VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-4177 | redhat_vex | perl-YAML-Syck: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter | fixed: 22 known affected: 1 | 2026-06-28T06:29:05+00:00 | Vulnerability · Source |
| CVE-2026-8945 | redhat_vex | firefox: Sandbox escape in Firefox and Firefox Focus for Android | known not affected: 12 | 2026-06-28T06:29:04+00:00 | Vulnerability · Source |
| CVE-2018-0737 | redhat_vex | openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys | fixed: 282 known affected: 15 known not affected: 7 | 2026-06-28T06:29:00+00:00 | Vulnerability · Source |
| CVE-2014-4263 | redhat_vex | OpenJDK: insufficient Diffie-Hellman public key validation (Security, 8037162) | fixed: 840 | 2026-06-28T06:28:58+00:00 | Vulnerability · Source |
| CVE-2014-4260 | redhat_vex | mysql: unspecified vulnerability related to SRCHAR (CPU July 2014) | fixed: 278 under investigation: 9 | 2026-06-28T06:28:57+00:00 | Vulnerability · Source |
| CVE-2013-0776 | redhat_vex | Mozilla: Phishing on HTTPS connection through malicious proxy (MFSA 2013-27) | fixed: 299 known affected: 1 | 2026-06-28T06:28:51+00:00 | Vulnerability · Source |
| CVE-2013-0605 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T06:28:50+00:00 | Vulnerability · Source |
| CVE-2012-5250 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T06:28:46+00:00 | Vulnerability · Source |
| CVE-2025-54413 | redhat_vex | skops: Skops: Arbitrary Code Execution via MethodNode | known not affected: 1 | 2026-06-28T06:28:43+00:00 | Vulnerability · Source |
| CVE-2022-4904 | redhat_vex | c-ares: buffer overflow in config_sortlist() due to missing string length check | fixed: 423 known affected: 5 known not affected: 2 | 2026-06-28T06:28:42+00:00 | Vulnerability · Source |
| CVE-2022-48969 | redhat_vex | kernel: xen-netfront: Fix NULL sring after live migration | fixed: 305 known affected: 112 | 2026-06-28T06:28:41+00:00 | Vulnerability · Source |
| CVE-2022-48936 | redhat_vex | kernel: gso: do not skip outer ip header in case of ipip and net_failover | fixed: 346 known affected: 42 | 2026-06-28T06:28:41+00:00 | Vulnerability · Source |
| CVE-2020-25221 | redhat_vex | kernel: incorrect vsyscall page reference counting in get_gate_page function in mm/gup.c | known not affected: 104 | 2026-06-28T06:28:41+00:00 | Vulnerability · Source |
| CVE-2025-6984 | redhat_vex | langchain-community: Langchain-community insecure XML parsing | fixed: 4 known affected: 1 known not affected: 171 | 2026-06-28T06:28:37+00:00 | Vulnerability · Source |
| CVE-2020-6533 | redhat_vex | chromium-browser: Type Confusion in V8 | fixed: 14 | 2026-06-28T06:28:37+00:00 | Vulnerability · Source |
| CVE-2009-1095 | redhat_vex | OpenJDK Pack200 Buffer overflow vulnerability (6792554) | fixed: 434 | 2026-06-28T06:28:37+00:00 | Vulnerability · Source |
| CVE-2022-2938 | redhat_vex | kernel: use-after-free when psi trigger is destroyed while being polled | fixed: 279 known affected: 1 known not affected: 150 | 2026-06-28T06:28:32+00:00 | Vulnerability · Source |
| CVE-2015-8436 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T06:28:32+00:00 | Vulnerability · Source |
| CVE-2025-62522 | redhat_vex | vite: vite allows server.fs.deny bypass via backslash on Windows | known not affected: 6 | 2026-06-28T06:28:31+00:00 | Vulnerability · Source |
| CVE-2008-1189 | redhat_vex | Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190) | fixed: 434 | 2026-06-28T06:28:29+00:00 | Vulnerability · Source |
| CVE-2011-0001 | redhat_vex | scsi-target-utils: double-free vulnerability leads to pre-authenticated crash | fixed: 21 known affected: 1 | 2026-06-28T06:28:29+00:00 | Vulnerability · Source |
| CVE-2026-31459 | redhat_vex | kernel: mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure | known not affected: 274 | 2026-06-28T06:28:28+00:00 | Vulnerability · Source |
| CVE-2005-3389 | redhat_vex | security flaw | fixed: 336 | 2026-06-28T06:28:28+00:00 | Vulnerability · Source |
| CVE-2022-50743 | redhat_vex | kernel: Linux kernel: Denial of Service in erofs due to memory leak | fixed: 305 known affected: 22 known not affected: 166 | 2026-06-28T06:28:27+00:00 | Vulnerability · Source |
| CVE-2026-5866 | redhat_vex | chromium-browser: Use after free in Media | known not affected: 1 | 2026-06-28T06:28:26+00:00 | Vulnerability · Source |
