VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-15649 | redhat_vex | kernel: Use-after-free in the af_packet.c | fixed: 207 known affected: 16 known not affected: 15 | 2026-06-28T06:49:34+00:00 | Vulnerability · Source |
| CVE-2016-8576 | redhat_vex | Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch | fixed: 47 known affected: 10 known not affected: 8 | 2026-06-28T06:49:27+00:00 | Vulnerability · Source |
| CVE-2009-1104 | redhat_vex | OpenJDK: Intended access restrictions bypass via LiveConnect (6724331) | fixed: 408 | 2026-06-28T06:49:26+00:00 | Vulnerability · Source |
| CVE-2017-15096 | redhat_vex | glusterfs: Null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c | fixed: 46 known not affected: 22 | 2026-06-28T06:49:24+00:00 | Vulnerability · Source |
| CVE-2016-8328 | redhat_vex | JDK: unspecified vulnerability fixed in 8u121 (Java Mission Control) | fixed: 64 | 2026-06-28T06:49:23+00:00 | Vulnerability · Source |
| CVE-2025-37732 | redhat_vex | kibana: Kibana: Cross-site Scripting (XSS) via integration package upload | known affected: 1 | 2026-06-28T06:49:22+00:00 | Vulnerability · Source |
| CVE-2025-3628 | redhat_vex | moodle: Moodle Assignment Submission Search Leaks Anonymous Student Identities | known not affected: 1 | 2026-06-28T06:49:22+00:00 | Vulnerability · Source |
| CVE-2025-37731 | redhat_vex | elasticsearch: Elasticsearch: User impersonation due to improper authentication in Public Key Infrastructure (PKI) realm | known affected: 23 | 2026-06-28T06:49:22+00:00 | Vulnerability · Source |
| CVE-2021-3679 | redhat_vex | kernel: DoS in rb_per_cpu_empty() | fixed: 150 known not affected: 149 | 2026-06-28T06:49:22+00:00 | Vulnerability · Source |
| CVE-2025-3641 | redhat_vex | moodle: Authenticated remote code execution risk in the Moodle LMS Dropbox repository | known not affected: 1 | 2026-06-28T06:49:21+00:00 | Vulnerability · Source |
| CVE-2022-0322 | redhat_vex | kernel: DoS in sctp_addto_chunk in net/sctp/sm_make_chunk.c | fixed: 150 known not affected: 151 | 2026-06-28T06:49:21+00:00 | Vulnerability · Source |
| CVE-2025-37728 | redhat_vex | kibana: Kibana Insufficiently Protected Credentials in the CrowdStrike Connector | known affected: 1 | 2026-06-28T06:49:21+00:00 | Vulnerability · Source |
| CVE-2025-37727 | redhat_vex | org.elasticsearch/elasticsearch-core: Elasticsearch Insertion of sensitive information in log file | known affected: 11 | 2026-06-28T06:49:21+00:00 | Vulnerability · Source |
| CVE-2025-3643 | redhat_vex | moodle: Reflected XSS risk in policy tool | known not affected: 1 | 2026-06-28T06:49:21+00:00 | Vulnerability · Source |
| CVE-2015-5116 | redhat_vex | flash-plugin: information disclosure issues fixed in APSB15-16 | fixed: 5 | 2026-06-28T06:49:19+00:00 | Vulnerability · Source |
| CVE-2025-3638 | redhat_vex | moodle: CSRF risk in Brickfield tool's analysis request action | known not affected: 1 | 2026-06-28T06:49:18+00:00 | Vulnerability · Source |
| CVE-2023-52831 | redhat_vex | kernel: cpu/hotplug: Don't offline the last non-isolated CPU | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T06:49:17+00:00 | Vulnerability · Source |
| CVE-2015-4599 | redhat_vex | php: type confusion issue in unserialize() with various SOAP methods | fixed: 849 known affected: 56 known not affected: 30 | 2026-06-28T06:49:17+00:00 | Vulnerability · Source |
| CVE-2025-3620 | redhat_vex | chromium-browser: Use after free in USB | known not affected: 1 | 2026-06-28T06:49:17+00:00 | Vulnerability · Source |
| CVE-2023-52832 | redhat_vex | kernel: wifi: mac80211: don't return unset power in ieee80211_get_tx_power() | fixed: 429 known affected: 64 | 2026-06-28T06:49:17+00:00 | Vulnerability · Source |
| CVE-2023-52833 | redhat_vex | kernel: Bluetooth: btusb: Add date->evt_skb is NULL check | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T06:49:17+00:00 | Vulnerability · Source |
| CVE-2021-47098 | redhat_vex | kernel: hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations | fixed: 280 known affected: 64 known not affected: 56 | 2026-06-28T06:49:17+00:00 | Vulnerability · Source |
| CVE-2015-7656 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-28 | fixed: 5 | 2026-06-28T06:49:16+00:00 | Vulnerability · Source |
| CVE-2010-0209 | redhat_vex | flash-plugin: multiple security flaws (APSB10-16) | fixed: 22 | 2026-06-28T06:49:16+00:00 | Vulnerability · Source |
| CVE-2017-14167 | redhat_vex | Qemu: i386: multiboot OOB access while loading kernel image | fixed: 75 known not affected: 14 | 2026-06-28T06:49:15+00:00 | Vulnerability · Source |
