VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2013-6496 | redhat_vex | conga: Multiple information leak flaws in various luci site extensions | fixed: 13 known affected: 1 known not affected: 2 | 2026-06-28T07:09:10+00:00 | Vulnerability · Source |
| CVE-2025-68146 | redhat_vex | filelock: filelock: Time-of-Check-Time-of-Use (TOCTOU) race condition and symlink attack allows arbitrary file corruption or truncation | known affected: 148 | 2026-06-28T07:09:09+00:00 | Vulnerability · Source |
| CVE-2025-68154 | redhat_vex | systeminformation: systeminformation: OS Command Injection in `fsSize()` allows arbitrary command execution on Windows. | known not affected: 1 | 2026-06-28T07:09:09+00:00 | Vulnerability · Source |
| CVE-2025-68142 | redhat_vex | PyMdown: pymdown-extensions: PyMdown Extensions: Regular Expression Denial of Service in figure caption extension | known affected: 57 | 2026-06-28T07:09:09+00:00 | Vulnerability · Source |
| CVE-2013-5804 | redhat_vex | OpenJDK: javac does not ignore certain ignorable characters (Javadoc, 8016653) | fixed: 634 | 2026-06-28T07:09:07+00:00 | Vulnerability · Source |
| CVE-2025-68131 | redhat_vex | cbor2: cbor2: Information Disclosure via shared memory in CBORDecoder reuse | fixed: 7 known affected: 8 known not affected: 206 | 2026-06-28T07:09:07+00:00 | Vulnerability · Source |
| CVE-2013-5797 | redhat_vex | OpenJDK: insufficient escaping of window title string (Javadoc, 8016675) | fixed: 634 | 2026-06-28T07:09:06+00:00 | Vulnerability · Source |
| CVE-2025-67896 | redhat_vex | exim: Exim: Remote heap corruption vulnerability | known not affected: 1 | 2026-06-28T07:09:05+00:00 | Vulnerability · Source |
| CVE-2025-68119 | redhat_vex | cmd/go: cmd/go: Local code execution and arbitrary file write via malicious module version strings | fixed: 8 known affected: 27 | 2026-06-28T07:09:05+00:00 | Vulnerability · Source |
| CVE-2025-67858 | redhat_vex | Foomuuri: Foomuuri: Integrity loss of firewall configuration via improper neutralization of argument delimiters | known not affected: 1 | 2026-06-28T07:09:04+00:00 | Vulnerability · Source |
| CVE-2025-67853 | redhat_vex | moodle: Moodle: Brute-force facilitation due to missing rate limiting in confirmation email service | known not affected: 1 | 2026-06-28T07:09:04+00:00 | Vulnerability · Source |
| CVE-2025-67852 | redhat_vex | moodle: Moodle: Open redirect vulnerability in OAuth login flow allows redirection to malicious sites. | known not affected: 1 | 2026-06-28T07:09:04+00:00 | Vulnerability · Source |
| CVE-2025-67855 | redhat_vex | mooodle: Mooodle: Information disclosure and script execution via reflected Cross-Site Scripting | known not affected: 1 | 2026-06-28T07:09:04+00:00 | Vulnerability · Source |
| CVE-2025-67859 | redhat_vex | TLP: improper authentication allows local users to control the power profile and the log settings | known not affected: 1 | 2026-06-28T07:09:04+00:00 | Vulnerability · Source |
| CVE-2013-2725 | redhat_vex | acroread: multiple code execution flaws (APSB13-15) | fixed: 8 | 2026-06-28T07:09:03+00:00 | Vulnerability · Source |
| CVE-2013-2723 | redhat_vex | acroread: multiple code execution flaws (APSB13-15) | fixed: 8 | 2026-06-28T07:09:03+00:00 | Vulnerability · Source |
| CVE-2025-67849 | redhat_vex | moodle: Moodle: Cross-site scripting (XSS) via improper sanitization of AI prompt responses | known not affected: 1 | 2026-06-28T07:09:02+00:00 | Vulnerability · Source |
| CVE-2025-67848 | redhat_vex | moodle: Moodle: Authentication bypass via LTI Provider allows suspended users to gain unauthorized access. | known not affected: 1 | 2026-06-28T07:09:01+00:00 | Vulnerability · Source |
| CVE-2025-67746 | redhat_vex | composer: Composer: Terminal output manipulation leading to Denial of Service | fixed: 2 | 2026-06-28T07:09:00+00:00 | Vulnerability · Source |
| CVE-2013-1722 | redhat_vex | Mozilla: Use-after-free in Animation Manager during stylesheet cloning (MFSA 2013-79) | fixed: 140 known affected: 1 | 2026-06-28T07:08:58+00:00 | Vulnerability · Source |
| CVE-2013-1478 | redhat_vex | OpenJDK: image parser insufficient raster parameter checks (2D, 8001972) | fixed: 543 known affected: 1 | 2026-06-28T07:08:58+00:00 | Vulnerability · Source |
| CVE-2013-1687 | redhat_vex | Mozilla: Privileged content access and execution via XBL (MFSA 2013-51) | fixed: 140 known affected: 1 | 2026-06-28T07:08:57+00:00 | Vulnerability · Source |
| CVE-2013-1479 | redhat_vex | JDK: unspecified vulnerability fixed in 6u39 and 7u13 (JavaFX) | fixed: 52 known affected: 13 | 2026-06-28T07:08:57+00:00 | Vulnerability · Source |
