VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-6835 | redhat_vex | Qemu: net: vmxnet: buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 device emulation | fixed: 11 known affected: 9 known not affected: 38 | 2026-06-28T06:48:04+00:00 | Vulnerability · Source |
| CVE-2016-6828 | redhat_vex | kernel: Use after free in tcp_xmit_retransmit_queue | fixed: 387 known affected: 1 | 2026-06-28T06:48:04+00:00 | Vulnerability · Source |
| CVE-2025-2900 | redhat_vex | ibm-semeru: IBM Semeru Runtime denial of service | fixed: 21 | 2026-06-28T06:48:04+00:00 | Vulnerability · Source |
| CVE-2016-6289 | redhat_vex | php: Integer overflow leads to buffer overflow in virtual_file_ex | fixed: 251 known affected: 110 | 2026-06-28T06:48:04+00:00 | Vulnerability · Source |
| CVE-2025-2877 | redhat_vex | event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in EDA | fixed: 8 known not affected: 155 | 2026-06-28T06:48:04+00:00 | Vulnerability · Source |
| CVE-2021-2061 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T06:48:03+00:00 | Vulnerability · Source |
| CVE-2018-18335 | redhat_vex | chromium-browser: Heap buffer overflow in Skia | fixed: 12 known not affected: 12 | 2026-06-28T06:48:02+00:00 | Vulnerability · Source |
| CVE-2025-2817 | redhat_vex | firefox: thunderbird: Privilege escalation in Firefox Updater | fixed: 296 known affected: 10 | 2026-06-28T06:48:01+00:00 | Vulnerability · Source |
| CVE-2025-27820 | redhat_vex | org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents: PSL (Public Suffix List) validation bypass | known affected: 2 known not affected: 20 | 2026-06-28T06:47:59+00:00 | Vulnerability · Source |
| CVE-2025-27819 | redhat_vex | org.apache.kafka: Kafka JNDI Login Module RCE Vulnerability | fixed: 1 known not affected: 380 | 2026-06-28T06:47:58+00:00 | Vulnerability · Source |
| CVE-2018-1096 | redhat_vex | foreman: SQL injection due to improper handling of the widget id parameter | fixed: 1110 known not affected: 1 | 2026-06-28T06:47:57+00:00 | Vulnerability · Source |
| CVE-2016-6338 | redhat_vex | ovirt-engine: webadmin log out must logout all sessions | fixed: 21 known affected: 1 | 2026-06-28T06:47:57+00:00 | Vulnerability · Source |
| CVE-2025-27818 | redhat_vex | apache-kafka: Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration | fixed: 1 known not affected: 380 | 2026-06-28T06:47:57+00:00 | Vulnerability · Source |
| CVE-2025-27817 | redhat_vex | org.apache.kafka: Kafka Client Arbitrary File Read SSRF | fixed: 2 known not affected: 380 | 2026-06-28T06:47:56+00:00 | Vulnerability · Source |
| CVE-2014-7942 | redhat_vex | chromium-browser: uninitialized-value in Fonts | fixed: 15 | 2026-06-28T06:47:56+00:00 | Vulnerability · Source |
| CVE-2025-27793 | redhat_vex | vega: Vega vulnerable to Cross-site Scripting via RegExp.prototype[@@replace] | known not affected: 1 | 2026-06-28T06:47:56+00:00 | Vulnerability · Source |
| CVE-2025-27625 | redhat_vex | jenkins: Open redirect vulnerability | known affected: 1 known not affected: 1 | 2026-06-28T06:47:54+00:00 | Vulnerability · Source |
| CVE-2014-7941 | redhat_vex | chromium-browser: out-of-bounds read in UI | fixed: 15 | 2026-06-28T06:47:53+00:00 | Vulnerability · Source |
| CVE-2014-7940 | redhat_vex | ICU: uninitialized value use in the collation component | fixed: 15 known affected: 11 | 2026-06-28T06:47:52+00:00 | Vulnerability · Source |
| CVE-2016-6213 | redhat_vex | kernel: Overflowing kernel mount table using shared bind mount | fixed: 185 known not affected: 34 | 2026-06-28T06:47:52+00:00 | Vulnerability · Source |
| CVE-2014-7840 | redhat_vex | qemu: insufficient parameter validation during ram load | fixed: 72 known affected: 7 under investigation: 3 | 2026-06-28T06:47:50+00:00 | Vulnerability · Source |
| CVE-2020-2627 | redhat_vex | mysql: Server: Parser unspecified vulnerability (CPU Jan 2020) | fixed: 337 known not affected: 92 | 2026-06-28T06:47:49+00:00 | Vulnerability · Source |
| CVE-2016-5609 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016) | fixed: 80 known not affected: 79 | 2026-06-28T06:47:49+00:00 | Vulnerability · Source |
| CVE-2014-6585 | redhat_vex | ICU: font parsing OOB read (OpenJDK 2D, 8055489) | fixed: 948 known affected: 11 known not affected: 24 | 2026-06-28T06:47:49+00:00 | Vulnerability · Source |
| CVE-2025-27607 | redhat_vex | python-json-logger: Python JSON Logger has a Potential RCE via missing `msgspec-python313-pre` dependency | known not affected: 2 | 2026-06-28T06:47:47+00:00 | Vulnerability · Source |
