VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-67125 | redhat_vex | docopt.cpp: integer overflow can lead to logic/policy bypass | known not affected: 1 | 2026-06-28T07:08:43+00:00 | Vulnerability · Source |
| CVE-2025-67202 | redhat_vex | sidekiq-cron: Sidekiq-cron: Cross-site scripting vulnerability via crafted URL | known affected: 5 | 2026-06-28T07:08:43+00:00 | Vulnerability · Source |
| CVE-2025-66960 | redhat_vex | ollama: ollama: Denial of Service via untrusted GGUF metadata string length | known affected: 1 known not affected: 34 | 2026-06-28T07:08:42+00:00 | Vulnerability · Source |
| CVE-2025-66959 | redhat_vex | ollama: ollama: Denial of Service via GGUF decoder | known affected: 1 known not affected: 34 | 2026-06-28T07:08:42+00:00 | Vulnerability · Source |
| CVE-2012-5277 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-24) | fixed: 5 | 2026-06-28T07:08:40+00:00 | Vulnerability · Source |
| CVE-2012-5255 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T07:08:39+00:00 | Vulnerability · Source |
| CVE-2012-5070 | redhat_vex | OpenJDK: EnvHelp information disclosure (JMX, 7158796) | fixed: 144 known affected: 9 known not affected: 20 | 2026-06-28T07:08:38+00:00 | Vulnerability · Source |
| CVE-2012-5067 | redhat_vex | JDK: unspecified vulnerability (Deployment) | fixed: 90 known affected: 21 | 2026-06-28T07:08:38+00:00 | Vulnerability · Source |
| CVE-2025-66648 | redhat_vex | vega-functions: vega-functions: Cross-Site Scripting via untrusted user input | known not affected: 1 | 2026-06-28T07:08:35+00:00 | Vulnerability · Source |
| CVE-2025-66630 | redhat_vex | github.com/gofiber/fiber/v2: Fiber: Predictable UUIDs from randomness source errors can lead to security bypasses | known not affected: 1 | 2026-06-28T07:08:35+00:00 | Vulnerability · Source |
| CVE-2025-66628 | redhat_vex | ImageMagick: ImageMagick Integer Overflow leading to out of bounds read (32-bit only) | known affected: 14 | 2026-06-28T07:08:34+00:00 | Vulnerability · Source |
| CVE-2012-1721 | redhat_vex | JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment) | fixed: 289 known not affected: 13 | 2026-06-28T07:08:33+00:00 | Vulnerability · Source |
| CVE-2025-66622 | redhat_vex | matrix-sdk-base: matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values | known not affected: 1 | 2026-06-28T07:08:33+00:00 | Vulnerability · Source |
| CVE-2025-66623 | redhat_vex | strimzi-kafka-operator: Strimzi: Incorrect Kubernetes Role creation leads to unauthorized secret access | known not affected: 4 | 2026-06-28T07:08:33+00:00 | Vulnerability · Source |
| CVE-2025-66570 | redhat_vex | cpp-httplib: cpp-httplib Untrusted HTTP Header Handling | known not affected: 1 | 2026-06-28T07:08:33+00:00 | Vulnerability · Source |
| CVE-2025-66560 | redhat_vex | io.quarkus/quarkus-rest: Quarkus REST Worker Thread Exhaustion Vulnerability | fixed: 2 known affected: 8 | 2026-06-28T07:08:32+00:00 | Vulnerability · Source |
| CVE-2012-0775 | redhat_vex | acroread: multiple unspecified flaws (APSB12-08, APSB12-01) | fixed: 10 | 2026-06-28T07:08:31+00:00 | Vulnerability · Source |
| CVE-2012-0774 | redhat_vex | acroread: multiple unspecified flaws (APSB12-08, APSB12-01) | fixed: 10 | 2026-06-28T07:08:31+00:00 | Vulnerability · Source |
| CVE-2012-0505 | redhat_vex | OpenJDK: incomplete info in the deserialization exception (Serialization, 7110700) | fixed: 487 known affected: 7 | 2026-06-28T07:08:30+00:00 | Vulnerability · Source |
| CVE-2025-66490 | redhat_vex | github.com/traefik/traefik: Traefik Path Normalization Bypass in Router + Middleware Rules | fixed: 4 known not affected: 57 | 2026-06-28T07:08:29+00:00 | Vulnerability · Source |
| CVE-2025-66415 | redhat_vex | fastify-reply-from: fastify-reply-from: Unauthorized route access via malicious URL | known affected: 5 | 2026-06-28T07:08:28+00:00 | Vulnerability · Source |
| CVE-2025-66399 | redhat_vex | cacti: SNMP Command Injection leads to RCE in Cacti | known not affected: 1 | 2026-06-28T07:08:27+00:00 | Vulnerability · Source |
| CVE-2011-2434 | redhat_vex | acroread: multiple code execution flaws (APSB11-24) | fixed: 18 | 2026-06-28T07:08:27+00:00 | Vulnerability · Source |
| CVE-2025-66406 | redhat_vex | github.com/smallstep/certificates: Step CA: Denial of Service via improper SSH certificate revocation authorization | known not affected: 1 | 2026-06-28T07:08:27+00:00 | Vulnerability · Source |
