VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-49656 | redhat_vex | org.apache.jena/jena-arq: Apache Jena path traversal | known affected: 5 | 2026-06-28T07:04:07+00:00 | Vulnerability · Source |
| CVE-2025-49600 | redhat_vex | mbedtls: MbedTLS LMS Signature Forgery via Fault Injection | known not affected: 1 | 2026-06-28T07:04:04+00:00 | Vulnerability · Source |
| CVE-2025-49642 | redhat_vex | zabbix: Agent builds for AIX vulnerable to library loading hijacking | known not affected: 1 | 2026-06-28T07:04:04+00:00 | Vulnerability · Source |
| CVE-2015-2596 | redhat_vex | JDK: unspecified vulnerability fixed in 7u85 (Hotspot) | fixed: 96 under investigation: 15 | 2026-06-28T07:04:04+00:00 | Vulnerability · Source |
| CVE-2025-49521 | redhat_vex | event-driven-ansible: Template Injection via Git Branch and Refspec in EDA Projects | fixed: 12 known not affected: 341 | 2026-06-28T07:04:04+00:00 | Vulnerability · Source |
| CVE-2025-49520 | redhat_vex | event-driven-ansible: Authenticated Argument Injection in Git URL in EDA Project Creation | fixed: 12 known not affected: 341 | 2026-06-28T07:04:02+00:00 | Vulnerability · Source |
| CVE-2013-0645 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-05) | fixed: 4 | 2026-06-28T07:04:02+00:00 | Vulnerability · Source |
| CVE-2013-0647 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-05) | fixed: 4 | 2026-06-28T07:04:02+00:00 | Vulnerability · Source |
| CVE-2013-0617 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T07:04:00+00:00 | Vulnerability · Source |
| CVE-2013-0619 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T07:04:00+00:00 | Vulnerability · Source |
| CVE-2018-12824 | redhat_vex | flash-plugin: Information Disclosure vulnerabilities (APSB18-25) | fixed: 3 | 2026-06-28T07:03:56+00:00 | Vulnerability · Source |
| CVE-2025-4919 | redhat_vex | firefox: thunderbird: Out-of-bounds access when optimizing linear sums | fixed: 253 known affected: 8 | 2026-06-28T07:03:56+00:00 | Vulnerability · Source |
| CVE-2018-12928 | redhat_vex | kernel: NULL pointer dereference in hfs_ext_read_extent in hfs.ko | known affected: 1 known not affected: 87 | 2026-06-28T07:03:55+00:00 | Vulnerability · Source |
| CVE-2026-34304 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:03:54+00:00 | Vulnerability · Source |
| CVE-2025-4918 | redhat_vex | firefox: thunderbird: Out-of-bounds access when resolving Promise objects | fixed: 253 known affected: 8 | 2026-06-28T07:03:54+00:00 | Vulnerability · Source |
| CVE-2018-12828 | redhat_vex | flash-plugin: Privilege Escalation vulnerability (APSB18-25) | fixed: 3 | 2026-06-28T07:03:52+00:00 | Vulnerability · Source |
| CVE-2026-34276 | redhat_vex | mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:03:51+00:00 | Vulnerability · Source |
| CVE-2020-8823 | redhat_vex | sockJS: function htmlfile is not checking the non-alphanumeric symbols which could result in reflected XSS | known not affected: 9 | 2026-06-28T07:03:49+00:00 | Vulnerability · Source |
| CVE-2026-34271 | redhat_vex | mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:03:49+00:00 | Vulnerability · Source |
| CVE-2015-1294 | redhat_vex | chromium-browser: Use-after-free in Skia | fixed: 12 | 2026-06-28T07:03:48+00:00 | Vulnerability · Source |
| CVE-2026-34270 | redhat_vex | mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) | fixed: 395 under investigation: 9 | 2026-06-28T07:03:47+00:00 | Vulnerability · Source |
| CVE-2018-12540 | redhat_vex | vertx-web: Incomplete CSRF validation by CSRFHandler | fixed: 1 | 2026-06-28T07:03:47+00:00 | Vulnerability · Source |
| CVE-2015-1263 | redhat_vex | chromium-browser: insecure download of spellcheck dictionary in unspecified component | fixed: 12 | 2026-06-28T07:03:47+00:00 | Vulnerability · Source |
| CVE-2025-49113 | redhat_vex | roundcubemail: Remote Code Execution in Roundcube via Unvalidated _from Parameter | known not affected: 1 | 2026-06-28T07:03:46+00:00 | Vulnerability · Source |
