VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-12403 | redhat_vex | nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read | fixed: 540 known affected: 7 | 2026-06-26T22:35:21+00:00 | Vulnerability · Source |
| CVE-2020-12459 | redhat_vex | grafana: information disclosure through world-readable grafana configuration files | fixed: 64 known affected: 4 known not affected: 6 | 2026-06-26T22:35:15+00:00 | Vulnerability · Source |
| CVE-2020-12399 | redhat_vex | nss: Timing attack on DSA signature generation | fixed: 105 known affected: 9 known not affected: 20 | 2026-06-26T22:35:05+00:00 | Vulnerability · Source |
| CVE-2020-12825 | redhat_vex | libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c | fixed: 82 known affected: 17 known not affected: 11 | 2026-06-26T22:35:00+00:00 | Vulnerability · Source |
| CVE-2020-12666 | redhat_vex | macaron: open redirect in the static handler | fixed: 23 known affected: 10 | 2026-06-26T22:34:58+00:00 | Vulnerability · Source |
| CVE-2020-12866 | redhat_vex | sane-backends: null pointer dereference in epsonds_net_read in epsonds-net.c | known affected: 8 known not affected: 11 | 2026-06-26T22:34:53+00:00 | Vulnerability · Source |
| CVE-2020-12662 | redhat_vex | unbound: amplification of an incoming query into a large number of queries directed to a target | fixed: 280 | 2026-06-26T22:34:52+00:00 | Vulnerability · Source |
| CVE-2020-12663 | redhat_vex | unbound: infinite loop via malformed DNS answers received from upstream servers | fixed: 280 | 2026-06-26T22:34:49+00:00 | Vulnerability · Source |
| CVE-2020-12415 | redhat_vex | Mozilla: AppCache manifest poisoning due to url encoded character processing | known not affected: 7 | 2026-06-26T22:34:38+00:00 | Vulnerability · Source |
| CVE-2020-12761 | redhat_vex | imlib2: integer overflow leading to an out-of-bounds read due to an icon with many colors in its color map | known not affected: 1 | 2026-06-26T22:33:56+00:00 | Vulnerability · Source |
| CVE-2020-13112 | redhat_vex | libexif: several buffer over-reads in EXIF MakerNote handling can lead to information disclosure and DoS | fixed: 175 known affected: 1 | 2026-06-26T22:31:06+00:00 | Vulnerability · Source |
| CVE-2020-13962 | redhat_vex | qt5: incorrectly calls SSL_shutdown() in OpenSSL mid-handshake causing denial of service in TLS applications | fixed: 363 | 2026-06-26T22:30:51+00:00 | Vulnerability · Source |
| CVE-2020-13430 | redhat_vex | grafana: XSS via the OpenTSDB datasource | fixed: 63 known affected: 10 | 2026-06-26T22:30:51+00:00 | Vulnerability · Source |
| CVE-2020-13696 | redhat_vex | xawtv: specially crafted input leads to information disclosure and user privilege escalation | known not affected: 1 | 2026-06-26T22:30:41+00:00 | Vulnerability · Source |
| CVE-2020-13396 | redhat_vex | freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c. | fixed: 153 known affected: 5 | 2026-06-26T22:30:41+00:00 | Vulnerability · Source |
| CVE-2020-13113 | redhat_vex | libexif: use of uninitialized memory in EXIF Makernote handling can lead to crashes and use-after-free | fixed: 92 known affected: 4 | 2026-06-26T22:30:38+00:00 | Vulnerability · Source |
| CVE-2020-13753 | redhat_vex | webkitgtk: Improper access management to CLONE_NEWUSER and the TIOCSTI ioctl | fixed: 13 known not affected: 15 | 2026-06-26T22:30:35+00:00 | Vulnerability · Source |
| CVE-2020-13397 | redhat_vex | freerdp: Out-of-bounds read in security_fips_decrypt in libfreerdp/core/security.c | fixed: 153 known affected: 5 | 2026-06-26T22:30:30+00:00 | Vulnerability · Source |
| CVE-2020-13398 | redhat_vex | freerdp: Out-of-bounds write in crypto_rsa_common in libfreerdp/crypto/crypto.c | fixed: 289 | 2026-06-26T22:30:16+00:00 | Vulnerability · Source |
| CVE-2020-13933 | redhat_vex | shiro: specially crafted HTTP request may cause an authentication bypass | fixed: 2 known affected: 1 known not affected: 5 | 2026-06-26T22:29:22+00:00 | Vulnerability · Source |
| CVE-2020-14327 | redhat_vex | Tower: SSRF: Server Side Request Forgery on Credential | fixed: 2 | 2026-06-26T22:26:24+00:00 | Vulnerability · Source |
| CVE-2020-14367 | redhat_vex | chrony: Insecure writing to PID file | known affected: 3 known not affected: 1 | 2026-06-26T22:26:24+00:00 | Vulnerability · Source |
| CVE-2020-14150 | redhat_vex | bison: allows attackers to cause a denial of service | known affected: 10 | 2026-06-26T22:26:22+00:00 | Vulnerability · Source |
| CVE-2020-14354 | redhat_vex | c-ares: ares_destroy() with pending ares_getaddrinfo() leads to Use-After-Free | known not affected: 33 | 2026-06-26T22:26:19+00:00 | Vulnerability · Source |
| CVE-2020-14308 | redhat_vex | grub2: grub_malloc does not validate allocation size allowing for arithmetic overflow and subsequent heap-based buffer overflow | fixed: 817 | 2026-06-26T22:26:09+00:00 | Vulnerability · Source |
