VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2009-3728 | redhat_vex | OpenJDK ICC_Profile file existence detection information leak (6631533) | fixed: 168 | 2026-06-28T07:06:38+00:00 | Vulnerability · Source |
| CVE-2008-5363 | redhat_vex | security flaw | fixed: 10 | 2026-06-28T07:06:37+00:00 | Vulnerability · Source |
| CVE-2025-6017 | redhat_vex | rhacm: Users with ClusterReader Role can see credentials from Managed-clusters | known affected: 1 | 2026-06-28T07:06:36+00:00 | Vulnerability · Source |
| CVE-2008-3114 | redhat_vex | Java Web Start, untrusted application may determine Cache Location (6704074) | fixed: 584 | 2026-06-28T07:06:35+00:00 | Vulnerability · Source |
| CVE-2008-0657 | redhat_vex | java-1.5.0 Privilege escalation via unstrusted applet and application | fixed: 207 | 2026-06-28T07:06:35+00:00 | Vulnerability · Source |
| CVE-2025-6004 | redhat_vex | github.com/hashicorp/vault: Vault Userpass/LDAP Lockout Bypass Vulnerability | known affected: 10 | 2026-06-28T07:06:35+00:00 | Vulnerability · Source |
| CVE-2025-6000 | redhat_vex | github.com/hashicorp/vault: Vault Plugin Code Execution Vulnerability | known affected: 3 known not affected: 7 | 2026-06-28T07:06:34+00:00 | Vulnerability · Source |
| CVE-2025-5999 | redhat_vex | github.com/hashicorp/vault: Vault Identity Token Privilege Escalation | known affected: 3 known not affected: 7 | 2026-06-28T07:06:34+00:00 | Vulnerability · Source |
| CVE-2025-59476 | redhat_vex | jenkins: Log message injection vulnerability | known affected: 1 | 2026-06-28T07:06:33+00:00 | Vulnerability · Source |
| CVE-2025-5992 | redhat_vex | qt6: Qt6 denial of service | known affected: 3 | 2026-06-28T07:06:33+00:00 | Vulnerability · Source |
| CVE-2025-59840 | redhat_vex | vega: vega-expression: vega-interpreter: Cross-Site Scripting (XSS) via expressions abusing toString calls in environments using the VEGA_DEBUG global variable | known affected: 1 known not affected: 5 | 2026-06-28T07:06:32+00:00 | Vulnerability · Source |
| CVE-2025-59733 | redhat_vex | FFmpeg: FFmpeg: Buffer overflow in OpenEXR DWAA/DWAB decoding | known not affected: 1 | 2026-06-28T07:06:31+00:00 | Vulnerability · Source |
| CVE-2025-5958 | redhat_vex | chromium: Chrome Media Use-After-Free Vulnerability | known not affected: 1 | 2026-06-28T07:06:31+00:00 | Vulnerability · Source |
| CVE-2025-5959 | redhat_vex | chromium: Chrome Type Confusion Vulnerability | known not affected: 1 | 2026-06-28T07:06:31+00:00 | Vulnerability · Source |
| CVE-2025-59537 | redhat_vex | github.com/argoproj/argo-cd: Argo CD unauthenticated Denial of Service | fixed: 31 known affected: 2 known not affected: 95 | 2026-06-28T07:06:30+00:00 | Vulnerability · Source |
| CVE-2025-59531 | redhat_vex | argocd: argocd-server: gitops: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload | fixed: 27 known not affected: 92 | 2026-06-28T07:06:30+00:00 | Vulnerability · Source |
| CVE-2025-59518 | redhat_vex | lemonldap-ng: OS command injection can occur in the Safe jail | known not affected: 1 | 2026-06-28T07:06:28+00:00 | Vulnerability · Source |
| CVE-2025-59438 | redhat_vex | mbedtls: MbedTLS Padding oracle through timing of cipher error reporting | known not affected: 1 | 2026-06-28T07:06:24+00:00 | Vulnerability · Source |
| CVE-2024-36954 | redhat_vex | kernel: tipc: fix a possible memleak in tipc_buf_append | fixed: 429 known affected: 108 known not affected: 42 | 2026-06-28T07:06:24+00:00 | Vulnerability · Source |
| CVE-2025-59419 | redhat_vex | io.netty/netty-codec-smtp: Netty netty-codec-smtp SMTP Command Injection | known affected: 13 | 2026-06-28T07:06:24+00:00 | Vulnerability · Source |
| CVE-2025-59431 | redhat_vex | mapserver: MapServer SQL injection | known not affected: 1 | 2026-06-28T07:06:24+00:00 | Vulnerability · Source |
| CVE-2025-59391 | redhat_vex | libcoap: libcoap: Out-of-bounds read in OSCORE configuration parser leads to information disclosure | known not affected: 1 | 2026-06-28T07:06:23+00:00 | Vulnerability · Source |
| CVE-2025-59288 | redhat_vex | playwright: Playwright Spoofing Vulnerability | known affected: 39 | 2026-06-28T07:06:21+00:00 | Vulnerability · Source |
| CVE-2025-59140 | redhat_vex | backslash: backslash@0.2.1 contains malware after npm account takeover | known not affected: 1 | 2026-06-28T07:06:17+00:00 | Vulnerability · Source |
| CVE-2025-59143 | redhat_vex | color: color@5.0.1 contains malware after npm account takeover | known not affected: 60 | 2026-06-28T07:06:17+00:00 | Vulnerability · Source |
