VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296691 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-46061 | redhat_vex | kernel: jbd2: fix deadlock in jbd2_journal_cancel_revoke() | known affected: 90 known not affected: 184 | 2026-06-28T06:40:18+00:00 | Vulnerability · Source |
| CVE-2026-46059 | redhat_vex | kernel: KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN | known affected: 232 known not affected: 42 | 2026-06-28T06:40:18+00:00 | Vulnerability · Source |
| CVE-2023-23918 | redhat_vex | Node.js: Permissions policies can be bypassed via process.mainModule | fixed: 254 known affected: 1 known not affected: 16 | 2026-06-28T06:40:15+00:00 | Vulnerability · Source |
| CVE-2026-48101 | redhat_vex | 7-Zip: 7-Zip: Information Disclosure via uninitialized memory in UEFI capsule parser | known not affected: 1 | 2026-06-28T06:40:15+00:00 | Vulnerability · Source |
| CVE-2023-23916 | redhat_vex | curl: HTTP multi-header compression denial of service | fixed: 331 known affected: 8 known not affected: 117 | 2026-06-28T06:40:14+00:00 | Vulnerability · Source |
| CVE-2014-9419 | redhat_vex | kernel: partial ASLR bypass through TLS base addresses leak | fixed: 347 known affected: 2 | 2026-06-28T06:40:06+00:00 | Vulnerability · Source |
| CVE-2017-17807 | redhat_vex | kernel: Missing permissions check for request_key() destination allows local attackers to add keys to keyring without Write permission | fixed: 207 known affected: 43 known not affected: 32 | 2026-06-28T06:40:04+00:00 | Vulnerability · Source |
| CVE-2017-17790 | redhat_vex | ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution | fixed: 576 known affected: 14 | 2026-06-28T06:40:04+00:00 | Vulnerability · Source |
| CVE-2017-17805 | redhat_vex | kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial-of-service | fixed: 419 known affected: 12 known not affected: 42 | 2026-06-28T06:40:03+00:00 | Vulnerability · Source |
| CVE-2017-17381 | redhat_vex | Qemu: virtio: divide by zero exception while updating rings | known affected: 10 known not affected: 17 | 2026-06-28T06:39:56+00:00 | Vulnerability · Source |
| CVE-2014-0502 | redhat_vex | flash-plugin: multiple flaws lead to arbitrary code execution (APSB14-07) | fixed: 5 | 2026-06-28T06:39:56+00:00 | Vulnerability · Source |
| CVE-2009-2906 | redhat_vex | samba: infinite loop flaw in smbd on unexpected oplock break notification reply | fixed: 228 | 2026-06-28T06:39:55+00:00 | Vulnerability · Source |
| CVE-2017-16995 | redhat_vex | kernel: memory corruption caused by BPF verifier bugs can allow for arbitrary code execution | known not affected: 88 | 2026-06-28T06:39:52+00:00 | Vulnerability · Source |
| CVE-2026-48111 | redhat_vex | 7-Zip: off-by-one out-of-bounds read in the UEFI firmware image parser | known not affected: 1 | 2026-06-28T06:39:48+00:00 | Vulnerability · Source |
| CVE-2017-16912 | redhat_vex | kernel: Out-of-bounds read in usbip/stub_rx.c:get_pipe() allows attackers to cause a denial of service via crafted USB over IP packet | known not affected: 88 | 2026-06-28T06:39:47+00:00 | Vulnerability · Source |
| CVE-2026-48092 | redhat_vex | 7-Zip: 7-Zip: Information disclosure in 32-bit builds due to heap memory disclosure | known not affected: 1 | 2026-06-28T06:39:45+00:00 | Vulnerability · Source |
| CVE-2013-2465 | redhat_vex | OpenJDK: Incorrect image channel verification (2D, 8012597) | fixed: 555 | 2026-06-28T06:39:42+00:00 | Vulnerability · Source |
| CVE-2017-16138 | redhat_vex | nodejs-mime: Regular expression Denial of Service | fixed: 1 known affected: 4 known not affected: 20 | 2026-06-28T06:39:42+00:00 | Vulnerability · Source |
| CVE-2013-2729 | redhat_vex | acroread: multiple code execution flaws (APSB13-15) | fixed: 8 | 2026-06-28T06:39:40+00:00 | Vulnerability · Source |
| CVE-2017-16527 | redhat_vex | kernel: Use-after-free in snd_usb_mixer_interrupt | known affected: 55 known not affected: 33 | 2026-06-28T06:39:39+00:00 | Vulnerability · Source |
| CVE-2017-16099 | redhat_vex | nodejs-no-case: regular expression denial of service in no-case module | known not affected: 1 | 2026-06-28T06:39:37+00:00 | Vulnerability · Source |
| CVE-2007-5273 | redhat_vex | Anti-DNS Pinning and Java Applets with HTTP proxy | fixed: 430 | 2026-06-28T06:39:34+00:00 | Vulnerability · Source |
| CVE-2013-5457 | redhat_vex | JDK: unspecified sandbox bypass (ORB) | fixed: 245 known not affected: 8 | 2026-06-28T06:39:33+00:00 | Vulnerability · Source |
