VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-53192 | redhat_vex | ognl/ognl: Apache Commons OGNL: Expression Injection leading to RCE | known affected: 2 known not affected: 3 | 2026-06-28T07:05:06+00:00 | Vulnerability · Source |
| CVE-2022-22823 | redhat_vex | expat: Integer overflow in build_model in xmlparse.c | fixed: 264 known affected: 13 known not affected: 31 | 2026-06-28T07:05:06+00:00 | Vulnerability · Source |
| CVE-2025-53021 | redhat_vex | moodle: Moodle session fixation | known not affected: 1 | 2026-06-28T07:05:05+00:00 | Vulnerability · Source |
| CVE-2025-53103 | redhat_vex | org.junit.platform/junit-platform-reporting: JUnit can leak Git credentials | known not affected: 2 | 2026-06-28T07:05:04+00:00 | Vulnerability · Source |
| CVE-2021-20181 | redhat_vex | qemu: 9pfs: TOCTOU privilege escalation vulnerability | known not affected: 105 | 2026-06-28T07:05:03+00:00 | Vulnerability · Source |
| CVE-2025-5302 | redhat_vex | llama_index: Denial of Service (DOS) in JSONReader in run-llama/llama_index | fixed: 4 known not affected: 154 | 2026-06-28T07:05:02+00:00 | Vulnerability · Source |
| CVE-2013-2427 | redhat_vex | JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX) | fixed: 52 | 2026-06-28T07:05:02+00:00 | Vulnerability · Source |
| CVE-2025-53014 | redhat_vex | ImageMagick: ImageMagick Heap Buffer Overflow | known affected: 14 | 2026-06-28T07:05:01+00:00 | Vulnerability · Source |
| CVE-2013-2425 | redhat_vex | JDK: unspecified vulnerability fixed in 7u21 (Install) | fixed: 52 | 2026-06-28T07:05:01+00:00 | Vulnerability · Source |
| CVE-2025-53000 | redhat_vex | nbconvert: nbconvert: Arbitrary code execution via malicious SVG to PDF conversion on Windows | known not affected: 19 | 2026-06-28T07:05:01+00:00 | Vulnerability · Source |
| CVE-2025-52890 | redhat_vex | incus: Incus firewall rule bypass | known not affected: 1 | 2026-06-28T07:04:59+00:00 | Vulnerability · Source |
| CVE-2025-52887 | redhat_vex | cpp-httplib: cpp-httplib memory leak | known not affected: 1 | 2026-06-28T07:04:59+00:00 | Vulnerability · Source |
| CVE-2022-24724 | redhat_vex | cmark-gfm: possible RCE due to integer overflow | fixed: 6 | 2026-06-28T07:04:57+00:00 | Vulnerability · Source |
| CVE-2021-0606 | redhat_vex | kernel: struct drm_syncobj object leak which can be triggered with DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD | known not affected: 197 | 2026-06-28T07:04:56+00:00 | Vulnerability · Source |
| CVE-2013-2420 | redhat_vex | OpenJDK: image processing vulnerability (2D, 8007617) | fixed: 543 | 2026-06-28T07:04:56+00:00 | Vulnerability · Source |
| CVE-2013-2419 | redhat_vex | ICU: Layout Engine font processing errors (JDK 2D, 8001031) | fixed: 543 known affected: 12 | 2026-06-28T07:04:56+00:00 | Vulnerability · Source |
| CVE-2013-2407 | redhat_vex | OpenJDK: Integrate Apache Santuario, rework class loader (Libraries, 6741606, 8008744) | fixed: 462 known not affected: 8 | 2026-06-28T07:04:56+00:00 | Vulnerability · Source |
| CVE-2021-1998 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021) | fixed: 337 known not affected: 70 | 2026-06-28T07:04:55+00:00 | Vulnerability · Source |
| CVE-2013-2394 | redhat_vex | JDK: unspecified vulnerability fixed in 7u21 and 6u45 (2D) | fixed: 406 | 2026-06-28T07:04:54+00:00 | Vulnerability · Source |
| CVE-2013-2400 | redhat_vex | JDK: unspecified vulnerability fixed in 7u25 (Deployment) | fixed: 135 known not affected: 17 | 2026-06-28T07:04:54+00:00 | Vulnerability · Source |
| CVE-2025-5267 | redhat_vex | firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details | fixed: 249 known affected: 8 | 2026-06-28T07:04:53+00:00 | Vulnerability · Source |
| CVE-2025-5269 | redhat_vex | firefox: thunderbird: Memory safety bug | fixed: 249 known affected: 8 | 2026-06-28T07:04:53+00:00 | Vulnerability · Source |
| CVE-2021-0961 | redhat_vex | kernel: there is a possible way to read kernel memory due to uninitialized data in quota_proc_write() in xt_quota2.c | known not affected: 197 | 2026-06-28T07:04:52+00:00 | Vulnerability · Source |
| CVE-2021-0938 | redhat_vex | kernel: possible bypass of defense in depth due to uninitialized data in memzero_explicit() of compiler-clang.h | known not affected: 197 | 2026-06-28T07:04:50+00:00 | Vulnerability · Source |
| CVE-2025-5263 | redhat_vex | firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content | fixed: 249 known affected: 8 | 2026-06-28T07:04:50+00:00 | Vulnerability · Source |