| CVE-2025-27553 | redhat_vex | apache-commons-vfs: Apache Commons VFS: Possible path traversal issue when using NameScope.DESCENDENT | fixed: 5 | 2026-06-28T06:47:47+00:00 | Vulnerability · Source |
| CVE-2025-27533 | redhat_vex | ActiveMQ: ActiveMQ: Unvalidated Buffer Size Allocation | fixed: 1 known affected: 5 known not affected: 4 | 2026-06-28T06:47:46+00:00 | Vulnerability · Source |
| CVE-2016-5399 | redhat_vex | php: Improper error handling in bzread() | fixed: 469 known affected: 84 known not affected: 51 | 2026-06-28T06:47:46+00:00 | Vulnerability · Source |
| CVE-2016-5424 | redhat_vex | postgresql: privilege escalation via crafted database and role names | fixed: 524 known affected: 15 | 2026-06-28T06:47:46+00:00 | Vulnerability · Source |
| CVE-2025-27551 | redhat_vex | DBIx-Class-EncodedColumn: DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Digest.pm | known not affected: 1 | 2026-06-28T06:47:46+00:00 | Vulnerability · Source |
| CVE-2025-27512 | redhat_vex | zincati: Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods | known not affected: 1 | 2026-06-28T06:47:45+00:00 | Vulnerability · Source |
| CVE-2016-5344 | redhat_vex | kernel: multiple integer overflows in the MDSS driver | known not affected: 93 | 2026-06-28T06:47:45+00:00 | Vulnerability · Source |
| CVE-2025-27465 | redhat_vex | xen: Xen: Incorrect Exception Handling | known not affected: 1 | 2026-06-28T06:47:44+00:00 | Vulnerability · Source |
| CVE-2025-27427 | redhat_vex | org.apache.activemq/artemis-core-client: Apache ActiveMQ Artemis: Address routing-type can be updated by user without the createAddress permission | known affected: 14 | 2026-06-28T06:47:44+00:00 | Vulnerability · Source |
| CVE-2016-5210 | redhat_vex | chromium-browser: out of bounds write in pdfium | fixed: 12 | 2026-06-28T06:47:44+00:00 | Vulnerability · Source |
| CVE-2016-5170 | redhat_vex | chromium-browser: use after free in blink | fixed: 12 | 2026-06-28T06:47:44+00:00 | Vulnerability · Source |
| CVE-2025-27466 | redhat_vex | xen: viridian: A NULL pointer dereference in the updating of the reference TSC area | known not affected: 1 | 2026-06-28T06:47:44+00:00 | Vulnerability · Source |
| CVE-2016-5165 | redhat_vex | chromium-browser: script injection in devtools | fixed: 12 | 2026-06-28T06:47:44+00:00 | Vulnerability · Source |
| CVE-2016-5150 | redhat_vex | chromium-browser: use after free in blink | fixed: 12 | 2026-06-28T06:47:42+00:00 | Vulnerability · Source |
| CVE-2016-5152 | redhat_vex | chromium-browser: heap overflow in pdfium | fixed: 12 known not affected: 9 | 2026-06-28T06:47:42+00:00 | Vulnerability · Source |
| CVE-2016-5131 | redhat_vex | libxml2: Use after free triggered by XPointer paths beginning with range-to | fixed: 91 known affected: 11 known not affected: 4 | 2026-06-28T06:47:41+00:00 | Vulnerability · Source |
| CVE-2016-5114 | redhat_vex | php: out-of-bounds write in fpm_log.c | fixed: 251 known affected: 108 known not affected: 2 | 2026-06-28T06:47:41+00:00 | Vulnerability · Source |
| CVE-2016-5141 | redhat_vex | chromium-browser: Address bar spoofing | fixed: 12 | 2026-06-28T06:47:40+00:00 | Vulnerability · Source |
| CVE-2016-5137 | redhat_vex | chromium-browser: history sniffing with hsts and csp | fixed: 12 | 2026-06-28T06:47:40+00:00 | Vulnerability · Source |
| CVE-2023-52528 | redhat_vex | kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg | fixed: 709 known affected: 50 known not affected: 22 | 2026-06-28T06:47:39+00:00 | Vulnerability · Source |
| CVE-2016-5008 | redhat_vex | libvirt: Setting empty VNC password allows access to unauthorized users | fixed: 194 known affected: 6 known not affected: 1 under investigation: 3 | 2026-06-28T06:47:39+00:00 | Vulnerability · Source |
| CVE-2025-2704 | redhat_vex | openvpn: OpenVPN in a server role with tls-crypt-v2 enabled can reach an assertion failed state when receiving specially crafted packets | known not affected: 1 | 2026-06-28T06:47:38+00:00 | Vulnerability · Source |
| CVE-2025-26794 | redhat_vex | exim: Exim: remote SQL injection | known not affected: 1 | 2026-06-28T06:47:38+00:00 | Vulnerability · Source |
| CVE-2016-7892 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-39 | fixed: 3 known affected: 1 | 2026-06-28T06:47:38+00:00 | Vulnerability · Source |
| CVE-2025-27111 | redhat_vex | rack: rubygem-rack: Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection | known affected: 21 | 2026-06-28T06:47:38+00:00 | Vulnerability · Source |