VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2021-27918 | redhat_vex | golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader | fixed: 231 known affected: 132 known not affected: 117 | 2026-06-28T12:04:51+00:00 | Vulnerability · Source |
| CVE-2013-0748 | redhat_vex | Mozilla: Address space layout leaked in XBL objects (MFSA 2013-11) | fixed: 140 known affected: 1 | 2026-06-28T12:04:51+00:00 | Vulnerability · Source |
| CVE-2013-0626 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T12:04:50+00:00 | Vulnerability · Source |
| CVE-2021-46939 | redhat_vex | kernel: tracing: Restructure trace_clock_global() to never block | fixed: 150 known affected: 42 known not affected: 108 | 2026-06-28T12:04:50+00:00 | Vulnerability · Source |
| CVE-2020-2780 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Apr 2020) | fixed: 1506 known affected: 32 | 2026-06-28T12:04:49+00:00 | Vulnerability · Source |
| CVE-2013-0611 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T12:04:49+00:00 | Vulnerability · Source |
| CVE-2020-2761 | redhat_vex | mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020) | fixed: 337 known affected: 3 known not affected: 98 | 2026-06-28T12:04:48+00:00 | Vulnerability · Source |
| CVE-2021-27363 | redhat_vex | kernel: iscsi: unrestricted access to sessions and handles | fixed: 978 known affected: 30 known not affected: 106 | 2026-06-28T12:04:46+00:00 | Vulnerability · Source |
| CVE-2019-20808 | redhat_vex | QEMU: out-of-bounds read in ati_cursor_define() function in hw/display/ati.c leads to DoS | known affected: 2 known not affected: 92 | 2026-06-28T12:04:46+00:00 | Vulnerability · Source |
| CVE-2020-27815 | redhat_vex | kernel: Array index out of bounds access when setting extended attributes on journaling filesystems. | known affected: 15 known not affected: 195 | 2026-06-28T12:04:46+00:00 | Vulnerability · Source |
| CVE-2021-46659 | redhat_vex | mariadb: Crash executing query with VIEW, aggregate and subquery | fixed: 736 known affected: 19 known not affected: 35 | 2026-06-28T12:04:42+00:00 | Vulnerability · Source |
| CVE-2021-27290 | redhat_vex | nodejs-ssri: Regular expression DoS (ReDoS) when parsing malicious SRI in strict mode | fixed: 200 known affected: 52 known not affected: 3 | 2026-06-28T12:04:42+00:00 | Vulnerability · Source |
| CVE-2021-27219 | redhat_vex | glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits | fixed: 561 known not affected: 16 | 2026-06-28T12:04:41+00:00 | Vulnerability · Source |
| CVE-2021-26690 | redhat_vex | httpd: mod_session: NULL pointer dereference when parsing Cookie header | fixed: 228 known affected: 21 known not affected: 18 | 2026-06-28T12:04:40+00:00 | Vulnerability · Source |
| CVE-2016-5139 | redhat_vex | openjpeg: Heap overflow in parsing of JPEG2000 precincts | fixed: 141 | 2026-06-28T12:04:36+00:00 | Vulnerability · Source |
| CVE-2025-5266 | redhat_vex | firefox: thunderbird: Script element events leaked cross-origin resource status | fixed: 249 known affected: 8 | 2026-06-28T12:04:35+00:00 | Vulnerability · Source |
| CVE-2026-48849 | redhat_vex | roundcubemail: XSS via unsanitized subject field in the draft restored value | known not affected: 1 | 2026-06-28T12:04:35+00:00 | Vulnerability · Source |
| CVE-2012-5077 | redhat_vex | OpenJDK: SecureRandom mulitple seeders information disclosure (Security, 7167656) | fixed: 293 known affected: 9 | 2026-06-28T12:04:32+00:00 | Vulnerability · Source |
| CVE-2025-31500 | redhat_vex | bestpractical.com/request-tracker: Best Practical RT Asset name XSS Vulnerability | known not affected: 1 | 2026-06-28T12:04:32+00:00 | Vulnerability · Source |
| CVE-2020-2752 | redhat_vex | mysql: C API unspecified vulnerability (CPU Apr 2020) | fixed: 1604 known affected: 23 | 2026-06-28T12:04:27+00:00 | Vulnerability · Source |
| CVE-2020-2732 | redhat_vex | Kernel: kvm: nVMX: L2 guest may trick the L0 hypervisor to access sensitive L1 resources | fixed: 354 known not affected: 43 | 2026-06-28T12:04:27+00:00 | Vulnerability · Source |
| CVE-2020-2577 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jan 2020) | fixed: 337 known not affected: 92 | 2026-06-28T12:04:26+00:00 | Vulnerability · Source |
| CVE-2026-7998 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Dialog | known not affected: 1 | 2026-06-28T12:04:25+00:00 | Vulnerability · Source |
| CVE-2012-5271 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T12:04:25+00:00 | Vulnerability · Source |
| CVE-2020-2580 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Jan 2020) | fixed: 337 known not affected: 92 | 2026-06-28T12:04:24+00:00 | Vulnerability · Source |
