VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2021-47287 | redhat_vex | kernel: driver core: auxiliary bus: Fix memory leak when driver_register() fail | fixed: 150 known not affected: 150 | 2026-06-28T12:02:08+00:00 | Vulnerability · Source |
| CVE-2020-8992 | redhat_vex | kernel: soft lockup via a crafted journal size in ext4_protect_reserved_inode in fs/ext4/block_validity.c | known not affected: 104 | 2026-06-28T12:02:08+00:00 | Vulnerability · Source |
| CVE-2026-2806 | redhat_vex | firefox: thunderbird: Uninitialized memory in the Graphics: Text component | known not affected: 23 | 2026-06-28T12:02:07+00:00 | Vulnerability · Source |
| CVE-2009-3867 | redhat_vex | java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303) | fixed: 614 | 2026-06-28T12:02:05+00:00 | Vulnerability · Source |
| CVE-2009-4272 | redhat_vex | kernel: emergency route cache flushing leads to node deadlock | fixed: 83 known not affected: 8 | 2026-06-28T12:02:05+00:00 | Vulnerability · Source |
| CVE-2009-3866 | redhat_vex | java-1.6.0-sun: Privilege escalation in the Java Web Start Installer (6872824) | fixed: 224 | 2026-06-28T12:02:04+00:00 | Vulnerability · Source |
| CVE-2020-14891 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020) | fixed: 155 known not affected: 92 | 2026-06-28T12:02:02+00:00 | Vulnerability · Source |
| CVE-2020-14769 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020) | fixed: 155 known affected: 10 known not affected: 82 | 2026-06-28T12:02:01+00:00 | Vulnerability · Source |
| CVE-2020-10769 | redhat_vex | kernel: Buffer over-read in crypto_authenc_extractkeys() when a payload longer than 4 bytes is not aligned. | fixed: 211 known affected: 27 known not affected: 48 | 2026-06-28T12:02:01+00:00 | Vulnerability · Source |
| CVE-2009-3865 | redhat_vex | java-1.6.0-sun: ACE in JRE Deployment Toolkit (6869752) | fixed: 224 | 2026-06-28T12:02:00+00:00 | Vulnerability · Source |
| CVE-2009-3799 | redhat_vex | flash-plugin: multiple code execution flaws (APSB09-19) (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800) | fixed: 10 | 2026-06-28T12:01:59+00:00 | Vulnerability · Source |
| CVE-2010-0842 | redhat_vex | JDK multiple unspecified vulnerabilities | fixed: 568 | 2026-06-28T12:01:59+00:00 | Vulnerability · Source |
| CVE-2026-43970 | redhat_vex | cowlib: cowlib: Remote denial of service via data amplification in SPDY frame processing | known not affected: 1 | 2026-06-28T12:01:58+00:00 | Vulnerability · Source |
| CVE-2026-4692 | redhat_vex | firefox: thunderbird: Sandbox escape in the Responsive Design Mode component | fixed: 320 known affected: 8 | 2026-06-28T12:01:56+00:00 | Vulnerability · Source |
| CVE-2020-25645 | redhat_vex | kernel: Geneve/IPsec traffic may be unencrypted between two Geneve endpoints | fixed: 305 known affected: 44 known not affected: 15 | 2026-06-28T12:01:56+00:00 | Vulnerability · Source |
| CVE-2020-14381 | redhat_vex | kernel: referencing inode of removed superblock in get_futex_key() causes UAF | fixed: 150 known affected: 41 known not affected: 15 | 2026-06-28T12:01:55+00:00 | Vulnerability · Source |
| CVE-2026-43907 | redhat_vex | OpenImageIO: OpenImageIO: Arbitrary code execution or denial of service via crafted DPX image files | known not affected: 1 | 2026-06-28T12:01:55+00:00 | Vulnerability · Source |
| CVE-2026-43914 | redhat_vex | vaultwarden: Vaultwarden: Brute-force protection bypass via unprotected 2FA function allows unauthorized access | known not affected: 1 | 2026-06-28T12:01:53+00:00 | Vulnerability · Source |
| CVE-2009-0658 | redhat_vex | acroread: multiple JBIG2-related security flaws | fixed: 20 | 2026-06-28T12:01:53+00:00 | Vulnerability · Source |
| CVE-2009-0509 | redhat_vex | acroread: multiple security fixes in version 8.1.6 (APSB09-07) | fixed: 20 | 2026-06-28T12:01:51+00:00 | Vulnerability · Source |
| CVE-2009-0511 | redhat_vex | acroread: multiple security fixes in version 8.1.6 (APSB09-07) | fixed: 20 | 2026-06-28T12:01:51+00:00 | Vulnerability · Source |
| CVE-2026-9115 | redhat_vex | chromium-browser: Insufficient policy enforcement in Service Worker | known not affected: 1 | 2026-06-28T12:01:50+00:00 | Vulnerability · Source |
| CVE-2005-0611 | redhat_vex | security flaw | fixed: 16 | 2026-06-28T12:01:50+00:00 | Vulnerability · Source |
| CVE-2026-31605 | redhat_vex | kernel: fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO | known not affected: 274 | 2026-06-28T12:01:50+00:00 | Vulnerability · Source |
| CVE-2023-2194 | redhat_vex | kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() | fixed: 513 known not affected: 43 | 2026-06-28T12:01:49+00:00 | Vulnerability · Source |
