VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296691 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-0408 | redhat_vex | OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309) | fixed: 948 known not affected: 24 | 2026-06-28T06:48:20+00:00 | Vulnerability · Source |
| CVE-2015-0342 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-05 | fixed: 5 | 2026-06-28T06:48:19+00:00 | Vulnerability · Source |
| CVE-2015-0353 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-06 | fixed: 5 | 2026-06-28T06:48:19+00:00 | Vulnerability · Source |
| CVE-2015-0309 | redhat_vex | flash-plugin: Multiple code-execution flaws (APSB15-01) | fixed: 5 | 2026-06-28T06:48:18+00:00 | Vulnerability · Source |
| CVE-2016-7167 | redhat_vex | curl: escape and unescape integer overflows | fixed: 395 known affected: 14 | 2026-06-28T06:48:18+00:00 | Vulnerability · Source |
| CVE-2025-29785 | redhat_vex | quic-go: quic-go Has Panic in Path Probe Loss Recovery Handling | known not affected: 21 | 2026-06-28T06:48:17+00:00 | Vulnerability · Source |
| CVE-2016-7099 | redhat_vex | nodejs: wildcard certificates not properly validated | fixed: 72 known affected: 5 known not affected: 5 | 2026-06-28T06:48:17+00:00 | Vulnerability · Source |
| CVE-2025-29478 | redhat_vex | fluent-bit: Use-After-Free in Fluent Bit YAML Configuration Parser | known not affected: 1 | 2026-06-28T06:48:15+00:00 | Vulnerability · Source |
| CVE-2016-6327 | redhat_vex | kernel: infiniband: Kernel crash by sending ABORT_TASK command | fixed: 191 known affected: 12 known not affected: 15 | 2026-06-28T06:48:15+00:00 | Vulnerability · Source |
| CVE-2025-29783 | redhat_vex | vllm: vLLM Allows Remote Code Execution via Mooncake Integration | known not affected: 12 | 2026-06-28T06:48:15+00:00 | Vulnerability · Source |
| CVE-2014-9644 | redhat_vex | kernel: crypto api unprivileged arbitrary module load via request_module() | fixed: 189 known not affected: 15 | 2026-06-28T06:48:14+00:00 | Vulnerability · Source |
| CVE-2025-2926 | redhat_vex | hdf5: HDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereference | known affected: 1 | 2026-06-28T06:48:13+00:00 | Vulnerability · Source |
| CVE-2016-7042 | redhat_vex | kernel: Stack corruption while reading /proc/keys when gcc stack protector is enabled | fixed: 381 known affected: 1 known not affected: 7 | 2026-06-28T06:48:12+00:00 | Vulnerability · Source |
| CVE-2025-2915 | redhat_vex | hdf5: HDF5 H5Faccum.c H5F__accum_free heap-based overflow | known affected: 1 | 2026-06-28T06:48:12+00:00 | Vulnerability · Source |
| CVE-2025-2914 | redhat_vex | hdf5: HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow | known affected: 1 | 2026-06-28T06:48:11+00:00 | Vulnerability · Source |
| CVE-2016-6926 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-29 | fixed: 5 | 2026-06-28T06:48:10+00:00 | Vulnerability · Source |
| CVE-2016-6923 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-29 | fixed: 5 | 2026-06-28T06:48:10+00:00 | Vulnerability · Source |
| CVE-2016-6927 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-29 | fixed: 5 | 2026-06-28T06:48:09+00:00 | Vulnerability · Source |
| CVE-2016-6929 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-29 | fixed: 5 | 2026-06-28T06:48:09+00:00 | Vulnerability · Source |
| CVE-2016-6297 | redhat_vex | php: Stack-based buffer overflow vulnerability in php_stream_zip_opener | fixed: 251 known affected: 109 known not affected: 1 | 2026-06-28T06:48:09+00:00 | Vulnerability · Source |
| CVE-2016-6290 | redhat_vex | php: Use after free in unserialize() with Unexpected Session Deserialization | fixed: 251 known affected: 110 | 2026-06-28T06:48:08+00:00 | Vulnerability · Source |
| CVE-2016-6295 | redhat_vex | php: Use after free in SNMP with GC and unserialize() | fixed: 251 known affected: 80 known not affected: 30 | 2026-06-28T06:48:08+00:00 | Vulnerability · Source |
| CVE-2016-6925 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-29 | fixed: 5 | 2026-06-28T06:48:07+00:00 | Vulnerability · Source |
| CVE-2016-6302 | redhat_vex | openssl: Insufficient TLS session ticket HMAC length checks | fixed: 320 known affected: 4 known not affected: 7 | 2026-06-28T06:48:06+00:00 | Vulnerability · Source |
| CVE-2016-6835 | redhat_vex | Qemu: net: vmxnet: buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 device emulation | fixed: 11 known affected: 9 known not affected: 38 | 2026-06-28T06:48:04+00:00 | Vulnerability · Source |
