VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297692 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2014-7929 | redhat_vex | chromium-browser: use-after-free in DOM | fixed: 15 | 2026-06-28T06:25:39+00:00 | Vulnerability · Source |
| CVE-2022-2625 | redhat_vex | postgresql: Extension scripts replace objects not belonging to the extension. | fixed: 1400 known affected: 55 | 2026-06-28T06:25:35+00:00 | Vulnerability · Source |
| CVE-2021-39259 | redhat_vex | ntfs-3g: Out-of-bounds access in ntfs_inode_lookup_by_name() caused by an unsanitized attribute length | fixed: 2813 known affected: 8 | 2026-06-28T06:25:33+00:00 | Vulnerability · Source |
| CVE-2021-3426 | redhat_vex | python: Information disclosure via pydoc | fixed: 650 known affected: 9 known not affected: 65 | 2026-06-28T06:25:31+00:00 | Vulnerability · Source |
| CVE-2012-0768 | redhat_vex | flash-plugin: code execution flaw (APSB12-05) | fixed: 5 | 2026-06-28T06:25:31+00:00 | Vulnerability · Source |
| CVE-2026-23235 | redhat_vex | kernel: f2fs: fix out-of-bounds access in sysfs attribute read/write | known not affected: 274 | 2026-06-28T06:25:30+00:00 | Vulnerability · Source |
| CVE-2021-3411 | redhat_vex | kernel: broken KRETPROBES reports corruption of .text section while running a FTRACE stress tester | known affected: 17 known not affected: 182 | 2026-06-28T06:25:27+00:00 | Vulnerability · Source |
| CVE-2025-31720 | redhat_vex | jenkins: Missing permission check allows retrieving agent configurations | known not affected: 2 | 2026-06-28T06:25:26+00:00 | Vulnerability · Source |
| CVE-2025-25208 | redhat_vex | RHCL: Authorino Denial of Service Through AuthPolicy With sharedSecretRef Severity | known affected: 1 | 2026-06-28T06:25:24+00:00 | Vulnerability · Source |
| CVE-2013-1737 | redhat_vex | Mozilla: User-defined properties on DOM proxies get the wrong "this" object (MFSA 2013-91) | fixed: 140 known affected: 1 | 2026-06-28T06:25:24+00:00 | Vulnerability · Source |
| CVE-2021-33624 | redhat_vex | kernel: Linux kernel BPF protection against speculative execution attacks can be bypassed to read arbitrary kernel memory | known affected: 77 known not affected: 120 | 2026-06-28T06:25:23+00:00 | Vulnerability · Source |
| CVE-2014-6530 | redhat_vex | mysql: unspecified vulnerability related to CLIENT:MYSQLDUMP (CPU October 2014) | fixed: 278 under investigation: 9 | 2026-06-28T06:25:22+00:00 | Vulnerability · Source |
| CVE-2014-6591 | redhat_vex | ICU: font parsing OOB read (OpenJDK 2D, 8056276) | fixed: 948 known affected: 11 known not affected: 24 | 2026-06-28T06:25:22+00:00 | Vulnerability · Source |
| CVE-2014-6587 | redhat_vex | OpenJDK: MulticastSocket NULL pointer dereference (Libraries, 8056264) | fixed: 841 known not affected: 24 | 2026-06-28T06:25:21+00:00 | Vulnerability · Source |
| CVE-2014-6511 | redhat_vex | ICU: Layout Engine ContextualSubstitution missing boundary checks (JDK 2D, 8041540) | fixed: 961 known affected: 11 | 2026-06-28T06:25:19+00:00 | Vulnerability · Source |
| CVE-2014-6504 | redhat_vex | OpenJDK: incorrect optimization of range checks in C2 compiler (Hotspot, 8022783) | fixed: 522 | 2026-06-28T06:25:18+00:00 | Vulnerability · Source |
| CVE-2021-33285 | redhat_vex | ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of bytes_in_use value in MFT records | fixed: 2813 known affected: 8 | 2026-06-28T06:25:17+00:00 | Vulnerability · Source |
| CVE-2021-33193 | redhat_vex | httpd: Request splitting via HTTP/2 method injection and mod_proxy | fixed: 149 known affected: 15 known not affected: 143 | 2026-06-28T06:25:16+00:00 | Vulnerability · Source |
| CVE-2013-5801 | redhat_vex | JDK: unspecified vulnerability fixed in 7u45 (2D) | fixed: 471 | 2026-06-28T06:25:15+00:00 | Vulnerability · Source |
| CVE-2026-23150 | redhat_vex | kernel: nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame() | known not affected: 274 | 2026-06-28T06:25:12+00:00 | Vulnerability · Source |
| CVE-2007-3655 | redhat_vex | A buffer overflow vulnerability in Java Web Start URL parsing code | fixed: 158 | 2026-06-28T06:25:09+00:00 | Vulnerability · Source |
| CVE-2026-12023 | redhat_vex | chromium-browser: Google Chrome: Sandbox Escape vulnerability in GPU component | known not affected: 1 | 2026-06-28T06:25:09+00:00 | Vulnerability · Source |
| CVE-2019-2532 | redhat_vex | mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019) | fixed: 291 known affected: 8 known not affected: 98 | 2026-06-28T06:25:08+00:00 | Vulnerability · Source |
| CVE-2014-4266 | redhat_vex | OpenJDK: InfoBuilder incorrect return values (Serviceability, 8033301) | fixed: 503 known affected: 20 | 2026-06-28T06:25:08+00:00 | Vulnerability · Source |
