VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297692 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-27940 | redhat_vex | llama.cpp: heap-based buffer overflow via integer overflow in mem_size calculation (bypass of CVE-2025-53630 fix) | known not affected: 1 | 2026-06-28T06:20:41+00:00 | Vulnerability · Source |
| CVE-2012-0769 | redhat_vex | flash-plugin: information disclosure flaw (APSB12-05) | fixed: 5 | 2026-06-28T06:20:40+00:00 | Vulnerability · Source |
| CVE-2020-25032 | redhat_vex | python-flask-cors: allows ../ directory traversal to access private resources | known affected: 1 | 2026-06-28T06:20:39+00:00 | Vulnerability · Source |
| CVE-2021-43057 | redhat_vex | kernel: use-after-free in the SELinux handler for PTRACE_TRACEME | known not affected: 197 | 2026-06-28T06:20:36+00:00 | Vulnerability · Source |
| CVE-2016-4146 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T06:20:33+00:00 | Vulnerability · Source |
| CVE-2020-24165 | redhat_vex | QEMU: use-after-free in TCG accelerator can lead to local privilege escalation | known not affected: 77 | 2026-06-28T06:20:32+00:00 | Vulnerability · Source |
| CVE-2026-28804 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF with ASCIIHexDecode filter | known affected: 6 | 2026-06-28T06:20:32+00:00 | Vulnerability · Source |
| CVE-2019-9947 | redhat_vex | python: CRLF injection via the path part of the url passed to urlopen() | fixed: 890 known affected: 16 known not affected: 42 | 2026-06-28T06:20:29+00:00 | Vulnerability · Source |
| CVE-2019-20372 | redhat_vex | nginx: HTTP request smuggling in configurations with URL redirect used as error_page | fixed: 153 known affected: 34 | 2026-06-28T06:20:26+00:00 | Vulnerability · Source |
| CVE-2019-2455 | redhat_vex | mysql: Server: Parser unspecified vulnerability (CPU Jan 2019) | fixed: 868 known affected: 57 known not affected: 19 | 2026-06-28T06:20:25+00:00 | Vulnerability · Source |
| CVE-2022-40897 | redhat_vex | pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py | fixed: 1078 known affected: 9 known not affected: 75 | 2026-06-28T06:20:24+00:00 | Vulnerability · Source |
| CVE-2026-8557 | redhat_vex | chromium-browser: chromium-browser: Use after free in Accessibility | known not affected: 1 | 2026-06-28T06:20:24+00:00 | Vulnerability · Source |
| CVE-2020-17376 | redhat_vex | openstack-nova: Soft reboot after live-migration reverts instance to original source domain XML | fixed: 93 known affected: 13 | 2026-06-28T06:20:13+00:00 | Vulnerability · Source |
| CVE-2020-1725 | redhat_vex | keycloak-gatekeeper: improper usage of parsed claims for authorization leads to improper resource access | known not affected: 4 | 2026-06-28T06:20:02+00:00 | Vulnerability · Source |
| CVE-2020-1727 | redhat_vex | keycloak: missing input validation in IDP authorization URLs | fixed: 3 known affected: 3 | 2026-06-28T06:20:02+00:00 | Vulnerability · Source |
| CVE-2026-40686 | redhat_vex | Exim: Exim: Information disclosure via malformed UTF-8 header data | known not affected: 1 | 2026-06-28T06:20:01+00:00 | Vulnerability · Source |
| CVE-2020-16092 | redhat_vex | QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c | fixed: 1825 known affected: 47 known not affected: 24 | 2026-06-28T06:19:54+00:00 | Vulnerability · Source |
| CVE-2018-7191 | redhat_vex | kernel: denial of service via ioctl call in network tun handling | fixed: 438 known affected: 27 known not affected: 70 | 2026-06-28T06:19:40+00:00 | Vulnerability · Source |
| CVE-2020-14339 | redhat_vex | libvirt: leak of /dev/mapper/control into QEMU guests | fixed: 1756 known affected: 62 known not affected: 105 | 2026-06-28T06:19:24+00:00 | Vulnerability · Source |
| CVE-2021-4207 | redhat_vex | QEMU: QXL: double fetch in qxl_cursor() can lead to heap buffer overflow | fixed: 1692 known affected: 64 known not affected: 24 | 2026-06-28T06:19:24+00:00 | Vulnerability · Source |
| CVE-2026-22258 | redhat_vex | suricata: Suricata DCERPC: unbounded fragment buffering leads to memory exhaustion | known not affected: 1 | 2026-06-28T06:19:22+00:00 | Vulnerability · Source |
| CVE-2025-4057 | redhat_vex | activemq-artemis-operator: AMQ Broker Operator Starting Credentials Reuse | fixed: 15 | 2026-06-28T06:19:18+00:00 | Vulnerability · Source |
| CVE-2019-2614 | redhat_vex | mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) | fixed: 1269 known affected: 54 | 2026-06-28T06:19:10+00:00 | Vulnerability · Source |
| CVE-2025-61927 | redhat_vex | happy-dom: Happy-DOM VM Context Escape | fixed: 4 known not affected: 57 | 2026-06-28T06:19:09+00:00 | Vulnerability · Source |
| CVE-2020-14313 | redhat_vex | quay: build triggers can disclose robot account names and existence of private repos within namespaces | known affected: 1 | 2026-06-28T06:19:06+00:00 | Vulnerability · Source |
