VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-1000077 | redhat_vex | rubygems: Missing URL validation on spec home attribute allows malicious gem to set an invalid homepage URL | fixed: 885 known affected: 6 known not affected: 47 | 2026-06-28T06:57:43+00:00 | Vulnerability · Source |
| CVE-2021-4145 | redhat_vex | QEMU: NULL pointer dereference in mirror_wait_on_conflicts() in block/mirror.c | fixed: 938 known affected: 30 known not affected: 58 | 2026-06-28T06:57:43+00:00 | Vulnerability · Source |
| CVE-2025-3933 | redhat_vex | transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers | known affected: 60 | 2026-06-28T06:57:42+00:00 | Vulnerability · Source |
| CVE-2019-1348 | redhat_vex | git: Arbitrary path overwriting via export-marks in-stream command feature | fixed: 262 known affected: 32 known not affected: 2 | 2026-06-28T06:57:41+00:00 | Vulnerability · Source |
| CVE-2025-3932 | redhat_vex | thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking | fixed: 118 known affected: 5 | 2026-06-28T06:57:40+00:00 | Vulnerability · Source |
| CVE-2020-35655 | redhat_vex | python-pillow: Buffer over-read in SGI RLE image reader | fixed: 21 known affected: 8 known not affected: 2 | 2026-06-28T06:57:40+00:00 | Vulnerability · Source |
| CVE-2007-0240 | redhat_vex | security flaw | fixed: 13 | 2026-06-28T06:57:39+00:00 | Vulnerability · Source |
| CVE-2007-0045 | redhat_vex | security flaw | fixed: 56 | 2026-06-28T06:57:39+00:00 | Vulnerability · Source |
| CVE-2020-35653 | redhat_vex | python-pillow: Buffer over-read in PCX image reader | fixed: 22 known affected: 7 known not affected: 11 | 2026-06-28T06:57:38+00:00 | Vulnerability · Source |
| CVE-2022-21166 | redhat_vex | hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW) | fixed: 1062 known affected: 20 | 2026-06-28T06:57:34+00:00 | Vulnerability · Source |
| CVE-2006-3918 | redhat_vex | httpd: Expect header XSS | fixed: 273 | 2026-06-28T06:57:33+00:00 | Vulnerability · Source |
| CVE-2022-21125 | redhat_vex | hw: cpu: incomplete clean-up of microarchitectural fill buffers (aka SBDS) | fixed: 1060 known affected: 22 | 2026-06-28T06:57:31+00:00 | Vulnerability · Source |
| CVE-2013-2422 | redhat_vex | OpenJDK: MethodUtil trampoline class incorrect restrictions (Libraries, 8009857) | fixed: 450 | 2026-06-28T06:57:31+00:00 | Vulnerability · Source |
| CVE-2024-26785 | redhat_vex | kernel: iommufd: Fix protection fault in iommufd_test_syz_conv_iova | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T06:57:30+00:00 | Vulnerability · Source |
| CVE-2024-26761 | redhat_vex | kernel: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T06:57:25+00:00 | Vulnerability · Source |
| CVE-2018-1000005 | redhat_vex | curl: Out-of-bounds read in code handling HTTP/2 trailers | fixed: 1 known not affected: 23 | 2026-06-28T06:57:24+00:00 | Vulnerability · Source |
| CVE-2019-11599 | redhat_vex | kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping | fixed: 695 known affected: 31 | 2026-06-28T06:57:24+00:00 | Vulnerability · Source |
| CVE-2024-26758 | redhat_vex | kernel: md: Don't ignore suspended array in md_check_recovery() | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T06:57:22+00:00 | Vulnerability · Source |
| CVE-2020-7645 | redhat_vex | chrome-launcher: exploitable environment variables leads to execution of arbitrary commands | known not affected: 1 | 2026-06-28T06:57:22+00:00 | Vulnerability · Source |
| CVE-2019-11486 | redhat_vex | kernel: multiple race conditions in Siemens R3964 line discipline driver in drivers/tty/n_r3964.c leading to denial of service | known affected: 12 known not affected: 92 | 2026-06-28T06:57:19+00:00 | Vulnerability · Source |
| CVE-2021-41073 | redhat_vex | kernel: local user privilege escalation via loop_rw_iter in fs/io_uring.c | known not affected: 198 | 2026-06-28T06:57:16+00:00 | Vulnerability · Source |
| CVE-2019-11038 | redhat_vex | gd: Information disclosure in gdImageCreateFromXbm() | fixed: 972 known affected: 99 known not affected: 47 | 2026-06-28T06:57:16+00:00 | Vulnerability · Source |
| CVE-2019-11036 | redhat_vex | php: Buffer over-read in exif_process_IFD_TAG() leading to information disclosure | fixed: 1247 known affected: 88 | 2026-06-28T06:57:16+00:00 | Vulnerability · Source |
| CVE-2024-26744 | redhat_vex | kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter | fixed: 709 known affected: 50 known not affected: 22 | 2026-06-28T06:57:15+00:00 | Vulnerability · Source |
| CVE-2024-26740 | redhat_vex | kernel: net/sched: act_mirred: use the backlog for mirred ingress | fixed: 709 known affected: 64 known not affected: 8 | 2026-06-28T06:57:12+00:00 | Vulnerability · Source |
