VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-15567 | redhat_vex | xen: non-atomic modification of live EPT PTE leads to DoS (XSA-328) | known not affected: 1 | 2026-06-26T22:14:29+00:00 | Vulnerability · Source |
| CVE-2020-15675 | redhat_vex | firefox: Use-After-Free in WebGL could result in memory corruption and a potentially exploitable crash | known affected: 2 known not affected: 12 | 2026-06-26T22:14:24+00:00 | Vulnerability · Source |
| CVE-2020-15659 | redhat_vex | Mozilla: Memory safety bugs fixed in Firefox 79 and Firefox ESR 68.11 | fixed: 138 known affected: 2 | 2026-06-26T22:14:18+00:00 | Vulnerability · Source |
| CVE-2020-15566 | redhat_vex | xen: incorrect error handling in event channel port allocation leads to DoS (XSA-317) | known not affected: 1 | 2026-06-26T22:14:16+00:00 | Vulnerability · Source |
| CVE-2020-15652 | redhat_vex | Mozilla: Potential leak of redirect targets when loading scripts in a worker | fixed: 138 known affected: 2 | 2026-06-26T22:14:01+00:00 | Vulnerability · Source |
| CVE-2020-15900 | redhat_vex | ghostscript: Memory Corruption in Ghostscript 9.52 (SAFER Sandbox Breakout) | known not affected: 23 | 2026-06-26T22:12:52+00:00 | Vulnerability · Source |
| CVE-2020-16117 | redhat_vex | evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server | fixed: 135 known affected: 12 | 2026-06-26T22:09:51+00:00 | Vulnerability · Source |
| CVE-2020-16266 | redhat_vex | mantis: HTML injection (maybe XSS) via custom field on view_all_bug_page.php | known not affected: 1 | 2026-06-26T22:09:30+00:00 | Vulnerability · Source |
| CVE-2020-1721 | redhat_vex | pki-core: KRA vulnerable to reflected XSS via the getPk12 page | fixed: 275 | 2026-06-26T22:04:58+00:00 | Vulnerability · Source |
| CVE-2020-1702 | redhat_vex | containers/image: Container images read entire image manifest into memory | fixed: 362 known affected: 32 | 2026-06-26T22:04:56+00:00 | Vulnerability · Source |
| CVE-2020-1701 | redhat_vex | virt-handler: virt-handler daemonset clusterroles allows retrieval of secrets | known affected: 2 | 2026-06-26T22:04:41+00:00 | Vulnerability · Source |
| CVE-2020-1742 | redhat_vex | nmstate/kubernetes-nmstate-handler: /etc/passwd is given incorrect privileges | fixed: 3 | 2026-06-26T22:04:32+00:00 | Vulnerability · Source |
| CVE-2020-2104 | redhat_vex | jenkins: Memory usage graphs accessible to anyone with Overall/Read | fixed: 89 known not affected: 60 | 2026-06-26T21:59:39+00:00 | Vulnerability · Source |
| CVE-2020-19499 | redhat_vex | libheif: invalid memory read in heif::Box_iref::get_references() | known not affected: 1 | 2026-06-26T21:59:38+00:00 | Vulnerability · Source |
| CVE-2020-2102 | redhat_vex | jenkins: Non-constant time HMAC comparison | fixed: 89 known not affected: 60 | 2026-06-26T21:59:38+00:00 | Vulnerability · Source |
| CVE-2020-1958 | redhat_vex | druid: Bypass of the credentialsValidator.userSearch filter in Druid API | known not affected: 1 | 2026-06-26T21:59:37+00:00 | Vulnerability · Source |
| CVE-2020-21365 | redhat_vex | wkhtmltopdf: same origin policy allows local files to be read by default | known not affected: 1 | 2026-06-26T21:59:35+00:00 | Vulnerability · Source |
| CVE-2020-2103 | redhat_vex | jenkins: Exposed session identifiers on user detail object in the whoAmI diagnostic page | fixed: 89 known not affected: 60 | 2026-06-26T21:59:35+00:00 | Vulnerability · Source |
| CVE-2020-2100 | redhat_vex | jenkins: UDP multicast/broadcast service amplification reflection attack | fixed: 89 known not affected: 60 | 2026-06-26T21:59:34+00:00 | Vulnerability · Source |
| CVE-2020-2101 | redhat_vex | jenkins: Non-constant time comparison of inbound TCP agent connection secret | fixed: 89 known not affected: 60 | 2026-06-26T21:59:32+00:00 | Vulnerability · Source |
| CVE-2020-18972 | redhat_vex | podofo: memory leak in IsNextToken() in src/base/PdfTokenizer.cpp | known not affected: 1 | 2026-06-26T21:59:32+00:00 | Vulnerability · Source |
| CVE-2020-19716 | redhat_vex | exiv2: buffer overflow in Databuf function in types.cpp leads to DoS | known affected: 8 known not affected: 9 | 2026-06-26T21:59:30+00:00 | Vulnerability · Source |
| CVE-2020-2099 | redhat_vex | jenkins: Inbound TCP Agent Protocol/3 authentication bypass | fixed: 89 known not affected: 60 | 2026-06-26T21:59:27+00:00 | Vulnerability · Source |
| CVE-2020-2160 | redhat_vex | jenkins: CSRF protection bypass via crafted URLs | fixed: 135 known not affected: 89 | 2026-06-26T21:59:18+00:00 | Vulnerability · Source |
| CVE-2020-2182 | redhat_vex | jenkins-credentials-binding-plugin: improper masking of secrets | fixed: 61 known not affected: 156 | 2026-06-26T21:55:38+00:00 | Vulnerability · Source |
| CVE-2026-54905 | redhat_vex | concurrent-ruby: Concurrent-ruby: Incorrect write lock granting leading to broken mutual exclusion | known affected: 20 | 2026-06-26T21:55:37+00:00 | Vulnerability · Source |
