VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297692 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-18281 | redhat_vex | kernel: TLB flush happens too late on mremap | fixed: 572 known not affected: 63 | 2026-06-28T05:49:36+00:00 | Vulnerability · Source |
| CVE-2018-18386 | redhat_vex | kernel: Type confusion in drivers/tty/n_tty.c allows for a denial of service | fixed: 26 known not affected: 103 | 2026-06-28T05:49:34+00:00 | Vulnerability · Source |
| CVE-2018-18359 | redhat_vex | chromium-browser: Out of bounds read in V8 | fixed: 12 | 2026-06-28T05:49:34+00:00 | Vulnerability · Source |
| CVE-2018-18357 | redhat_vex | chromium-browser: Insufficient policy enforcement in URL Formatter | fixed: 12 | 2026-06-28T05:49:34+00:00 | Vulnerability · Source |
| CVE-2018-17977 | redhat_vex | kernel: Mishandled interactions among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets resulting in a denial of service | known affected: 104 | 2026-06-28T05:49:34+00:00 | Vulnerability · Source |
| CVE-2025-65955 | redhat_vex | imagemagick: ImageMagick use-after-free/double-free | known affected: 14 | 2026-06-28T05:49:25+00:00 | Vulnerability · Source |
| CVE-2022-1048 | redhat_vex | kernel: race condition in snd_pcm_hw_free leading to use-after-free | fixed: 489 known affected: 2 known not affected: 45 | 2026-06-28T05:49:05+00:00 | Vulnerability · Source |
| CVE-2018-16865 | redhat_vex | systemd: stack overflow when receiving many journald entries | fixed: 435 known not affected: 9 | 2026-06-28T05:49:00+00:00 | Vulnerability · Source |
| CVE-2018-16864 | redhat_vex | systemd: stack overflow when calling syslog from a command with long cmdline | fixed: 435 known not affected: 9 | 2026-06-28T05:48:56+00:00 | Vulnerability · Source |
| CVE-2025-59030 | redhat_vex | powerdns_recursor: Insufficient validation of incoming notifies over TCP can lead to a denial of service | known not affected: 1 | 2026-06-28T05:48:44+00:00 | Vulnerability · Source |
| CVE-2018-14611 | redhat_vex | kernel: Use-after-free in try_merge_free_space() when mounting crafted btrfs image | known not affected: 88 | 2026-06-28T05:48:36+00:00 | Vulnerability · Source |
| CVE-2018-14574 | redhat_vex | django: Open redirect possibility in CommonMiddleware | fixed: 40 known affected: 32 known not affected: 6 | 2026-06-28T05:48:35+00:00 | Vulnerability · Source |
| CVE-2021-46657 | redhat_vex | mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having outer ref | fixed: 734 known affected: 19 known not affected: 15 | 2026-06-28T05:48:18+00:00 | Vulnerability · Source |
| CVE-2020-15859 | redhat_vex | QEMU: net: e1000e: use-after-free while sending packets | fixed: 838 known affected: 32 known not affected: 45 | 2026-06-28T05:48:12+00:00 | Vulnerability · Source |
| CVE-2026-45841 | redhat_vex | kernel: netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO | known affected: 184 known not affected: 90 | 2026-06-28T05:47:50+00:00 | Vulnerability · Source |
| CVE-2018-12180 | redhat_vex | edk2: Buffer Overflow in BlockIo service for RAM disk | fixed: 12 | 2026-06-28T05:47:40+00:00 | Vulnerability · Source |
| CVE-2026-45842 | redhat_vex | kernel: slip: reject VJ receive packets on instances with no rstate array | known affected: 232 known not affected: 42 | 2026-06-28T05:47:36+00:00 | Vulnerability · Source |
| CVE-2018-1129 | redhat_vex | ceph: cephx uses weak signatures | fixed: 205 known affected: 8 known not affected: 8 | 2026-06-28T05:47:27+00:00 | Vulnerability · Source |
| CVE-2022-35256 | redhat_vex | nodejs: HTTP Request Smuggling due to incorrect parsing of header fields | fixed: 239 known not affected: 8 | 2026-06-28T05:47:07+00:00 | Vulnerability · Source |
| CVE-2022-22825 | redhat_vex | expat: Integer overflow in lookup in xmlparse.c | fixed: 209 known affected: 21 known not affected: 31 | 2026-06-28T05:46:49+00:00 | Vulnerability · Source |
| CVE-2020-12912 | redhat_vex | kernel: unprivileged access to RAPL allows for side channel attacks | known not affected: 104 | 2026-06-28T05:46:33+00:00 | Vulnerability · Source |
| CVE-2023-23915 | redhat_vex | curl: HSTS amnesia with --parallel | fixed: 12 known affected: 4 known not affected: 132 | 2026-06-28T05:45:45+00:00 | Vulnerability · Source |
| CVE-2019-2805 | redhat_vex | mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) | fixed: 1268 known affected: 43 | 2026-06-28T05:44:55+00:00 | Vulnerability · Source |
| CVE-2019-11772 | redhat_vex | JDK: Out-of-bounds access in the String.getBytes method | fixed: 114 known not affected: 13 | 2026-06-28T05:44:49+00:00 | Vulnerability · Source |
| CVE-2019-11042 | redhat_vex | php: Heap buffer over-read in exif_process_user_comment() | fixed: 1062 known affected: 118 known not affected: 30 | 2026-06-28T05:44:24+00:00 | Vulnerability · Source |