| CVE-2013-1685 | redhat_vex | Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-50) | fixed: 140 known affected: 1 | 2026-06-28T07:08:57+00:00 | Vulnerability · Source |
| CVE-2013-1684 | redhat_vex | Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-50) | fixed: 140 known affected: 1 | 2026-06-28T07:08:55+00:00 | Vulnerability · Source |
| CVE-2013-1376 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T07:08:54+00:00 | Vulnerability · Source |
| CVE-2013-1369 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-05) | fixed: 4 | 2026-06-28T07:08:53+00:00 | Vulnerability · Source |
| CVE-2013-1370 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-05) | fixed: 4 | 2026-06-28T07:08:53+00:00 | Vulnerability · Source |
| CVE-2013-1368 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-05) | fixed: 4 | 2026-06-28T07:08:52+00:00 | Vulnerability · Source |
| CVE-2013-0800 | redhat_vex | Mozilla: Out-of-bounds write in Cairo library (MFSA 2013-31) | fixed: 140 known affected: 1 | 2026-06-28T07:08:52+00:00 | Vulnerability · Source |
| CVE-2013-0795 | redhat_vex | Mozilla: Bypass of SOW protections allows cloning of protected nodes (MFSA 2013-36) | fixed: 140 known affected: 1 | 2026-06-28T07:08:51+00:00 | Vulnerability · Source |
| CVE-2013-0759 | redhat_vex | Mozilla: URL spoofing in addressbar during page loads (MFSA 2013-04) | fixed: 140 known affected: 1 | 2026-06-28T07:08:51+00:00 | Vulnerability · Source |
| CVE-2013-0621 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T07:08:51+00:00 | Vulnerability · Source |
| CVE-2013-0641 | redhat_vex | acroread: Multiple unspecified vulnerabilities allow remote attackers to execute arbitrary code (APSB13-07) | fixed: 8 | 2026-06-28T07:08:51+00:00 | Vulnerability · Source |
| CVE-2025-67603 | redhat_vex | Foomuuri: Foomuuri: Unauthorized firewall configuration changes due to improper authorization | known not affected: 1 | 2026-06-28T07:08:51+00:00 | Vulnerability · Source |
| CVE-2013-0620 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T07:08:50+00:00 | Vulnerability · Source |
| CVE-2013-0616 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T07:08:49+00:00 | Vulnerability · Source |
| CVE-2013-0435 | redhat_vex | OpenJDK: com.sun.xml.internal.* not restricted packages (JAX-WS, 7201068) | fixed: 450 known affected: 1 known not affected: 8 | 2026-06-28T07:08:48+00:00 | Vulnerability · Source |
| CVE-2013-0615 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T07:08:48+00:00 | Vulnerability · Source |
| CVE-2013-0443 | redhat_vex | OpenJDK: insufficient Diffie-Hellman public key checks (JSSE, 7192392) | fixed: 543 known affected: 1 | 2026-06-28T07:08:48+00:00 | Vulnerability · Source |
| CVE-2013-0431 | redhat_vex | OpenJDK: JMX Introspector missing package access check (JMX, 8000539, SE-2012-01 Issue 52) | fixed: 202 known affected: 1 known not affected: 37 | 2026-06-28T07:08:48+00:00 | Vulnerability · Source |
| CVE-2025-6750 | redhat_vex | hdf5: HDF5 Heap Buffer Overflow | known affected: 1 | 2026-06-28T07:08:47+00:00 | Vulnerability · Source |
| CVE-2025-67484 | redhat_vex | MediaWiki: MediaWiki: Vulnerability in ApiFormatXml.Php requiring high privileges | known not affected: 1 | 2026-06-28T07:08:46+00:00 | Vulnerability · Source |
| CVE-2013-0274 | redhat_vex | pidgin: missing nul termination of long values in UPnP responses | fixed: 113 known affected: 1 | 2026-06-28T07:08:46+00:00 | Vulnerability · Source |
| CVE-2025-67483 | redhat_vex | MediaWiki: MediaWiki: Cross-site scripting vulnerability in page preview functionality | known not affected: 1 | 2026-06-28T07:08:46+00:00 | Vulnerability · Source |
| CVE-2025-67480 | redhat_vex | MediaWiki: MediaWiki: Vulnerability with no direct security impact | known not affected: 1 | 2026-06-28T07:08:46+00:00 | Vulnerability · Source |
| CVE-2025-67476 | redhat_vex | MediaWiki: MediaWiki: Information disclosure vulnerability in ImportableOldRevisionImporter.Php | known not affected: 1 | 2026-06-28T07:08:45+00:00 | Vulnerability · Source |
| CVE-2025-67475 | redhat_vex | MediaWiki: MediaWiki: Cross-site Scripting vulnerability due to improper input neutralization | known not affected: 1 | 2026-06-28T07:08:45+00:00 | Vulnerability · Source |
| CVE-2025-67269 | redhat_vex | gpsd: gpsd: Denial of Service due to malformed NAVCOM packet parsing | fixed: 50 | 2026-06-28T07:08:44+00:00 | Vulnerability · Source |
| CVE-2025-67221 | redhat_vex | orjson: orjson: Denial of Service due to unbounded recursion with deeply nested JSON documents | known affected: 48 | 2026-06-28T07:08:44+00:00 | Vulnerability · Source |