VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297692 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-1059 | redhat_vex | dpdk: Information exposure in unchecked guest physical to host virtual address translations | fixed: 62 known affected: 31 known not affected: 31 | 2026-06-28T06:30:54+00:00 | Vulnerability · Source |
| CVE-2013-5807 | redhat_vex | mysql: unspecified flaw related to Replication (CPU October 2013) | fixed: 90 known not affected: 20 | 2026-06-28T06:30:53+00:00 | Vulnerability · Source |
| CVE-2013-5372 | redhat_vex | JDK: XML4J xml entity expansion excessive memory use (XML) | fixed: 352 | 2026-06-28T06:30:53+00:00 | Vulnerability · Source |
| CVE-2026-5899 | redhat_vex | chromium-browser: Incorrect security UI in History Navigation | known not affected: 1 | 2026-06-28T06:30:47+00:00 | Vulnerability · Source |
| CVE-2012-5270 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T06:30:38+00:00 | Vulnerability · Source |
| CVE-2015-4792 | redhat_vex | mysql: unspecified vulnerability related to Server:Partition (CPU October 2015) | fixed: 406 known affected: 6 under investigation: 9 | 2026-06-28T06:30:35+00:00 | Vulnerability · Source |
| CVE-2013-0650 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-09) | fixed: 4 | 2026-06-28T06:30:34+00:00 | Vulnerability · Source |
| CVE-2012-5269 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T06:30:33+00:00 | Vulnerability · Source |
| CVE-2012-0860 | redhat_vex | rhev: vds_installer insecure /tmp use | fixed: 20 known affected: 1 | 2026-06-28T06:30:15+00:00 | Vulnerability · Source |
| CVE-2018-1000807 | redhat_vex | pyOpenSSL: Use-after-free in X509 object handling | fixed: 10 known affected: 8 known not affected: 8 | 2026-06-28T06:30:06+00:00 | Vulnerability · Source |
| CVE-2010-3629 | redhat_vex | acroread: multiple code execution flaws (APSB10-21) | fixed: 12 known not affected: 2 | 2026-06-28T06:30:04+00:00 | Vulnerability · Source |
| CVE-2010-3570 | redhat_vex | JDK unspecified vulnerability in Deployment Toolkit | fixed: 72 | 2026-06-28T06:30:03+00:00 | Vulnerability · Source |
| CVE-2010-3620 | redhat_vex | acroread: multiple code execution flaws (APSB10-21) | fixed: 12 known not affected: 2 | 2026-06-28T06:30:03+00:00 | Vulnerability · Source |
| CVE-2012-4168 | redhat_vex | flash-plugin: cross-domain information leak flaw (APSB12-19) | fixed: 5 | 2026-06-28T06:30:02+00:00 | Vulnerability · Source |
| CVE-2018-1000620 | redhat_vex | nodejs-cryptiles: Insecure randomness causes the randomDigits() function returns a pseudo-random data string biased to certain digits | known affected: 1 known not affected: 9 | 2026-06-28T06:30:00+00:00 | Vulnerability · Source |
| CVE-2014-6512 | redhat_vex | OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509) | fixed: 961 | 2026-06-28T06:29:47+00:00 | Vulnerability · Source |
| CVE-2014-4721 | redhat_vex | php: type confusion issue in phpinfo() leading to information leak | fixed: 970 known affected: 1 | 2026-06-28T06:29:38+00:00 | Vulnerability · Source |
| CVE-2026-33179 | redhat_vex | libfuse: libfuse: Denial of Service via NULL pointer dereference and memory leak | known affected: 5 | 2026-06-28T06:29:36+00:00 | Vulnerability · Source |
| CVE-2014-6601 | redhat_vex | OpenJDK: class verifier insufficient invokespecial calls verification (Hotspot, 8058982) | fixed: 560 known not affected: 24 | 2026-06-28T06:29:32+00:00 | Vulnerability · Source |
| CVE-2012-5268 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T06:29:31+00:00 | Vulnerability · Source |
| CVE-2014-6492 | redhat_vex | JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment) | fixed: 530 | 2026-06-28T06:29:29+00:00 | Vulnerability · Source |
| CVE-2018-1000079 | redhat_vex | rubygems: Path traversal issue during gem installation allows to write to arbitrary filesystem locations | fixed: 885 known affected: 6 known not affected: 47 | 2026-06-28T06:29:27+00:00 | Vulnerability · Source |
| CVE-2014-2669 | redhat_vex | postgresql: multiple integer overflows in hstore_io.c | fixed: 49 known affected: 1 | 2026-06-28T06:29:25+00:00 | Vulnerability · Source |
| CVE-2018-1000074 | redhat_vex | rubygems: Unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML | fixed: 885 known affected: 6 known not affected: 47 | 2026-06-28T06:29:19+00:00 | Vulnerability · Source |
| CVE-2026-33633 | redhat_vex | kitty: Kitty: Remote Code Execution via crafted APC graphics protocol command | known not affected: 1 | 2026-06-28T06:29:19+00:00 | Vulnerability · Source |
