VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-58144 | redhat_vex | xen: Arm issues with page refcounting | known not affected: 1 | 2026-06-28T06:27:34+00:00 | Vulnerability · Source |
| CVE-2025-59142 | redhat_vex | color-string: color-string@2.1.1 contains malware after npm account takeover | known not affected: 60 | 2026-06-28T06:27:34+00:00 | Vulnerability · Source |
| CVE-2026-31443 | redhat_vex | kernel: dmaengine: idxd: Fix crash when the event log is disabled | known affected: 184 known not affected: 90 | 2026-06-28T06:27:34+00:00 | Vulnerability · Source |
| CVE-2026-25518 | redhat_vex | github.com/cert-manager/cert-manager: cert-manager: Denial of Service via crafted DNS entry | known affected: 52 | 2026-06-28T06:27:33+00:00 | Vulnerability · Source |
| CVE-2010-2223 | redhat_vex | vdsm: missing VM post-zeroing after removal | fixed: 6 | 2026-06-28T06:27:32+00:00 | Vulnerability · Source |
| CVE-2022-32213 | redhat_vex | nodejs: HTTP request smuggling due to flawed parsing of Transfer-Encoding | fixed: 144 known not affected: 20 | 2026-06-28T06:27:31+00:00 | Vulnerability · Source |
| CVE-2010-4466 | redhat_vex | JDK unspecified vulnerability in Deployment component | fixed: 632 | 2026-06-28T06:27:31+00:00 | Vulnerability · Source |
| CVE-2022-31626 | redhat_vex | php: password of excessive length triggers buffer overflow leading to RCE | fixed: 1210 known not affected: 54 | 2026-06-28T06:27:30+00:00 | Vulnerability · Source |
| CVE-2009-3876 | redhat_vex | OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877 | fixed: 644 | 2026-06-28T06:27:30+00:00 | Vulnerability · Source |
| CVE-2010-3640 | redhat_vex | flash-plugin: security bulletin APSB10-26 | fixed: 9 | 2026-06-28T06:27:30+00:00 | Vulnerability · Source |
| CVE-2026-11694 | redhat_vex | chromium-browser: Use after free in ServiceWorker | known not affected: 1 | 2026-06-28T06:27:30+00:00 | Vulnerability · Source |
| CVE-2010-2183 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T06:27:27+00:00 | Vulnerability · Source |
| CVE-2010-2184 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T06:27:27+00:00 | Vulnerability · Source |
| CVE-2026-11683 | redhat_vex | chromium-browser: Use after free in WebCodecs | known not affected: 1 | 2026-06-28T06:27:27+00:00 | Vulnerability · Source |
| CVE-2026-43149 | redhat_vex | kernel: net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() | known not affected: 274 | 2026-06-28T06:27:26+00:00 | Vulnerability · Source |
| CVE-2010-0082 | redhat_vex | OpenJDK Loader-constraint table allows arrays instead of only the base-classes (6626217) | fixed: 118 | 2026-06-28T06:27:26+00:00 | Vulnerability · Source |
| CVE-2009-2690 | redhat_vex | OpenJDK private variable information disclosure (6777487) | fixed: 98 | 2026-06-28T06:27:25+00:00 | Vulnerability · Source |
| CVE-2009-4031 | redhat_vex | kernel: KVM: x86 emulator: limit instructions to 15 bytes | fixed: 15 | 2026-06-28T06:27:25+00:00 | Vulnerability · Source |
| CVE-2009-3796 | redhat_vex | flash-plugin: multiple code execution flaws (APSB09-19) (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800) | fixed: 10 | 2026-06-28T06:27:25+00:00 | Vulnerability · Source |
| CVE-2026-11693 | redhat_vex | chromium-browser: Inappropriate implementation in Plugins | known not affected: 1 | 2026-06-28T06:27:24+00:00 | Vulnerability · Source |
| CVE-2008-5353 | redhat_vex | OpenJDK calendar object deserialization allows privilege escalation (6734167) | fixed: 587 | 2026-06-28T06:27:22+00:00 | Vulnerability · Source |
| CVE-2009-1105 | redhat_vex | OpenJDK: Possibility of trusted applet run in older, vulnerable version of JRE (6706490) | fixed: 338 | 2026-06-28T06:27:22+00:00 | Vulnerability · Source |
| CVE-2026-31434 | redhat_vex | kernel: btrfs: fix leak of kobject name for sub-group space_info | known not affected: 274 | 2026-06-28T06:27:21+00:00 | Vulnerability · Source |
| CVE-2008-4819 | redhat_vex | Flash Player DNS rebind attack | fixed: 10 | 2026-06-28T06:27:20+00:00 | Vulnerability · Source |
| CVE-2008-3110 | redhat_vex | security flaw | fixed: 196 | 2026-06-28T06:27:19+00:00 | Vulnerability · Source |