| CVE-2025-59141 | redhat_vex | simple-swizzle: simple-swizzle@0.2.3 contains malware after npm account takeover | known not affected: 53 | 2026-06-28T07:06:17+00:00 | Vulnerability · Source |
| CVE-2025-58752 | redhat_vex | vite: Vite's `server.fs` settings were not applied to HTML files | known affected: 16 | 2026-06-28T07:06:15+00:00 | Vulnerability · Source |
| CVE-2025-5898 | redhat_vex | pspp: GNU PSPP pspp-convert.c parse_variables_option out-of-bounds write | known not affected: 1 | 2026-06-28T07:06:15+00:00 | Vulnerability · Source |
| CVE-2025-59023 | redhat_vex | PowerDNS Recursor: crafted delegations or IP fragments can poison cached delegations | known not affected: 1 | 2026-06-28T07:06:15+00:00 | Vulnerability · Source |
| CVE-2025-59052 | redhat_vex | @angular/ssr: @angular/platform-server: @nguniversal/common: Angular Cross-Request Data Leakage | known affected: 1 | 2026-06-28T07:06:15+00:00 | Vulnerability · Source |
| CVE-2015-8643 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-01 | fixed: 5 | 2026-06-28T07:06:13+00:00 | Vulnerability · Source |
| CVE-2025-58367 | redhat_vex | python-deepdiff: DeepDiff class pollution | known not affected: 1 | 2026-06-28T07:06:12+00:00 | Vulnerability · Source |
| CVE-2021-2160 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2021) | fixed: 337 known not affected: 111 | 2026-06-28T07:06:09+00:00 | Vulnerability · Source |
| CVE-2025-58147 | redhat_vex | xen: x86: Incorrect input sanitisation in Viridian hypercalls | known not affected: 1 | 2026-06-28T07:06:06+00:00 | Vulnerability · Source |
| CVE-2025-58149 | redhat_vex | xen: Incorrect removal of permissions on PCI device unplug | known not affected: 1 | 2026-06-28T07:06:06+00:00 | Vulnerability · Source |
| CVE-2025-58143 | redhat_vex | xen: viridian: race condition when the mapping of the reference TSC page | known not affected: 1 | 2026-06-28T07:06:06+00:00 | Vulnerability · Source |
| CVE-2010-0743 | redhat_vex | scsi-target-utils: format string vulnerability | fixed: 9 known affected: 1 known not affected: 2 | 2026-06-28T07:06:05+00:00 | Vulnerability · Source |
| CVE-2024-35989 | redhat_vex | kernel: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms | fixed: 429 known affected: 22 known not affected: 42 | 2026-06-28T07:06:04+00:00 | Vulnerability · Source |
| CVE-2017-7510 | redhat_vex | 4: ovirt-engine exposes cloud-init root password via REST API | fixed: 21 | 2026-06-28T07:06:04+00:00 | Vulnerability · Source |
| CVE-2024-35959 | redhat_vex | kernel: net/mlx5e: Fix mlx5e_priv_init() cleanup flow | fixed: 709 known affected: 50 known not affected: 30 | 2026-06-28T07:06:03+00:00 | Vulnerability · Source |
| CVE-2018-16861 | redhat_vex | foreman: stored XSS in success notification after entity creation | fixed: 1128 | 2026-06-28T07:06:02+00:00 | Vulnerability · Source |
| CVE-2017-7506 | redhat_vex | spice: Possible buffer overflow via invalid monitor configurations | fixed: 48 known affected: 2 | 2026-06-28T07:06:02+00:00 | Vulnerability · Source |
| CVE-2025-57804 | redhat_vex | h2: h2 allows HTTP Request Smuggling due to illegal characters in headers | known affected: 10 | 2026-06-28T07:06:01+00:00 | Vulnerability · Source |
| CVE-2024-35923 | redhat_vex | kernel: io_uring: clear opcode specific data for an early failure | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T07:06:00+00:00 | Vulnerability · Source |
| CVE-2025-57350 | redhat_vex | csvtojson: csvtojson prototype pollution | known affected: 5 | 2026-06-28T07:05:58+00:00 | Vulnerability · Source |
| CVE-2025-57352 | redhat_vex | min-document: min-document prototype pollution | known affected: 33 | 2026-06-28T07:05:56+00:00 | Vulnerability · Source |
| CVE-2018-16850 | redhat_vex | postgresql: SQL injection in pg_upgrade and pg_dump, via CREATE TRIGGER ... REFERENCING | fixed: 246 known not affected: 92 | 2026-06-28T07:05:55+00:00 | Vulnerability · Source |
| CVE-2018-16849 | redhat_vex | openstack-mistral: std.ssh action may disclose presence of arbitrary files | fixed: 82 known affected: 16 | 2026-06-28T07:05:54+00:00 | Vulnerability · Source |
| CVE-2018-16846 | redhat_vex | ceph: ListBucket max-keys has no defined limit in the RGW codebase | fixed: 147 known affected: 22 known not affected: 17 | 2026-06-28T07:05:53+00:00 | Vulnerability · Source |
| CVE-2025-5647 | redhat_vex | radare2: Radare2 radiff2 cons.c r_cons_context_break_pop memory corruption | known not affected: 1 | 2026-06-28T07:05:53+00:00 | Vulnerability · Source |