| CVE-2020-14309 | redhat_vex | grub2: Integer overflow in grub_squash_read_symlink may lead to heap-based buffer overflow | fixed: 817 | 2026-06-26T22:26:02+00:00 | Vulnerability · Source |
| CVE-2020-14372 | redhat_vex | grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled | fixed: 533 known affected: 11 known not affected: 5 | 2026-06-26T22:25:59+00:00 | Vulnerability · Source |
| CVE-2020-14334 | redhat_vex | foreman: unauthorized cache read on RPM-based installations through local user | fixed: 1267 known not affected: 52 | 2026-06-26T22:25:58+00:00 | Vulnerability · Source |
| CVE-2020-14360 | redhat_vex | xorg-x11-server: Out-of-bounds access in XkbSetMap function | fixed: 595 known affected: 10 | 2026-06-26T22:25:55+00:00 | Vulnerability · Source |
| CVE-2020-14346 | redhat_vex | xorg-x11-server: Integer underflow in the X input extension protocol | fixed: 685 known affected: 1 known not affected: 9 | 2026-06-26T22:25:52+00:00 | Vulnerability · Source |
| CVE-2020-14362 | redhat_vex | xorg-x11-server: XRecordRegisterClients integer underflow privilege escalation vulnerability | fixed: 685 known affected: 1 known not affected: 9 | 2026-06-26T22:25:52+00:00 | Vulnerability · Source |
| CVE-2020-14303 | redhat_vex | samba: Empty UDP packet DoS in Samba AD DC nbtd | known not affected: 117 | 2026-06-26T22:25:46+00:00 | Vulnerability · Source |
| CVE-2020-14316 | redhat_vex | kubevirt: VMIs can be used to access host files | fixed: 4 known affected: 1 | 2026-06-26T22:25:43+00:00 | Vulnerability · Source |
| CVE-2020-14345 | redhat_vex | xorg-x11-server: Out-of-bounds access in XkbSetNames function | fixed: 685 known affected: 1 known not affected: 9 | 2026-06-26T22:25:31+00:00 | Vulnerability · Source |
| CVE-2020-14001 | redhat_vex | rubygem-kramdown: processing template options inside documents allows unintended read access or embedded Ruby code execution | known not affected: 1 | 2026-06-26T22:25:11+00:00 | Vulnerability · Source |
| CVE-2020-14325 | redhat_vex | CloudForms: User Impersonation in the API for OIDC and SAML | fixed: 7 known not affected: 18 | 2026-06-26T22:24:58+00:00 | Vulnerability · Source |
| CVE-2020-14361 | redhat_vex | xorg-x11-server: XkbSelectEvents integer underflow privilege escalation vulnerability | fixed: 685 known affected: 1 known not affected: 9 | 2026-06-26T22:24:03+00:00 | Vulnerability · Source |
| CVE-2020-14393 | redhat_vex | perl-dbi: Buffer overflow on an overlong DBD class name | known affected: 6 | 2026-06-26T22:19:37+00:00 | Vulnerability · Source |
| CVE-2020-14404 | redhat_vex | libvncserver: libvncserver/rre.c allows out-of-bounds access via encodings | known affected: 15 | 2026-06-26T22:19:36+00:00 | Vulnerability · Source |
| CVE-2020-14402 | redhat_vex | libvncserver: libvncserver/corre.c allows out-of-bounds access via encodings | known affected: 15 | 2026-06-26T22:19:33+00:00 | Vulnerability · Source |
| CVE-2020-14403 | redhat_vex | libvncserver: libvncserver/hextile.c allows out-of-bounds access via encodings | known affected: 15 | 2026-06-26T22:19:31+00:00 | Vulnerability · Source |
| CVE-2020-14928 | redhat_vex | evolution-data-server: Response injection via STARTTLS in SMTP and POP3 | fixed: 169 known affected: 12 | 2026-06-26T22:19:30+00:00 | Vulnerability · Source |
| CVE-2020-14405 | redhat_vex | libvncserver: libvncclient/rfbproto.c does not limit TextChat size | fixed: 31 known affected: 6 known not affected: 6 | 2026-06-26T22:19:29+00:00 | Vulnerability · Source |
| CVE-2020-15115 | redhat_vex | etcd: improper validation of passwords allow an attacker to guess or brute-force user's passwords | fixed: 7 known affected: 4 known not affected: 2 | 2026-06-26T22:19:27+00:00 | Vulnerability · Source |
| CVE-2020-14983 | redhat_vex | chocolate-doom: malicious user can overwrite the server's stack leads to DoS | known not affected: 1 | 2026-06-26T22:19:24+00:00 | Vulnerability · Source |
| CVE-2020-14380 | redhat_vex | Satellite: Local user impersonation by Single sign-on (SSO) user leads to account takeover | fixed: 1299 | 2026-06-26T22:19:22+00:00 | Vulnerability · Source |
| CVE-2020-15563 | redhat_vex | xen: inverted code paths in x86 dirty VRAM tracking leads to DoS (XSA-319) | known not affected: 1 | 2026-06-26T22:14:35+00:00 | Vulnerability · Source |
| CVE-2020-15389 | redhat_vex | openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor | fixed: 47 known affected: 9 known not affected: 4 | 2026-06-26T22:14:34+00:00 | Vulnerability · Source |
| CVE-2020-15720 | redhat_vex | pki: Dogtag's python client does not validate certificates | fixed: 128 known affected: 22 | 2026-06-26T22:14:32+00:00 | Vulnerability · Source |
| CVE-2020-15564 | redhat_vex | xen: missing alignment check in VCPUOP_register_vcpu_info leads to DoS (XSA-327) | known not affected: 1 | 2026-06-26T22:14:30+00:00 | Vulnerability · Source |