VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2014-8638 | redhat_vex | Mozilla: sendBeacon requests lack an Origin header (MFSA 2015-03) | fixed: 153 | 2026-06-27T10:05:24+00:00 | Vulnerability · Source |
| CVE-2014-8639 | redhat_vex | Mozilla: Cookie injection through Proxy Authenticate responses (MFSA 2015-04) | fixed: 153 | 2026-06-27T10:05:18+00:00 | Vulnerability · Source |
| CVE-2014-8641 | redhat_vex | Mozilla: Read-after-free in WebRTC (MFSA 2015-06) | fixed: 124 known not affected: 3 | 2026-06-27T10:05:09+00:00 | Vulnerability · Source |
| CVE-2014-8634 | redhat_vex | Mozilla: Miscellaneous memory safety hazards (rv:31.4) (MFSA 2015-01) | fixed: 153 | 2026-06-27T10:03:40+00:00 | Vulnerability · Source |
| CVE-2025-61027 | redhat_vex | virtuoso-opensource: openlink virtuoso-opensource: Denial of Service via crafted SQL statements | known not affected: 3 | 2026-06-27T10:00:33+00:00 | Vulnerability · Source |
| CVE-2014-9116 | redhat_vex | mutt: incorrect use of mutt_substrdup() in write_one_header() | known affected: 4 known not affected: 1 | 2026-06-27T09:59:52+00:00 | Vulnerability · Source |
| CVE-2014-9390 | redhat_vex | git: arbitrary command execution vulnerability on case-insensitive file systems | known not affected: 32 | 2026-06-27T09:59:48+00:00 | Vulnerability · Source |
| CVE-2014-9356 | redhat_vex | docker: Path traversal during processing of absolute symlinks | fixed: 5 known affected: 3 | 2026-06-27T09:59:48+00:00 | Vulnerability · Source |
| CVE-2014-8991 | redhat_vex | python-pip: local DoS vulnerability | under investigation: 8 | 2026-06-27T09:59:47+00:00 | Vulnerability · Source |
| CVE-2014-9322 | redhat_vex | kernel: x86: local privesc due to bad_iret and paranoid entry incompatibility | fixed: 785 | 2026-06-27T09:59:35+00:00 | Vulnerability · Source |
| CVE-2014-9087 | redhat_vex | libksba: integer underflow flaw leading to a heap-based buffer overflow in ksba_oid_to_str() | known affected: 6 | 2026-06-27T09:59:31+00:00 | Vulnerability · Source |
| CVE-2014-9294 | redhat_vex | ntp: ntp-keygen uses weak random number generator and seed when generating MD5 keys | fixed: 142 known affected: 1 | 2026-06-27T09:59:28+00:00 | Vulnerability · Source |
| CVE-2014-9666 | redhat_vex | freetype: integer overflow in tt_sbit_decoder_init() leading to out-of-bounds read | known not affected: 13 | 2026-06-27T09:55:47+00:00 | Vulnerability · Source |
| CVE-2014-9657 | redhat_vex | freetype: off-by-one buffer over-read in tt_face_load_hdmx() | fixed: 119 known affected: 5 | 2026-06-27T09:55:44+00:00 | Vulnerability · Source |
| CVE-2014-9664 | redhat_vex | freetype: off-by-one buffer over-read in parse_charstrings() / t42_parse_charstrings() | fixed: 119 known affected: 5 | 2026-06-27T09:55:41+00:00 | Vulnerability · Source |
| CVE-2014-9669 | redhat_vex | freetype: multiple integer overflows leading to buffer over-reads in cmap handling | fixed: 119 known affected: 5 | 2026-06-27T09:55:38+00:00 | Vulnerability · Source |
| CVE-2014-9658 | redhat_vex | freetype: buffer over-read and integer underflow in tt_face_load_kern() | fixed: 119 known affected: 4 known not affected: 1 | 2026-06-27T09:55:37+00:00 | Vulnerability · Source |
| CVE-2014-9671 | redhat_vex | freetype: integer overflow in pcf_get_properties() leading to NULL pointer dereference | fixed: 119 known affected: 4 known not affected: 1 | 2026-06-27T09:55:33+00:00 | Vulnerability · Source |
| CVE-2014-9670 | redhat_vex | freetype: integer overflow in pcf_get_encodings() leading to NULL pointer dereference | fixed: 119 known affected: 5 | 2026-06-27T09:55:30+00:00 | Vulnerability · Source |
| CVE-2014-9656 | redhat_vex | freetype: integer underflow in the tt_sbit_decoder_load_image() | known not affected: 13 | 2026-06-27T09:55:29+00:00 | Vulnerability · Source |
| CVE-2014-9667 | redhat_vex | freetype: integer overflow in tt_face_load_font_dir() leading to out-of-bounds read | fixed: 119 known affected: 5 | 2026-06-27T09:55:26+00:00 | Vulnerability · Source |
| CVE-2014-9623 | redhat_vex | openstack-glance: user storage quota bypass | fixed: 15 known affected: 1 | 2026-06-27T09:55:25+00:00 | Vulnerability · Source |
| CVE-2014-9636 | redhat_vex | unzip: out-of-bounds read/write in test_compr_eb() in extract.c | fixed: 41 known affected: 1 | 2026-06-27T09:55:20+00:00 | Vulnerability · Source |
| CVE-2014-9718 | redhat_vex | Qemu: PRDT overflow from guest to host | known affected: 16 known not affected: 8 | 2026-06-27T09:55:17+00:00 | Vulnerability · Source |
| CVE-2014-9527 | redhat_vex | apache-poi: denial of service in HSLFSlideShow via corrupted PPT file | fixed: 1 known affected: 5 under investigation: 2 | 2026-06-27T09:55:15+00:00 | Vulnerability · Source |
