VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-31728 | redhat_vex | kernel: usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop | known affected: 76 known not affected: 198 | 2026-06-28T11:52:40+00:00 | Vulnerability · Source |
| CVE-2026-31559 | redhat_vex | kernel: LoongArch: Fix missing NULL checks for kstrdup() | known not affected: 274 | 2026-06-28T11:52:40+00:00 | Vulnerability · Source |
| CVE-2026-2474 | redhat_vex | crypt-urandom: Crypt::URandom for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom() | known not affected: 1 | 2026-06-28T11:52:39+00:00 | Vulnerability · Source |
| CVE-2026-24686 | redhat_vex | github.com/theupdateframework/go-tuf/v2: go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names | known affected: 27 | 2026-06-28T11:52:39+00:00 | Vulnerability · Source |
| CVE-2025-32014 | redhat_vex | estree-util-value-to-estree: estree-util-value-to-estree allows prototype pollution in generated ESTree | known not affected: 1 | 2026-06-28T11:52:38+00:00 | Vulnerability · Source |
| CVE-2013-3343 | redhat_vex | flash-plugin: code execution flaw (APSB13-16) | fixed: 4 | 2026-06-28T11:52:38+00:00 | Vulnerability · Source |
| CVE-2026-24480 | redhat_vex | QGIS: QGIS GitHub Actions workflow: Remote Code Execution and repository compromise via insecure `pull_request_target` configuration | known not affected: 1 | 2026-06-28T11:52:37+00:00 | Vulnerability · Source |
| CVE-2026-31558 | redhat_vex | kernel: LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust | known not affected: 274 | 2026-06-28T11:52:37+00:00 | Vulnerability · Source |
| CVE-2013-2466 | redhat_vex | JDK: unspecified vulnerability fixed in 7u25 (Deployment) | fixed: 325 known not affected: 8 | 2026-06-28T11:52:37+00:00 | Vulnerability · Source |
| CVE-2026-32642 | redhat_vex | Apache Artemis: Apache ActiveMQ Artemis: Apache Artemis and Apache ActiveMQ Artemis: Unauthorized address creation due to incorrect authorization during JMS topic subscription. | fixed: 1 known affected: 15 | 2026-06-28T11:52:37+00:00 | Vulnerability · Source |
| CVE-2023-23455 | redhat_vex | Kernel: denial of service in atm_tc_enqueue in net/sched/sch_atm.c due to type confusion | fixed: 399 known affected: 42 known not affected: 108 | 2026-06-28T11:52:36+00:00 | Vulnerability · Source |
| CVE-2017-9227 | redhat_vex | oniguruma: Out-of-bounds stack read in mbc_enc_len() during regular expression searching | fixed: 254 known affected: 174 under investigation: 4 | 2026-06-28T11:52:35+00:00 | Vulnerability · Source |
| CVE-2017-9242 | redhat_vex | kernel: Incorrect overwrite check in __ip6_append_data() | fixed: 185 known not affected: 34 | 2026-06-28T11:52:35+00:00 | Vulnerability · Source |
| CVE-2017-9229 | redhat_vex | oniguruma: Invalid pointer dereference in left_adjust_char_head() | fixed: 257 known affected: 174 under investigation: 3 | 2026-06-28T11:52:34+00:00 | Vulnerability · Source |
| CVE-2025-62820 | redhat_vex | nebula: incorrect handling of CIDR in some configurations allows arbitrary source IP addresses within the network | known not affected: 1 | 2026-06-28T11:52:33+00:00 | Vulnerability · Source |
| CVE-2013-2176 | redhat_vex | rhev-m: rhev-apt service unquoted search path | fixed: 1 | 2026-06-28T11:52:33+00:00 | Vulnerability · Source |
| CVE-2008-5359 | redhat_vex | OpenJDK Buffer overflow in image processing (6726779) | fixed: 587 | 2026-06-28T11:52:33+00:00 | Vulnerability · Source |
| CVE-2026-24133 | redhat_vex | jsPDF: jsPDF: Denial of Service due to excessive memory allocation from crafted BMP images | known affected: 6 | 2026-06-28T11:52:32+00:00 | Vulnerability · Source |
| CVE-2025-71271 | redhat_vex | kernel: hfsplus: ensure sb->s_fs_info is always cleaned up | known affected: 14 known not affected: 260 | 2026-06-28T11:52:28+00:00 | Vulnerability · Source |
| CVE-2015-1267 | redhat_vex | chromium-browser: Cross-origin bypass in Blink | fixed: 12 | 2026-06-28T11:52:26+00:00 | Vulnerability · Source |
| CVE-2018-11506 | redhat_vex | kernel: Stack-based buffer overflow in drivers/scsi/sr_ioctl.c allows denial of service or other unspecified impact | fixed: 26 known not affected: 87 | 2026-06-28T11:52:25+00:00 | Vulnerability · Source |
| CVE-2006-3588 | redhat_vex | security flaw | fixed: 2 | 2026-06-28T11:52:24+00:00 | Vulnerability · Source |
| CVE-2005-1625 | redhat_vex | security flaw | fixed: 2 | 2026-06-28T11:52:23+00:00 | Vulnerability · Source |
| CVE-2006-0208 | redhat_vex | security flaw | fixed: 335 | 2026-06-28T11:52:23+00:00 | Vulnerability · Source |