| CVE-2025-49087 | redhat_vex | mbedtls: Mbed TLS PKCS#7 Timing Vulnerability | known not affected: 1 | 2026-06-28T07:03:46+00:00 | Vulnerability · Source |
| CVE-2024-3049 | redhat_vex | booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server | fixed: 228 known affected: 10 | 2026-06-28T07:03:46+00:00 | Vulnerability · Source |
| CVE-2025-49112 | redhat_vex | valkey: Valkey Integer Underflow Vulnerability | known affected: 3 | 2026-06-28T07:03:46+00:00 | Vulnerability · Source |
| CVE-2025-49011 | redhat_vex | spicedb: SpiceDB permission check bypass | known not affected: 1 | 2026-06-28T07:03:46+00:00 | Vulnerability · Source |
| CVE-2017-5118 | redhat_vex | chromium-browser: bypass of content security policy in blink | fixed: 12 | 2026-06-28T07:03:45+00:00 | Vulnerability · Source |
| CVE-2017-5107 | redhat_vex | chromium-browser: user information leak via svg | fixed: 12 | 2026-06-28T07:03:44+00:00 | Vulnerability · Source |
| CVE-2017-5117 | redhat_vex | chromium-browser: use of uninitialized value in skia | fixed: 12 | 2026-06-28T07:03:44+00:00 | Vulnerability · Source |
| CVE-2017-5106 | redhat_vex | chromium-browser: url spoofing in omnibox | fixed: 12 | 2026-06-28T07:03:44+00:00 | Vulnerability · Source |
| CVE-2017-5100 | redhat_vex | chromium-browser: use after free in chrome apps | fixed: 12 | 2026-06-28T07:03:43+00:00 | Vulnerability · Source |
| CVE-2026-22002 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:03:43+00:00 | Vulnerability · Source |
| CVE-2017-5099 | redhat_vex | chromium-browser: out-of-bounds write in ppapi | fixed: 12 | 2026-06-28T07:03:42+00:00 | Vulnerability · Source |
| CVE-2017-5089 | redhat_vex | chromium-browser: domain spoofing in omnibox | fixed: 12 | 2026-06-28T07:03:42+00:00 | Vulnerability · Source |
| CVE-2026-22004 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:03:42+00:00 | Vulnerability · Source |
| CVE-2012-5279 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-24) | fixed: 5 | 2026-06-28T07:03:41+00:00 | Vulnerability · Source |
| CVE-2017-5092 | redhat_vex | chromium-browser: use after free in ppapi | fixed: 12 | 2026-06-28T07:03:41+00:00 | Vulnerability · Source |
| CVE-2012-5275 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-24) | fixed: 5 | 2026-06-28T07:03:41+00:00 | Vulnerability · Source |
| CVE-2017-5086 | redhat_vex | chromium-browser: address spoofing in omnibox | fixed: 12 | 2026-06-28T07:03:40+00:00 | Vulnerability · Source |
| CVE-2012-5257 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T07:03:40+00:00 | Vulnerability · Source |
| CVE-2017-5085 | redhat_vex | chromium-browser: inappropriate javascript execution on webui pages | fixed: 12 | 2026-06-28T07:03:39+00:00 | Vulnerability · Source |
| CVE-2017-5074 | redhat_vex | chromium-browser: use after free in apps bluetooth | fixed: 12 | 2026-06-28T07:03:38+00:00 | Vulnerability · Source |
| CVE-2017-5080 | redhat_vex | chromium-browser: use after free in credit card autofill | fixed: 12 | 2026-06-28T07:03:37+00:00 | Vulnerability · Source |
| CVE-2025-48965 | redhat_vex | mbedtls: Mbed TLS: NULL Pointer Dereference | known not affected: 1 | 2026-06-28T07:03:37+00:00 | Vulnerability · Source |
| CVE-2017-5081 | redhat_vex | chromium-browser: extension verification bypass | fixed: 12 | 2026-06-28T07:03:37+00:00 | Vulnerability · Source |
| CVE-2025-48945 | redhat_vex | pycares: pycares Channel Use-After-Free | known not affected: 11 | 2026-06-28T07:03:36+00:00 | Vulnerability · Source |
| CVE-2025-48943 | redhat_vex | vllm: Remote crash of vllm server with invalid regex | known affected: 28 | 2026-06-28T07:03:36+00:00 | Vulnerability · Source |
| CVE-2025-48944 | redhat_vex | vllm: vLLM Tool Schema denial of service | known affected: 13 | 2026-06-28T07:03:35+00:00 | Vulnerability · Source |