VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-30093 | redhat_vex | condor: authenticated attackers can potentially bypass authorization restrictions | known not affected: 1 | 2026-06-28T06:31:41+00:00 | Vulnerability · Source |
| CVE-2025-30232 | redhat_vex | exim: privilege escalation via use-after-free | known not affected: 1 | 2026-06-28T06:31:38+00:00 | Vulnerability · Source |
| CVE-2014-9709 | redhat_vex | gd: buffer read overflow in gd_gif_in.c | fixed: 849 known affected: 62 known not affected: 32 | 2026-06-28T06:31:38+00:00 | Vulnerability · Source |
| CVE-2026-41282 | redhat_vex | nuclei: github.com/projectdiscovery/nuclei: ProjectDiscovery Nuclei: DSL expression injection via environment variables in multi-step templates | known not affected: 1 | 2026-06-28T06:31:38+00:00 | Vulnerability · Source |
| CVE-2026-8954 | redhat_vex | firefox: Incorrect boundary conditions, integer overflow in the Audio/Video component | fixed: 260 known affected: 8 | 2026-06-28T06:31:38+00:00 | Vulnerability · Source |
| CVE-2026-5900 | redhat_vex | chromium-browser: Policy bypass in Downloads | known not affected: 1 | 2026-06-28T06:31:35+00:00 | Vulnerability · Source |
| CVE-2014-8439 | redhat_vex | flash-plugin: hardening against a code execution flaw (APSB14-26) | fixed: 6 | 2026-06-28T06:31:20+00:00 | Vulnerability · Source |
| CVE-2026-5910 | redhat_vex | chromium-browser: Integer overflow in Media | known not affected: 1 | 2026-06-28T06:31:20+00:00 | Vulnerability · Source |
| CVE-2014-8159 | redhat_vex | kernel: infiniband: uverbs: unprotected physical memory access | fixed: 701 known affected: 1 | 2026-06-28T06:31:16+00:00 | Vulnerability · Source |
| CVE-2026-46314 | redhat_vex | kernel: drm/v3d: Reject empty multisync extension to prevent infinite loop | known not affected: 274 | 2026-06-28T06:31:14+00:00 | Vulnerability · Source |
| CVE-2014-7935 | redhat_vex | chromium-browser: use-after-free in Speech | fixed: 15 | 2026-06-28T06:31:14+00:00 | Vulnerability · Source |
| CVE-2014-7910 | redhat_vex | chromium-browser: Unspecified security issues | fixed: 18 known affected: 9 | 2026-06-28T06:31:14+00:00 | Vulnerability · Source |
| CVE-2025-2849 | redhat_vex | upx: UPX p_lx_elf.cpp un_DT_INIT heap-based overflow | known not affected: 1 | 2026-06-28T06:31:11+00:00 | Vulnerability · Source |
| CVE-2014-7187 | redhat_vex | bash: off-by-one error in deeply nested flow control constructs | fixed: 171 | 2026-06-28T06:31:08+00:00 | Vulnerability · Source |
| CVE-2014-6458 | redhat_vex | JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment) | fixed: 530 | 2026-06-28T06:31:07+00:00 | Vulnerability · Source |
| CVE-2014-6456 | redhat_vex | JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment) | fixed: 297 | 2026-06-28T06:31:07+00:00 | Vulnerability · Source |
| CVE-2026-5918 | redhat_vex | chromium-browser: Inappropriate implementation in Navigation | known not affected: 1 | 2026-06-28T06:31:02+00:00 | Vulnerability · Source |
| CVE-2025-9157 | redhat_vex | tcpreplay: appneta tcpreplay tcprewrite edit_packet.c untrunc_packet use after free | known not affected: 1 | 2026-06-28T06:31:02+00:00 | Vulnerability · Source |
| CVE-2014-0064 | redhat_vex | postgresql: integer overflows leading to buffer overflows | fixed: 362 known affected: 1 known not affected: 13 | 2026-06-28T06:30:58+00:00 | Vulnerability · Source |
| CVE-2017-12192 | redhat_vex | kernel: NULL pointer dereference due to KEYCTL_READ on negative key | fixed: 451 known not affected: 1 | 2026-06-28T06:30:56+00:00 | Vulnerability · Source |
| CVE-2018-1065 | redhat_vex | kernel: netfilter: xtables NULL pointer dereference in ip6_tables.c:ip6t_do_table() leading to a crash | fixed: 26 known not affected: 87 | 2026-06-28T06:30:55+00:00 | Vulnerability · Source |
| CVE-2018-1059 | redhat_vex | dpdk: Information exposure in unchecked guest physical to host virtual address translations | fixed: 62 known affected: 31 known not affected: 31 | 2026-06-28T06:30:54+00:00 | Vulnerability · Source |
| CVE-2013-5807 | redhat_vex | mysql: unspecified flaw related to Replication (CPU October 2013) | fixed: 90 known not affected: 20 | 2026-06-28T06:30:53+00:00 | Vulnerability · Source |
| CVE-2013-5372 | redhat_vex | JDK: XML4J xml entity expansion excessive memory use (XML) | fixed: 352 | 2026-06-28T06:30:53+00:00 | Vulnerability · Source |
| CVE-2026-5899 | redhat_vex | chromium-browser: Incorrect security UI in History Navigation | known not affected: 1 | 2026-06-28T06:30:47+00:00 | Vulnerability · Source |