| CVE-2026-12030 | redhat_vex | chromium-browser: chromium-browser: Heap buffer overflow GPU | known not affected: 1 | 2026-06-28T11:52:23+00:00 | Vulnerability · Source |
| CVE-2026-3529 | redhat_vex | Google Analytics GA4: Drupal: Drupal Google Analytics GA4: Cross-site Scripting (XSS) via improper input neutralization | known not affected: 1 | 2026-06-28T11:52:20+00:00 | Vulnerability · Source |
| CVE-2015-1210 | redhat_vex | chromium-browser: cross-origin-bypass in V8 bindings | fixed: 15 | 2026-06-28T11:52:19+00:00 | Vulnerability · Source |
| CVE-2025-31721 | redhat_vex | jenkins: Missing permission check allows retrieving secrets from agent configurations | known affected: 1 | 2026-06-28T11:52:18+00:00 | Vulnerability · Source |
| CVE-2020-13950 | redhat_vex | httpd: mod_proxy NULL pointer dereference | fixed: 228 known affected: 2 known not affected: 37 | 2026-06-28T11:52:16+00:00 | Vulnerability · Source |
| CVE-2020-13949 | redhat_vex | libthrift: potential DoS when processing untrusted payloads | fixed: 56 known affected: 45 known not affected: 29 | 2026-06-28T11:52:15+00:00 | Vulnerability · Source |
| CVE-2026-43446 | redhat_vex | kernel: accel/amdxdna: Fix runtime suspend deadlock when there is pending job | known not affected: 274 | 2026-06-28T11:52:14+00:00 | Vulnerability · Source |
| CVE-2020-13800 | redhat_vex | QEMU: ati-vga: infinite recursion in ati_mm_read/write calls may lead to DoS | known not affected: 93 | 2026-06-28T11:52:14+00:00 | Vulnerability · Source |
| CVE-2026-23741 | redhat_vex | asterisk: privilege escalation via the ast_coredumper script | known not affected: 1 | 2026-06-28T11:52:13+00:00 | Vulnerability · Source |
| CVE-2015-0325 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T11:52:13+00:00 | Vulnerability · Source |
| CVE-2015-0311 | redhat_vex | flash-plugin: multiple critical vulnerabilities (APSA15-01)(APSB15-03) | fixed: 5 | 2026-06-28T11:52:13+00:00 | Vulnerability · Source |
| CVE-2011-4370 | redhat_vex | acroread: multiple unspecified flaws (APSB12-08, APSB12-01) | fixed: 10 | 2026-06-28T11:52:12+00:00 | Vulnerability · Source |
| CVE-2013-2099 | redhat_vex | python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns | fixed: 1458 known affected: 13 known not affected: 39 | 2026-06-28T11:52:10+00:00 | Vulnerability · Source |
| CVE-2017-12613 | redhat_vex | apr: Out-of-bounds array deref in apr_time_exp*() functions | fixed: 342 known affected: 9 | 2026-06-28T11:52:10+00:00 | Vulnerability · Source |
| CVE-2026-52934 | redhat_vex | kernel: batman-adv: tvlv: reject oversized TVLV packets | known not affected: 274 | 2026-06-28T11:52:09+00:00 | Vulnerability · Source |
| CVE-2018-18690 | redhat_vex | kernel: filesystem corruption due to an unchecked error condition during an xfs attribute change | fixed: 222 known affected: 14 known not affected: 86 | 2026-06-28T11:52:08+00:00 | Vulnerability · Source |
| CVE-2022-45442 | redhat_vex | sinatra: Reflected File Download attack | fixed: 93 known affected: 2 | 2026-06-28T11:52:08+00:00 | Vulnerability · Source |
| CVE-2020-13253 | redhat_vex | QEMU: sd: OOB access could crash the guest resulting in DoS | known not affected: 93 | 2026-06-28T11:52:07+00:00 | Vulnerability · Source |
| CVE-2025-64330 | redhat_vex | Suricata: Suricata: Single byte read heap overflow leads to denial of service | known not affected: 1 | 2026-06-28T11:52:07+00:00 | Vulnerability · Source |
| CVE-2025-3072 | redhat_vex | chromium-browser: Inappropriate implementation in Custom Tabs | known not affected: 1 | 2026-06-28T11:52:06+00:00 | Vulnerability · Source |
| CVE-2018-2794 | redhat_vex | OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) | fixed: 846 known affected: 8 | 2026-06-28T11:52:05+00:00 | Vulnerability · Source |
| CVE-2026-31545 | redhat_vex | kernel: NFC: nxp-nci: allow GPIOs to sleep | known not affected: 274 | 2026-06-28T11:52:03+00:00 | Vulnerability · Source |
| CVE-2018-2798 | redhat_vex | OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) | fixed: 846 known affected: 8 | 2026-06-28T11:51:59+00:00 | Vulnerability · Source |
| CVE-2020-12654 | redhat_vex | kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c | fixed: 999 known affected: 16 known not affected: 23 | 2026-06-28T11:51:56+00:00 | Vulnerability · Source |
| CVE-2026-43432 | redhat_vex | kernel: usb: xhci: Fix memory leak in xhci_disable_slot() | known affected: 246 known not affected: 28 | 2026-06-28T11:51:55+00:00 | Vulnerability · Source |
| CVE-2020-12465 | redhat_vex | kernel: buffer overflow in mt76_add_fragment function in drivers/net/wireless/mediatek/mt76/dma.c | fixed: 120 known not affected: 72 | 2026-06-28T11:51:55+00:00 | Vulnerability · Source |