| CVE-2019-12247 | redhat_vex | QEMU: qemu-guest-agent: integer overflow while running guest-exec command | known not affected: 85 | 2026-06-28T05:43:52+00:00 | Vulnerability · Source |
| CVE-2019-1125 | redhat_vex | kernel: hw: Spectre SWAPGS gadget vulnerability | fixed: 1097 known affected: 1 known not affected: 16 | 2026-06-28T05:43:37+00:00 | Vulnerability · Source |
| CVE-2018-3251 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Oct 2018) | fixed: 616 known affected: 30 known not affected: 79 | 2026-06-28T05:43:26+00:00 | Vulnerability · Source |
| CVE-2018-3183 | redhat_vex | OpenJDK: Unrestricted access to scripting engine (Scripting, 8202936) | fixed: 718 known not affected: 14 | 2026-06-28T05:43:25+00:00 | Vulnerability · Source |
| CVE-2018-2755 | redhat_vex | mysql: Server: Replication unspecified vulnerability (CPU Apr 2018) | fixed: 843 known affected: 47 known not affected: 19 | 2026-06-28T05:43:21+00:00 | Vulnerability · Source |
| CVE-2019-0657 | redhat_vex | dotnet: Domain-spoofing attack in System.Uri | fixed: 81 known affected: 2 known not affected: 7 | 2026-06-28T05:43:19+00:00 | Vulnerability · Source |
| CVE-2018-14612 | redhat_vex | kernel: Invalid pointer dereference in btrfs_root_node() when mounting a crafted btrfs image | known affected: 28 known not affected: 60 | 2026-06-28T05:42:28+00:00 | Vulnerability · Source |
| CVE-2018-3750 | redhat_vex | nodejs-deep-extend: Prototype pollution can allow attackers to modify object properties | fixed: 148 known affected: 5 known not affected: 3 | 2026-06-28T05:41:57+00:00 | Vulnerability · Source |
| CVE-2018-3173 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Oct 2018) | fixed: 616 known not affected: 109 | 2026-06-28T05:41:44+00:00 | Vulnerability · Source |
| CVE-2018-3180 | redhat_vex | OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613) | fixed: 1095 known affected: 8 | 2026-06-28T05:41:44+00:00 | Vulnerability · Source |
| CVE-2026-55602 | redhat_vex | http-proxy-middleware: http-proxy-middleware: Unintended backend routing due to crafted Host header | known not affected: 60 | 2026-06-28T05:41:43+00:00 | Vulnerability · Source |
| CVE-2026-54279 | redhat_vex | aiohttp: AIOHTTP: Host-Only Cookies Become Domain Cookies After CookieJar Persistence | known not affected: 116 | 2026-06-28T05:41:26+00:00 | Vulnerability · Source |
| CVE-2018-2562 | redhat_vex | mysql: Server: Partition unspecified vulnerability (CPU Jan 2018) | fixed: 710 known affected: 47 known not affected: 19 | 2026-06-28T05:41:26+00:00 | Vulnerability · Source |
| CVE-2018-18341 | redhat_vex | chromium-browser: Heap buffer overflow in Blink | fixed: 12 | 2026-06-28T05:41:00+00:00 | Vulnerability · Source |
| CVE-2018-17459 | redhat_vex | chromium-browser: URL Spoofing in Omnibox | fixed: 12 | 2026-06-28T05:40:54+00:00 | Vulnerability · Source |
| CVE-2018-17458 | redhat_vex | chromium-browser: Function signature mismatch in WebAssembly | fixed: 12 | 2026-06-28T05:40:53+00:00 | Vulnerability · Source |
| CVE-2019-2510 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jan 2019) | fixed: 934 known affected: 8 known not affected: 58 | 2026-06-28T05:39:33+00:00 | Vulnerability · Source |
| CVE-2026-45837 | redhat_vex | kernel: bpf: Fix use-after-free in arena_vm_close on fork | known affected: 184 known not affected: 90 | 2026-06-28T05:38:42+00:00 | Vulnerability · Source |
| CVE-2026-3146 | redhat_vex | libvips: libvips: Local denial of service due to null pointer dereference | known not affected: 1 | 2026-06-28T05:38:15+00:00 | Vulnerability · Source |
| CVE-2019-11596 | redhat_vex | memcached: null-pointer dereference in "lru mode" and "lru temp_ttl" causing denial of service | fixed: 21 known affected: 3 known not affected: 7 | 2026-06-28T05:38:11+00:00 | Vulnerability · Source |
| CVE-2018-2761 | redhat_vex | mysql: Client programs unspecified vulnerability (CPU Apr 2018) | fixed: 843 known affected: 47 known not affected: 19 | 2026-06-28T05:36:18+00:00 | Vulnerability · Source |
| CVE-2018-20102 | redhat_vex | haproxy: Out-of-bounds read in dns.c:dns_validate_dns_response() allows for memory disclosure | fixed: 106 known affected: 3 known not affected: 6 | 2026-06-28T05:35:41+00:00 | Vulnerability · Source |
| CVE-2022-45869 | redhat_vex | kernel: KVM: x86/mmu: race condition in direct_page_fault() | fixed: 633 known not affected: 43 | 2026-06-28T05:33:49+00:00 | Vulnerability · Source |
| CVE-2023-28466 | redhat_vex | kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference | fixed: 709 known not affected: 43 | 2026-06-28T05:33:21+00:00 | Vulnerability · Source |
| CVE-2023-21882 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) | fixed: 206 known not affected: 126 | 2026-06-28T05:31:58+00:00 | Vulnerability · Source |