| CVE-2019-12382 | redhat_vex | kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service | fixed: 447 known affected: 42 known not affected: 17 | 2026-06-28T06:19:06+00:00 | Vulnerability · Source |
| CVE-2021-4197 | redhat_vex | kernel: cgroup: Use open-time creds and namespace for migration perm checks | fixed: 300 known not affected: 148 | 2026-06-28T06:19:04+00:00 | Vulnerability · Source |
| CVE-2025-3636 | redhat_vex | moodle: IDOR in Moodle RSS Block Allows Unauthorized Access to RSS Feeds | known not affected: 1 | 2026-06-28T06:19:01+00:00 | Vulnerability · Source |
| CVE-2019-11775 | redhat_vex | JDK: Failure to privatize a value pulled out of the loop by versioning | fixed: 201 | 2026-06-28T06:19:01+00:00 | Vulnerability · Source |
| CVE-2026-9898 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in GPU | known not affected: 1 | 2026-06-28T06:18:59+00:00 | Vulnerability · Source |
| CVE-2026-4697 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component | fixed: 320 known affected: 8 | 2026-06-28T06:18:59+00:00 | Vulnerability · Source |
| CVE-2019-13115 | redhat_vex | libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write | known affected: 12 known not affected: 4 | 2026-06-28T06:18:51+00:00 | Vulnerability · Source |
| CVE-2020-12770 | redhat_vex | kernel: sg_write function lacks an sg_remove_request call in a certain failure case | fixed: 685 known affected: 43 known not affected: 9 | 2026-06-28T06:18:50+00:00 | Vulnerability · Source |
| CVE-2020-13362 | redhat_vex | QEMU: megasas: OOB read access due to invalid index leads to DoS | known not affected: 93 | 2026-06-28T06:18:49+00:00 | Vulnerability · Source |
| CVE-2026-27977 | redhat_vex | next.js: Next.js: null origin can bypass dev HMR websocket CSRF checks | known affected: 18 | 2026-06-28T06:18:48+00:00 | Vulnerability · Source |
| CVE-2025-61873 | redhat_vex | rt: CSV injection via ticket values when TSV export is used | known not affected: 1 | 2026-06-28T06:18:46+00:00 | Vulnerability · Source |
| CVE-2020-13254 | redhat_vex | django: potential data leakage via malformed memcached keys | fixed: 9 known affected: 22 | 2026-06-28T06:18:46+00:00 | Vulnerability · Source |
| CVE-2018-3133 | redhat_vex | mysql: Server: Parser unspecified vulnerability (CPU Oct 2018) | fixed: 763 known affected: 51 known not affected: 46 | 2026-06-28T06:18:36+00:00 | Vulnerability · Source |
| CVE-2018-3136 | redhat_vex | OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534) | fixed: 1095 known affected: 8 | 2026-06-28T06:18:36+00:00 | Vulnerability · Source |
| CVE-2018-2817 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Apr 2018) | fixed: 843 known affected: 47 known not affected: 19 | 2026-06-28T06:18:35+00:00 | Vulnerability · Source |
| CVE-2020-12430 | redhat_vex | libvirt: memory leak in domstats may allow read-only user to perform DoS attack | known affected: 62 known not affected: 71 | 2026-06-28T06:18:35+00:00 | Vulnerability · Source |
| CVE-2021-4135 | redhat_vex | kernel: Heap information leak in map_lookup_elem function | known affected: 154 known not affected: 43 | 2026-06-28T06:18:33+00:00 | Vulnerability · Source |
| CVE-2020-12352 | redhat_vex | kernel: net: bluetooth: information leak when processing certain AMP packets | fixed: 970 known not affected: 32 | 2026-06-28T06:18:28+00:00 | Vulnerability · Source |
| CVE-2020-12059 | redhat_vex | ceph: specially crafted XML payload on POST requests leads to DoS by crashing RGW | fixed: 132 known not affected: 97 | 2026-06-28T06:18:26+00:00 | Vulnerability · Source |
| CVE-2019-9824 | redhat_vex | QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables | fixed: 838 known affected: 17 known not affected: 1 | 2026-06-28T06:18:22+00:00 | Vulnerability · Source |
| CVE-2020-11947 | redhat_vex | QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c may lead to information disclosure | fixed: 1756 known affected: 53 known not affected: 41 | 2026-06-28T06:18:20+00:00 | Vulnerability · Source |
| CVE-2019-9740 | redhat_vex | python: CRLF injection via the query part of the url passed to urlopen() | fixed: 890 known affected: 16 known not affected: 42 | 2026-06-28T06:18:20+00:00 | Vulnerability · Source |
| CVE-2019-9458 | redhat_vex | kernel: use after free due to race condition in the video driver leads to local privilege escalation | fixed: 379 known affected: 27 known not affected: 1 | 2026-06-28T06:18:18+00:00 | Vulnerability · Source |
| CVE-2019-0564 | redhat_vex | Core: Kestrel - WebSocket DoS via CancellationToken (CoreFX and ASP.NET) | fixed: 63 known not affected: 9 | 2026-06-28T06:18:18+00:00 | Vulnerability · Source |
| CVE-2020-10750 | redhat_vex | jaegertracing/jaeger: credentials leaked to container logs | fixed: 3 known affected: 2 | 2026-06-28T06:18:05+00:00 | Vulnerability · Source |