VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-6624 | redhat_vex | jhead: heap-based buffer overflow in process_DQT in jpgqguess.c | known not affected: 1 | 2026-06-26T21:09:03+00:00 | Vulnerability · Source |
| CVE-2020-7219 | redhat_vex | consul: HTTP/RPC Services Allow Unbounded Resource Usage | known not affected: 15 | 2026-06-26T21:09:02+00:00 | Vulnerability · Source |
| CVE-2020-6811 | redhat_vex | Mozilla: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection | fixed: 115 known affected: 2 | 2026-06-26T21:06:51+00:00 | Vulnerability · Source |
| CVE-2020-6625 | redhat_vex | jhead: heap-based buffer overflow in Get32s when called from ProcessGpsInfo in gpsinfo.c | known not affected: 1 | 2026-06-26T21:06:50+00:00 | Vulnerability · Source |
| CVE-2020-6823 | redhat_vex | Mozilla: Malicious Extension could obtain auth codes from OAuth login flows | known affected: 7 | 2026-06-26T21:06:48+00:00 | Vulnerability · Source |
| CVE-2020-7220 | redhat_vex | vault: Vault Enterprise’s Dynamic Secrets May Persist After Namespace Deletion | known not affected: 14 | 2026-06-26T21:06:46+00:00 | Vulnerability · Source |
| CVE-2020-7015 | redhat_vex | kibana: XSS in TSVB visualization (ESA-2020-08) | fixed: 6 known affected: 4 known not affected: 6 | 2026-06-26T21:06:45+00:00 | Vulnerability · Source |
| CVE-2020-6824 | redhat_vex | Mozilla: Generated passwords may be identical on the same site between separate private browsing sessions | known affected: 7 | 2026-06-26T21:06:44+00:00 | Vulnerability · Source |
| CVE-2020-8164 | redhat_vex | rubygem-actionpack: possible strong parameters bypass | fixed: 1445 known affected: 2 known not affected: 2 | 2026-06-26T21:06:35+00:00 | Vulnerability · Source |
| CVE-2020-8184 | redhat_vex | rubygem-rack: percent-encoded cookies can be used to overwrite existing prefixed cookie names | fixed: 1251 known affected: 8 known not affected: 4 | 2026-06-26T21:06:34+00:00 | Vulnerability · Source |
| CVE-2020-8167 | redhat_vex | rubygem-actionview: CSRF vulnerability in rails-ujs | fixed: 1445 known affected: 2 known not affected: 2 | 2026-06-26T21:06:23+00:00 | Vulnerability · Source |
| CVE-2020-8161 | redhat_vex | rubygem-rack: directory traversal in Rack::Directory | fixed: 1251 known affected: 11 | 2026-06-26T21:06:22+00:00 | Vulnerability · Source |
| CVE-2020-9894 | redhat_vex | webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution | fixed: 59 known affected: 9 known not affected: 890 | 2026-06-26T21:05:21+00:00 | Vulnerability · Source |
| CVE-2020-9893 | redhat_vex | webkitgtk: Use-after-free may lead to application termination or arbitrary code execution | fixed: 59 known affected: 9 known not affected: 890 | 2026-06-26T21:05:19+00:00 | Vulnerability · Source |
| CVE-2020-9805 | redhat_vex | webkitgtk: Logic issue may lead to cross site scripting | fixed: 59 known affected: 9 known not affected: 890 | 2026-06-26T21:05:15+00:00 | Vulnerability · Source |
| CVE-2020-9925 | redhat_vex | webkitgtk: A logic issue may lead to cross site scripting | fixed: 59 known affected: 9 known not affected: 890 | 2026-06-26T21:05:14+00:00 | Vulnerability · Source |
| CVE-2020-9843 | redhat_vex | webkitgtk: Input validation issue may lead to cross site scripting | fixed: 59 known affected: 9 known not affected: 890 | 2026-06-26T21:05:05+00:00 | Vulnerability · Source |
| CVE-2020-9274 | redhat_vex | pure-ftpd: uninitialized pointer in the diraliases linked list leads to denial of service or information disclosure | known not affected: 1 | 2026-06-26T21:05:03+00:00 | Vulnerability · Source |
| CVE-2020-9402 | redhat_vex | django: potential SQL injection via "tolerance" parameter in GIS functions and aggregates on Oracle | fixed: 30 known affected: 22 known not affected: 1415 | 2026-06-26T21:05:02+00:00 | Vulnerability · Source |
| CVE-2020-9803 | redhat_vex | webkitgtk: Memory corruption may lead to arbitrary code execution | fixed: 59 known affected: 9 known not affected: 890 | 2026-06-26T21:05:02+00:00 | Vulnerability · Source |
| CVE-2020-9952 | redhat_vex | webkitgtk: input validation issue may lead to a cross site scripting | fixed: 59 known affected: 9 known not affected: 890 | 2026-06-26T21:04:50+00:00 | Vulnerability · Source |
| CVE-2020-7663 | redhat_vex | rubygem-websocket-extensions: ReDoS vulnerability in Sec-WebSocket-Extensions parser | fixed: 1251 known affected: 2 | 2026-06-26T20:54:43+00:00 | Vulnerability · Source |
| CVE-2020-6827 | redhat_vex | Mozilla: Custom Tabs in Firefox for Android could have the URI spoofed | known not affected: 7 | 2026-06-26T20:54:39+00:00 | Vulnerability · Source |
| CVE-2020-6828 | redhat_vex | Mozilla: Preference overwrite via crafted Intent from malicious Android application | known not affected: 7 | 2026-06-26T20:54:38+00:00 | Vulnerability · Source |
