VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-1229 | redhat_vex | chromium-browser: Cookie injection in proxies | fixed: 15 | 2026-06-28T06:40:58+00:00 | Vulnerability · Source |
| CVE-2015-1227 | redhat_vex | chromium-browser: Uninitialized value in blink | fixed: 15 | 2026-06-28T06:40:58+00:00 | Vulnerability · Source |
| CVE-2015-1223 | redhat_vex | chromium-browser: Use-after-free in dom | fixed: 15 | 2026-06-28T06:40:56+00:00 | Vulnerability · Source |
| CVE-2010-0428 | redhat_vex | libspice: Insufficient guest provided pointers validation | fixed: 13 | 2026-06-28T06:40:54+00:00 | Vulnerability · Source |
| CVE-2016-4272 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-29 | fixed: 5 | 2026-06-28T06:40:52+00:00 | Vulnerability · Source |
| CVE-2016-1612 | redhat_vex | chromium-browser: bad cast in V8 | fixed: 12 | 2026-06-28T06:40:50+00:00 | Vulnerability · Source |
| CVE-2015-0458 | redhat_vex | JDK: unspecified vulnerability fixed in 6u95, 7u79 and 8u45 (Deployment) | fixed: 546 | 2026-06-28T06:40:49+00:00 | Vulnerability · Source |
| CVE-2015-0441 | redhat_vex | mysql: unspecified vulnerability related to Server:Security:Encryption (CPU April 2015) | fixed: 338 known not affected: 19 under investigation: 9 | 2026-06-28T06:40:47+00:00 | Vulnerability · Source |
| CVE-2015-0433 | redhat_vex | mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU April 2015) | fixed: 338 known not affected: 19 under investigation: 9 | 2026-06-28T06:40:44+00:00 | Vulnerability · Source |
| CVE-2015-0315 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T06:40:42+00:00 | Vulnerability · Source |
| CVE-2015-0339 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-05 | fixed: 5 | 2026-06-28T06:40:40+00:00 | Vulnerability · Source |
| CVE-2015-0340 | redhat_vex | flash-plugin: file upload restriction bypass (APSB15-05) | fixed: 5 | 2026-06-28T06:40:40+00:00 | Vulnerability · Source |
| CVE-2015-0338 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-05 | fixed: 5 | 2026-06-28T06:40:40+00:00 | Vulnerability · Source |
| CVE-2015-0314 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T06:40:40+00:00 | Vulnerability · Source |
| CVE-2015-0316 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T06:40:38+00:00 | Vulnerability · Source |
| CVE-2015-0312 | redhat_vex | flash-plugin: multiple critical vulnerabilities (APSA15-01)(APSB15-03) | fixed: 5 | 2026-06-28T06:40:37+00:00 | Vulnerability · Source |
| CVE-2009-3875 | redhat_vex | OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities (6863503) | fixed: 640 | 2026-06-28T06:40:37+00:00 | Vulnerability · Source |
| CVE-2023-24023 | redhat_vex | kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses | fixed: 429 known affected: 64 | 2026-06-28T06:40:36+00:00 | Vulnerability · Source |
| CVE-2015-0273 | redhat_vex | php: use after free vulnerability in unserialize() with DateTimeZone | fixed: 849 known affected: 55 known not affected: 31 | 2026-06-28T06:40:36+00:00 | Vulnerability · Source |
| CVE-2021-2217 | redhat_vex | mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T06:40:29+00:00 | Vulnerability · Source |
| CVE-2017-18509 | redhat_vex | kernel: not checking sk_type and protocol in net/ipv6/ip6mr.c leads to general protection fault, or arbitrary code execution | known not affected: 104 | 2026-06-28T06:40:28+00:00 | Vulnerability · Source |
| CVE-2026-46060 | redhat_vex | kernel: crypto: qat - fix IRQ cleanup on 6xxx probe failure | known affected: 184 known not affected: 90 | 2026-06-28T06:40:27+00:00 | Vulnerability · Source |
| CVE-2009-2724 | redhat_vex | JDK race condition vulnerability reflection checks | fixed: 66 | 2026-06-28T06:40:26+00:00 | Vulnerability · Source |
| CVE-2021-2208 | redhat_vex | mysql: Server: Partition unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T06:40:25+00:00 | Vulnerability · Source |
| CVE-2017-18549 | redhat_vex | kernel: information exposure in drivers/scsi/aacraid/commctrl.c | known affected: 1 known not affected: 92 | 2026-06-28T06:40:25+00:00 | Vulnerability · Source |
| CVE-2009-2672 | redhat_vex | OpenJDK Proxy mechanism information leaks (6801071) | fixed: 434 | 2026-06-28T06:40:23+00:00 | Vulnerability · Source |
| CVE-2026-46061 | redhat_vex | kernel: jbd2: fix deadlock in jbd2_journal_cancel_revoke() | known affected: 90 known not affected: 184 | 2026-06-28T06:40:18+00:00 | Vulnerability · Source |