| CVE-2011-2429 | redhat_vex | flash-plugin: security control bypass information disclosure fixed in APSB11-26 | fixed: 23 | 2026-06-28T07:08:26+00:00 | Vulnerability · Source |
| CVE-2011-2140 | redhat_vex | flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) | fixed: 23 | 2026-06-28T07:08:25+00:00 | Vulnerability · Source |
| CVE-2011-2428 | redhat_vex | flash-plugin: critical flaws fixed in APSB11-26 | fixed: 23 | 2026-06-28T07:08:25+00:00 | Vulnerability · Source |
| CVE-2025-66286 | redhat_vex | webkitgtk: Authorization bypass through WebPage::send-request signal handler | known affected: 27 | 2026-06-28T07:08:23+00:00 | Vulnerability · Source |
| CVE-2025-66169 | redhat_vex | camel-neo4j: Apache Camel camel-neo4j: Unauthorized data modification via Cypher Injection | known affected: 1 | 2026-06-28T07:08:22+00:00 | Vulnerability · Source |
| CVE-2025-66021 | redhat_vex | com.googlecode.owasp-java-html-sanitizer/owasp-java-html-sanitizer: OWASP Java HTML Sanitizer vulnerable to XSS | known affected: 4 known not affected: 2 | 2026-06-28T07:08:21+00:00 | Vulnerability · Source |
| CVE-2010-5331 | redhat_vex | kernel: range check issue in drivers/gpu/drm/radeon/atombios.c leads to buffer overflow | known not affected: 105 | 2026-06-28T07:08:19+00:00 | Vulnerability · Source |
| CVE-2010-3650 | redhat_vex | flash-plugin: security bulletin APSB10-26 | fixed: 9 | 2026-06-28T07:08:17+00:00 | Vulnerability · Source |
| CVE-2025-66004 | redhat_vex | usbmuxd: usbmuxd: Path Traversal vulnerability allows local privilege escalation | known affected: 5 | 2026-06-28T07:08:17+00:00 | Vulnerability · Source |
| CVE-2025-66003 | redhat_vex | smb4k: smb4k local root exploit | known not affected: 1 | 2026-06-28T07:08:17+00:00 | Vulnerability · Source |
| CVE-2010-0741 | redhat_vex | qemu: Improper handling of erroneous data provided by Linux virtio-net driver | fixed: 15 | 2026-06-28T07:08:17+00:00 | Vulnerability · Source |
| CVE-2025-66002 | redhat_vex | smb4k: SMB4K Arbitrary Mount | known not affected: 1 | 2026-06-28T07:08:16+00:00 | Vulnerability · Source |
| CVE-2025-65858 | redhat_vex | Calibre-Web: Calibre: Calibre-Web: Stored Cross-Site Scripting (XSS) vulnerability in username field | known not affected: 1 | 2026-06-28T07:08:16+00:00 | Vulnerability · Source |
| CVE-2010-0188 | redhat_vex | acroread: unspecified code execution flaw | fixed: 12 | 2026-06-28T07:08:16+00:00 | Vulnerability · Source |
| CVE-2025-6597 | redhat_vex | MediaWiki: MediaWiki: Vulnerability in authentication management | known not affected: 1 | 2026-06-28T07:08:16+00:00 | Vulnerability · Source |
| CVE-2010-0186 | redhat_vex | flash-plugin: unauthorized cross-domain requests (APSB10-06) | fixed: 22 | 2026-06-28T07:08:16+00:00 | Vulnerability · Source |
| CVE-2025-6591 | redhat_vex | MediaWiki: MediaWiki: Vulnerability in ApiFeedContributions.Php | known not affected: 1 | 2026-06-28T07:08:15+00:00 | Vulnerability · Source |
| CVE-2025-6594 | redhat_vex | MediaWiki: MediaWiki: Cross-site Scripting vulnerability via improper input neutralization | known not affected: 1 | 2026-06-28T07:08:15+00:00 | Vulnerability · Source |
| CVE-2025-6593 | redhat_vex | MediaWiki: MediaWiki: Information disclosure via user interaction | known not affected: 1 | 2026-06-28T07:08:15+00:00 | Vulnerability · Source |
| CVE-2025-65803 | redhat_vex | freeimage: FreeImage integer overflow | known not affected: 1 | 2026-06-28T07:08:14+00:00 | Vulnerability · Source |
| CVE-2025-65896 | redhat_vex | asyncmy: Asyncmy SQL injection | known not affected: 1 | 2026-06-28T07:08:14+00:00 | Vulnerability · Source |
| CVE-2025-6590 | redhat_vex | MediaWiki: MediaWiki: Information disclosure via HTMLUserTextField.Php | known not affected: 1 | 2026-06-28T07:08:14+00:00 | Vulnerability · Source |
| CVE-2009-1093 | redhat_vex | OpenJDK remote LDAP Denial-Of-Service (6717680) | fixed: 434 | 2026-06-28T07:08:14+00:00 | Vulnerability · Source |
| CVE-2025-6556 | redhat_vex | chromium-browser: Chromium policy enforcement vulnerability | known not affected: 1 | 2026-06-28T07:08:12+00:00 | Vulnerability · Source |
| CVE-2008-5351 | redhat_vex | OpenJDK UTF-8 decoder accepts non-shortest form sequences (4486841) | fixed: 587 | 2026-06-28T07:08:12+00:00 | Vulnerability · Source |
| CVE-2025-65498 | redhat_vex | libcoap: NULL pointer dereference during DTLS operations | known not affected: 1 | 2026-06-28T07:08:12+00:00 | Vulnerability · Source |