VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-21370 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2022) | fixed: 125 known not affected: 134 | 2026-06-28T07:02:45+00:00 | Vulnerability · Source |
| CVE-2017-3258 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Jan 2017) | fixed: 416 known affected: 18 under investigation: 9 | 2026-06-28T07:02:44+00:00 | Vulnerability · Source |
| CVE-2022-21367 | redhat_vex | mysql: Server: Compiling unspecified vulnerability (CPU Jan 2022) | fixed: 125 known not affected: 134 | 2026-06-28T07:02:43+00:00 | Vulnerability · Source |
| CVE-2012-0861 | redhat_vex | rhev: vds_installer is prone to MITM when downloading 2nd stage installer | fixed: 21 known affected: 1 | 2026-06-28T07:02:42+00:00 | Vulnerability · Source |
| CVE-2025-47780 | redhat_vex | asterisk: cli_permissions.conf: deny option does not work for disallowing shell commands | known not affected: 1 | 2026-06-28T07:02:42+00:00 | Vulnerability · Source |
| CVE-2022-21362 | redhat_vex | mysql: Server: Information Schema unspecified vulnerability (CPU Jan 2022) | fixed: 125 known not affected: 134 | 2026-06-28T07:02:42+00:00 | Vulnerability · Source |
| CVE-2017-3262 | redhat_vex | JDK: unspecified vulnerability fixed in 8u121 (Java Mission Control) | fixed: 64 | 2026-06-28T07:02:39+00:00 | Vulnerability · Source |
| CVE-2017-3252 | redhat_vex | OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743) | fixed: 1032 | 2026-06-28T07:02:38+00:00 | Vulnerability · Source |
| CVE-2025-47779 | redhat_vex | asterisk: Using malformed From header can forge identity with ";" or NULL in name portion | known not affected: 1 | 2026-06-28T07:02:38+00:00 | Vulnerability · Source |
| CVE-2017-3243 | redhat_vex | mysql: Server: Charsets unspecified vulnerability (CPU Jan 2017) | fixed: 302 known affected: 18 known not affected: 17 under investigation: 9 | 2026-06-28T07:02:38+00:00 | Vulnerability · Source |
| CVE-2017-3238 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2017) | fixed: 416 known affected: 18 under investigation: 9 | 2026-06-28T07:02:38+00:00 | Vulnerability · Source |
| CVE-2017-3241 | redhat_vex | OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802) | fixed: 1032 | 2026-06-28T07:02:38+00:00 | Vulnerability · Source |
| CVE-2022-21233 | redhat_vex | hw: cpu: Intel: Stale Data Read from legacy xAPIC vulnerability | fixed: 185 known affected: 20 known not affected: 156 | 2026-06-28T07:02:36+00:00 | Vulnerability · Source |
| CVE-2017-3169 | redhat_vex | httpd: mod_ssl NULL pointer dereference | fixed: 377 known affected: 7 known not affected: 1 | 2026-06-28T07:02:36+00:00 | Vulnerability · Source |
| CVE-2012-0767 | redhat_vex | flash-plugin: universal cross-site scripting flaw (APSB12-03) | fixed: 5 | 2026-06-28T07:02:36+00:00 | Vulnerability · Source |
| CVE-2025-47291 | redhat_vex | containerd: containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods. | known not affected: 96 | 2026-06-28T07:02:36+00:00 | Vulnerability · Source |
| CVE-2025-47285 | redhat_vex | vyper: Vyper: Zero-Length Bytestring Side-Effect Skipping | known not affected: 1 | 2026-06-28T07:02:35+00:00 | Vulnerability · Source |
| CVE-2025-47290 | redhat_vex | containerd: Containerd vulnerable to host filesystem access during image unpack | known not affected: 78 | 2026-06-28T07:02:35+00:00 | Vulnerability · Source |
| CVE-2025-47279 | redhat_vex | undici: Undici Memory Leak with Invalid Certificates | known affected: 52 | 2026-06-28T07:02:34+00:00 | Vulnerability · Source |
| CVE-2025-47229 | redhat_vex | pspp: denial of service via crafted input data in pspp | known not affected: 1 | 2026-06-28T07:02:33+00:00 | Vulnerability · Source |
| CVE-2025-47226 | redhat_vex | snipeit: Incorrect Access Control (IDOR) in snipeit | known not affected: 1 | 2026-06-28T07:02:33+00:00 | Vulnerability · Source |
| CVE-2025-47256 | redhat_vex | libxmp: stack-based buffer overflow via a malformed Pha format tracker module | known not affected: 1 | 2026-06-28T07:02:33+00:00 | Vulnerability · Source |
| CVE-2018-11759 | redhat_vex | mod_jk: connector path traversal due to mishandled HTTP requests in httpd | fixed: 139 known affected: 3 known not affected: 1 | 2026-06-28T07:02:33+00:00 | Vulnerability · Source |
| CVE-2017-3100 | redhat_vex | flash-plugin: information disclosure issues fixed in APSB17-21 | fixed: 3 | 2026-06-28T07:02:33+00:00 | Vulnerability · Source |
