VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296691 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-27533 | redhat_vex | ActiveMQ: ActiveMQ: Unvalidated Buffer Size Allocation | fixed: 1 known affected: 5 known not affected: 4 | 2026-06-28T06:47:46+00:00 | Vulnerability · Source |
| CVE-2016-5399 | redhat_vex | php: Improper error handling in bzread() | fixed: 469 known affected: 84 known not affected: 51 | 2026-06-28T06:47:46+00:00 | Vulnerability · Source |
| CVE-2016-5424 | redhat_vex | postgresql: privilege escalation via crafted database and role names | fixed: 524 known affected: 15 | 2026-06-28T06:47:46+00:00 | Vulnerability · Source |
| CVE-2025-27551 | redhat_vex | DBIx-Class-EncodedColumn: DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Digest.pm | known not affected: 1 | 2026-06-28T06:47:46+00:00 | Vulnerability · Source |
| CVE-2025-27512 | redhat_vex | zincati: Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods | known not affected: 1 | 2026-06-28T06:47:45+00:00 | Vulnerability · Source |
| CVE-2016-5344 | redhat_vex | kernel: multiple integer overflows in the MDSS driver | known not affected: 93 | 2026-06-28T06:47:45+00:00 | Vulnerability · Source |
| CVE-2025-27465 | redhat_vex | xen: Xen: Incorrect Exception Handling | known not affected: 1 | 2026-06-28T06:47:44+00:00 | Vulnerability · Source |
| CVE-2025-27427 | redhat_vex | org.apache.activemq/artemis-core-client: Apache ActiveMQ Artemis: Address routing-type can be updated by user without the createAddress permission | known affected: 14 | 2026-06-28T06:47:44+00:00 | Vulnerability · Source |
| CVE-2016-5210 | redhat_vex | chromium-browser: out of bounds write in pdfium | fixed: 12 | 2026-06-28T06:47:44+00:00 | Vulnerability · Source |
| CVE-2016-5170 | redhat_vex | chromium-browser: use after free in blink | fixed: 12 | 2026-06-28T06:47:44+00:00 | Vulnerability · Source |
| CVE-2025-27466 | redhat_vex | xen: viridian: A NULL pointer dereference in the updating of the reference TSC area | known not affected: 1 | 2026-06-28T06:47:44+00:00 | Vulnerability · Source |
| CVE-2016-5165 | redhat_vex | chromium-browser: script injection in devtools | fixed: 12 | 2026-06-28T06:47:44+00:00 | Vulnerability · Source |
| CVE-2016-5150 | redhat_vex | chromium-browser: use after free in blink | fixed: 12 | 2026-06-28T06:47:42+00:00 | Vulnerability · Source |
| CVE-2016-5152 | redhat_vex | chromium-browser: heap overflow in pdfium | fixed: 12 known not affected: 9 | 2026-06-28T06:47:42+00:00 | Vulnerability · Source |
| CVE-2016-5131 | redhat_vex | libxml2: Use after free triggered by XPointer paths beginning with range-to | fixed: 91 known affected: 11 known not affected: 4 | 2026-06-28T06:47:41+00:00 | Vulnerability · Source |
| CVE-2016-5114 | redhat_vex | php: out-of-bounds write in fpm_log.c | fixed: 251 known affected: 108 known not affected: 2 | 2026-06-28T06:47:41+00:00 | Vulnerability · Source |
| CVE-2016-5141 | redhat_vex | chromium-browser: Address bar spoofing | fixed: 12 | 2026-06-28T06:47:40+00:00 | Vulnerability · Source |
| CVE-2016-5137 | redhat_vex | chromium-browser: history sniffing with hsts and csp | fixed: 12 | 2026-06-28T06:47:40+00:00 | Vulnerability · Source |
| CVE-2023-52528 | redhat_vex | kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg | fixed: 709 known affected: 50 known not affected: 22 | 2026-06-28T06:47:39+00:00 | Vulnerability · Source |
| CVE-2016-5008 | redhat_vex | libvirt: Setting empty VNC password allows access to unauthorized users | fixed: 194 known affected: 6 known not affected: 1 under investigation: 3 | 2026-06-28T06:47:39+00:00 | Vulnerability · Source |
| CVE-2025-2704 | redhat_vex | openvpn: OpenVPN in a server role with tls-crypt-v2 enabled can reach an assertion failed state when receiving specially crafted packets | known not affected: 1 | 2026-06-28T06:47:38+00:00 | Vulnerability · Source |
| CVE-2025-26794 | redhat_vex | exim: Exim: remote SQL injection | known not affected: 1 | 2026-06-28T06:47:38+00:00 | Vulnerability · Source |
| CVE-2016-7892 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-39 | fixed: 3 known affected: 1 | 2026-06-28T06:47:38+00:00 | Vulnerability · Source |
| CVE-2025-27111 | redhat_vex | rack: rubygem-rack: Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection | known affected: 21 | 2026-06-28T06:47:38+00:00 | Vulnerability · Source |