| CVE-2021-0605 | redhat_vex | kernel: In pfkey_dump() dplen and splen can both be specified to access the xfrm_address_t structure out of bounds | fixed: 150 known affected: 1 known not affected: 148 | 2026-06-28T07:04:48+00:00 | Vulnerability · Source |
| CVE-2022-22822 | redhat_vex | expat: Integer overflow in addBinding in xmlparse.c | fixed: 264 known affected: 13 known not affected: 31 | 2026-06-28T07:04:48+00:00 | Vulnerability · Source |
| CVE-2025-52496 | redhat_vex | mbedtls: Mbed TLS AESNI Race Condition Vulnerability | known not affected: 1 | 2026-06-28T07:04:47+00:00 | Vulnerability · Source |
| CVE-2022-22817 | redhat_vex | python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions | fixed: 182 known affected: 1 | 2026-06-28T07:04:43+00:00 | Vulnerability · Source |
| CVE-2025-5187 | redhat_vex | kubernetes: kube-apiserver: Nodes can delete themselves by adding an OwnerReference | fixed: 8 known affected: 31 known not affected: 1296 | 2026-06-28T07:04:43+00:00 | Vulnerability · Source |
| CVE-2022-22815 | redhat_vex | python-pillow: improperly initializes ImagePath.Path in path_getbbox() in path.c | fixed: 52 known affected: 8 | 2026-06-28T07:04:41+00:00 | Vulnerability · Source |
| CVE-2025-51591 | redhat_vex | pandoc: Server-Side Request Forgery in Pandoc | known affected: 3 | 2026-06-28T07:04:41+00:00 | Vulnerability · Source |
| CVE-2025-50946 | redhat_vex | github.com/olivetin/olivetin: Olivetin OS Command Injection | known not affected: 1 | 2026-06-28T07:04:39+00:00 | Vulnerability · Source |
| CVE-2025-50518 | redhat_vex | libcoap: Libcoap Use-After-Free Vulnerability | known not affected: 1 | 2026-06-28T07:04:39+00:00 | Vulnerability · Source |
| CVE-2025-50950 | redhat_vex | audiofile: NULL pointer dereference in the ModuleState::setup function | fixed: 22 known affected: 2 | 2026-06-28T07:04:39+00:00 | Vulnerability · Source |
| CVE-2025-50537 | redhat_vex | eslint: eslint: Denial of Service via stack overflow when serializing objects with circular references | known affected: 123 | 2026-06-28T07:04:37+00:00 | Vulnerability · Source |
| CVE-2025-5068 | redhat_vex | chromium: Chrome Use-After-Free Vulnerability | known not affected: 1 | 2026-06-28T07:04:37+00:00 | Vulnerability · Source |
| CVE-2025-50343 | redhat_vex | matio: matio: Memory corruption allows arbitrary code execution or denial of service | known not affected: 1 | 2026-06-28T07:04:35+00:00 | Vulnerability · Source |
| CVE-2018-14616 | redhat_vex | kernel: NULL pointer dereference in fs/crypto/crypto.c:fscrypt_do_page_crypto() when operating on a corrupted f2fs image | known not affected: 88 | 2026-06-28T07:04:34+00:00 | Vulnerability · Source |
| CVE-2013-1710 | redhat_vex | Mozilla: CRMF requests allow for code execution and XSS attacks (MFSA 2013-69) | fixed: 140 known affected: 1 | 2026-06-28T07:04:33+00:00 | Vulnerability · Source |
| CVE-2025-50334 | redhat_vex | technitium-dns-server: Technitium DNS Server: Denial of Service via rate-limiting component | known not affected: 1 | 2026-06-28T07:04:32+00:00 | Vulnerability · Source |
| CVE-2013-1681 | redhat_vex | Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48) | fixed: 140 known affected: 1 | 2026-06-28T07:04:26+00:00 | Vulnerability · Source |
| CVE-2025-5001 | redhat_vex | pspp: GNU PSPP pspp-convert.c calloc integer overflow | known not affected: 1 | 2026-06-28T07:04:21+00:00 | Vulnerability · Source |
| CVE-2015-3119 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-16 | fixed: 5 | 2026-06-28T07:04:20+00:00 | Vulnerability · Source |
| CVE-2015-3085 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-09 | fixed: 5 | 2026-06-28T07:04:19+00:00 | Vulnerability · Source |
| CVE-2018-14371 | redhat_vex | mojarra: Path traversal in ResourceManager.java:getLocalePrefix() via the loc parameter | fixed: 804 known affected: 9 | 2026-06-28T07:04:16+00:00 | Vulnerability · Source |
| CVE-2013-1485 | redhat_vex | OpenJDK: MethodHandles insufficient privilege checks (Libraries, 8006439) | fixed: 202 known not affected: 37 | 2026-06-28T07:04:12+00:00 | Vulnerability · Source |
| CVE-2025-49763 | redhat_vex | trafficserver: Traffic Server ESI Inclusion Depth Vulnerability | known not affected: 1 | 2026-06-28T07:04:12+00:00 | Vulnerability · Source |
| CVE-2018-13797 | redhat_vex | nodejs-macaddress: improper input validation leading to command injection | known affected: 1 known not affected: 1 | 2026-06-28T07:04:08+00:00 | Vulnerability · Source |
| CVE-2015-2659 | redhat_vex | OpenJDK: GCM cipher issue causing JVM crash (Security, 8067648) | fixed: 187 known not affected: 28 | 2026-06-28T07:04:08+00:00 | Vulnerability · Source |