| CVE-2023-23454 | redhat_vex | kernel: slab-out-of-bounds read vulnerabilities in cbq_classify | fixed: 279 known affected: 42 known not affected: 108 | 2026-06-28T06:39:33+00:00 | Vulnerability · Source |
| CVE-2017-15426 | redhat_vex | chromium-browser: url spoof in omnibox | fixed: 12 | 2026-06-28T06:39:30+00:00 | Vulnerability · Source |
| CVE-2007-5275 | redhat_vex | Flash plugin DNS rebinding | fixed: 20 | 2026-06-28T06:39:29+00:00 | Vulnerability · Source |
| CVE-2017-15274 | redhat_vex | kernel: dereferencing NULL payload with nonzero length | fixed: 302 known affected: 27 known not affected: 16 | 2026-06-28T06:39:29+00:00 | Vulnerability · Source |
| CVE-2011-3544 | redhat_vex | OpenJDK: missing SecurityManager checks in scripting engine (Scripting, 7046823) | fixed: 415 known affected: 1 known not affected: 13 | 2026-06-28T06:39:23+00:00 | Vulnerability · Source |
| CVE-2014-3710 | redhat_vex | file: out-of-bounds read in elf note headers | fixed: 1130 known affected: 1 known not affected: 1 | 2026-06-28T06:39:20+00:00 | Vulnerability · Source |
| CVE-2004-1072 | redhat_vex | security flaw | fixed: 147 | 2026-06-28T06:39:20+00:00 | Vulnerability · Source |
| CVE-2017-3060 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-10 | fixed: 3 | 2026-06-28T06:39:18+00:00 | Vulnerability · Source |
| CVE-2021-20317 | redhat_vex | kernel: timer tree corruption leads to missing wakeup and system freeze | fixed: 450 known affected: 28 known not affected: 121 | 2026-06-28T06:39:15+00:00 | Vulnerability · Source |
| CVE-2021-2065 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T06:39:15+00:00 | Vulnerability · Source |
| CVE-2021-2031 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T06:39:12+00:00 | Vulnerability · Source |
| CVE-2025-8415 | redhat_vex | cryostat: authentication bypass if Network Policies are disabled | fixed: 22 known affected: 3 | 2026-06-28T06:39:11+00:00 | Vulnerability · Source |
| CVE-2014-3640 | redhat_vex | qemu: slirp: NULL pointer deref in sosendto() | fixed: 72 known affected: 6 known not affected: 1 | 2026-06-28T06:39:09+00:00 | Vulnerability · Source |
| CVE-2021-2030 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T06:39:08+00:00 | Vulnerability · Source |
| CVE-2017-15098 | redhat_vex | postgresql: Memory disclosure in JSON functions | fixed: 398 known affected: 13 known not affected: 27 | 2026-06-28T06:39:07+00:00 | Vulnerability · Source |
| CVE-2009-1101 | redhat_vex | OpenJDK JAX-WS service endpoint remote Denial-of-Service (6630639) | fixed: 364 | 2026-06-28T06:39:05+00:00 | Vulnerability · Source |
| CVE-2026-8509 | redhat_vex | chromium-browser: chromium-browser: Heap buffer overflow in WebML | known not affected: 1 | 2026-06-28T06:39:01+00:00 | Vulnerability · Source |
| CVE-2026-8525 | redhat_vex | chromium-browser: chromium-browser: Heap buffer overflow in ANGLE | known not affected: 1 | 2026-06-28T06:38:59+00:00 | Vulnerability · Source |
| CVE-2017-15095 | redhat_vex | jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) | fixed: 1899 known affected: 16 known not affected: 6 | 2026-06-28T06:38:58+00:00 | Vulnerability · Source |
| CVE-2026-11302 | redhat_vex | chromium-browser: chromium-browser: Insufficient policy enforcement in Chrome for iOS | known not affected: 1 | 2026-06-28T06:38:56+00:00 | Vulnerability · Source |
| CVE-2014-3199 | redhat_vex | chromium: multiple security fixes in Chrome 38.0.2125.101 | fixed: 15 | 2026-06-28T06:38:53+00:00 | Vulnerability · Source |
| CVE-2014-3195 | redhat_vex | v8: information leak fixed in Google Chrome 38.0.2125.101 | fixed: 15 known affected: 13 | 2026-06-28T06:38:51+00:00 | Vulnerability · Source |
| CVE-2014-2494 | redhat_vex | mysql: unspecified vulnerability related to ENARC (CPU July 2014) | fixed: 278 under investigation: 9 | 2026-06-28T06:38:47+00:00 | Vulnerability · Source |
| CVE-2026-11205 | redhat_vex | chromium-browser: chromium-browser: Insufficient validation of untrusted input in Chrome for iOS | known not affected: 1 | 2026-06-28T06:38:47+00:00 | Vulnerability · Source |
| CVE-2021-2009 | redhat_vex | mysql: Server: Security: Roles unspecified vulnerability (CPU Jan 2021) | fixed: 337 known not affected: 70 | 2026-06-28T06:38:45+00:00 | Vulnerability · Source |
| CVE-2026-11202 | redhat_vex | chromium-browser: chromium-browser: Insufficient validation of untrusted input in Chrome for iOS | known not affected: 1 | 2026-06-28T06:38:45+00:00 | Vulnerability · Source |
| CVE-2009-0217 | redhat_vex | xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass | fixed: 740 | 2026-06-28T06:38:45+00:00 | Vulnerability · Source |