| CVE-2026-46059 | redhat_vex | kernel: KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN | known affected: 232 known not affected: 42 | 2026-06-28T06:40:18+00:00 | Vulnerability · Source |
| CVE-2023-23918 | redhat_vex | Node.js: Permissions policies can be bypassed via process.mainModule | fixed: 254 known affected: 1 known not affected: 16 | 2026-06-28T06:40:15+00:00 | Vulnerability · Source |
| CVE-2026-48101 | redhat_vex | 7-Zip: 7-Zip: Information Disclosure via uninitialized memory in UEFI capsule parser | known not affected: 1 | 2026-06-28T06:40:15+00:00 | Vulnerability · Source |
| CVE-2023-23916 | redhat_vex | curl: HTTP multi-header compression denial of service | fixed: 331 known affected: 8 known not affected: 117 | 2026-06-28T06:40:14+00:00 | Vulnerability · Source |
| CVE-2014-9419 | redhat_vex | kernel: partial ASLR bypass through TLS base addresses leak | fixed: 347 known affected: 2 | 2026-06-28T06:40:06+00:00 | Vulnerability · Source |
| CVE-2017-17807 | redhat_vex | kernel: Missing permissions check for request_key() destination allows local attackers to add keys to keyring without Write permission | fixed: 207 known affected: 43 known not affected: 32 | 2026-06-28T06:40:04+00:00 | Vulnerability · Source |
| CVE-2017-17790 | redhat_vex | ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution | fixed: 576 known affected: 14 | 2026-06-28T06:40:04+00:00 | Vulnerability · Source |
| CVE-2017-17805 | redhat_vex | kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial-of-service | fixed: 419 known affected: 12 known not affected: 42 | 2026-06-28T06:40:03+00:00 | Vulnerability · Source |
| CVE-2017-17381 | redhat_vex | Qemu: virtio: divide by zero exception while updating rings | known affected: 10 known not affected: 17 | 2026-06-28T06:39:56+00:00 | Vulnerability · Source |
| CVE-2014-0502 | redhat_vex | flash-plugin: multiple flaws lead to arbitrary code execution (APSB14-07) | fixed: 5 | 2026-06-28T06:39:56+00:00 | Vulnerability · Source |
| CVE-2009-2906 | redhat_vex | samba: infinite loop flaw in smbd on unexpected oplock break notification reply | fixed: 228 | 2026-06-28T06:39:55+00:00 | Vulnerability · Source |
| CVE-2017-16995 | redhat_vex | kernel: memory corruption caused by BPF verifier bugs can allow for arbitrary code execution | known not affected: 88 | 2026-06-28T06:39:52+00:00 | Vulnerability · Source |
| CVE-2026-48111 | redhat_vex | 7-Zip: off-by-one out-of-bounds read in the UEFI firmware image parser | known not affected: 1 | 2026-06-28T06:39:48+00:00 | Vulnerability · Source |
| CVE-2017-16912 | redhat_vex | kernel: Out-of-bounds read in usbip/stub_rx.c:get_pipe() allows attackers to cause a denial of service via crafted USB over IP packet | known not affected: 88 | 2026-06-28T06:39:47+00:00 | Vulnerability · Source |
| CVE-2026-48092 | redhat_vex | 7-Zip: 7-Zip: Information disclosure in 32-bit builds due to heap memory disclosure | known not affected: 1 | 2026-06-28T06:39:45+00:00 | Vulnerability · Source |
| CVE-2013-2465 | redhat_vex | OpenJDK: Incorrect image channel verification (2D, 8012597) | fixed: 555 | 2026-06-28T06:39:42+00:00 | Vulnerability · Source |
| CVE-2017-16138 | redhat_vex | nodejs-mime: Regular expression Denial of Service | fixed: 1 known affected: 4 known not affected: 20 | 2026-06-28T06:39:42+00:00 | Vulnerability · Source |
| CVE-2013-2729 | redhat_vex | acroread: multiple code execution flaws (APSB13-15) | fixed: 8 | 2026-06-28T06:39:40+00:00 | Vulnerability · Source |
| CVE-2017-16527 | redhat_vex | kernel: Use-after-free in snd_usb_mixer_interrupt | known affected: 55 known not affected: 33 | 2026-06-28T06:39:39+00:00 | Vulnerability · Source |
| CVE-2017-16099 | redhat_vex | nodejs-no-case: regular expression denial of service in no-case module | known not affected: 1 | 2026-06-28T06:39:37+00:00 | Vulnerability · Source |
| CVE-2007-5273 | redhat_vex | Anti-DNS Pinning and Java Applets with HTTP proxy | fixed: 430 | 2026-06-28T06:39:34+00:00 | Vulnerability · Source |
| CVE-2013-5457 | redhat_vex | JDK: unspecified sandbox bypass (ORB) | fixed: 245 known not affected: 8 | 2026-06-28T06:39:33+00:00 | Vulnerability · Source |
| CVE-2023-23454 | redhat_vex | kernel: slab-out-of-bounds read vulnerabilities in cbq_classify | fixed: 279 known affected: 42 known not affected: 108 | 2026-06-28T06:39:33+00:00 | Vulnerability · Source |