VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-57107 | redhat_vex | Kitware VTK: vtk: Kitware VTK (Visualization Toolkit) contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader | known not affected: 1 | 2026-06-28T07:05:53+00:00 | Vulnerability · Source |
| CVE-2025-57108 | redhat_vex | Kitware VTK: vtk: Kitware VTK (Visualization Toolkit) contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader | known not affected: 1 | 2026-06-28T07:05:53+00:00 | Vulnerability · Source |
| CVE-2022-23645 | redhat_vex | swtpm: Unchecked header size indicator against expected size | fixed: 960 known affected: 6 known not affected: 6 | 2026-06-28T07:05:52+00:00 | Vulnerability · Source |
| CVE-2025-5646 | redhat_vex | radare2: Radare2 radiff2 pal.c r_cons_rainbow_free memory corruption | known not affected: 1 | 2026-06-28T07:05:51+00:00 | Vulnerability · Source |
| CVE-2025-56225 | redhat_vex | fluidsynth: FluidSynth: Denial of Service via invalid MIDI file processing | known not affected: 1 | 2026-06-28T07:05:51+00:00 | Vulnerability · Source |
| CVE-2025-56499 | redhat_vex | mihomo: github.com/MetaCubeX/mihomo: Information disclosure in mihomo | known not affected: 1 | 2026-06-28T07:05:51+00:00 | Vulnerability · Source |
| CVE-2025-55763 | redhat_vex | civetweb: CivetWeb buffer overflow | known not affected: 1 | 2026-06-28T07:05:50+00:00 | Vulnerability · Source |
| CVE-2021-2076 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:05:49+00:00 | Vulnerability · Source |
| CVE-2021-2088 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:05:48+00:00 | Vulnerability · Source |
| CVE-2025-55295 | redhat_vex | qBittorrent: qBit Manage Path Traversal Vulnerability | known not affected: 1 | 2026-06-28T07:05:48+00:00 | Vulnerability · Source |
| CVE-2021-2087 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:05:47+00:00 | Vulnerability · Source |
| CVE-2021-2072 | redhat_vex | mysql: Server: Stored Procedure unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:05:47+00:00 | Vulnerability · Source |
| CVE-2021-2056 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:05:47+00:00 | Vulnerability · Source |
| CVE-2021-2081 | redhat_vex | mysql: Server: Stored Procedure unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:05:47+00:00 | Vulnerability · Source |
| CVE-2021-2070 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:05:46+00:00 | Vulnerability · Source |
| CVE-2021-2060 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021) | fixed: 155 known affected: 9 known not affected: 61 | 2026-06-28T07:05:45+00:00 | Vulnerability · Source |
| CVE-2025-55285 | redhat_vex | @backstage/plugin-scaffolder-backend: @backstage/plugin-scaffolder-backend Template Secret Leakage in Logs | known affected: 3 | 2026-06-28T07:05:44+00:00 | Vulnerability · Source |
| CVE-2021-2058 | redhat_vex | mysql: Server: Locking unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:05:43+00:00 | Vulnerability · Source |
| CVE-2021-2038 | redhat_vex | mysql: Server: Components Services unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:05:43+00:00 | Vulnerability · Source |
| CVE-2013-5854 | redhat_vex | JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX) | fixed: 53 | 2026-06-28T07:05:41+00:00 | Vulnerability · Source |
| CVE-2026-46739 | redhat_vex | perl-Net-Statsd: perl-Net-Statsd: Metric injection via unchecked metric names and values | known not affected: 1 | 2026-06-28T07:05:41+00:00 | Vulnerability · Source |
| CVE-2013-5907 | redhat_vex | ICU: Layout Engine LookupProcessor insufficient input checks (JDK 2D, 8025034) | fixed: 690 known affected: 6 known not affected: 26 | 2026-06-28T07:05:41+00:00 | Vulnerability · Source |
| CVE-2021-2444 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2021) | fixed: 155 known not affected: 111 | 2026-06-28T07:05:41+00:00 | Vulnerability · Source |
| CVE-2025-55213 | redhat_vex | github.com/openfga/openfga: OpenFGA Authorization Bypass | known affected: 1 | 2026-06-28T07:05:40+00:00 | Vulnerability · Source |
| CVE-2025-55190 | redhat_vex | github.com/argoproj/argo-cd: Project API Token Exposes Repository Credentials | fixed: 27 known affected: 3 known not affected: 221 | 2026-06-28T07:05:40+00:00 | Vulnerability · Source |
| CVE-2013-5905 | redhat_vex | JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (Install) | fixed: 130 known not affected: 7 | 2026-06-28T07:05:40+00:00 | Vulnerability · Source |