| CVE-2014-9684 | redhat_vex | openstack-glance: potential resource exhaustion and denial of service using images manipulation API | fixed: 6 known not affected: 2 | 2026-06-27T09:55:10+00:00 | Vulnerability · Source |
| CVE-2014-9674 | redhat_vex | freetype: multiple integer overflows Mac_Read_POST_Resource() leading to heap-based buffer overflows | fixed: 119 known affected: 5 | 2026-06-27T09:55:06+00:00 | Vulnerability · Source |
| CVE-2014-9673 | redhat_vex | freetype: integer signedness error in Mac_Read_POST_Resource() leading to heap-based buffer overflow | fixed: 119 known affected: 5 | 2026-06-27T09:55:04+00:00 | Vulnerability · Source |
| CVE-2014-9665 | redhat_vex | freetype: integer overflow leading to heap-based buffer overflow in Load_SBit_Png() | known not affected: 13 | 2026-06-27T09:55:02+00:00 | Vulnerability · Source |
| CVE-2014-9668 | redhat_vex | freetype: integer overflow in woff_open_font() leading to heap-based buffer overflow | known not affected: 13 | 2026-06-27T09:55:01+00:00 | Vulnerability · Source |
| CVE-2025-6210 | redhat_vex | llama-index: Path Traversal in llama_index | known not affected: 13 | 2026-06-27T09:50:48+00:00 | Vulnerability · Source |
| CVE-2026-2817 | redhat_vex | org.springframework.data/spring-data-geode: Spring Data Geode: Information disclosure via insecure temporary directory for snapshot imports | known affected: 1 | 2026-06-27T09:50:09+00:00 | Vulnerability · Source |
| CVE-2025-59940 | redhat_vex | mkdocs-include-markdown-plugin: mkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholders | known affected: 12 | 2026-06-27T09:50:06+00:00 | Vulnerability · Source |
| CVE-2025-55556 | redhat_vex | tensorflow: Tensorflow inconsistent results | known affected: 2 | 2026-06-27T09:50:03+00:00 | Vulnerability · Source |
| CVE-2025-46152 | redhat_vex | torch: PyTorch logic error | known affected: 42 | 2026-06-27T09:50:02+00:00 | Vulnerability · Source |
| CVE-2025-55553 | redhat_vex | torch: PyTorch denial of service | known affected: 42 | 2026-06-27T09:50:02+00:00 | Vulnerability · Source |
| CVE-2025-55557 | redhat_vex | torch: PyTorch denial of service | known affected: 42 | 2026-06-27T09:50:02+00:00 | Vulnerability · Source |
| CVE-2026-46094 | redhat_vex | kernel: ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access | known affected: 198 known not affected: 76 | 2026-06-27T09:49:55+00:00 | Vulnerability · Source |
| CVE-2026-46104 | redhat_vex | kernel: selinux: use sk blob accessor in socket permission helpers | known affected: 14 known not affected: 260 | 2026-06-27T09:49:46+00:00 | Vulnerability · Source |
| CVE-2014-9766 | redhat_vex | pixman: integer overflow in create_bits function | known not affected: 33 | 2026-06-27T09:49:11+00:00 | Vulnerability · Source |
| CVE-2015-0219 | redhat_vex | Django: WSGI header spoofing via underscore/dash conflation | known not affected: 4 | 2026-06-27T09:45:04+00:00 | Vulnerability · Source |
| CVE-2015-0272 | redhat_vex | NetworkManager: remote DoS using IPv6 RA with bogus MTU | fixed: 370 known not affected: 7 | 2026-06-27T09:45:00+00:00 | Vulnerability · Source |
| CVE-2015-0242 | redhat_vex | postgresql: buffer overflow flaws in replacement *printf() functions | known not affected: 54 | 2026-06-27T09:44:56+00:00 | Vulnerability · Source |
| CVE-2015-0284 | redhat_vex | Satellite: stored XSS in user details fields (incomplete fix for CVE-2014-7811) | fixed: 7 known affected: 1 | 2026-06-27T09:44:54+00:00 | Vulnerability · Source |
| CVE-2015-0283 | redhat_vex | slapi-nis: infinite loop in getgrnam_r() and getgrgid_r() | fixed: 60 known not affected: 1 | 2026-06-27T09:44:44+00:00 | Vulnerability · Source |
| CVE-2015-0235 | redhat_vex | glibc: __nss_hostname_digits_dots() heap-based buffer overflow | fixed: 605 | 2026-06-27T09:44:40+00:00 | Vulnerability · Source |
| CVE-2015-0240 | redhat_vex | samba: talloc free on uninitialized stack pointer in netlogon server could lead to remote-code execution | fixed: 1033 known not affected: 2 | 2026-06-27T09:44:35+00:00 | Vulnerability · Source |
| CVE-2015-0271 | redhat_vex | dashboard: log file arbitrary file retrieval | fixed: 6 known not affected: 1 | 2026-06-27T09:44:21+00:00 | Vulnerability · Source |
| CVE-2015-0807 | redhat_vex | Mozilla: CORS requests should not follow 30x redirections after preflight (MFSA 2015-37) | fixed: 173 | 2026-06-27T09:39:57+00:00 | Vulnerability · Source |
| CVE-2015-0801 | redhat_vex | Mozilla: Same-origin bypass through anchor navigation (MFSA 2015-40) | fixed: 173 | 2026-06-27T09:39:48+00:00 | Vulnerability · Source |