VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297692 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-54314 | redhat_vex | thor: Thor Command Injection Vulnerability | known affected: 2 | 2026-06-28T06:28:01+00:00 | Vulnerability · Source |
| CVE-2010-2161 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T06:27:59+00:00 | Vulnerability · Source |
| CVE-2020-27673 | redhat_vex | kernel: xen: guest OS users can cause a DoS via a high rate of events to dom0 (XSA-332) | known affected: 1 known not affected: 103 | 2026-06-28T06:27:58+00:00 | Vulnerability · Source |
| CVE-2026-34543 | redhat_vex | OpenEXR: OpenEXR: Information disclosure via malicious EXR file | known affected: 3 known not affected: 9 | 2026-06-28T06:27:57+00:00 | Vulnerability · Source |
| CVE-2013-0646 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-09) | fixed: 4 | 2026-06-28T06:27:55+00:00 | Vulnerability · Source |
| CVE-2026-24028 | redhat_vex | dnsdist: dnsdist and PowerDNS: Denial of service or information disclosure via crafted DNS response packet | known not affected: 1 | 2026-06-28T06:27:54+00:00 | Vulnerability · Source |
| CVE-2020-2760 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2020) | fixed: 1396 known affected: 3 known not affected: 29 | 2026-06-28T06:27:54+00:00 | Vulnerability · Source |
| CVE-2009-3872 | redhat_vex | JRE JPEG JFIF Decoder issue (6862969) | fixed: 548 | 2026-06-28T06:27:54+00:00 | Vulnerability · Source |
| CVE-2012-5287 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T06:27:52+00:00 | Vulnerability · Source |
| CVE-2009-1870 | redhat_vex | flash-plugin: multiple information disclosure flaws (APSB09-10) | fixed: 10 | 2026-06-28T06:27:52+00:00 | Vulnerability · Source |
| CVE-2012-5272 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T06:27:51+00:00 | Vulnerability · Source |
| CVE-2023-22015 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023) | fixed: 206 known not affected: 93 | 2026-06-28T06:27:50+00:00 | Vulnerability · Source |
| CVE-2010-2212 | redhat_vex | acroread: multiple code execution flaws (APSB10-15) | fixed: 12 | 2026-06-28T06:27:50+00:00 | Vulnerability · Source |
| CVE-2026-9938 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | known not affected: 1 | 2026-06-28T06:27:50+00:00 | Vulnerability · Source |
| CVE-2026-27205 | redhat_vex | flask: Flask: Information disclosure via improper caching of session data | known affected: 8 | 2026-06-28T06:27:48+00:00 | Vulnerability · Source |
| CVE-2026-31510 | redhat_vex | kernel: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb | known affected: 260 known not affected: 14 | 2026-06-28T06:27:47+00:00 | Vulnerability · Source |
| CVE-2025-7969 | redhat_vex | markdown-it: Markdown-it Cross-site scripting | known affected: 9 | 2026-06-28T06:27:46+00:00 | Vulnerability · Source |
| CVE-2025-30192 | redhat_vex | pdns-recursor: A Recursor configured to send out ECS enabled queries can be sensitive to spoofing attempts | known not affected: 1 | 2026-06-28T06:27:46+00:00 | Vulnerability · Source |
| CVE-2026-31509 | redhat_vex | kernel: nfc: nci: fix circular locking dependency in nci_close_device | known not affected: 274 | 2026-06-28T06:27:46+00:00 | Vulnerability · Source |
| CVE-2011-0622 | redhat_vex | flash-plugin: crash and potential arbitrary code execution (APSB11-12) | fixed: 5 | 2026-06-28T06:27:44+00:00 | Vulnerability · Source |
| CVE-2011-0618 | redhat_vex | flash-plugin: crash and potential arbitrary code execution (APSB11-12) | fixed: 5 | 2026-06-28T06:27:43+00:00 | Vulnerability · Source |
| CVE-2026-23214 | redhat_vex | kernel: btrfs: reject new transactions if the fs is fully read-only | known affected: 118 known not affected: 156 | 2026-06-28T06:27:42+00:00 | Vulnerability · Source |
| CVE-2026-0397 | redhat_vex | dnsdist: dnsdist and PowerDNS: Information Disclosure via Cross-Origin Resource Sharing (CORS) Misconfiguration | known not affected: 1 | 2026-06-28T06:27:42+00:00 | Vulnerability · Source |
| CVE-2015-3118 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-16 | fixed: 5 | 2026-06-28T06:27:41+00:00 | Vulnerability · Source |
| CVE-2011-2130 | redhat_vex | flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) | fixed: 23 | 2026-06-28T06:27:39+00:00 | Vulnerability · Source |
