VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2008-3108 | redhat_vex | Security Vulnerability with JRE fonts processing may allow Elevation of Privileges (6450319) | fixed: 124 | 2026-06-28T07:08:11+00:00 | Vulnerability · Source |
| CVE-2008-1195 | redhat_vex | Java-API calls in untrusted Javascript allow network privilege escalation | fixed: 434 | 2026-06-28T07:08:09+00:00 | Vulnerability · Source |
| CVE-2025-65408 | redhat_vex | live555: NULL pointer dereference when creating RTP sink for AAC (ADTS) stream (SETUP) | known not affected: 1 | 2026-06-28T07:08:07+00:00 | Vulnerability · Source |
| CVE-2025-6536 | redhat_vex | tarantool: Tarantool reachable assertion | known not affected: 1 | 2026-06-28T07:08:07+00:00 | Vulnerability · Source |
| CVE-2025-65411 | redhat_vex | Unrtf: GNU Unrtf: Denial of Service via crafted payload in search_path parameter | known not affected: 1 | 2026-06-28T07:08:07+00:00 | Vulnerability · Source |
| CVE-2008-5348 | redhat_vex | OpenJDK Denial-Of-Service in kerberos authentication (6588160) | fixed: 587 | 2026-06-28T07:08:07+00:00 | Vulnerability · Source |
| CVE-2025-65410 | redhat_vex | UnRTF: stack-based buffer overflow via crafted input into the filename parameter | known not affected: 1 | 2026-06-28T07:08:07+00:00 | Vulnerability · Source |
| CVE-2025-65407 | redhat_vex | live555: use-after-free when creating a MPEG1/2 elementary stream (SETUP) | known not affected: 1 | 2026-06-28T07:08:07+00:00 | Vulnerability · Source |
| CVE-2025-65409 | redhat_vex | Recutils: Recutils: Denial of Service due to divide-by-zero with empty password input | known not affected: 1 | 2026-06-28T07:08:07+00:00 | Vulnerability · Source |
| CVE-2025-65110 | redhat_vex | vega-selections: Vega: Arbitrary code execution through malicious visualization definitions | known not affected: 1 | 2026-06-28T07:08:06+00:00 | Vulnerability · Source |
| CVE-2025-65102 | redhat_vex | pjsip: PJSIP buffer overflow in Opus PLC | known not affected: 1 | 2026-06-28T07:08:06+00:00 | Vulnerability · Source |
| CVE-2025-65104 | redhat_vex | Firebird: firebird3 client: FirebirdSQL/firebird: Firebird Client: Information leak when communicating with newer servers | known not affected: 1 | 2026-06-28T07:08:06+00:00 | Vulnerability · Source |
| CVE-2025-65105 | redhat_vex | Apptainer: Apptainer: Security bypass due to disabling security options | known not affected: 1 | 2026-06-28T07:08:06+00:00 | Vulnerability · Source |
| CVE-2026-45078 | redhat_vex | synapse: Synapse: Denial of Service due to resource exhaustion by authenticated users | known not affected: 1 | 2026-06-28T07:08:05+00:00 | Vulnerability · Source |
| CVE-2007-5663 | redhat_vex | acroread JavaScript Insecure Method Exposure | fixed: 20 | 2026-06-28T07:08:05+00:00 | Vulnerability · Source |
| CVE-2024-38608 | redhat_vex | kernel: net/mlx5e: Fix netif state handling | fixed: 663 known affected: 50 known not affected: 15 | 2026-06-28T07:08:02+00:00 | Vulnerability · Source |
| CVE-2025-64761 | redhat_vex | github.com/openbao/openbao: OpenBao Privileged Operator Identity Group Root Escalation | known not affected: 1 | 2026-06-28T07:08:00+00:00 | Vulnerability · Source |
| CVE-2025-64775 | redhat_vex | org.apache.struts/struts2-core: Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS) | known affected: 1 known not affected: 16 | 2026-06-28T07:08:00+00:00 | Vulnerability · Source |
| CVE-2018-19407 | redhat_vex | kernel: kvm: NULL pointer dereference in vcpu_scan_ioapic in arch/x86/kvm/x86.c | known not affected: 104 | 2026-06-28T07:07:58+00:00 | Vulnerability · Source |
| CVE-2025-64529 | redhat_vex | spicedb: SpiceDB: Silent WriteRelationships failure leads to incorrect permissions | known not affected: 1 | 2026-06-28T07:07:58+00:00 | Vulnerability · Source |
| CVE-2022-48918 | redhat_vex | kernel: iwlwifi: mvm: check debugfs_dir ptr before use | fixed: 346 known affected: 28 known not affected: 14 | 2026-06-28T07:07:50+00:00 | Vulnerability · Source |
| CVE-2025-64512 | redhat_vex | pdfminer.six: pdfminer.six Arbitrary Code Execution via Crafted PDF Input | known not affected: 1 | 2026-06-28T07:07:48+00:00 | Vulnerability · Source |
| CVE-2025-64486 | redhat_vex | calibre: calibre is vulnerable to arbitrary code execution when opening FB2 files | known not affected: 1 | 2026-06-28T07:07:47+00:00 | Vulnerability · Source |
| CVE-2025-64500 | redhat_vex | symfony/http-foundation: Symfony HttpFoundation: Limited authorization bypass | known not affected: 1 | 2026-06-28T07:07:47+00:00 | Vulnerability · Source |
| CVE-2025-64484 | redhat_vex | oauth2-proxy: OAuth2-Proxy vulnerable to header smuggling via underscore, leading to potential privilege escalation | known affected: 1 | 2026-06-28T07:07:47+00:00 | Vulnerability · Source |