| CVE-2016-6828 | redhat_vex | kernel: Use after free in tcp_xmit_retransmit_queue | fixed: 387 known affected: 1 | 2026-06-28T06:48:04+00:00 | Vulnerability · Source |
| CVE-2025-2900 | redhat_vex | ibm-semeru: IBM Semeru Runtime denial of service | fixed: 21 | 2026-06-28T06:48:04+00:00 | Vulnerability · Source |
| CVE-2016-6289 | redhat_vex | php: Integer overflow leads to buffer overflow in virtual_file_ex | fixed: 251 known affected: 110 | 2026-06-28T06:48:04+00:00 | Vulnerability · Source |
| CVE-2025-2877 | redhat_vex | event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in EDA | fixed: 8 known not affected: 155 | 2026-06-28T06:48:04+00:00 | Vulnerability · Source |
| CVE-2021-2061 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T06:48:03+00:00 | Vulnerability · Source |
| CVE-2018-18335 | redhat_vex | chromium-browser: Heap buffer overflow in Skia | fixed: 12 known not affected: 12 | 2026-06-28T06:48:02+00:00 | Vulnerability · Source |
| CVE-2025-2817 | redhat_vex | firefox: thunderbird: Privilege escalation in Firefox Updater | fixed: 296 known affected: 10 | 2026-06-28T06:48:01+00:00 | Vulnerability · Source |
| CVE-2025-27820 | redhat_vex | org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents: PSL (Public Suffix List) validation bypass | known affected: 2 known not affected: 20 | 2026-06-28T06:47:59+00:00 | Vulnerability · Source |
| CVE-2025-27819 | redhat_vex | org.apache.kafka: Kafka JNDI Login Module RCE Vulnerability | fixed: 1 known not affected: 380 | 2026-06-28T06:47:58+00:00 | Vulnerability · Source |
| CVE-2018-1096 | redhat_vex | foreman: SQL injection due to improper handling of the widget id parameter | fixed: 1110 known not affected: 1 | 2026-06-28T06:47:57+00:00 | Vulnerability · Source |
| CVE-2016-6338 | redhat_vex | ovirt-engine: webadmin log out must logout all sessions | fixed: 21 known affected: 1 | 2026-06-28T06:47:57+00:00 | Vulnerability · Source |
| CVE-2025-27818 | redhat_vex | apache-kafka: Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration | fixed: 1 known not affected: 380 | 2026-06-28T06:47:57+00:00 | Vulnerability · Source |
| CVE-2025-27817 | redhat_vex | org.apache.kafka: Kafka Client Arbitrary File Read SSRF | fixed: 2 known not affected: 380 | 2026-06-28T06:47:56+00:00 | Vulnerability · Source |
| CVE-2014-7942 | redhat_vex | chromium-browser: uninitialized-value in Fonts | fixed: 15 | 2026-06-28T06:47:56+00:00 | Vulnerability · Source |
| CVE-2025-27793 | redhat_vex | vega: Vega vulnerable to Cross-site Scripting via RegExp.prototype[@@replace] | known not affected: 1 | 2026-06-28T06:47:56+00:00 | Vulnerability · Source |
| CVE-2025-27625 | redhat_vex | jenkins: Open redirect vulnerability | known affected: 1 known not affected: 1 | 2026-06-28T06:47:54+00:00 | Vulnerability · Source |
| CVE-2014-7941 | redhat_vex | chromium-browser: out-of-bounds read in UI | fixed: 15 | 2026-06-28T06:47:53+00:00 | Vulnerability · Source |
| CVE-2014-7940 | redhat_vex | ICU: uninitialized value use in the collation component | fixed: 15 known affected: 11 | 2026-06-28T06:47:52+00:00 | Vulnerability · Source |
| CVE-2016-6213 | redhat_vex | kernel: Overflowing kernel mount table using shared bind mount | fixed: 185 known not affected: 34 | 2026-06-28T06:47:52+00:00 | Vulnerability · Source |
| CVE-2014-7840 | redhat_vex | qemu: insufficient parameter validation during ram load | fixed: 72 known affected: 7 under investigation: 3 | 2026-06-28T06:47:50+00:00 | Vulnerability · Source |
| CVE-2020-2627 | redhat_vex | mysql: Server: Parser unspecified vulnerability (CPU Jan 2020) | fixed: 337 known not affected: 92 | 2026-06-28T06:47:49+00:00 | Vulnerability · Source |
| CVE-2016-5609 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016) | fixed: 80 known not affected: 79 | 2026-06-28T06:47:49+00:00 | Vulnerability · Source |
| CVE-2014-6585 | redhat_vex | ICU: font parsing OOB read (OpenJDK 2D, 8055489) | fixed: 948 known affected: 11 known not affected: 24 | 2026-06-28T06:47:49+00:00 | Vulnerability · Source |
| CVE-2025-27607 | redhat_vex | python-json-logger: Python JSON Logger has a Potential RCE via missing `msgspec-python313-pre` dependency | known not affected: 2 | 2026-06-28T06:47:47+00:00 | Vulnerability · Source |
| CVE-2025-27553 | redhat_vex | apache-commons-vfs: Apache Commons VFS: Possible path traversal issue when using NameScope.DESCENDENT | fixed: 5 | 2026-06-28T06:47:47+00:00 | Vulnerability · Source |