VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296691 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-13406 | redhat_vex | kernel: Integer overflow in drivers/video/fbdev/uvesafb.c:uvesafb_setcmap() allows for potential denial of service | known not affected: 88 | 2026-06-28T06:33:55+00:00 | Vulnerability · Source |
| CVE-2026-43378 | redhat_vex | kernel: smb: server: fix use-after-free in smb2_open() | known not affected: 274 | 2026-06-28T06:33:54+00:00 | Vulnerability · Source |
| CVE-2026-43380 | redhat_vex | kernel: hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read | known not affected: 274 | 2026-06-28T06:33:54+00:00 | Vulnerability · Source |
| CVE-2012-3359 | redhat_vex | conga: insecure handling of luci web interface sessions | fixed: 13 known affected: 1 | 2026-06-28T06:33:53+00:00 | Vulnerability · Source |
| CVE-2012-3216 | redhat_vex | OpenJDK: java.io.FilePermission information leak (Libraries, 6631398) | fixed: 588 known affected: 9 | 2026-06-28T06:33:52+00:00 | Vulnerability · Source |
| CVE-2016-3111 | redhat_vex | pulp: Race condition when generating RSA keys for authenticating messages between server and consumers | fixed: 639 | 2026-06-28T06:33:50+00:00 | Vulnerability · Source |
| CVE-2023-51780 | redhat_vex | kernel: use-after-free in net/atm/ioctl.c | fixed: 429 known affected: 64 | 2026-06-28T06:33:50+00:00 | Vulnerability · Source |
| CVE-2023-45802 | redhat_vex | mod_http2: reset requests exhaust memory (incomplete fix of CVE-2023-44487) | fixed: 190 known affected: 12 known not affected: 139 | 2026-06-28T06:33:48+00:00 | Vulnerability · Source |
| CVE-2026-8953 | redhat_vex | firefox: Sandbox escape due to use-after-free in the Disability Access APIs component | fixed: 260 known affected: 8 | 2026-06-28T06:33:48+00:00 | Vulnerability · Source |
| CVE-2026-46296 | redhat_vex | kernel: spi: s3c64xx: fix NULL-deref on driver unbind | known not affected: 274 | 2026-06-28T06:33:48+00:00 | Vulnerability · Source |
| CVE-2018-12827 | redhat_vex | flash-plugin: Information Disclosure vulnerabilities (APSB18-25) | fixed: 3 | 2026-06-28T06:33:47+00:00 | Vulnerability · Source |
| CVE-2018-12826 | redhat_vex | flash-plugin: Information Disclosure vulnerabilities (APSB18-25) | fixed: 3 | 2026-06-28T06:33:46+00:00 | Vulnerability · Source |
| CVE-2015-8746 | redhat_vex | kernel: when NFSv4 migration is executed, kernel oops occurs at NFS client | fixed: 191 known affected: 12 known not affected: 15 | 2026-06-28T06:33:45+00:00 | Vulnerability · Source |
| CVE-2012-1682 | redhat_vex | OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476) | fixed: 358 known affected: 9 known not affected: 13 | 2026-06-28T06:33:42+00:00 | Vulnerability · Source |
| CVE-2015-8664 | redhat_vex | chromium-browser: Use-After-free in MidiHost | fixed: 12 | 2026-06-28T06:33:42+00:00 | Vulnerability · Source |
| CVE-2018-1260 | redhat_vex | spring-security-oauth: remote code execution in the authorization process | fixed: 2 known affected: 1 | 2026-06-28T06:33:40+00:00 | Vulnerability · Source |
| CVE-2012-1541 | redhat_vex | JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment) | fixed: 313 known affected: 1 known not affected: 8 | 2026-06-28T06:33:40+00:00 | Vulnerability · Source |
| CVE-2026-46297 | redhat_vex | kernel: net: libwx: use request_irq for VF misc interrupt | known not affected: 274 | 2026-06-28T06:33:38+00:00 | Vulnerability · Source |
| CVE-2018-12547 | redhat_vex | JDK: buffer overflow in jio_snprintf() and jio_vsnprintf() | fixed: 201 | 2026-06-28T06:33:37+00:00 | Vulnerability · Source |
| CVE-2018-12539 | redhat_vex | JDK: privilege escalation via insufficiently restricted access to Attach API | fixed: 187 | 2026-06-28T06:33:36+00:00 | Vulnerability · Source |
| CVE-2015-8649 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-01 | fixed: 5 | 2026-06-28T06:33:36+00:00 | Vulnerability · Source |
| CVE-2018-12541 | redhat_vex | vertx: WebSocket HTTP upgrade implementation holds the entire http request in memory before the handshake | fixed: 2 known affected: 1 | 2026-06-28T06:33:35+00:00 | Vulnerability · Source |
| CVE-2023-35945 | redhat_vex | envoy: HTTP/2 memory leak in nghttp2 codec | fixed: 9 known not affected: 59 | 2026-06-28T06:33:34+00:00 | Vulnerability · Source |
| CVE-2011-2455 | redhat_vex | flash-plugin: mulitple code execution flaws (APSB11-28) | fixed: 5 | 2026-06-28T06:33:33+00:00 | Vulnerability · Source |