| CVE-2020-8162 | redhat_vex | rubygem-activestorage: circumvention of file size limits in ActiveStorage | fixed: 1445 known affected: 2 | 2026-06-26T20:50:16+00:00 | Vulnerability · Source |
| CVE-2020-7943 | redhat_vex | puppet: puppet server and puppetDB may leak sensitive information via metrics API | fixed: 1251 known not affected: 12 | 2026-06-26T20:49:59+00:00 | Vulnerability · Source |
| CVE-2021-20180 | redhat_vex | module: bitbucket_pipeline_variable exposes secured values | fixed: 19 known affected: 1 known not affected: 36 | 2026-06-26T20:41:49+00:00 | Vulnerability · Source |
| CVE-2021-20178 | redhat_vex | ansible: user data leak in snmp_facts module | fixed: 19 known affected: 3 known not affected: 34 | 2026-06-26T20:41:47+00:00 | Vulnerability · Source |
| CVE-2021-20193 | redhat_vex | tar: Memory leak in read_header() in list.c | known affected: 4 known not affected: 2 | 2026-06-26T20:41:46+00:00 | Vulnerability · Source |
| CVE-2021-20191 | redhat_vex | ansible: multiple modules expose secured values | fixed: 19 known affected: 3 known not affected: 34 | 2026-06-26T20:41:36+00:00 | Vulnerability · Source |
| CVE-2026-52690 | redhat_vex | pdns-recursor: spoofed answers can mark an authoritative non-EDNS capable | known not affected: 1 | 2026-06-26T20:37:35+00:00 | Vulnerability · Source |
| CVE-2026-42389 | redhat_vex | pdns-recursor: reject more queries with invalid header values | known not affected: 1 | 2026-06-26T20:36:58+00:00 | Vulnerability · Source |
| CVE-2026-42390 | redhat_vex | pdns-recursor: ZONEMD validation can be bypassed | known not affected: 1 | 2026-06-26T20:36:58+00:00 | Vulnerability · Source |
| CVE-2026-42005 | redhat_vex | pdns: insufficient input validation of internal web server | known not affected: 1 | 2026-06-26T20:36:57+00:00 | Vulnerability · Source |
| CVE-2026-40012 | redhat_vex | pdns-recursor: information about ECS zero scoped answers might leak to clients that use a specific ECS | known not affected: 1 | 2026-06-26T20:36:57+00:00 | Vulnerability · Source |
| CVE-2026-42388 | redhat_vex | pdns-recursor: missing input validation for catalog zones | known not affected: 1 | 2026-06-26T19:56:10+00:00 | Vulnerability · Source |
| CVE-2026-42387 | redhat_vex | pdns-recursor: insufficient input validation in ZoneToCache | known not affected: 1 | 2026-06-26T19:56:00+00:00 | Vulnerability · Source |
| CVE-2026-33612 | redhat_vex | pdns-recursor: ZoneToCache can poison the cache | known not affected: 1 | 2026-06-26T19:55:21+00:00 | Vulnerability · Source |
| CVE-2026-46601 | redhat_vex | golang.org/x/image/webp: golang.org/x/image/webp: Denial of Service via malformed VP8 chunk in WebP images | known not affected: 2 | 2026-06-26T19:52:15+00:00 | Vulnerability · Source |
| CVE-2021-20225 | redhat_vex | grub2: Heap out-of-bounds write in short form option parser | fixed: 533 known affected: 8 known not affected: 5 | 2026-06-26T19:51:32+00:00 | Vulnerability · Source |
| CVE-2021-20228 | redhat_vex | ansible: basic.py no_log with fallback option | fixed: 19 known affected: 1 known not affected: 34 | 2026-06-26T19:51:26+00:00 | Vulnerability · Source |
| CVE-2021-20236 | redhat_vex | zeromq: Stack overflow on server running PUB/XPUB socket | known affected: 1 | 2026-06-26T19:51:24+00:00 | Vulnerability · Source |
| CVE-2021-20231 | redhat_vex | gnutls: Use after free in client key_share extension | fixed: 106 known not affected: 17 | 2026-06-26T19:51:23+00:00 | Vulnerability · Source |
| CVE-2021-20238 | redhat_vex | openshift/machine-config-operator: unauthenticated access to Machine Config Server ignition config | known affected: 1 known not affected: 14 | 2026-06-26T19:51:21+00:00 | Vulnerability · Source |
| CVE-2021-20247 | redhat_vex | isync/mbsync: mailbox names returned by IMAP LIST/LSUB not validated | known not affected: 1 | 2026-06-26T19:51:21+00:00 | Vulnerability · Source |
| CVE-2021-20235 | redhat_vex | zeromq: Heap overflow when receiving malformed ZMTP v1 packets | known affected: 1 | 2026-06-26T19:51:13+00:00 | Vulnerability · Source |
| CVE-2021-20232 | redhat_vex | gnutls: Use after free in client_send_params in lib/ext/pre_shared_key.c | fixed: 106 known not affected: 17 | 2026-06-26T19:51:13+00:00 | Vulnerability · Source |
| CVE-2021-20233 | redhat_vex | grub2: Heap out-of-bounds write due to miscalculation of space required for quoting | fixed: 533 known affected: 8 known not affected: 5 | 2026-06-26T19:51:04+00:00 | Vulnerability · Source |
| CVE-2021-20240 | redhat_vex | gdk-pixbuf: integer wraparound in the GIF loader of gdk-pixbuf via crafted input leads to segmentation fault | known not affected: 17 | 2026-06-26T19:51:01+00:00 | Vulnerability · Source |
| CVE-2021-20253 | redhat_vex | ansible-tower: Privilege escalation via job isolation escape | fixed: 4 known affected: 1 | 2026-06-26T19:50:56+00:00 | Vulnerability · Source |