| CVE-2026-25674 | redhat_vex | django: Django: Incorrect file permissions due to race condition | known affected: 12 | 2026-06-28T06:27:39+00:00 | Vulnerability · Source |
| CVE-2014-0412 | redhat_vex | mysql: unspecified vulnerability related to InnoDB DoS (CPU Jan 2014) | fixed: 206 known not affected: 9 | 2026-06-28T06:27:38+00:00 | Vulnerability · Source |
| CVE-2026-31445 | redhat_vex | kernel: mm/damon/core: avoid use of half-online-committed context | known not affected: 274 | 2026-06-28T06:27:38+00:00 | Vulnerability · Source |
| CVE-2026-31444 | redhat_vex | kernel: ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() | known not affected: 274 | 2026-06-28T06:27:35+00:00 | Vulnerability · Source |
| CVE-2025-58144 | redhat_vex | xen: Arm issues with page refcounting | known not affected: 1 | 2026-06-28T06:27:34+00:00 | Vulnerability · Source |
| CVE-2025-59142 | redhat_vex | color-string: color-string@2.1.1 contains malware after npm account takeover | known not affected: 60 | 2026-06-28T06:27:34+00:00 | Vulnerability · Source |
| CVE-2026-31443 | redhat_vex | kernel: dmaengine: idxd: Fix crash when the event log is disabled | known affected: 184 known not affected: 90 | 2026-06-28T06:27:34+00:00 | Vulnerability · Source |
| CVE-2026-25518 | redhat_vex | github.com/cert-manager/cert-manager: cert-manager: Denial of Service via crafted DNS entry | known affected: 52 | 2026-06-28T06:27:33+00:00 | Vulnerability · Source |
| CVE-2010-2223 | redhat_vex | vdsm: missing VM post-zeroing after removal | fixed: 6 | 2026-06-28T06:27:32+00:00 | Vulnerability · Source |
| CVE-2022-32213 | redhat_vex | nodejs: HTTP request smuggling due to flawed parsing of Transfer-Encoding | fixed: 144 known not affected: 20 | 2026-06-28T06:27:31+00:00 | Vulnerability · Source |
| CVE-2010-4466 | redhat_vex | JDK unspecified vulnerability in Deployment component | fixed: 632 | 2026-06-28T06:27:31+00:00 | Vulnerability · Source |
| CVE-2022-31626 | redhat_vex | php: password of excessive length triggers buffer overflow leading to RCE | fixed: 1210 known not affected: 54 | 2026-06-28T06:27:30+00:00 | Vulnerability · Source |
| CVE-2009-3876 | redhat_vex | OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877 | fixed: 644 | 2026-06-28T06:27:30+00:00 | Vulnerability · Source |
| CVE-2010-3640 | redhat_vex | flash-plugin: security bulletin APSB10-26 | fixed: 9 | 2026-06-28T06:27:30+00:00 | Vulnerability · Source |
| CVE-2026-11694 | redhat_vex | chromium-browser: Use after free in ServiceWorker | known not affected: 1 | 2026-06-28T06:27:30+00:00 | Vulnerability · Source |
| CVE-2010-2183 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T06:27:27+00:00 | Vulnerability · Source |
| CVE-2010-2184 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T06:27:27+00:00 | Vulnerability · Source |
| CVE-2026-11683 | redhat_vex | chromium-browser: Use after free in WebCodecs | known not affected: 1 | 2026-06-28T06:27:27+00:00 | Vulnerability · Source |
| CVE-2026-43149 | redhat_vex | kernel: net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() | known not affected: 274 | 2026-06-28T06:27:26+00:00 | Vulnerability · Source |
| CVE-2010-0082 | redhat_vex | OpenJDK Loader-constraint table allows arrays instead of only the base-classes (6626217) | fixed: 118 | 2026-06-28T06:27:26+00:00 | Vulnerability · Source |
| CVE-2009-2690 | redhat_vex | OpenJDK private variable information disclosure (6777487) | fixed: 98 | 2026-06-28T06:27:25+00:00 | Vulnerability · Source |
| CVE-2009-4031 | redhat_vex | kernel: KVM: x86 emulator: limit instructions to 15 bytes | fixed: 15 | 2026-06-28T06:27:25+00:00 | Vulnerability · Source |
| CVE-2009-3796 | redhat_vex | flash-plugin: multiple code execution flaws (APSB09-19) (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800) | fixed: 10 | 2026-06-28T06:27:25+00:00 | Vulnerability · Source |
| CVE-2026-11693 | redhat_vex | chromium-browser: Inappropriate implementation in Plugins | known not affected: 1 | 2026-06-28T06:27:24+00:00 | Vulnerability · Source |
| CVE-2008-5353 | redhat_vex | OpenJDK calendar object deserialization allows privilege escalation (6734167) | fixed: 587 | 2026-06-28T06:27:22+00:00 | Vulnerability · Source |