| CVE-2026-11688 | redhat_vex | chromium-browser: Object lifecycle issue in SVG | known not affected: 1 | 2026-06-28T06:27:18+00:00 | Vulnerability · Source |
| CVE-2008-2930 | redhat_vex | Server: temporary DoS via crafted pattern searches | fixed: 20 known not affected: 24 | 2026-06-28T06:27:18+00:00 | Vulnerability · Source |
| CVE-2008-2929 | redhat_vex | Server: multiple XSS issues | fixed: 15 known not affected: 14 | 2026-06-28T06:27:18+00:00 | Vulnerability · Source |
| CVE-2026-43146 | redhat_vex | kernel: media: iris: Add buffer to list only after successful allocation | known not affected: 274 | 2026-06-28T06:27:17+00:00 | Vulnerability · Source |
| CVE-2026-11686 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Dawn | known not affected: 1 | 2026-06-28T06:27:16+00:00 | Vulnerability · Source |
| CVE-2007-6242 | redhat_vex | flash: abitrary code execution | fixed: 10 | 2026-06-28T06:27:15+00:00 | Vulnerability · Source |
| CVE-2022-2639 | redhat_vex | kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size() | fixed: 1170 known affected: 28 known not affected: 14 | 2026-06-28T06:27:14+00:00 | Vulnerability · Source |
| CVE-2007-6019 | redhat_vex | Flash Player input validation error | fixed: 10 | 2026-06-28T06:27:14+00:00 | Vulnerability · Source |
| CVE-2026-23017 | redhat_vex | kernel: idpf: fix error handling in the init_task on load | known affected: 232 known not affected: 42 | 2026-06-28T06:27:13+00:00 | Vulnerability · Source |
| CVE-2025-30211 | redhat_vex | erlang: KEX init error results with excessive memory usage | known not affected: 41 | 2026-06-28T06:27:11+00:00 | Vulnerability · Source |
| CVE-2026-11678 | redhat_vex | chromium-browser: Integer overflow in libyuv | known not affected: 1 | 2026-06-28T06:27:11+00:00 | Vulnerability · Source |
| CVE-2025-71163 | redhat_vex | kernel: dmaengine: idxd: fix device leaks on compat bind and unbind | known not affected: 274 | 2026-06-28T06:27:10+00:00 | Vulnerability · Source |
| CVE-2025-3070 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Extensions | known not affected: 1 | 2026-06-28T06:27:06+00:00 | Vulnerability · Source |
| CVE-2025-3030 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 | fixed: 279 known affected: 10 | 2026-06-28T06:27:06+00:00 | Vulnerability · Source |
| CVE-2022-22978 | redhat_vex | springframework: Authorization Bypass in RegexRequestMatcher | fixed: 3 known affected: 11 known not affected: 10 | 2026-06-28T06:27:05+00:00 | Vulnerability · Source |
| CVE-2013-2152 | redhat_vex | rhevm: spice service unquoted search path | fixed: 2 known affected: 1 | 2026-06-28T06:27:04+00:00 | Vulnerability · Source |
| CVE-2026-44331 | redhat_vex | ProFTPD: mod_wrap2_sql: SQL injection via reverse DNS hostname | known not affected: 1 | 2026-06-28T06:27:03+00:00 | Vulnerability · Source |
| CVE-2026-11660 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in New Tab Page | known not affected: 1 | 2026-06-28T06:27:00+00:00 | Vulnerability · Source |
| CVE-2022-21529 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2022) | fixed: 202 known not affected: 123 | 2026-06-28T06:27:00+00:00 | Vulnerability · Source |
| CVE-2020-2570 | redhat_vex | mysql: C API unspecified vulnerability (CPU Jan 2020) | fixed: 337 known not affected: 92 | 2026-06-28T06:27:00+00:00 | Vulnerability · Source |
| CVE-2025-31675 | redhat_vex | drupal: Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004 | known not affected: 1 | 2026-06-28T06:27:00+00:00 | Vulnerability · Source |
| CVE-2025-3264 | redhat_vex | transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers | known not affected: 60 | 2026-06-28T06:26:59+00:00 | Vulnerability · Source |
| CVE-2026-24116 | redhat_vex | wasmtime: Wasmtime segfault or unused out-of-sandbox load with f64.copysign operator on x86-64 | known not affected: 1 | 2026-06-28T06:26:56+00:00 | Vulnerability · Source |
| CVE-2025-32445 | redhat_vex | argo-events: Argo Events users can gain privileged access to the host system and cluster with EventSource and Sensor CR | known not affected: 2 | 2026-06-28T06:26:56+00:00 | Vulnerability · Source |
| CVE-2013-6629 | redhat_vex | libjpeg: information leak (read of uninitialized memory) | fixed: 686 known not affected: 7 | 2026-06-28T06:26:56+00:00 | Vulnerability · Source |