| CVE-2025-55197 | redhat_vex | pypdf: PyPDF RAM Exhaustion Vulnerability | known affected: 17 | 2026-06-28T07:05:39+00:00 | Vulnerability · Source |
| CVE-2024-35809 | redhat_vex | kernel: PCI/PM: Drain runtime-idle callbacks before driver removal | fixed: 709 known affected: 64 known not affected: 8 | 2026-06-28T07:05:38+00:00 | Vulnerability · Source |
| CVE-2024-35805 | redhat_vex | kernel: dm snapshot: fix lockup in dm_exception_table_exit | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T07:05:38+00:00 | Vulnerability · Source |
| CVE-2017-7000 | redhat_vex | chromium-browser: pointer disclosure in sqlite | fixed: 12 known affected: 16 | 2026-06-28T07:05:38+00:00 | Vulnerability · Source |
| CVE-2013-5840 | redhat_vex | OpenJDK: getDeclaringClass() information leak (Libraries, 8014349) | fixed: 634 | 2026-06-28T07:05:36+00:00 | Vulnerability · Source |
| CVE-2013-5852 | redhat_vex | JDK: unspecified vulnerability fixed in 7u45 (Deployment) | fixed: 119 | 2026-06-28T07:05:36+00:00 | Vulnerability · Source |
| CVE-2013-5824 | redhat_vex | JDK: unspecified vulnerability fixed in 7u45 (Deployment) | fixed: 364 known not affected: 8 | 2026-06-28T07:05:35+00:00 | Vulnerability · Source |
| CVE-2025-55188 | redhat_vex | 7zip: 7-Zip Symbolic Link Extraction Vulnerability | known not affected: 1 | 2026-06-28T07:05:35+00:00 | Vulnerability · Source |
| CVE-2026-35378 | redhat_vex | rust-coreutils: uutils coreutils expr: Denial of Service due to logic error in short-circuiting | known not affected: 1 | 2026-06-28T07:05:34+00:00 | Vulnerability · Source |
| CVE-2018-16492 | redhat_vex | nodejs-extend: Prototype pollution can allow attackers to modify object properties | fixed: 1 known affected: 1 known not affected: 13 | 2026-06-28T07:05:34+00:00 | Vulnerability · Source |
| CVE-2015-6833 | redhat_vex | php: Files from archive can be extracted outside of destination directory using phar | fixed: 240 known affected: 110 known not affected: 1 | 2026-06-28T07:05:33+00:00 | Vulnerability · Source |
| CVE-2025-55181 | redhat_vex | proxygen: Denial of service via large HTTP request/response body | known not affected: 1 | 2026-06-28T07:05:33+00:00 | Vulnerability · Source |
| CVE-2026-35352 | redhat_vex | rust-coreutils: mkfifo: privilege escalation via TOCTOU race condition | known not affected: 1 | 2026-06-28T07:05:33+00:00 | Vulnerability · Source |
| CVE-2013-5772 | redhat_vex | OpenJDK: insufficient html escaping in jhat (jhat, 8011081) | fixed: 527 known not affected: 8 | 2026-06-28T07:05:33+00:00 | Vulnerability · Source |
| CVE-2013-5784 | redhat_vex | OpenJDK: insufficient InterfaceImplementor security checks (Scripting, 8017299) | fixed: 527 known not affected: 8 | 2026-06-28T07:05:33+00:00 | Vulnerability · Source |
| CVE-2025-55174 | redhat_vex | Skanpage: Skanpage: Partial file overwrite vulnerability due to incorrect I/O device usage | known not affected: 1 | 2026-06-28T07:05:32+00:00 | Vulnerability · Source |
| CVE-2022-41222 | redhat_vex | kernel: mm/mremap.c use-after-free vulnerability | fixed: 330 known not affected: 154 | 2026-06-28T07:05:32+00:00 | Vulnerability · Source |
| CVE-2026-35374 | redhat_vex | rust-coreutils: split: arbitrary file truncation via Time-of-Check to Time-of-Use (TOCTOU) race condition | known not affected: 1 | 2026-06-28T07:05:31+00:00 | Vulnerability · Source |
| CVE-2025-54920 | redhat_vex | org.apache.spark/spark-core: Apache Spark: Spark History Server Code Execution Vulnerability | known affected: 2 | 2026-06-28T07:05:31+00:00 | Vulnerability · Source |
| CVE-2026-34253 | redhat_vex | vorbis-tools: vorbis-tools ogg123: Arbitrary code execution via buffer underflow in remote control functionality | known not affected: 4 | 2026-06-28T07:05:31+00:00 | Vulnerability · Source |
| CVE-2025-54988 | redhat_vex | org.apache.tika/tika-parser-pdf-module: Apache Tika PDF parser module: XXE vulnerability in PDFParser's handling of XFA | known not affected: 4 | 2026-06-28T07:05:29+00:00 | Vulnerability · Source |
| CVE-2025-54995 | redhat_vex | asterisk: Asterisk resource exhaustion | known not affected: 1 | 2026-06-28T07:05:29+00:00 | Vulnerability · Source |
| CVE-2026-35355 | redhat_vex | rust-coreutils: install: arbitrary file overwrite via symlink TOCTOU race | known not affected: 1 | 2026-06-28T07:05:28+00:00 | Vulnerability · Source |
| CVE-2025-54813 | redhat_vex | apache-log4cxx: Log4cxx: Improper JSON Output Neutralization | known affected: 2 | 2026-06-28T07:05:28+00:00 | Vulnerability · Source |