09:44+00:00 | Vulnerability · Source |
| CVE-2014-2423 | redhat_vex | OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026188) | fixed: 749 known not affected: 15 | 2026-06-28T07:09:43+00:00 | Vulnerability · Source |
| CVE-2014-2422 | redhat_vex | JDK: unspecified vulnerability fixed in 7u55 and 8u5 (JavaFX) | fixed: 128 known not affected: 7 | 2026-06-28T07:09:42+00:00 | Vulnerability · Source |
| CVE-2014-1402 | redhat_vex | python-jinja2: FileSystemBytecodeCache insecure cache temporary file use | fixed: 46 known affected: 1 known not affected: 2 | 2026-06-28T07:09:29+00:00 | Vulnerability · Source |
| CVE-2017-5021 | redhat_vex | chromium-browser: use after free in extensions | fixed: 12 | 2026-06-28T07:09:27+00:00 | Vulnerability · Source |
| CVE-2025-6818 | redhat_vex | hdf5: HDF5 Heap Overflow | known affected: 1 | 2026-06-28T07:09:22+00:00 | Vulnerability · Source |
| CVE-2014-0451 | redhat_vex | OpenJDK: AWT incorrect FlavorMap seperation (AWT, 8026797) | fixed: 856 known not affected: 7 | 2026-06-28T07:09:22+00:00 | Vulnerability · Source |
| CVE-2014-0449 | redhat_vex | JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment) | fixed: 484 known not affected: 22 | 2026-06-28T07:09:21+00:00 | Vulnerability · Source |
| CVE-2014-0402 | redhat_vex | mysql: unspecified vulnerability related to Locking DoS (CPU Jan 2014) | fixed: 206 known not affected: 9 | 2026-06-28T07:09:19+00:00 | Vulnerability · Source |
| CVE-2014-0376 | redhat_vex | OpenJDK: document builder missing security checks (JAXP, 8027201, 8025018) | fixed: 690 known not affected: 21 | 2026-06-28T07:09:18+00:00 | Vulnerability · Source |
| CVE-2014-0448 | redhat_vex | JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Deployment) | fixed: 268 known not affected: 24 | 2026-06-28T07:09:18+00:00 | Vulnerability · Source |
| CVE-2025-68161 | redhat_vex | Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification | known affected: 165 | 2026-06-28T07:09:15+00:00 | Vulnerability · Source |
| CVE-2014-0393 | redhat_vex | mysql: unspecified vulnerability related to InnoDB affecting integrity (CPU Jan 2014) | fixed: 206 known not affected: 9 | 2026-06-28T07:09:15+00:00 | Vulnerability · Source |
| CVE-2025-6816 | redhat_vex | hdf5: HDF5 Heap Buffer Overflow | known affected: 1 | 2026-06-28T07:09:11+00:00 | Vulnerability · Source |