VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-27382 | redhat_vex | mariadb: assertion failure via component Item_field::used_tables/update_depend_map_for_order | fixed: 539 known affected: 10 known not affected: 73 | 2026-06-28T07:07:26+00:00 | Vulnerability · Source |
| CVE-2025-62395 | redhat_vex | moodle: External cohort search service leaks system cohort data | known not affected: 1 | 2026-06-28T07:07:26+00:00 | Vulnerability · Source |
| CVE-2022-27377 | redhat_vex | mariadb: use-after-poison when complex conversion is involved in blob | fixed: 736 known affected: 19 known not affected: 35 | 2026-06-28T07:07:26+00:00 | Vulnerability · Source |
| CVE-2025-62409 | redhat_vex | envoy-main: Envoy TCP connection pool crash | known affected: 9 known not affected: 7 | 2026-06-28T07:07:25+00:00 | Vulnerability · Source |
| CVE-2025-62400 | redhat_vex | moodle: Hidden group names visible to event creators | known not affected: 1 | 2026-06-28T07:07:24+00:00 | Vulnerability · Source |
| CVE-2025-62393 | redhat_vex | moodle: Course access permissions not properly checked in course_output_fragment_course_overview | known not affected: 1 | 2026-06-28T07:07:23+00:00 | Vulnerability · Source |
| CVE-2025-62394 | redhat_vex | moodle: Quiz notifications sent to suspended participants | known not affected: 1 | 2026-06-28T07:07:23+00:00 | Vulnerability · Source |
| CVE-2022-2663 | redhat_vex | kernel: netfilter: nf_conntrack_irc message handling issue | fixed: 514 known affected: 42 | 2026-06-28T07:07:22+00:00 | Vulnerability · Source |
| CVE-2025-62348 | redhat_vex | salt: Salt junos module uses an unsafe YAML loader which may allow unintended code execution | known not affected: 1 | 2026-06-28T07:07:21+00:00 | Vulnerability · Source |
| CVE-2025-62372 | redhat_vex | vllm: vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs | fixed: 8 known affected: 23 | 2026-06-28T07:07:21+00:00 | Vulnerability · Source |
| CVE-2022-26354 | redhat_vex | QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak | fixed: 1809 known affected: 59 | 2026-06-28T07:07:19+00:00 | Vulnerability · Source |
| CVE-2015-3129 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-16 | fixed: 5 | 2026-06-28T07:07:17+00:00 | Vulnerability · Source |
| CVE-2025-62156 | redhat_vex | github.com/argoproj/argo-workflows: Argo Workflows Zip Slip | fixed: 2 known affected: 4 known not affected: 42 | 2026-06-28T07:07:15+00:00 | Vulnerability · Source |
| CVE-2021-2429 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jul 2021) | fixed: 155 known not affected: 119 | 2026-06-28T07:07:14+00:00 | Vulnerability · Source |
| CVE-2025-6209 | redhat_vex | llama-index: File Read through Path Traversal in llama_index | known affected: 12 | 2026-06-28T07:07:13+00:00 | Vulnerability · Source |
| CVE-2021-2426 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2021) | fixed: 155 known not affected: 119 | 2026-06-28T07:07:12+00:00 | Vulnerability · Source |
| CVE-2025-6208 | redhat_vex | llama_index: llama_index: Denial of Service due to uncontrolled memory consumption in SimpleDirectoryReader | known affected: 32 | 2026-06-28T07:07:09+00:00 | Vulnerability · Source |
| CVE-2022-25265 | redhat_vex | kernel: Executable Space Protection Bypass | fixed: 279 known affected: 150 | 2026-06-28T07:07:08+00:00 | Vulnerability · Source |
| CVE-2025-6193 | redhat_vex | trustyai-explainability: command injection via LMEvalJob CR | fixed: 1 known not affected: 30 | 2026-06-28T07:07:07+00:00 | Vulnerability · Source |
| CVE-2025-61921 | redhat_vex | sinatra: Sinatra has ReDoS vulnerability in ETag header value generation | known affected: 11 known not affected: 11 | 2026-06-28T07:07:05+00:00 | Vulnerability · Source |
| CVE-2025-6191 | redhat_vex | chromium-browser: Chromium integer overflow | known not affected: 1 | 2026-06-28T07:07:00+00:00 | Vulnerability · Source |
| CVE-2025-61645 | redhat_vex | MediaWiki: MediaWiki: Cross-site scripting vulnerability allows information disclosure via improper input neutralization | known not affected: 1 | 2026-06-28T07:06:56+00:00 | Vulnerability · Source |
| CVE-2013-2722 | redhat_vex | acroread: multiple code execution flaws (APSB13-15) | fixed: 8 | 2026-06-28T07:06:55+00:00 | Vulnerability · Source |
| CVE-2013-2471 | redhat_vex | OpenJDK: Incorrect IntegerComponentRaster size checks (2D, 8011248) | fixed: 555 | 2026-06-28T07:06:55+00:00 | Vulnerability · Source |
| CVE-2013-2470 | redhat_vex | OpenJDK: ImagingLib byte lookup processing (2D, 8011243) | fixed: 555 | 2026-06-28T07:06:54+00:00 | Vulnerability · Source |