| CVE-2025-27091 | redhat_vex | openh264: Openh264 Decoding Functions Heap Overflow Vulnerability | known not affected: 1 | 2026-06-28T06:47:38+00:00 | Vulnerability · Source |
| CVE-2006-4020 | redhat_vex | security flaw | fixed: 409 | 2026-06-28T06:47:37+00:00 | Vulnerability · Source |
| CVE-2016-7890 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-39 | fixed: 3 known affected: 1 | 2026-06-28T06:47:37+00:00 | Vulnerability · Source |
| CVE-2016-4276 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-29 | fixed: 5 | 2026-06-28T06:47:36+00:00 | Vulnerability · Source |
| CVE-2016-4175 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T06:47:36+00:00 | Vulnerability · Source |
| CVE-2016-4173 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T06:47:35+00:00 | Vulnerability · Source |
| CVE-2025-26618 | redhat_vex | otp: erlang: SSH SFTP packet size not verified properly in Erlang OTP | known not affected: 41 | 2026-06-28T06:47:35+00:00 | Vulnerability · Source |
| CVE-2025-26619 | redhat_vex | vega: Vega Cross-Site Scripting (XSS) via event filter when not using CSP mode `expressionInterpeter` | known not affected: 1 | 2026-06-28T06:47:34+00:00 | Vulnerability · Source |
| CVE-2016-4109 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T06:47:34+00:00 | Vulnerability · Source |
| CVE-2025-26526 | redhat_vex | moodle: Feedback response viewing and deletions did not respect Separate Groups mode | known not affected: 1 | 2026-06-28T06:47:33+00:00 | Vulnerability · Source |
| CVE-2016-5342 | redhat_vex | kernel: Heap-based buffer overflow in wcnss_wlan_write function | known not affected: 93 | 2026-06-28T06:47:33+00:00 | Vulnerability · Source |
| CVE-2021-3493 | redhat_vex | kernel: overlayfs file system caps privilege escalation | known not affected: 198 | 2026-06-28T06:47:32+00:00 | Vulnerability · Source |
| CVE-2016-1000339 | redhat_vex | bouncycastle: Information leak in AESFastEngine class | fixed: 1111 known affected: 5 known not affected: 7 | 2026-06-28T06:47:32+00:00 | Vulnerability · Source |
| CVE-2014-7939 | redhat_vex | chromium-browser: same-origin-bypass in V8 | fixed: 15 | 2026-06-28T06:47:32+00:00 | Vulnerability · Source |
| CVE-2025-26467 | redhat_vex | org.apache.cassandra:cassandra-all: Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only) | known affected: 5 | 2026-06-28T06:47:32+00:00 | Vulnerability · Source |
| CVE-2025-26525 | redhat_vex | moodle: Arbitrary file read risk through pdfTeX | known not affected: 1 | 2026-06-28T06:47:32+00:00 | Vulnerability · Source |
| CVE-2014-7931 | redhat_vex | chromium-browser: memory corruption in V8 | fixed: 15 | 2026-06-28T06:47:31+00:00 | Vulnerability · Source |
| CVE-2014-7932 | redhat_vex | chromium-browser: use-after-free in DOM | fixed: 15 | 2026-06-28T06:47:31+00:00 | Vulnerability · Source |
| CVE-2014-7933 | redhat_vex | chromium-browser: use-after-free in FFmpeg | fixed: 15 | 2026-06-28T06:47:31+00:00 | Vulnerability · Source |
| CVE-2016-0718 | redhat_vex | expat: Out-of-bounds heap read on crafted input causing crash | fixed: 119 known affected: 7 known not affected: 17 under investigation: 1 | 2026-06-28T06:47:31+00:00 | Vulnerability · Source |
| CVE-2014-7930 | redhat_vex | chromium-browser: use-after-free in DOM | fixed: 15 | 2026-06-28T06:47:30+00:00 | Vulnerability · Source |
| CVE-2016-0642 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU April 2016) | fixed: 406 known affected: 9 known not affected: 11 under investigation: 9 | 2026-06-28T06:47:29+00:00 | Vulnerability · Source |
| CVE-2016-0661 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Options (CPU April 2016) | fixed: 80 known not affected: 62 | 2026-06-28T06:47:29+00:00 | Vulnerability · Source |
| CVE-2016-0641 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: MyISAM (CPU April 2016) | fixed: 406 known affected: 9 known not affected: 11 under investigation: 9 | 2026-06-28T06:47:29+00:00 | Vulnerability · Source |
| CVE-2015-8422 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T06:47:28+00:00 | Vulnerability · Source |
| CVE-2016-0475 | redhat_vex | OpenJDK: PBE incorrect key lengths (Libraries, 8138589) | fixed: 302 known not affected: 28 | 2026-06-28T06:47:28+00:00 | Vulnerability · Source |