VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297692 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2009-1105 | redhat_vex | OpenJDK: Possibility of trusted applet run in older, vulnerable version of JRE (6706490) | fixed: 338 | 2026-06-28T06:27:22+00:00 | Vulnerability · Source |
| CVE-2026-31434 | redhat_vex | kernel: btrfs: fix leak of kobject name for sub-group space_info | known not affected: 274 | 2026-06-28T06:27:21+00:00 | Vulnerability · Source |
| CVE-2008-4819 | redhat_vex | Flash Player DNS rebind attack | fixed: 10 | 2026-06-28T06:27:20+00:00 | Vulnerability · Source |
| CVE-2008-3110 | redhat_vex | security flaw | fixed: 196 | 2026-06-28T06:27:19+00:00 | Vulnerability · Source |
| CVE-2026-11688 | redhat_vex | chromium-browser: Object lifecycle issue in SVG | known not affected: 1 | 2026-06-28T06:27:18+00:00 | Vulnerability · Source |
| CVE-2008-2930 | redhat_vex | Server: temporary DoS via crafted pattern searches | fixed: 20 known not affected: 24 | 2026-06-28T06:27:18+00:00 | Vulnerability · Source |
| CVE-2008-2929 | redhat_vex | Server: multiple XSS issues | fixed: 15 known not affected: 14 | 2026-06-28T06:27:18+00:00 | Vulnerability · Source |
| CVE-2026-43146 | redhat_vex | kernel: media: iris: Add buffer to list only after successful allocation | known not affected: 274 | 2026-06-28T06:27:17+00:00 | Vulnerability · Source |
| CVE-2026-11686 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Dawn | known not affected: 1 | 2026-06-28T06:27:16+00:00 | Vulnerability · Source |
| CVE-2007-6242 | redhat_vex | flash: abitrary code execution | fixed: 10 | 2026-06-28T06:27:15+00:00 | Vulnerability · Source |
| CVE-2022-2639 | redhat_vex | kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size() | fixed: 1170 known affected: 28 known not affected: 14 | 2026-06-28T06:27:14+00:00 | Vulnerability · Source |
| CVE-2007-6019 | redhat_vex | Flash Player input validation error | fixed: 10 | 2026-06-28T06:27:14+00:00 | Vulnerability · Source |
| CVE-2026-23017 | redhat_vex | kernel: idpf: fix error handling in the init_task on load | known affected: 232 known not affected: 42 | 2026-06-28T06:27:13+00:00 | Vulnerability · Source |
| CVE-2025-30211 | redhat_vex | erlang: KEX init error results with excessive memory usage | known not affected: 41 | 2026-06-28T06:27:11+00:00 | Vulnerability · Source |
| CVE-2026-11678 | redhat_vex | chromium-browser: Integer overflow in libyuv | known not affected: 1 | 2026-06-28T06:27:11+00:00 | Vulnerability · Source |
| CVE-2025-71163 | redhat_vex | kernel: dmaengine: idxd: fix device leaks on compat bind and unbind | known not affected: 274 | 2026-06-28T06:27:10+00:00 | Vulnerability · Source |
| CVE-2025-3070 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Extensions | known not affected: 1 | 2026-06-28T06:27:06+00:00 | Vulnerability · Source |
| CVE-2025-3030 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 | fixed: 279 known affected: 10 | 2026-06-28T06:27:06+00:00 | Vulnerability · Source |
| CVE-2022-22978 | redhat_vex | springframework: Authorization Bypass in RegexRequestMatcher | fixed: 3 known affected: 11 known not affected: 10 | 2026-06-28T06:27:05+00:00 | Vulnerability · Source |
| CVE-2013-2152 | redhat_vex | rhevm: spice service unquoted search path | fixed: 2 known affected: 1 | 2026-06-28T06:27:04+00:00 | Vulnerability · Source |
| CVE-2026-44331 | redhat_vex | ProFTPD: mod_wrap2_sql: SQL injection via reverse DNS hostname | known not affected: 1 | 2026-06-28T06:27:03+00:00 | Vulnerability · Source |
| CVE-2026-11660 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in New Tab Page | known not affected: 1 | 2026-06-28T06:27:00+00:00 | Vulnerability · Source |
| CVE-2022-21529 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2022) | fixed: 202 known not affected: 123 | 2026-06-28T06:27:00+00:00 | Vulnerability · Source |
| CVE-2020-2570 | redhat_vex | mysql: C API unspecified vulnerability (CPU Jan 2020) | fixed: 337 known not affected: 92 | 2026-06-28T06:27:00+00:00 | Vulnerability · Source |
| CVE-2025-31675 | redhat_vex | drupal: Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004 | known not affected: 1 | 2026-06-28T06:27:00+00:00 | Vulnerability · Source |
| CVE-2025-3264 | redhat_vex | transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers | known not affected: 60 | 2026-06-28T06:26:59+00:00 | Vulnerability · Source |
