VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-9815 | redhat_vex | Mozilla: Disable hyperthreading on content JavaScript threads on macOS | known not affected: 10 | 2026-06-26T22:54:21+00:00 | Vulnerability · Source |
| CVE-2020-10697 | redhat_vex | Tower: memcached deployment is insecure on OpenShift | known affected: 1 | 2026-06-26T22:49:56+00:00 | Vulnerability · Source |
| CVE-2020-10716 | redhat_vex | rubygem-foreman_ansible: "User input" entry from Job Invocation may contain sensitive data | fixed: 1294 | 2026-06-26T22:49:52+00:00 | Vulnerability · Source |
| CVE-2020-10660 | redhat_vex | vault: Entity's Group membership inadvertently include Groups the Entity no longer has permissions to | known affected: 5 known not affected: 8 | 2026-06-26T22:49:49+00:00 | Vulnerability · Source |
| CVE-2020-0556 | redhat_vex | bluez: Improper access control in subsystem could result in privilege escalation and DoS | fixed: 188 known not affected: 8 | 2026-06-26T22:49:47+00:00 | Vulnerability · Source |
| CVE-2020-0569 | redhat_vex | qt: files placed by attacker can influence the working directory and lead to malicious code execution | fixed: 504 | 2026-06-26T22:49:46+00:00 | Vulnerability · Source |
| CVE-2020-10709 | redhat_vex | Tower: OAuth2 refresh tokens do not respect the expiration | known affected: 1 | 2026-06-26T22:49:40+00:00 | Vulnerability · Source |
| CVE-2020-10184 | redhat_vex | yubikey-val: SQL injection due to missing check of the length of SQL queries | known not affected: 1 | 2026-06-26T22:49:40+00:00 | Vulnerability · Source |
| CVE-2020-10675 | redhat_vex | golang-github-buger-jsonparser: infinite loop via a Delete call | known not affected: 15 | 2026-06-26T22:49:38+00:00 | Vulnerability · Source |
| CVE-2020-10595 | redhat_vex | pam_krb5: incorrect input handling results in single byte buffer overflow which may lead to heap corruption | known not affected: 3 | 2026-06-26T22:49:29+00:00 | Vulnerability · Source |
| CVE-2020-10710 | redhat_vex | foreman-installer: Candlepin plaintext password disclosure while Satellite update | fixed: 73 | 2026-06-26T22:49:28+00:00 | Vulnerability · Source |
| CVE-2020-10030 | redhat_vex | pdns-recursor: stack-based out-of-bounds read via a larger hostname | known not affected: 1 | 2026-06-26T22:49:18+00:00 | Vulnerability · Source |
| CVE-2020-0603 | redhat_vex | dotnet: Memory Corruption in SignalR | fixed: 97 known not affected: 24 | 2026-06-26T22:49:10+00:00 | Vulnerability · Source |
| CVE-2020-0551 | redhat_vex | hw: Load Value Injection | known not affected: 92 | 2026-06-26T22:49:07+00:00 | Vulnerability · Source |
| CVE-2020-10108 | redhat_vex | python-twisted: HTTP request smuggling when presented with two Content-Length headers | fixed: 22 known affected: 11 | 2026-06-26T22:49:06+00:00 | Vulnerability · Source |
| CVE-2020-0602 | redhat_vex | dotnet: Denial of service via backpressure issue | fixed: 97 known not affected: 24 | 2026-06-26T22:49:03+00:00 | Vulnerability · Source |
| CVE-2020-10731 | redhat_vex | openstack-tripleo-heat-templates: No sVirt protection for OSP16 VMs due to disabled SELinux | fixed: 18 known not affected: 4 | 2026-06-26T22:49:02+00:00 | Vulnerability · Source |
| CVE-2020-10661 | redhat_vex | vault: Existing nested-path policies grant access to Namespaces created after-the-fact | known affected: 5 known not affected: 8 | 2026-06-26T22:48:58+00:00 | Vulnerability · Source |
| CVE-2020-10109 | redhat_vex | python-twisted: HTTP request smuggling when presented with a Content-Length and a chunked Transfer-Encoding header | fixed: 11 known affected: 11 known not affected: 2 | 2026-06-26T22:47:58+00:00 | Vulnerability · Source |
| CVE-2020-0550 | redhat_vex | hw: Snoop-Assisted L1D Sampling | known not affected: 91 | 2026-06-26T22:47:52+00:00 | Vulnerability · Source |
| CVE-2020-10759 | redhat_vex | fwupd: Possible bypass in signature verification | fixed: 49 known affected: 3 | 2026-06-26T22:45:00+00:00 | Vulnerability · Source |
| CVE-2020-11525 | redhat_vex | freerdp: out-of-bounds read in bitmap.c | fixed: 153 known affected: 5 | 2026-06-26T22:44:59+00:00 | Vulnerability · Source |
| CVE-2020-11522 | redhat_vex | freerdp: out-of-bounds read in gdi.c | fixed: 153 known affected: 5 | 2026-06-26T22:44:55+00:00 | Vulnerability · Source |
| CVE-2020-11526 | redhat_vex | freerdp: Stream pointer out of bounds in update_recv_secondary_order could lead out of bounds read later | fixed: 153 known affected: 5 | 2026-06-26T22:44:54+00:00 | Vulnerability · Source |
| CVE-2020-10941 | redhat_vex | mbedtls: cache attack against RSA key import in SGX | known not affected: 1 | 2026-06-26T22:44:47+00:00 | Vulnerability · Source |
| CVE-2020-10777 | redhat_vex | CloudForms: Cross Site Scripting in report menu title / HTML Code Injection | fixed: 2 known not affected: 10 | 2026-06-26T22:44:46+00:00 | Vulnerability · Source |