| CVE-2026-8017 | redhat_vex | chromium-browser: Side-channel information leakage in Media | known not affected: 1 | 2026-06-28T12:04:20+00:00 | Vulnerability · Source |
| CVE-2021-2370 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Jul 2021) | fixed: 155 known not affected: 119 | 2026-06-28T12:04:20+00:00 | Vulnerability · Source |
| CVE-2021-2374 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jul 2021) | fixed: 155 known not affected: 119 | 2026-06-28T12:04:20+00:00 | Vulnerability · Source |
| CVE-2005-2922 | redhat_vex | security flaw | fixed: 16 | 2026-06-28T12:04:19+00:00 | Vulnerability · Source |
| CVE-2020-2694 | redhat_vex | mysql: Server: Information Schema unspecified vulnerability (CPU Jan 2020) | fixed: 337 known not affected: 92 | 2026-06-28T12:04:19+00:00 | Vulnerability · Source |
| CVE-2026-3526 | redhat_vex | Drupal: File Access Fix (deprecated): Drupal File Access Fix (deprecated): Forceful browsing due to incorrect authorization | known not affected: 1 | 2026-06-28T12:04:18+00:00 | Vulnerability · Source |
| CVE-2020-2686 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020) | fixed: 337 known not affected: 92 | 2026-06-28T12:04:17+00:00 | Vulnerability · Source |
| CVE-2020-2679 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020) | fixed: 337 known not affected: 92 | 2026-06-28T12:04:16+00:00 | Vulnerability · Source |
| CVE-2016-5178 | redhat_vex | chromium-browser: various fixes from internal audits | fixed: 8 | 2026-06-28T12:04:14+00:00 | Vulnerability · Source |
| CVE-2021-22931 | redhat_vex | nodejs: Improper handling of untypical characters in domain names | fixed: 194 known affected: 1 known not affected: 26 | 2026-06-28T12:04:11+00:00 | Vulnerability · Source |
| CVE-2012-3342 | redhat_vex | JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment) | fixed: 313 known affected: 1 known not affected: 8 | 2026-06-28T12:04:11+00:00 | Vulnerability · Source |
| CVE-2012-2696 | redhat_vex | rhev: backend allows unprivileged queries | fixed: 13 known affected: 1 | 2026-06-28T12:04:10+00:00 | Vulnerability · Source |
| CVE-2026-31625 | redhat_vex | kernel: HID: alps: fix NULL pointer dereference in alps_raw_event() | known affected: 260 known not affected: 14 | 2026-06-28T12:04:09+00:00 | Vulnerability · Source |
| CVE-2020-2654 | redhat_vex | OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037) | fixed: 961 known affected: 1 | 2026-06-28T12:04:09+00:00 | Vulnerability · Source |
| CVE-2021-22930 | redhat_vex | nodejs: Use-after-free on close http2 on stream canceling | fixed: 194 known affected: 1 known not affected: 26 | 2026-06-28T12:04:08+00:00 | Vulnerability · Source |
| CVE-2026-3389 | redhat_vex | squirrel: Squirrel: Denial of Service via null pointer dereference | known not affected: 1 | 2026-06-28T12:04:08+00:00 | Vulnerability · Source |
| CVE-2020-13361 | redhat_vex | QEMU: es1370: OOB access due to incorrect frame count leads to DoS | known affected: 7 known not affected: 86 | 2026-06-28T12:04:08+00:00 | Vulnerability · Source |
| CVE-2021-22925 | redhat_vex | curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure | fixed: 45 known affected: 22 known not affected: 6 | 2026-06-28T12:04:06+00:00 | Vulnerability · Source |
| CVE-2021-22876 | redhat_vex | curl: Leak of authentication credentials in URL via automatic Referer | fixed: 204 known affected: 17 known not affected: 6 | 2026-06-28T12:04:06+00:00 | Vulnerability · Source |
| CVE-2026-8014 | redhat_vex | chromium-browser: Inappropriate implementation in Preload | known not affected: 1 | 2026-06-28T12:04:04+00:00 | Vulnerability · Source |
| CVE-2019-2973 | redhat_vex | OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505) | fixed: 901 | 2026-06-28T12:04:04+00:00 | Vulnerability · Source |
| CVE-2025-71309 | redhat_vex | kernel: fs/ntfs3: fix deadlock in ni_read_folio_cmpr | known not affected: 274 | 2026-06-28T12:04:03+00:00 | Vulnerability · Source |
| CVE-2019-2789 | redhat_vex | mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) | fixed: 291 known not affected: 112 | 2026-06-28T12:04:03+00:00 | Vulnerability · Source |
| CVE-2025-71308 | redhat_vex | kernel: accel/amdxdna: Fix potential NULL pointer dereference in context cleanup | known not affected: 274 | 2026-06-28T12:04:02+00:00 | Vulnerability · Source |
| CVE-2026-8022 | redhat_vex | chromium-browser: Inappropriate implementation in MHTML | known not affected: 1 | 2026-06-28T12:04:02+00:00 | Vulnerability · Source |