| CVE-2021-3733 | redhat_vex | python: urllib: Regular expression DoS in AbstractBasicAuthHandler | fixed: 948 known affected: 57 known not affected: 4 | 2026-06-28T06:25:08+00:00 | Vulnerability · Source |
| CVE-2014-4288 | redhat_vex | JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment) | fixed: 530 | 2026-06-28T06:25:07+00:00 | Vulnerability · Source |
| CVE-2014-4274 | redhat_vex | mysql: unspecified MyISAM temporary file issue fixed in 5.5.39 and 5.6.20 | fixed: 278 under investigation: 9 | 2026-06-28T06:25:07+00:00 | Vulnerability · Source |
| CVE-2007-2263 | redhat_vex | realplayer swf file (flash media) heap overflow | fixed: 6 | 2026-06-28T06:25:06+00:00 | Vulnerability · Source |
| CVE-2014-4209 | redhat_vex | OpenJDK: SubjectDelegator protection insufficient (JMX, 8029755) | fixed: 840 | 2026-06-28T06:25:05+00:00 | Vulnerability · Source |
| CVE-2021-32606 | redhat_vex | kernel: isotp_setsockopt in net/can/isotp.c allows privilege escalation via use-after-free | known not affected: 197 | 2026-06-28T06:25:05+00:00 | Vulnerability · Source |
| CVE-2006-5857 | redhat_vex | security flaw | fixed: 56 | 2026-06-28T06:25:01+00:00 | Vulnerability · Source |
| CVE-2010-3554 | redhat_vex | OpenJDK corba reflection vulnerabilities (6891766,6925672) | fixed: 155 | 2026-06-28T06:25:00+00:00 | Vulnerability · Source |
| CVE-2021-32066 | redhat_vex | ruby: StartTLS stripping vulnerability in Net::IMAP | fixed: 1081 known affected: 16 known not affected: 33 | 2026-06-28T06:24:59+00:00 | Vulnerability · Source |
| CVE-2007-1701 | redhat_vex | php session extension global variable clobber | fixed: 608 | 2026-06-28T06:24:58+00:00 | Vulnerability · Source |
| CVE-2026-29628 | redhat_vex | tinyobjloader: tinyobjloader: Denial of Service via crafted .mtl file | known not affected: 1 | 2026-06-28T06:24:58+00:00 | Vulnerability · Source |
| CVE-2021-3638 | redhat_vex | QEMU: ati-vga: inconsistent check in ati_2d_blt() may lead to out-of-bounds write | known not affected: 126 | 2026-06-28T06:24:56+00:00 | Vulnerability · Source |
| CVE-2021-31615 | redhat_vex | bluetooth: Packet injection may lead to MITM or terminate existing link | known not affected: 197 | 2026-06-28T06:24:54+00:00 | Vulnerability · Source |
| CVE-2021-3156 | redhat_vex | sudo: Heap buffer overflow in argument parsing | fixed: 211 known not affected: 106 | 2026-06-28T06:24:54+00:00 | Vulnerability · Source |
| CVE-2005-3352 | redhat_vex | httpd cross-site scripting flaw in mod_imap | fixed: 160 | 2026-06-28T06:24:53+00:00 | Vulnerability · Source |
| CVE-2021-3139 | redhat_vex | tcmu-runner: SCSI target (LIO) write to any block on ILO backstore | fixed: 729 known affected: 1 known not affected: 4 | 2026-06-28T06:24:53+00:00 | Vulnerability · Source |
| CVE-2014-3190 | redhat_vex | chromium: multiple security fixes in Chrome 38.0.2125.101 | fixed: 15 | 2026-06-28T06:24:48+00:00 | Vulnerability · Source |
| CVE-2014-2397 | redhat_vex | OpenJDK: classfile parser invalid BootstrapMethods attribute length (Hotspot, 8034926) | fixed: 393 known not affected: 31 | 2026-06-28T06:24:46+00:00 | Vulnerability · Source |
| CVE-2014-2412 | redhat_vex | OpenJDK: AWT thread context handling (AWT, 8025010) | fixed: 856 known not affected: 7 | 2026-06-28T06:24:43+00:00 | Vulnerability · Source |
| CVE-2021-29648 | redhat_vex | kernel: DoS due to BPF subsystem does not properly consider that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF | known not affected: 197 | 2026-06-28T06:24:41+00:00 | Vulnerability · Source |
| CVE-2010-0837 | redhat_vex | OpenJDK JAR "unpack200" must verify input parameters (6902299) | fixed: 390 | 2026-06-28T06:24:41+00:00 | Vulnerability · Source |
| CVE-2021-29647 | redhat_vex | kernel: information disclosure due to uninitialized data structure in qrtr_recvmsg function in net/qrtr/qrtr.c | known not affected: 197 | 2026-06-28T06:24:40+00:00 | Vulnerability · Source |
| CVE-2026-7246 | redhat_vex | github.com/pallets/click: Pallets Click: Arbitrary command execution via command injection in click.edit() | fixed: 20 known not affected: 469 | 2026-06-28T06:24:39+00:00 | Vulnerability · Source |
| CVE-2026-24905 | redhat_vex | inspektor-gadget: Command Injection in Makefile.build | known not affected: 1 | 2026-06-28T06:24:39+00:00 | Vulnerability · Source |
| CVE-2021-28861 | redhat_vex | python: open redirection vulnerability in lib/http/server.py may lead to information disclosure | fixed: 629 known affected: 76 known not affected: 99 | 2026-06-28T06:24:34+00:00 | Vulnerability · Source |
| CVE-2014-0559 | redhat_vex | flash-plugin: multiple code execution or security bypass flaws (APSB14-21) | fixed: 5 | 2026-06-28T06:24:33+00:00 | Vulnerability · Source |