| CVE-2017-3083 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-17 | fixed: 3 | 2026-06-28T07:02:33+00:00 | Vulnerability · Source |
| CVE-2017-3073 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-15 | fixed: 3 | 2026-06-28T07:02:32+00:00 | Vulnerability · Source |
| CVE-2017-3079 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-17 | fixed: 3 | 2026-06-28T07:02:32+00:00 | Vulnerability · Source |
| CVE-2018-11412 | redhat_vex | kernel: out-of-bounds memcpy in fs/ext4/inline.c:ext4_read_inline_data() with crafted ext4 image | fixed: 26 known not affected: 87 | 2026-06-28T07:02:32+00:00 | Vulnerability · Source |
| CVE-2017-3078 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-17 | fixed: 3 | 2026-06-28T07:02:32+00:00 | Vulnerability · Source |
| CVE-2017-3070 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-15 | fixed: 3 | 2026-06-28T07:02:31+00:00 | Vulnerability · Source |
| CVE-2017-3069 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-15 | fixed: 3 | 2026-06-28T07:02:31+00:00 | Vulnerability · Source |
| CVE-2017-3068 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-15 | fixed: 3 | 2026-06-28T07:02:30+00:00 | Vulnerability · Source |
| CVE-2022-20141 | redhat_vex | kernel: igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets | fixed: 514 known affected: 28 known not affected: 14 | 2026-06-28T07:02:29+00:00 | Vulnerability · Source |
| CVE-2017-3001 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-07 | fixed: 3 known affected: 1 | 2026-06-28T07:02:29+00:00 | Vulnerability · Source |
| CVE-2017-3002 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-07 | fixed: 3 known affected: 1 | 2026-06-28T07:02:29+00:00 | Vulnerability · Source |
| CVE-2025-46810 | redhat_vex | traefik: Escalation to root from traefik user via %post script | known not affected: 6 | 2026-06-28T07:02:29+00:00 | Vulnerability · Source |
| CVE-2025-46806 | redhat_vex | sslh: Misaligned Memory Accesses in `is_openvpn_protocol()` | known not affected: 1 | 2026-06-28T07:02:28+00:00 | Vulnerability · Source |
| CVE-2017-2990 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-04 | fixed: 3 known affected: 1 | 2026-06-28T07:02:28+00:00 | Vulnerability · Source |
| CVE-2025-46803 | redhat_vex | screen: Screen by Default Creates World Writable PTYs | known affected: 3 | 2026-06-28T07:02:28+00:00 | Vulnerability · Source |
| CVE-2017-2987 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-04 | fixed: 3 known affected: 1 | 2026-06-28T07:02:28+00:00 | Vulnerability · Source |
| CVE-2025-46807 | redhat_vex | sslh: File Descriptor Exhaustion in sslh-select and sslh-ev triggers SEGFAULT | known not affected: 1 | 2026-06-28T07:02:28+00:00 | Vulnerability · Source |
| CVE-2025-46805 | redhat_vex | screen: Race Conditions when Sending Signals | known affected: 3 | 2026-06-28T07:02:28+00:00 | Vulnerability · Source |
| CVE-2017-2988 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-04 | fixed: 3 known affected: 1 | 2026-06-28T07:02:28+00:00 | Vulnerability · Source |
| CVE-2017-2986 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-04 | fixed: 3 known affected: 1 | 2026-06-28T07:02:27+00:00 | Vulnerability · Source |
| CVE-2017-2931 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-02 | fixed: 3 known affected: 1 | 2026-06-28T07:02:26+00:00 | Vulnerability · Source |
| CVE-2025-46762 | redhat_vex | org.apache.parquet/parquet-avro: Apache Parquet Java: Potential malicious code execution from trusted packages in the parquet-avro module when reading an Avro schema from a Parquet file metadata | known affected: 1 | 2026-06-28T07:02:26+00:00 | Vulnerability · Source |
| CVE-2025-46570 | redhat_vex | vllm: vLLM’s Chunk-Based Prefix Caching Vulnerable to Potential Timing Side-Channel | known affected: 13 | 2026-06-28T07:02:26+00:00 | Vulnerability · Source |
| CVE-2025-46717 | redhat_vex | sudo-rs: sudo-rs: File Existence Information Disclosure | known not affected: 1 | 2026-06-28T07:02:24+00:00 | Vulnerability · Source |
| CVE-2025-46718 | redhat_vex | sudo-rs: sudo-rs: Privilege Enumeration Vulnerability | known not affected: 1 | 2026-06-28T07:02:24+00:00 | Vulnerability · Source |
| CVE-2018-11232 | redhat_vex | kernel: coresight: kernel panic caused by invalid CPU | known not affected: 88 | 2026-06-28T07:02:23+00:00 | Vulnerability · Source |