| CVE-2026-24116 | redhat_vex | wasmtime: Wasmtime segfault or unused out-of-sandbox load with f64.copysign operator on x86-64 | known not affected: 1 | 2026-06-28T06:26:56+00:00 | Vulnerability · Source |
| CVE-2025-32445 | redhat_vex | argo-events: Argo Events users can gain privileged access to the host system and cluster with EventSource and Sensor CR | known not affected: 2 | 2026-06-28T06:26:56+00:00 | Vulnerability · Source |
| CVE-2013-6629 | redhat_vex | libjpeg: information leak (read of uninitialized memory) | fixed: 686 known not affected: 7 | 2026-06-28T06:26:56+00:00 | Vulnerability · Source |
| CVE-2015-2639 | redhat_vex | mysql: unspecified vulnerability related to Server:Security:Firewall (CPU July 2015) | fixed: 147 known not affected: 41 | 2026-06-28T06:26:54+00:00 | Vulnerability · Source |
| CVE-2022-1789 | redhat_vex | kernel: KVM: NULL pointer dereference in kvm_mmu_invpcid_gva | fixed: 531 known not affected: 42 | 2026-06-28T06:26:53+00:00 | Vulnerability · Source |
| CVE-2020-14861 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020) | fixed: 155 known not affected: 92 | 2026-06-28T06:26:53+00:00 | Vulnerability · Source |
| CVE-2015-2638 | redhat_vex | JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D) | fixed: 636 | 2026-06-28T06:26:52+00:00 | Vulnerability · Source |
| CVE-2026-23927 | redhat_vex | Zabbix Agent 2: Oracle: Zabbix Agent 2: Oracle database credential disclosure via TNS connection string injection | known not affected: 1 | 2026-06-28T06:26:52+00:00 | Vulnerability · Source |
| CVE-2026-11647 | redhat_vex | chromium-browser: Use after free in Printing | known not affected: 1 | 2026-06-28T06:26:50+00:00 | Vulnerability · Source |
| CVE-2015-2628 | redhat_vex | OpenJDK: IIOPInputStream type confusion vulnerability (CORBA, 8076376) | fixed: 650 | 2026-06-28T06:26:50+00:00 | Vulnerability · Source |
| CVE-2026-23257 | redhat_vex | kernel: net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup | known affected: 76 known not affected: 198 | 2026-06-28T06:26:49+00:00 | Vulnerability · Source |
| CVE-2021-3587 | redhat_vex | kernel: nfc: Null pointer dereference in llcp_sock_getname | known not affected: 198 | 2026-06-28T06:26:49+00:00 | Vulnerability · Source |
| CVE-2020-14793 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020) | fixed: 155 known affected: 10 known not affected: 82 | 2026-06-28T06:26:49+00:00 | Vulnerability · Source |
| CVE-2026-52926 | redhat_vex | kernel: batman-adv: clear current gateway during teardown | known not affected: 274 | 2026-06-28T06:26:46+00:00 | Vulnerability · Source |
| CVE-2026-11692 | redhat_vex | chromium-browser: Use after free in Read Anything | known not affected: 1 | 2026-06-28T06:26:45+00:00 | Vulnerability · Source |
| CVE-2026-11677 | redhat_vex | chromium-browser: Race in Network | known not affected: 1 | 2026-06-28T06:26:45+00:00 | Vulnerability · Source |
| CVE-2022-1263 | redhat_vex | kernel: KVM: NULL pointer dereference in kvm_dirty_ring_push in virt/kvm/dirty_ring.c | fixed: 346 known not affected: 42 | 2026-06-28T06:26:45+00:00 | Vulnerability · Source |
| CVE-2026-31440 | redhat_vex | kernel: Linux kernel: Denial of Service due to event log memory leak in dmaengine: idxd | known affected: 184 known not affected: 90 | 2026-06-28T06:26:42+00:00 | Vulnerability · Source |
| CVE-2020-14656 | redhat_vex | mysql: Server: Locking unspecified vulnerability (CPU Jul 2020) | fixed: 337 known not affected: 92 | 2026-06-28T06:26:42+00:00 | Vulnerability · Source |
| CVE-2013-1557 | redhat_vex | OpenJDK: LogStream.setDefaultStream() missing security restrictions (RMI, 8001329) | fixed: 543 | 2026-06-28T06:26:40+00:00 | Vulnerability · Source |
| CVE-2026-23232 | redhat_vex | kernel: Revert "f2fs: block cache/dio write during f2fs_enable_checkpoint()" | known not affected: 274 | 2026-06-28T06:26:39+00:00 | Vulnerability · Source |
| CVE-2025-57833 | redhat_vex | django: Django SQL injection in FilteredRelation column aliases | fixed: 50 known affected: 4 known not affected: 637 | 2026-06-28T06:26:38+00:00 | Vulnerability · Source |
| CVE-2022-0617 | redhat_vex | kernel: NULL pointer dereference in udf_expand_file_adinicbdue() during writeback | fixed: 475 known affected: 28 known not affected: 14 | 2026-06-28T06:26:37+00:00 | Vulnerability · Source |
| CVE-2026-11657 | redhat_vex | chromium-browser: Use after free in Payments | known not affected: 1 | 2026-06-28T06:26:37+00:00 | Vulnerability · Source |