| CVE-2010-0848 | redhat_vex | OpenJDK AWT Library Invalid Index Vulnerability (6914823) | fixed: 594 | 2026-06-28T06:49:15+00:00 | Vulnerability · Source |
| CVE-2010-0886 | redhat_vex | Java: Java Web Start arbitrary command line injection | fixed: 72 | 2026-06-28T06:49:15+00:00 | Vulnerability · Source |
| CVE-2015-7640 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-25 | fixed: 5 | 2026-06-28T06:49:15+00:00 | Vulnerability · Source |
| CVE-2025-3608 | redhat_vex | firefox: Race condition in nsHttpTransaction could lead to memory corruption | known affected: 2 known not affected: 11 | 2026-06-28T06:49:15+00:00 | Vulnerability · Source |
| CVE-2010-0845 | redhat_vex | OpenJDK No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807) | fixed: 118 | 2026-06-28T06:49:14+00:00 | Vulnerability · Source |
| CVE-2025-3523 | redhat_vex | thunderbird: User Interface (UI) Misrepresentation of attachment URL | fixed: 144 known affected: 6 | 2026-06-28T06:49:13+00:00 | Vulnerability · Source |
| CVE-2025-3512 | redhat_vex | qt6: Buffer overflow in QTextMarkdownImporter | known affected: 3 | 2026-06-28T06:49:13+00:00 | Vulnerability · Source |
| CVE-2025-3588 | redhat_vex | jsonschema2pojo: joelittlejohn jsonschema2pojo JSON File SchemaRule.java apply stack-based overflow | known affected: 16 | 2026-06-28T06:49:13+00:00 | Vulnerability · Source |
| CVE-2025-34468 | redhat_vex | libcoap: libcoap: Remote code execution or Denial of Service via stack-based buffer overflow in address resolution | known not affected: 1 | 2026-06-28T06:49:12+00:00 | Vulnerability · Source |
| CVE-2025-34457 | redhat_vex | github.com/wb2osz/direwolf: Dire Wolf: Denial of Service due to stack-based buffer overflow in KISS frame processing | known not affected: 1 | 2026-06-28T06:49:12+00:00 | Vulnerability · Source |
| CVE-2025-34458 | redhat_vex | github.com/wb2osz/direwolf: Dire Wolf: Denial of Service via malformed APRS MIC-E messages | known not affected: 1 | 2026-06-28T06:49:12+00:00 | Vulnerability · Source |
| CVE-2015-4767 | redhat_vex | mysql: unspecified vulnerability related to Server:Security:Firewall (CPU July 2015) | fixed: 147 known not affected: 41 | 2026-06-28T06:49:10+00:00 | Vulnerability · Source |
| CVE-2008-4822 | redhat_vex | Flash Player policy file interpretation flaw | fixed: 10 | 2026-06-28T06:49:10+00:00 | Vulnerability · Source |
| CVE-2023-52700 | redhat_vex | kernel: tipc: fix kernel warning when sending SYN message | fixed: 150 known affected: 108 known not affected: 50 | 2026-06-28T06:49:09+00:00 | Vulnerability · Source |
| CVE-2025-3445 | redhat_vex | mholt/archiver: A Path Traversal "Zip Slip" vulnerability in mholt/archiver | known not affected: 1 | 2026-06-28T06:49:08+00:00 | Vulnerability · Source |
| CVE-2023-52697 | redhat_vex | kernel: ASoC: Intel: sof_sdw_rt_sdca_jack_common: ctx->headset_codec_dev = NULL | fixed: 280 known affected: 70 known not affected: 50 | 2026-06-28T06:49:08+00:00 | Vulnerability · Source |
| CVE-2023-52626 | redhat_vex | kernel: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context | fixed: 429 known affected: 22 known not affected: 50 | 2026-06-28T06:49:08+00:00 | Vulnerability · Source |
| CVE-2023-52650 | redhat_vex | kernel: drm/tegra: dsi: Add missing check for of_find_device_by_node | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T06:49:07+00:00 | Vulnerability · Source |
| CVE-2025-3407 | redhat_vex | stb: Nothings stb out-of-bounds read | known not affected: 1 | 2026-06-28T06:49:07+00:00 | Vulnerability · Source |
| CVE-2025-34092 | redhat_vex | chromium: Chrome Cookie Key Exposure | known not affected: 1 | 2026-06-28T06:49:07+00:00 | Vulnerability · Source |
| CVE-2025-3359 | redhat_vex | gnuplot: Segmentation fault via IO_str_init_static_internal function | known affected: 17 | 2026-06-28T06:49:06+00:00 | Vulnerability · Source |
| CVE-2016-7865 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-37 | fixed: 5 | 2026-06-28T06:49:05+00:00 | Vulnerability · Source |
| CVE-2025-33229 | redhat_vex | nsight-systems: NVIDIA Nsight Visual Studio for Windows: Arbitrary Code Execution and Privilege Escalation in Nsight Monitor | known affected: 4 | 2026-06-28T06:49:05+00:00 | Vulnerability · Source |
| CVE-2016-7868 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-39 | fixed: 3 known affected: 1 | 2026-06-28T06:49:03+00:00 | Vulnerability · Source |
| CVE-2023-52595 | redhat_vex | kernel: wifi: rt2x00: restart beacon queue when hardware reset | fixed: 709 known affected: 50 known not affected: 22 | 2026-06-28T06:49:02+00:00 | Vulnerability · Source |