| CVE-2025-64332 | redhat_vex | Suricata: Suricata: Denial of service via SWF decompression | known not affected: 1 | 2026-06-28T07:07:46+00:00 | Vulnerability · Source |
| CVE-2025-64459 | redhat_vex | django: Django SQL injection | fixed: 472 known affected: 9 known not affected: 1024 | 2026-06-28T07:07:46+00:00 | Vulnerability · Source |
| CVE-2025-64458 | redhat_vex | Django: Denial-of-service vulnerability in Django on Windows | known not affected: 64 | 2026-06-28T07:07:46+00:00 | Vulnerability · Source |
| CVE-2025-64344 | redhat_vex | Suricata: Suricata: Stack overflow in Lua scripts due to large buffers | known not affected: 1 | 2026-06-28T07:07:44+00:00 | Vulnerability · Source |
| CVE-2025-64334 | redhat_vex | Suricata: Suricata: Unbounded memory growth via compressed HTTP data | known not affected: 1 | 2026-06-28T07:07:44+00:00 | Vulnerability · Source |
| CVE-2025-64333 | redhat_vex | Suricata: Suricata: Stack Overflow Vulnerability via Large HTTP Content Type Logging | known not affected: 1 | 2026-06-28T07:07:44+00:00 | Vulnerability · Source |
| CVE-2025-64429 | redhat_vex | duckdb: Encryption Crypto implementation is vulnerable | known not affected: 1 | 2026-06-28T07:07:44+00:00 | Vulnerability · Source |
| CVE-2025-64331 | redhat_vex | Suricata: Suricata: Stack overflow vulnerability in HTTP processing leads to denial of service | known not affected: 1 | 2026-06-28T07:07:44+00:00 | Vulnerability · Source |
| CVE-2025-64335 | redhat_vex | Suricata: Suricata: NULL dereference via entropy keyword with base64_data | known not affected: 1 | 2026-06-28T07:07:44+00:00 | Vulnerability · Source |
| CVE-2025-63261 | redhat_vex | AWStats: AWStats: Arbitrary code execution via command injection vulnerability | known not affected: 1 | 2026-06-28T07:07:39+00:00 | Vulnerability · Source |
| CVE-2025-63744 | redhat_vex | radare2: NULL Pointer Dereference in load() (bin_dyldcache.c) Leads to Denial of Service | known not affected: 1 | 2026-06-28T07:07:39+00:00 | Vulnerability · Source |
| CVE-2025-63745 | redhat_vex | radare2: NULL Pointer Dereference in info() (bin_ne.c) Leads to Denial of Service | known not affected: 1 | 2026-06-28T07:07:39+00:00 | Vulnerability · Source |
| CVE-2025-62707 | redhat_vex | pypdf: pypdf affected by possible infinite loop when reading DCT inline images without EOF marker | fixed: 4 known affected: 3 known not affected: 130 | 2026-06-28T07:07:36+00:00 | Vulnerability · Source |
| CVE-2025-62705 | redhat_vex | openbao: OpenBao and Vault Leak []byte Fields in Audit Logs | known not affected: 1 | 2026-06-28T07:07:33+00:00 | Vulnerability · Source |
| CVE-2025-62708 | redhat_vex | pypdf: pypdf manipulated LZWDecode streams can exhaust RAM | known affected: 3 known not affected: 29 | 2026-06-28T07:07:33+00:00 | Vulnerability · Source |
| CVE-2025-62711 | redhat_vex | wasmtime: Wasmtime vulnerable to segfault when using component resources | known affected: 1 | 2026-06-28T07:07:33+00:00 | Vulnerability · Source |
| CVE-2025-62611 | redhat_vex | aiomysql: aiomysql arbitrary access to client files | known not affected: 1 | 2026-06-28T07:07:32+00:00 | Vulnerability · Source |
| CVE-2025-62595 | redhat_vex | koa: Koa Vulnerable to Open Redirect via Trailing Double-Slash (//) in back Redirect Logic | known not affected: 18 | 2026-06-28T07:07:31+00:00 | Vulnerability · Source |
| CVE-2022-28330 | redhat_vex | httpd: mod_isapi: out-of-bounds read | fixed: 1 known not affected: 53 | 2026-06-28T07:07:31+00:00 | Vulnerability · Source |
| CVE-2014-0517 | redhat_vex | flash-plugin: security protection bypass (APSB14-14) | fixed: 5 | 2026-06-28T07:07:30+00:00 | Vulnerability · Source |
| CVE-2014-0533 | redhat_vex | flash-plugin: multiple cross-site scripting flaws (APSB14-16) | fixed: 5 | 2026-06-28T07:07:30+00:00 | Vulnerability · Source |
| CVE-2025-62594 | redhat_vex | ImageMagick: ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS) | known affected: 14 | 2026-06-28T07:07:29+00:00 | Vulnerability · Source |
| CVE-2025-62504 | redhat_vex | envoy: Envoy Lua filter use-after-free when oversized rewritten response body causes crash | known affected: 15 known not affected: 1 | 2026-06-28T07:07:27+00:00 | Vulnerability · Source |
| CVE-2025-62426 | redhat_vex | vllm: vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs` | fixed: 3 known affected: 24 | 2026-06-28T07:07:27+00:00 | Vulnerability · Source |
| CVE-2025-62410 | redhat_vex | happy-dom: --disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript in happy-dom | known not affected: 1 | 2026-06-28T07:07:26+00:00 | Vulnerability · Source |