VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296691 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-3063 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-10 | fixed: 3 | 2026-06-28T06:50:43+00:00 | Vulnerability · Source |
| CVE-2017-2984 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-04 | fixed: 3 known affected: 1 | 2026-06-28T06:50:42+00:00 | Vulnerability · Source |
| CVE-2021-2425 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2021) | fixed: 155 known not affected: 119 | 2026-06-28T06:50:35+00:00 | Vulnerability · Source |
| CVE-2021-2441 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2021) | fixed: 155 known not affected: 119 | 2026-06-28T06:50:34+00:00 | Vulnerability · Source |
| CVE-2017-2583 | redhat_vex | Kernel: Kvm: vmx/svm potential privilege escalation inside guest | fixed: 191 known not affected: 27 | 2026-06-28T06:50:32+00:00 | Vulnerability · Source |
| CVE-2015-8638 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-01 | fixed: 5 | 2026-06-28T06:50:27+00:00 | Vulnerability · Source |
| CVE-2017-15394 | redhat_vex | chromium-browser: url spoofing in extensions ui | fixed: 12 | 2026-06-28T06:50:25+00:00 | Vulnerability · Source |
| CVE-2017-18257 | redhat_vex | kernel: Inifinite loop caused by integer overflow in fs/f2fs/data.c:__get_data_block() allows for denial of service | known not affected: 88 | 2026-06-28T06:50:20+00:00 | Vulnerability · Source |
| CVE-2012-2036 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-14) | fixed: 5 | 2026-06-28T06:50:20+00:00 | Vulnerability · Source |
| CVE-2017-18232 | redhat_vex | kernel: Mishandling mutex within libsas allowing local Denial of Service | fixed: 222 known affected: 42 known not affected: 42 | 2026-06-28T06:50:20+00:00 | Vulnerability · Source |
| CVE-2009-3886 | redhat_vex | REGRESSION: have problem to run JNLP app and applets with signed Jar files (6870531) | fixed: 72 | 2026-06-28T06:50:16+00:00 | Vulnerability · Source |
| CVE-2018-16844 | redhat_vex | nginx: Excessive CPU usage via flaw in HTTP/2 implementation | fixed: 225 known affected: 7 known not affected: 23 | 2026-06-28T06:50:14+00:00 | Vulnerability · Source |
| CVE-2015-8071 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T06:50:12+00:00 | Vulnerability · Source |
| CVE-2017-17854 | redhat_vex | kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging unrestricted integer values for pointer arithmetic | known not affected: 88 | 2026-06-28T06:50:11+00:00 | Vulnerability · Source |
| CVE-2012-1726 | redhat_vex | OpenJDK: java.lang.invoke.MethodHandles.Lookup does not honor access modes (Libraries, 7165628) | fixed: 135 known not affected: 20 | 2026-06-28T06:50:09+00:00 | Vulnerability · Source |
| CVE-2018-16597 | redhat_vex | kernel: overlayfs file truncation without permissions | fixed: 161 known not affected: 102 | 2026-06-28T06:50:09+00:00 | Vulnerability · Source |
| CVE-2015-6835 | redhat_vex | php: use-after-free vulnerability in session deserializer | fixed: 240 known affected: 110 | 2026-06-28T06:50:04+00:00 | Vulnerability · Source |
| CVE-2017-15127 | redhat_vex | kernel: Improper error handling of VM_SHARED hugetlbfs mapping in mm/hugetlb.c | fixed: 191 known affected: 12 known not affected: 63 | 2026-06-28T06:49:55+00:00 | Vulnerability · Source |
| CVE-2015-5563 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T06:49:55+00:00 | Vulnerability · Source |
| CVE-2017-16642 | redhat_vex | php: Out-of-bound read in timelib_meridian() | fixed: 740 known affected: 86 | 2026-06-28T06:49:51+00:00 | Vulnerability · Source |
| CVE-2018-2818 | redhat_vex | mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2018) | fixed: 266 known affected: 10 known not affected: 86 | 2026-06-28T06:49:49+00:00 | Vulnerability · Source |
| CVE-2018-16470 | redhat_vex | rubygem-rack: Buffer size in multipart parser allows for denial of service | fixed: 1215 known affected: 2 known not affected: 30 | 2026-06-28T06:49:49+00:00 | Vulnerability · Source |
| CVE-2017-15116 | redhat_vex | kernel: Null pointer dereference in rngapi_reset function | fixed: 191 known affected: 12 known not affected: 31 | 2026-06-28T06:49:46+00:00 | Vulnerability · Source |
| CVE-2017-15868 | redhat_vex | kernel: bnep_add_connection does not check if l2cap socket is available allowing privilege escalation | known not affected: 56 | 2026-06-28T06:49:42+00:00 | Vulnerability · Source |
| CVE-2017-15649 | redhat_vex | kernel: Use-after-free in the af_packet.c | fixed: 207 known affected: 16 known not affected: 15 | 2026-06-28T06:49:34+00:00 | Vulnerability · Source |