| CVE-2012-5270 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T06:30:38+00:00 | Vulnerability · Source |
| CVE-2015-4792 | redhat_vex | mysql: unspecified vulnerability related to Server:Partition (CPU October 2015) | fixed: 406 known affected: 6 under investigation: 9 | 2026-06-28T06:30:35+00:00 | Vulnerability · Source |
| CVE-2013-0650 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-09) | fixed: 4 | 2026-06-28T06:30:34+00:00 | Vulnerability · Source |
| CVE-2012-5269 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T06:30:33+00:00 | Vulnerability · Source |
| CVE-2012-0860 | redhat_vex | rhev: vds_installer insecure /tmp use | fixed: 20 known affected: 1 | 2026-06-28T06:30:15+00:00 | Vulnerability · Source |
| CVE-2018-1000807 | redhat_vex | pyOpenSSL: Use-after-free in X509 object handling | fixed: 10 known affected: 8 known not affected: 8 | 2026-06-28T06:30:06+00:00 | Vulnerability · Source |
| CVE-2010-3629 | redhat_vex | acroread: multiple code execution flaws (APSB10-21) | fixed: 12 known not affected: 2 | 2026-06-28T06:30:04+00:00 | Vulnerability · Source |
| CVE-2010-3570 | redhat_vex | JDK unspecified vulnerability in Deployment Toolkit | fixed: 72 | 2026-06-28T06:30:03+00:00 | Vulnerability · Source |
| CVE-2010-3620 | redhat_vex | acroread: multiple code execution flaws (APSB10-21) | fixed: 12 known not affected: 2 | 2026-06-28T06:30:03+00:00 | Vulnerability · Source |
| CVE-2012-4168 | redhat_vex | flash-plugin: cross-domain information leak flaw (APSB12-19) | fixed: 5 | 2026-06-28T06:30:02+00:00 | Vulnerability · Source |
| CVE-2018-1000620 | redhat_vex | nodejs-cryptiles: Insecure randomness causes the randomDigits() function returns a pseudo-random data string biased to certain digits | known affected: 1 known not affected: 9 | 2026-06-28T06:30:00+00:00 | Vulnerability · Source |
| CVE-2014-6512 | redhat_vex | OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509) | fixed: 961 | 2026-06-28T06:29:47+00:00 | Vulnerability · Source |
| CVE-2014-4721 | redhat_vex | php: type confusion issue in phpinfo() leading to information leak | fixed: 970 known affected: 1 | 2026-06-28T06:29:38+00:00 | Vulnerability · Source |
| CVE-2026-33179 | redhat_vex | libfuse: libfuse: Denial of Service via NULL pointer dereference and memory leak | known affected: 5 | 2026-06-28T06:29:36+00:00 | Vulnerability · Source |
| CVE-2014-6601 | redhat_vex | OpenJDK: class verifier insufficient invokespecial calls verification (Hotspot, 8058982) | fixed: 560 known not affected: 24 | 2026-06-28T06:29:32+00:00 | Vulnerability · Source |
| CVE-2012-5268 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T06:29:31+00:00 | Vulnerability · Source |
| CVE-2014-6492 | redhat_vex | JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment) | fixed: 530 | 2026-06-28T06:29:29+00:00 | Vulnerability · Source |
| CVE-2018-1000079 | redhat_vex | rubygems: Path traversal issue during gem installation allows to write to arbitrary filesystem locations | fixed: 885 known affected: 6 known not affected: 47 | 2026-06-28T06:29:27+00:00 | Vulnerability · Source |
| CVE-2014-2669 | redhat_vex | postgresql: multiple integer overflows in hstore_io.c | fixed: 49 known affected: 1 | 2026-06-28T06:29:25+00:00 | Vulnerability · Source |
| CVE-2018-1000074 | redhat_vex | rubygems: Unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML | fixed: 885 known affected: 6 known not affected: 47 | 2026-06-28T06:29:19+00:00 | Vulnerability · Source |
| CVE-2026-33633 | redhat_vex | kitty: Kitty: Remote Code Execution via crafted APC graphics protocol command | known not affected: 1 | 2026-06-28T06:29:19+00:00 | Vulnerability · Source |
| CVE-2017-5012 | redhat_vex | chromium-browser: heap overflow in v8 | fixed: 12 | 2026-06-28T06:29:17+00:00 | Vulnerability · Source |
| CVE-2014-0201 | redhat_vex | ovirt-engine-reports: various configuration files are world-readable | fixed: 2 | 2026-06-28T06:29:17+00:00 | Vulnerability · Source |
| CVE-2026-44662 | redhat_vex | rust-openssl: rust-openssl: Heap corruption due to incorrect output buffer sizing in AES key-wrap-with-padding ciphers | known not affected: 1 | 2026-06-28T06:29:15+00:00 | Vulnerability · Source |
| CVE-2013-7440 | redhat_vex | python: wildcard matching rules do not follow RFC 6125 | fixed: 280 known affected: 30 known not affected: 1872 | 2026-06-28T06:29:10+00:00 | Vulnerability · Source |