| CVE-2017-5012 | redhat_vex | chromium-browser: heap overflow in v8 | fixed: 12 | 2026-06-28T06:29:17+00:00 | Vulnerability · Source |
| CVE-2014-0201 | redhat_vex | ovirt-engine-reports: various configuration files are world-readable | fixed: 2 | 2026-06-28T06:29:17+00:00 | Vulnerability · Source |
| CVE-2026-44662 | redhat_vex | rust-openssl: rust-openssl: Heap corruption due to incorrect output buffer sizing in AES key-wrap-with-padding ciphers | known not affected: 1 | 2026-06-28T06:29:15+00:00 | Vulnerability · Source |
| CVE-2013-7440 | redhat_vex | python: wildcard matching rules do not follow RFC 6125 | fixed: 280 known affected: 30 known not affected: 1872 | 2026-06-28T06:29:10+00:00 | Vulnerability · Source |
| CVE-2026-4177 | redhat_vex | perl-YAML-Syck: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter | fixed: 22 known affected: 1 | 2026-06-28T06:29:05+00:00 | Vulnerability · Source |
| CVE-2026-8945 | redhat_vex | firefox: Sandbox escape in Firefox and Firefox Focus for Android | known not affected: 12 | 2026-06-28T06:29:04+00:00 | Vulnerability · Source |
| CVE-2018-0737 | redhat_vex | openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys | fixed: 282 known affected: 15 known not affected: 7 | 2026-06-28T06:29:00+00:00 | Vulnerability · Source |
| CVE-2014-4263 | redhat_vex | OpenJDK: insufficient Diffie-Hellman public key validation (Security, 8037162) | fixed: 840 | 2026-06-28T06:28:58+00:00 | Vulnerability · Source |
| CVE-2014-4260 | redhat_vex | mysql: unspecified vulnerability related to SRCHAR (CPU July 2014) | fixed: 278 under investigation: 9 | 2026-06-28T06:28:57+00:00 | Vulnerability · Source |
| CVE-2013-0776 | redhat_vex | Mozilla: Phishing on HTTPS connection through malicious proxy (MFSA 2013-27) | fixed: 299 known affected: 1 | 2026-06-28T06:28:51+00:00 | Vulnerability · Source |
| CVE-2013-0605 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T06:28:50+00:00 | Vulnerability · Source |
| CVE-2012-5250 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T06:28:46+00:00 | Vulnerability · Source |
| CVE-2025-54413 | redhat_vex | skops: Skops: Arbitrary Code Execution via MethodNode | known not affected: 1 | 2026-06-28T06:28:43+00:00 | Vulnerability · Source |
| CVE-2022-4904 | redhat_vex | c-ares: buffer overflow in config_sortlist() due to missing string length check | fixed: 423 known affected: 5 known not affected: 2 | 2026-06-28T06:28:42+00:00 | Vulnerability · Source |
| CVE-2022-48969 | redhat_vex | kernel: xen-netfront: Fix NULL sring after live migration | fixed: 305 known affected: 112 | 2026-06-28T06:28:41+00:00 | Vulnerability · Source |
| CVE-2022-48936 | redhat_vex | kernel: gso: do not skip outer ip header in case of ipip and net_failover | fixed: 346 known affected: 42 | 2026-06-28T06:28:41+00:00 | Vulnerability · Source |
| CVE-2020-25221 | redhat_vex | kernel: incorrect vsyscall page reference counting in get_gate_page function in mm/gup.c | known not affected: 104 | 2026-06-28T06:28:41+00:00 | Vulnerability · Source |
| CVE-2025-6984 | redhat_vex | langchain-community: Langchain-community insecure XML parsing | fixed: 4 known affected: 1 known not affected: 171 | 2026-06-28T06:28:37+00:00 | Vulnerability · Source |
| CVE-2020-6533 | redhat_vex | chromium-browser: Type Confusion in V8 | fixed: 14 | 2026-06-28T06:28:37+00:00 | Vulnerability · Source |
| CVE-2009-1095 | redhat_vex | OpenJDK Pack200 Buffer overflow vulnerability (6792554) | fixed: 434 | 2026-06-28T06:28:37+00:00 | Vulnerability · Source |
| CVE-2022-2938 | redhat_vex | kernel: use-after-free when psi trigger is destroyed while being polled | fixed: 279 known affected: 1 known not affected: 150 | 2026-06-28T06:28:32+00:00 | Vulnerability · Source |
| CVE-2015-8436 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T06:28:32+00:00 | Vulnerability · Source |
| CVE-2025-62522 | redhat_vex | vite: vite allows server.fs.deny bypass via backslash on Windows | known not affected: 6 | 2026-06-28T06:28:31+00:00 | Vulnerability · Source |
| CVE-2008-1189 | redhat_vex | Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190) | fixed: 434 | 2026-06-28T06:28:29+00:00 | Vulnerability · Source |
| CVE-2011-0001 | redhat_vex | scsi-target-utils: double-free vulnerability leads to pre-authenticated crash | fixed: 21 known affected: 1 | 2026-06-28T06:28:29+00:00 | Vulnerability · Source |