| CVE-2008-6552 | redhat_vex | rgmanager: multiple insecure temporary file use issues | fixed: 108 | 2026-06-28T12:01:49+00:00 | Vulnerability · Source |
| CVE-2026-43911 | redhat_vex | vaultwarden: Vaultwarden: Session persistence due to unexpired refresh tokens after security actions | known not affected: 1 | 2026-06-28T12:01:49+00:00 | Vulnerability · Source |
| CVE-2019-2686 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019) | fixed: 291 known not affected: 123 | 2026-06-28T12:01:48+00:00 | Vulnerability · Source |
| CVE-2019-2683 | redhat_vex | mysql: Server: Options unspecified vulnerability (CPU Apr 2019) | fixed: 291 known affected: 18 known not affected: 105 | 2026-06-28T12:01:47+00:00 | Vulnerability · Source |
| CVE-2019-2685 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019) | fixed: 291 known not affected: 123 | 2026-06-28T12:01:47+00:00 | Vulnerability · Source |
| CVE-2020-8566 | redhat_vex | kubernetes: Ceph RBD adminSecrets exposed in logs when loglevel >= 4 | fixed: 9 known affected: 14 known not affected: 1110 | 2026-06-28T12:01:47+00:00 | Vulnerability · Source |
| CVE-2026-2869 | redhat_vex | janet-lang: Janet-lang: Denial of Service due to out-of-bounds read | known not affected: 1 | 2026-06-28T12:01:47+00:00 | Vulnerability · Source |
| CVE-2009-2979 | redhat_vex | acroread: Multiple DoS fixes in 8.1.7 (APSB09-15) | fixed: 20 | 2026-06-28T12:01:46+00:00 | Vulnerability · Source |
| CVE-2026-9122 | redhat_vex | chromium-browser: Out of bounds read in GPU | known not affected: 1 | 2026-06-28T12:01:46+00:00 | Vulnerability · Source |
| CVE-2025-62609 | redhat_vex | mlx: MLX has Wild Pointer Dereference in load_gguf() | known not affected: 1 | 2026-06-28T12:01:46+00:00 | Vulnerability · Source |
| CVE-2020-25704 | redhat_vex | kernel: perf_event_parse_addr_filter memory | fixed: 485 known affected: 17 known not affected: 21 | 2026-06-28T12:01:45+00:00 | Vulnerability · Source |
| CVE-2009-2722 | redhat_vex | JDK Multiple unspecified vulnerabilities in Provider class (incorrect fix) | fixed: 66 | 2026-06-28T12:01:45+00:00 | Vulnerability · Source |
| CVE-2023-45863 | redhat_vex | kernel: lib/kobject.c vulnerable to fill_kobj_path out-of-bounds write | fixed: 429 known affected: 53 | 2026-06-28T12:01:45+00:00 | Vulnerability · Source |
| CVE-2026-29057 | redhat_vex | next.js: Next.js: HTTP request smuggling in rewrites | known affected: 18 | 2026-06-28T12:01:44+00:00 | Vulnerability · Source |
| CVE-2020-8286 | redhat_vex | curl: Inferior OCSP verification | fixed: 189 known affected: 6 known not affected: 16 | 2026-06-28T12:01:44+00:00 | Vulnerability · Source |
| CVE-2020-25686 | redhat_vex | dnsmasq: multiple queries forwarded for the same name makes forging replies easier for an off-path attacker | fixed: 180 known affected: 4 known not affected: 107 | 2026-06-28T12:01:43+00:00 | Vulnerability · Source |
| CVE-2020-14304 | redhat_vex | kernel: ethtool when reading eeprom of device could lead to memory leak | known affected: 198 known not affected: 1 | 2026-06-28T12:01:42+00:00 | Vulnerability · Source |
| CVE-2009-1864 | redhat_vex | flash-plugin: multiple code execution flaws (APSB09-10) | fixed: 10 | 2026-06-28T12:01:42+00:00 | Vulnerability · Source |
| CVE-2009-1863 | redhat_vex | flash-plugin: multiple code execution flaws (APSB09-10) | fixed: 10 | 2026-06-28T12:01:42+00:00 | Vulnerability · Source |
| CVE-2020-8285 | redhat_vex | curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used | fixed: 189 known affected: 15 known not affected: 7 | 2026-06-28T12:01:42+00:00 | Vulnerability · Source |
| CVE-2019-13757 | redhat_vex | chromium-browser: Incorrect security UI in Omnibox | fixed: 14 | 2026-06-28T12:01:41+00:00 | Vulnerability · Source |
| CVE-2020-8284 | redhat_vex | curl: FTP PASV command response can cause curl to connect to arbitrary host | fixed: 189 known affected: 15 known not affected: 7 | 2026-06-28T12:01:41+00:00 | Vulnerability · Source |
| CVE-2020-8265 | redhat_vex | nodejs: use-after-free in the TLS implementation | fixed: 242 known not affected: 7 | 2026-06-28T12:01:39+00:00 | Vulnerability · Source |
| CVE-2020-10756 | redhat_vex | QEMU: slirp: networking out-of-bounds read information disclosure vulnerability | fixed: 1861 known affected: 79 known not affected: 39 | 2026-06-28T12:01:38+00:00 | Vulnerability · Source |
| CVE-2022-27950 | redhat_vex | kernel: memory leak in drivers/hid/hid-elo.c | fixed: 279 known not affected: 150 | 2026-06-28T12:01:38+00:00 | Vulnerability · Source |