| CVE-2016-8576 | redhat_vex | Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch | fixed: 47 known affected: 10 known not affected: 8 | 2026-06-28T06:49:27+00:00 | Vulnerability · Source |
| CVE-2009-1104 | redhat_vex | OpenJDK: Intended access restrictions bypass via LiveConnect (6724331) | fixed: 408 | 2026-06-28T06:49:26+00:00 | Vulnerability · Source |
| CVE-2017-15096 | redhat_vex | glusterfs: Null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c | fixed: 46 known not affected: 22 | 2026-06-28T06:49:24+00:00 | Vulnerability · Source |
| CVE-2016-8328 | redhat_vex | JDK: unspecified vulnerability fixed in 8u121 (Java Mission Control) | fixed: 64 | 2026-06-28T06:49:23+00:00 | Vulnerability · Source |
| CVE-2025-37732 | redhat_vex | kibana: Kibana: Cross-site Scripting (XSS) via integration package upload | known affected: 1 | 2026-06-28T06:49:22+00:00 | Vulnerability · Source |
| CVE-2025-3628 | redhat_vex | moodle: Moodle Assignment Submission Search Leaks Anonymous Student Identities | known not affected: 1 | 2026-06-28T06:49:22+00:00 | Vulnerability · Source |
| CVE-2025-37731 | redhat_vex | elasticsearch: Elasticsearch: User impersonation due to improper authentication in Public Key Infrastructure (PKI) realm | known affected: 23 | 2026-06-28T06:49:22+00:00 | Vulnerability · Source |
| CVE-2021-3679 | redhat_vex | kernel: DoS in rb_per_cpu_empty() | fixed: 150 known not affected: 149 | 2026-06-28T06:49:22+00:00 | Vulnerability · Source |
| CVE-2025-3641 | redhat_vex | moodle: Authenticated remote code execution risk in the Moodle LMS Dropbox repository | known not affected: 1 | 2026-06-28T06:49:21+00:00 | Vulnerability · Source |
| CVE-2022-0322 | redhat_vex | kernel: DoS in sctp_addto_chunk in net/sctp/sm_make_chunk.c | fixed: 150 known not affected: 151 | 2026-06-28T06:49:21+00:00 | Vulnerability · Source |
| CVE-2025-37728 | redhat_vex | kibana: Kibana Insufficiently Protected Credentials in the CrowdStrike Connector | known affected: 1 | 2026-06-28T06:49:21+00:00 | Vulnerability · Source |
| CVE-2025-37727 | redhat_vex | org.elasticsearch/elasticsearch-core: Elasticsearch Insertion of sensitive information in log file | known affected: 11 | 2026-06-28T06:49:21+00:00 | Vulnerability · Source |
| CVE-2025-3643 | redhat_vex | moodle: Reflected XSS risk in policy tool | known not affected: 1 | 2026-06-28T06:49:21+00:00 | Vulnerability · Source |
| CVE-2015-5116 | redhat_vex | flash-plugin: information disclosure issues fixed in APSB15-16 | fixed: 5 | 2026-06-28T06:49:19+00:00 | Vulnerability · Source |
| CVE-2025-3638 | redhat_vex | moodle: CSRF risk in Brickfield tool's analysis request action | known not affected: 1 | 2026-06-28T06:49:18+00:00 | Vulnerability · Source |
| CVE-2023-52831 | redhat_vex | kernel: cpu/hotplug: Don't offline the last non-isolated CPU | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T06:49:17+00:00 | Vulnerability · Source |
| CVE-2015-4599 | redhat_vex | php: type confusion issue in unserialize() with various SOAP methods | fixed: 849 known affected: 56 known not affected: 30 | 2026-06-28T06:49:17+00:00 | Vulnerability · Source |
| CVE-2025-3620 | redhat_vex | chromium-browser: Use after free in USB | known not affected: 1 | 2026-06-28T06:49:17+00:00 | Vulnerability · Source |
| CVE-2023-52832 | redhat_vex | kernel: wifi: mac80211: don't return unset power in ieee80211_get_tx_power() | fixed: 429 known affected: 64 | 2026-06-28T06:49:17+00:00 | Vulnerability · Source |
| CVE-2023-52833 | redhat_vex | kernel: Bluetooth: btusb: Add date->evt_skb is NULL check | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T06:49:17+00:00 | Vulnerability · Source |
| CVE-2021-47098 | redhat_vex | kernel: hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations | fixed: 280 known affected: 64 known not affected: 56 | 2026-06-28T06:49:17+00:00 | Vulnerability · Source |
| CVE-2015-7656 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-28 | fixed: 5 | 2026-06-28T06:49:16+00:00 | Vulnerability · Source |
| CVE-2010-0209 | redhat_vex | flash-plugin: multiple security flaws (APSB10-16) | fixed: 22 | 2026-06-28T06:49:16+00:00 | Vulnerability · Source |
| CVE-2017-14167 | redhat_vex | Qemu: i386: multiboot OOB access while loading kernel image | fixed: 75 known not affected: 14 | 2026-06-28T06:49:15+00:00 | Vulnerability · Source |
| CVE-2010-0848 | redhat_vex | OpenJDK AWT Library Invalid Index Vulnerability (6914823) | fixed: 594 | 2026-06-28T06:49:15+00:00 | Vulnerability · Source |