| CVE-2020-2161 | redhat_vex | jenkins: XSS in job configuration pages | fixed: 135 known not affected: 89 | 2026-06-26T21:55:34+00:00 | Vulnerability · Source |
| CVE-2020-24265 | redhat_vex | tcpreplay: heap buffer overflow in MemcmpInterceptorCommon() could result in a crash | known not affected: 1 | 2026-06-26T21:55:33+00:00 | Vulnerability · Source |
| CVE-2020-2162 | redhat_vex | jenkins: Content-Security-Policy headers for files uploaded leads to XSS | fixed: 135 known not affected: 89 | 2026-06-26T21:55:30+00:00 | Vulnerability · Source |
| CVE-2020-24332 | redhat_vex | trousers: tss user can be used to create or corrupt existing files, this could lead to DoS | fixed: 45 known affected: 8 | 2026-06-26T21:55:29+00:00 | Vulnerability · Source |
| CVE-2020-2163 | redhat_vex | jenkins: improperly processes HTML content of list leads to XSS | fixed: 135 known not affected: 89 | 2026-06-26T21:55:27+00:00 | Vulnerability · Source |
| CVE-2020-21674 | redhat_vex | libarchive: heap-based buffer overflow in archive_string_append_from_wcs function in archive_string.c | known affected: 8 known not affected: 4 | 2026-06-26T21:55:14+00:00 | Vulnerability · Source |
| CVE-2020-24266 | redhat_vex | tcpreplay: heap buffer overflow in get_l2len() could result in a crash | known not affected: 1 | 2026-06-26T21:55:13+00:00 | Vulnerability · Source |
| CVE-2020-2181 | redhat_vex | jenkins-credentials-binding-plugin: information disclosure in build log when build contains no build steps | fixed: 61 known not affected: 156 | 2026-06-26T21:55:09+00:00 | Vulnerability · Source |
| CVE-2020-24361 | redhat_vex | snmptt: allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec | known not affected: 1 | 2026-06-26T21:54:59+00:00 | Vulnerability · Source |
| CVE-2020-22336 | redhat_vex | pdfcrack: stack overflow in MD5 function leads to code execution | known not affected: 1 | 2026-06-26T21:54:52+00:00 | Vulnerability · Source |
| CVE-2020-2167 | redhat_vex | openshift/jenkins-plugin: Deserialization in snakeyaml YAML() objects allows for remote code execution | fixed: 4 known not affected: 2 | 2026-06-26T21:54:36+00:00 | Vulnerability · Source |
| CVE-2020-25626 | redhat_vex | django-rest-framework: XSS Vulnerability in API viewer | fixed: 2 known affected: 2 | 2026-06-26T21:49:58+00:00 | Vulnerability · Source |
| CVE-2020-25288 | redhat_vex | mantis: HTML injection (maybe XSS) via custom field on bug_update_page.php | known not affected: 1 | 2026-06-26T21:49:58+00:00 | Vulnerability · Source |
| CVE-2020-24387 | redhat_vex | yubihsm-shell: yh_create_session() does not explicitly check the returned session id could result in DoS | known not affected: 1 | 2026-06-26T21:49:56+00:00 | Vulnerability · Source |
| CVE-2020-25632 | redhat_vex | grub2: Use-after-free in rmmod command | fixed: 533 known affected: 11 known not affected: 5 | 2026-06-26T21:49:51+00:00 | Vulnerability · Source |
| CVE-2020-24661 | redhat_vex | geary: mishandles pinned TLS certificate verification for IMAP and SMTP services using invalid TLS certificates | known not affected: 1 | 2026-06-26T21:49:49+00:00 | Vulnerability · Source |
| CVE-2020-25594 | redhat_vex | vault: API Endpoint Allowed Enumeration of Secrets Engine Mount Paths Without Authentication | known affected: 5 known not affected: 8 | 2026-06-26T21:49:44+00:00 | Vulnerability · Source |
| CVE-2020-24979 | redhat_vex | bison: Buffer overflow in src/symtab.c via crafted input file redefining the EOF token can lead to DoS | known affected: 10 | 2026-06-26T21:49:41+00:00 | Vulnerability · Source |
| CVE-2020-24612 | redhat_vex | selinux-policy: SELinux prevents pam-u2f to work correctly, disabling the 2nd factor during authentication | known not affected: 1 | 2026-06-26T21:49:36+00:00 | Vulnerability · Source |
| CVE-2020-25599 | redhat_vex | xen: races with evtchn_reset function (XSA-343) | known not affected: 1 | 2026-06-26T21:49:30+00:00 | Vulnerability · Source |
| CVE-2020-25688 | redhat_vex | rhacm: certificate re-use in grcuiapi and topologyapi | fixed: 2 known affected: 1 | 2026-06-26T21:45:34+00:00 | Vulnerability · Source |
| CVE-2020-25713 | redhat_vex | raptor2: malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_common | fixed: 28 known affected: 136 known not affected: 3 | 2026-06-26T21:45:32+00:00 | Vulnerability · Source |
| CVE-2020-25715 | redhat_vex | pki-core: XSS in the certificate search results | fixed: 328 known affected: 13 known not affected: 1 | 2026-06-26T21:45:24+00:00 | Vulnerability · Source |
| CVE-2020-25647 | redhat_vex | grub2: Out-of-bounds write in grub_usb_device_initialize() | fixed: 533 known affected: 11 known not affected: 5 | 2026-06-26T21:45:13+00:00 | Vulnerability · Source |