| CVE-2025-61669 | redhat_vex | jupyter_server: Jupyter Server: Redirects to arbitrary external domains via insufficient validation of login parameter | known affected: 11 | 2026-06-28T07:06:53+00:00 | Vulnerability · Source |
| CVE-2025-61667 | redhat_vex | github.com/DataDog/datadog-agent: Datadog Linux Host Agent local privilege escalation | known not affected: 1 | 2026-06-28T07:06:53+00:00 | Vulnerability · Source |
| CVE-2025-61636 | redhat_vex | MediaWiki: MediaWiki: Cross-site Scripting (XSS) via improper input neutralization | known not affected: 1 | 2026-06-28T07:06:53+00:00 | Vulnerability · Source |
| CVE-2025-61638 | redhat_vex | MediaWiki: MediaWiki: Cross-site Scripting (XSS) via improper input neutralization | known not affected: 1 | 2026-06-28T07:06:52+00:00 | Vulnerability · Source |
| CVE-2025-61637 | redhat_vex | MediaWiki: MediaWiki: Cross-site Scripting via improper input neutralization | known not affected: 1 | 2026-06-28T07:06:51+00:00 | Vulnerability · Source |
| CVE-2025-61642 | redhat_vex | MediaWiki: MediaWiki: Cross-site Scripting (XSS) vulnerability via improper input neutralization | known not affected: 1 | 2026-06-28T07:06:51+00:00 | Vulnerability · Source |
| CVE-2025-61641 | redhat_vex | MediaWiki: MediaWiki: Denial of Service vulnerability in ApiQueryAllPages.Php | known not affected: 1 | 2026-06-28T07:06:51+00:00 | Vulnerability · Source |
| CVE-2025-61640 | redhat_vex | MediaWiki: MediaWiki: Arbitrary code execution via Cross-site Scripting (XSS) | known not affected: 1 | 2026-06-28T07:06:51+00:00 | Vulnerability · Source |
| CVE-2025-61639 | redhat_vex | MediaWiki: MediaWiki: Sensitive information exposure to unauthorized actors | known not affected: 1 | 2026-06-28T07:06:51+00:00 | Vulnerability · Source |
| CVE-2025-61634 | redhat_vex | MediaWiki: MediaWiki: Vulnerability in page handling requiring user interaction | known not affected: 1 | 2026-06-28T07:06:51+00:00 | Vulnerability · Source |
| CVE-2025-61261 | redhat_vex | CKeditor: reflected cross-site scripting (XSS) vulnerability allows to execute arbitrary code | known not affected: 1 | 2026-06-28T07:06:49+00:00 | Vulnerability · Source |
| CVE-2025-61144 | redhat_vex | libtiff: libtiff: Denial of Service via buffer overflow | fixed: 3 known affected: 30 | 2026-06-28T07:06:48+00:00 | Vulnerability · Source |
| CVE-2012-3143 | redhat_vex | JDK: unspecified vulnerability (JMX) | fixed: 403 known affected: 8 | 2026-06-28T07:06:48+00:00 | Vulnerability · Source |
| CVE-2025-61145 | redhat_vex | libtiff: libtiff: Denial of service via double free in tiffcrop.c | fixed: 3 known affected: 30 | 2026-06-28T07:06:48+00:00 | Vulnerability · Source |
| CVE-2025-61143 | redhat_vex | libtiff: libtiff: Denial of Service via NULL pointer dereference in tif_open.c | fixed: 3 known affected: 30 | 2026-06-28T07:06:47+00:00 | Vulnerability · Source |
| CVE-2025-60876 | redhat_vex | busybox: BusyBox wget: HTTP request-target allows header injection | fixed: 3 known affected: 3 | 2026-06-28T07:06:47+00:00 | Vulnerability · Source |
| CVE-2025-61043 | redhat_vex | monkeysaudio: out-of-bounds read in CAPECharacterHelper::GetUTF16FromUTF8 | known not affected: 1 | 2026-06-28T07:06:44+00:00 | Vulnerability · Source |
| CVE-2025-61028 | redhat_vex | virtuoso-opensource: Virtuoso-opensource: Denial of Service via crafted SQL statements | known not affected: 3 | 2026-06-28T07:06:43+00:00 | Vulnerability · Source |
| CVE-2025-60542 | redhat_vex | TypeORM: SQL Injection via crafted request to repository.save or repository.update | fixed: 2 known not affected: 4 | 2026-06-28T07:06:41+00:00 | Vulnerability · Source |
| CVE-2025-6037 | redhat_vex | github.com/hashicorp/vault: Vault TLS Certificate Authentication Impersonation Vulnerability | known affected: 10 | 2026-06-28T07:06:40+00:00 | Vulnerability · Source |
| CVE-2025-6051 | redhat_vex | transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers | known affected: 41 | 2026-06-28T07:06:40+00:00 | Vulnerability · Source |
| CVE-2025-60359 | redhat_vex | radare2: radare2 memory leak | known not affected: 1 | 2026-06-28T07:06:40+00:00 | Vulnerability · Source |
| CVE-2010-0089 | redhat_vex | JDK unspecified vulnerability in JavaWS/Plugin component | fixed: 568 | 2026-06-28T07:06:39+00:00 | Vulnerability · Source |
| CVE-2025-6014 | redhat_vex | github.com/hashicorp/vault: Vault TOTP Secrets Engine Code Reuse | known affected: 10 | 2026-06-28T07:06:39+00:00 | Vulnerability · Source |
| CVE-2009-3729 | redhat_vex | JRE TrueType font parsing crash (6815780) | fixed: 72 | 2026-06-28T07:06:38+00:00 | Vulnerability · Source |