| CVE-2026-25224 | redhat_vex | Fastify: Fastify: Denial of Service via unbounded buffering in Web Streams response handling | known affected: 7 | 2026-06-28T06:28:26+00:00 | Vulnerability · Source |
| CVE-2014-7923 | redhat_vex | ICU: regexp engine missing look-behind expression range check | fixed: 15 known affected: 11 | 2026-06-28T06:28:25+00:00 | Vulnerability · Source |
| CVE-2026-31457 | redhat_vex | kernel: mm/damon/sysfs: check contexts->nr in repeat_call_fn | known not affected: 274 | 2026-06-28T06:28:25+00:00 | Vulnerability · Source |
| CVE-2026-24688 | redhat_vex | pypdf: pypdf Infinite Loop when processing outlines/bookmarks | known affected: 35 | 2026-06-28T06:28:23+00:00 | Vulnerability · Source |
| CVE-2026-27142 | redhat_vex | html/template: URLs in meta content attribute actions are not escaped in html/template | fixed: 8 known affected: 32 | 2026-06-28T06:28:23+00:00 | Vulnerability · Source |
| CVE-2015-7638 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-25 | fixed: 5 | 2026-06-28T06:28:21+00:00 | Vulnerability · Source |
| CVE-2014-7185 | redhat_vex | python: buffer() integer overflow leading to out of bounds read | fixed: 305 known affected: 10 known not affected: 16 | 2026-06-28T06:28:21+00:00 | Vulnerability · Source |
| CVE-2014-6503 | redhat_vex | JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment) | fixed: 530 | 2026-06-28T06:28:20+00:00 | Vulnerability · Source |
| CVE-2010-3636 | redhat_vex | flash-plugin: security bulletin APSB10-26 | fixed: 9 | 2026-06-28T06:28:20+00:00 | Vulnerability · Source |
| CVE-2026-24491 | redhat_vex | freerdp: FreeRDP has a heap-use-after-free in video_timer | fixed: 732 known affected: 5 | 2026-06-28T06:28:20+00:00 | Vulnerability · Source |
| CVE-2013-2458 | redhat_vex | OpenJDK: Method handles (Libraries, 8009424) | fixed: 202 known not affected: 24 | 2026-06-28T06:28:19+00:00 | Vulnerability · Source |
| CVE-2008-1677 | redhat_vex | Server: insufficient buffer size for search patterns | fixed: 15 known not affected: 14 | 2026-06-28T06:28:19+00:00 | Vulnerability · Source |
| CVE-2025-8292 | redhat_vex | chromium-browser: Chrome Media Stream Use-After-Free | known not affected: 1 | 2026-06-28T06:28:19+00:00 | Vulnerability · Source |
| CVE-2026-22993 | redhat_vex | kernel: idpf: Fix RSS LUT NULL ptr issue after soft reset | known affected: 232 known not affected: 42 | 2026-06-28T06:28:19+00:00 | Vulnerability · Source |
| CVE-2026-31456 | redhat_vex | kernel: mm/pagewalk: fix race between concurrent split and refault | known affected: 260 known not affected: 14 | 2026-06-28T06:28:19+00:00 | Vulnerability · Source |
| CVE-2026-31438 | redhat_vex | kernel: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators | known affected: 260 known not affected: 14 | 2026-06-28T06:28:18+00:00 | Vulnerability · Source |
| CVE-2010-1241 | redhat_vex | Acroread: Heap-based overflow by opening a specially-crafted PDF file (FG-VD-10-005) | fixed: 12 | 2026-06-28T06:28:18+00:00 | Vulnerability · Source |
| CVE-2025-3122 | redhat_vex | WebAssembly/wabt: WebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereference | known not affected: 1 | 2026-06-28T06:28:18+00:00 | Vulnerability · Source |
| CVE-2025-49832 | redhat_vex | asterisk: Asterisk SIP Profile Remote Code Execution | known not affected: 1 | 2026-06-28T06:28:18+00:00 | Vulnerability · Source |
| CVE-2015-6765 | redhat_vex | chromium-browser: Use-after-free in AppCache | fixed: 12 | 2026-06-28T06:28:17+00:00 | Vulnerability · Source |
| CVE-2014-3068 | redhat_vex | JDK: Java CMS keystore provider potentially allows brute-force private key recovery | fixed: 375 | 2026-06-28T06:28:16+00:00 | Vulnerability · Source |
| CVE-2025-52497 | redhat_vex | mbedtls: Mbed TLS PEM Parsing Buffer Underflow | known not affected: 1 | 2026-06-28T06:28:14+00:00 | Vulnerability · Source |
| CVE-2010-3568 | redhat_vex | OpenJDK Deserialization Race condition (6559775) | fixed: 724 | 2026-06-28T06:28:14+00:00 | Vulnerability · Source |
| CVE-2014-0590 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-24) | fixed: 6 | 2026-06-28T06:28:13+00:00 | Vulnerability · Source |
| CVE-2025-50151 | redhat_vex | org.apache.jena: Apache Jena insufficent file validation | known affected: 54 | 2026-06-28T06:28:12+00:00 | Vulnerability · Source |