| CVE-2017-1376 | redhat_vex | JDK: class verifier allowing Security Manager bypass | fixed: 200 known affected: 1 known not affected: 8 | 2026-06-28T06:57:03+00:00 | Vulnerability · Source |
| CVE-2024-26719 | redhat_vex | kernel: nouveau: offload fence uevents work to workqueue | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T06:57:03+00:00 | Vulnerability · Source |
| CVE-2024-26708 | redhat_vex | kernel: mptcp: really cope with fastopen race | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T06:57:02+00:00 | Vulnerability · Source |
| CVE-2019-10142 | redhat_vex | kernel: integer overflow in ioctl handling of fsl hypervisor | known not affected: 104 | 2026-06-28T06:56:57+00:00 | Vulnerability · Source |
| CVE-2019-10141 | redhat_vex | openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data | fixed: 9 known not affected: 1 | 2026-06-28T06:56:57+00:00 | Vulnerability · Source |
| CVE-2019-10132 | redhat_vex | libvirt: wrong permissions in systemd admin-sock due to missing SocketMode parameter | fixed: 1644 known not affected: 8 | 2026-06-28T06:56:54+00:00 | Vulnerability · Source |
| CVE-2024-26686 | redhat_vex | kernel: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats | fixed: 1209 known affected: 64 known not affected: 17 | 2026-06-28T06:56:49+00:00 | Vulnerability · Source |
| CVE-2022-20572 | redhat_vex | kernel: missing DM_TARGET_IMMUTABLE feature flag in verity_target in drivers/md/dm-verity-target.c | fixed: 346 known affected: 42 | 2026-06-28T06:56:48+00:00 | Vulnerability · Source |
| CVE-2024-26680 | redhat_vex | kernel: net: atlantic: Fix DMA mapping for PTP hwts ring | fixed: 280 known affected: 98 known not affected: 22 | 2026-06-28T06:56:48+00:00 | Vulnerability · Source |
| CVE-2024-26672 | redhat_vex | kernel: drm/amdgpu: variable 'mca_funcs' dereferenced before NULL check in 'amdgpu_mca_smu_get_mca_entry()' | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T06:56:45+00:00 | Vulnerability · Source |
| CVE-2024-26670 | redhat_vex | kernel: arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T06:56:44+00:00 | Vulnerability · Source |
| CVE-2013-1732 | redhat_vex | Mozilla: Buffer overflow with multi-column, lists, and floats (MFSA 2013-89) | fixed: 140 known affected: 1 | 2026-06-28T06:56:44+00:00 | Vulnerability · Source |
| CVE-2024-26669 | redhat_vex | kernel: net/sched: flower: Fix chain template offload | fixed: 709 known affected: 64 known not affected: 8 | 2026-06-28T06:56:44+00:00 | Vulnerability · Source |
| CVE-2013-1714 | redhat_vex | Mozilla: Same-origin bypass with web workers and XMLHttpRequest (MFSA 2013-73) | fixed: 140 known affected: 1 | 2026-06-28T06:56:43+00:00 | Vulnerability · Source |
| CVE-2013-1679 | redhat_vex | Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48) | fixed: 140 known affected: 1 | 2026-06-28T06:56:42+00:00 | Vulnerability · Source |
| CVE-2013-1563 | redhat_vex | JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Install) | fixed: 313 | 2026-06-28T06:56:35+00:00 | Vulnerability · Source |
| CVE-2013-1491 | redhat_vex | JDK: unspecified sanbox bypass (CanSecWest 2013, 2D) | fixed: 406 known not affected: 14 | 2026-06-28T06:56:34+00:00 | Vulnerability · Source |
| CVE-2013-1489 | redhat_vex | 7: bypass of the security level setting in browser plugin (Deployment, SE-2012-01 Issue 53) | fixed: 52 known affected: 1 known not affected: 31 | 2026-06-28T06:56:34+00:00 | Vulnerability · Source |
| CVE-2013-0644 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-05) | fixed: 4 | 2026-06-28T06:56:32+00:00 | Vulnerability · Source |
| CVE-2019-0197 | redhat_vex | httpd: mod_http2: possible crash on late upgrade | fixed: 359 known affected: 13 known not affected: 18 | 2026-06-28T06:56:32+00:00 | Vulnerability · Source |
| CVE-2013-0618 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T06:56:31+00:00 | Vulnerability · Source |
| CVE-2019-0196 | redhat_vex | httpd: mod_http2: read-after-free on a string compare | fixed: 359 known affected: 13 known not affected: 18 | 2026-06-28T06:56:31+00:00 | Vulnerability · Source |
| CVE-2018-9422 | redhat_vex | kernel: Elevation of Privilege in futex | known not affected: 88 | 2026-06-28T06:56:30+00:00 | Vulnerability · Source |
| CVE-2013-0796 | redhat_vex | Mozilla: WebGL crash with Mesa graphics driver on Linux (MFSA 2013-35) | fixed: 140 known affected: 1 | 2026-06-28T06:56:30+00:00 | Vulnerability · Source |
| CVE-2013-0649 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-05) | fixed: 4 | 2026-06-28T06:56:26+00:00 | Vulnerability · Source |