| CVE-2020-10763 | redhat_vex | heketi: gluster-block volume password details available in logs | fixed: 17 known affected: 1 known not affected: 404 | 2026-06-26T22:44:43+00:00 | Vulnerability · Source |
| CVE-2020-10775 | redhat_vex | ovirt-engine: Redirect to arbitrary URL allows for phishing | fixed: 3 known affected: 13 known not affected: 166 | 2026-06-26T22:44:40+00:00 | Vulnerability · Source |
| CVE-2020-11441 | redhat_vex | phpMyAdmin: inputs to login form fields can cause CRLF sequences to be reflected on an error page | known not affected: 1 | 2026-06-26T22:44:40+00:00 | Vulnerability · Source |
| CVE-2020-10762 | redhat_vex | gluster-block: information disclosure through world-readable gluster-block log files | fixed: 14 | 2026-06-26T22:44:40+00:00 | Vulnerability · Source |
| CVE-2020-10760 | redhat_vex | samba: LDAP Use-after-free in Samba AD DC Global Catalog with paged_results and VLV | known not affected: 117 | 2026-06-26T22:44:39+00:00 | Vulnerability · Source |
| CVE-2020-10778 | redhat_vex | CloudForms: Business logic bypass through widgets | fixed: 5 known not affected: 20 | 2026-06-26T22:44:23+00:00 | Vulnerability · Source |
| CVE-2020-11110 | redhat_vex | grafana: stored XSS | fixed: 60 known affected: 12 known not affected: 246 | 2026-06-26T22:44:22+00:00 | Vulnerability · Source |
| CVE-2020-10783 | redhat_vex | CloudForms: Missing access control leads to escalation of admin group privileges | fixed: 5 known not affected: 20 | 2026-06-26T22:44:16+00:00 | Vulnerability · Source |
| CVE-2020-10772 | redhat_vex | unbound: incomplete fix for CVE-2020-12662 in RHEL7 | fixed: 70 known not affected: 10 | 2026-06-26T22:44:04+00:00 | Vulnerability · Source |
| CVE-2020-11763 | redhat_vex | OpenEXR: std:: vector out-of-bounds read and write in ImfTileOffsets.cpp | fixed: 63 known affected: 9 | 2026-06-26T22:40:29+00:00 | Vulnerability · Source |
| CVE-2020-11765 | redhat_vex | OpenEXR: off-by-one error in ImfXdr.h read function by DwaCompressor::Classifier::Classifier leading to an out-of-bounds read | known affected: 9 known not affected: 4 | 2026-06-26T22:40:17+00:00 | Vulnerability · Source |
| CVE-2020-12393 | redhat_vex | Mozilla: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection | known affected: 2 known not affected: 12 | 2026-06-26T22:40:13+00:00 | Vulnerability · Source |
| CVE-2020-11762 | redhat_vex | OpenEXR: out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp | known affected: 9 known not affected: 4 | 2026-06-26T22:40:11+00:00 | Vulnerability · Source |
| CVE-2020-12050 | redhat_vex | sqliteodbc: packaging vulnerability in sqliteODBC exposing to local privilege escalation to root | known not affected: 1 | 2026-06-26T22:40:09+00:00 | Vulnerability · Source |
| CVE-2020-12052 | redhat_vex | grafana: XSS annotation popup vulnerability | fixed: 66 known affected: 9 known not affected: 246 | 2026-06-26T22:40:09+00:00 | Vulnerability · Source |
| CVE-2020-12245 | redhat_vex | grafana: XSS via column.title or cellLinkTooltip | fixed: 66 known affected: 9 known not affected: 246 | 2026-06-26T22:40:00+00:00 | Vulnerability · Source |
| CVE-2020-11759 | redhat_vex | OpenEXR: out-of-bounds write due to integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock | known affected: 9 known not affected: 4 | 2026-06-26T22:39:57+00:00 | Vulnerability · Source |
| CVE-2020-11647 | redhat_vex | wireshark: BACapp dissector crash (wnpa-sec-2020-07) | known affected: 4 known not affected: 9 | 2026-06-26T22:39:55+00:00 | Vulnerability · Source |
| CVE-2020-12389 | redhat_vex | Mozilla: Sandbox escape with improperly separated process types | known affected: 1 known not affected: 6 | 2026-06-26T22:39:47+00:00 | Vulnerability · Source |
| CVE-2020-12268 | redhat_vex | jbig2dec: heap-based buffer overflow in jbig2_image_compose in jbig2_image.c | fixed: 55 | 2026-06-26T22:39:20+00:00 | Vulnerability · Source |
| CVE-2020-12802 | redhat_vex | libreoffice: 'stealth mode' remote resource restrictions bypass | fixed: 342 known affected: 316 | 2026-06-26T22:35:35+00:00 | Vulnerability · Source |
| CVE-2020-12803 | redhat_vex | libreoffice: forms allowed to be submitted to any URI could result in local file overwrite | fixed: 342 known affected: 316 | 2026-06-26T22:35:32+00:00 | Vulnerability · Source |
| CVE-2020-12762 | redhat_vex | libfastjson: integer overflow and out-of-bounds write via a large JSON file | fixed: 140 known affected: 7 known not affected: 3 | 2026-06-26T22:35:25+00:00 | Vulnerability · Source |
| CVE-2020-12402 | redhat_vex | nss: Side channel vulnerabilities during RSA key generation | fixed: 332 known affected: 7 known not affected: 2 | 2026-06-26T22:35:24+00:00 | Vulnerability · Source |