| CVE-2023-35824 | redhat_vex | kernel: dm1105: race condition leading to use-after-free in dm1105_remove.c() | fixed: 399 known affected: 42 known not affected: 108 | 2026-06-28T06:33:33+00:00 | Vulnerability · Source |
| CVE-2021-25290 | redhat_vex | python-pillow: Negative-offset memcpy in TIFF image reader | fixed: 22 known affected: 8 known not affected: 9 | 2026-06-28T06:33:32+00:00 | Vulnerability · Source |
| CVE-2011-2453 | redhat_vex | flash-plugin: mulitple code execution flaws (APSB11-28) | fixed: 5 | 2026-06-28T06:33:29+00:00 | Vulnerability · Source |
| CVE-2023-31083 | redhat_vex | kernel: race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in hci_uart_tty_ioctl | fixed: 429 known affected: 50 known not affected: 14 | 2026-06-28T06:33:27+00:00 | Vulnerability · Source |
| CVE-2010-4450 | redhat_vex | OpenJDK Launcher incorrect processing of empty library path entries (6983554) | fixed: 360 | 2026-06-28T06:33:26+00:00 | Vulnerability · Source |
| CVE-2023-1637 | redhat_vex | kernel: save/restore speculative MSRs during S3 suspend/resume | fixed: 689 known affected: 28 known not affected: 15 | 2026-06-28T06:33:25+00:00 | Vulnerability · Source |
| CVE-2025-32379 | redhat_vex | koa: XSS at ctx.redirect() function in Koajs | known affected: 1 | 2026-06-28T06:33:25+00:00 | Vulnerability · Source |
| CVE-2015-8404 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T06:33:24+00:00 | Vulnerability · Source |
| CVE-2015-8543 | redhat_vex | kernel: IPv6 connect causes DoS via NULL pointer dereference | fixed: 371 known affected: 13 | 2026-06-28T06:33:23+00:00 | Vulnerability · Source |
| CVE-2015-8540 | redhat_vex | libpng: underflow read in png_check_keyword() | fixed: 296 known affected: 14 known not affected: 5 | 2026-06-28T06:33:23+00:00 | Vulnerability · Source |
| CVE-2025-31672 | redhat_vex | org.apache.poi/poi-ooxml: Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names | known affected: 11 | 2026-06-28T06:33:23+00:00 | Vulnerability · Source |
| CVE-2015-8459 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-01 | fixed: 5 | 2026-06-28T06:33:22+00:00 | Vulnerability · Source |
| CVE-2015-8445 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T06:33:22+00:00 | Vulnerability · Source |
| CVE-2015-8406 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T06:33:21+00:00 | Vulnerability · Source |
| CVE-2015-8405 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T06:33:20+00:00 | Vulnerability · Source |
| CVE-2015-8416 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T06:33:20+00:00 | Vulnerability · Source |
| CVE-2010-3621 | redhat_vex | acroread: multiple code execution flaws (APSB10-21) | fixed: 12 known not affected: 2 | 2026-06-28T06:33:19+00:00 | Vulnerability · Source |
| CVE-2026-6318 | redhat_vex | chromium-browser: Use after free in Codecs | known not affected: 1 | 2026-06-28T06:33:19+00:00 | Vulnerability · Source |
| CVE-2025-3409 | redhat_vex | stb: Nothings stb stack-based overflow | known not affected: 1 | 2026-06-28T06:33:19+00:00 | Vulnerability · Source |
| CVE-2012-0500 | redhat_vex | JDK: unspecified vulnerability fixed in 6u31 and 7u3 (Deployment) | fixed: 244 known affected: 7 known not affected: 7 | 2026-06-28T06:33:18+00:00 | Vulnerability · Source |
| CVE-2012-0507 | redhat_vex | OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299) | fixed: 434 known affected: 7 | 2026-06-28T06:33:18+00:00 | Vulnerability · Source |
| CVE-2023-22049 | redhat_vex | OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) | fixed: 2342 known affected: 51 | 2026-06-28T06:33:18+00:00 | Vulnerability · Source |
| CVE-2015-8126 | redhat_vex | libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions | fixed: 790 known affected: 1 | 2026-06-28T06:33:18+00:00 | Vulnerability · Source |
| CVE-2015-8046 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-28 | fixed: 5 | 2026-06-28T06:33:17+00:00 | Vulnerability · Source |
| CVE-2023-22046 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2023) | fixed: 206 known not affected: 93 | 2026-06-28T06:33:17+00:00 | Vulnerability · Source |
| CVE-2012-0499 | redhat_vex | JDK: unspecified vulnerability fixed in 6u31 and 7u3 (2D) | fixed: 404 known affected: 7 known not affected: 7 | 2026-06-28T06:33:17+00:00 | Vulnerability · Source |