VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297694 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-12114 | redhat_vex | kernel: DoS by corrupting mountpoint reference counter | fixed: 300 known affected: 45 | 2026-06-28T11:51:14+00:00 | Vulnerability · Source |
| CVE-2013-1366 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-05) | fixed: 4 | 2026-06-28T11:51:13+00:00 | Vulnerability · Source |
| CVE-2013-0775 | redhat_vex | Mozilla: Use-after-free in nsImageLoadingContent (MFSA 2013-26) | fixed: 299 known not affected: 1 | 2026-06-28T11:51:12+00:00 | Vulnerability · Source |
| CVE-2018-12130 | redhat_vex | hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS) | fixed: 3508 known affected: 2 known not affected: 16 | 2026-06-28T11:51:12+00:00 | Vulnerability · Source |
| CVE-2021-22890 | redhat_vex | curl: TLS 1.3 session ticket mix-up with HTTPS proxy host | fixed: 144 known affected: 2 known not affected: 30 | 2026-06-28T11:51:12+00:00 | Vulnerability · Source |
| CVE-2018-9385 | redhat_vex | kernel: Out-of-bounds write due to incorrect bounds check in drivers/amba/bus.c:driver_override_store() | known affected: 1 known not affected: 103 | 2026-06-28T11:51:11+00:00 | Vulnerability · Source |
| CVE-2013-0754 | redhat_vex | Mozilla: Use-after-free in ListenerManager (MFSA 2013-17) | fixed: 140 known affected: 1 | 2026-06-28T11:51:11+00:00 | Vulnerability · Source |
| CVE-2026-31781 | redhat_vex | kernel: drm/ioc32: stop speculation on the drm_compat_ioctl path | known affected: 246 known not affected: 28 | 2026-06-28T11:51:10+00:00 | Vulnerability · Source |
| CVE-2008-3109 | redhat_vex | Security Vulnerabilities in the Java Runtime Environment Scripting Language Support (6529568, 6529579) | fixed: 196 | 2026-06-28T11:51:10+00:00 | Vulnerability · Source |
| CVE-2018-17479 | redhat_vex | chromium-browser: Use-after-free in GPU | fixed: 12 | 2026-06-28T11:51:10+00:00 | Vulnerability · Source |
| CVE-2013-0423 | redhat_vex | JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment) | fixed: 313 known affected: 1 known not affected: 8 | 2026-06-28T11:51:09+00:00 | Vulnerability · Source |
| CVE-2026-24043 | redhat_vex | jsPDF: jsPDF: PDF integrity compromised via arbitrary XML injection in addMetadata function | known affected: 6 | 2026-06-28T11:51:09+00:00 | Vulnerability · Source |
| CVE-2013-0428 | redhat_vex | OpenJDK: reflection API incorrect checks for proxy classes (Libraries, 7197546, SE-2012-01 Issue 29) | fixed: 543 known affected: 1 | 2026-06-28T11:51:09+00:00 | Vulnerability · Source |
| CVE-2018-17474 | redhat_vex | chromium-browser: Use after free in Blink | fixed: 12 | 2026-06-28T11:51:09+00:00 | Vulnerability · Source |
| CVE-2026-25793 | redhat_vex | nebula: Nebula: Blocklist evasion via ECDSA Signature Malleability | known not affected: 1 | 2026-06-28T11:51:08+00:00 | Vulnerability · Source |
| CVE-2008-3106 | redhat_vex | security flaw | fixed: 320 | 2026-06-28T11:51:08+00:00 | Vulnerability · Source |
| CVE-2026-23369 | redhat_vex | kernel: i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" | known affected: 198 known not affected: 76 | 2026-06-28T11:51:08+00:00 | Vulnerability · Source |
| CVE-2026-23991 | redhat_vex | github.com/theupdateframework/go-tuf/v2: go-tuf client DoS via malformed server response | known affected: 35 | 2026-06-28T11:51:08+00:00 | Vulnerability · Source |
| CVE-2020-11993 | redhat_vex | httpd: mod_http2 concurrent pool usage | fixed: 361 known affected: 3 known not affected: 16 | 2026-06-28T11:51:07+00:00 | Vulnerability · Source |
| CVE-2013-0273 | redhat_vex | pidgin: Meanwhile protocol missing nul termination of long Lotus Sametime usernames | fixed: 113 known affected: 1 | 2026-06-28T11:51:07+00:00 | Vulnerability · Source |
| CVE-2013-0272 | redhat_vex | pidgin: MXit protocol stack-based buffer overflow when processing HTTP headers | fixed: 113 known affected: 1 | 2026-06-28T11:51:06+00:00 | Vulnerability · Source |
| CVE-2023-35825 | redhat_vex | kernel: r592: race condition leading to use-after-free in r592_remove() | fixed: 666 known affected: 64 | 2026-06-28T11:51:06+00:00 | Vulnerability · Source |
| CVE-2018-17467 | redhat_vex | chromium-browser: URL spoof in Omnibox | fixed: 12 | 2026-06-28T11:51:05+00:00 | Vulnerability · Source |
| CVE-2018-8822 | redhat_vex | kernel: Memory corruption in ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c | known not affected: 88 | 2026-06-28T11:51:05+00:00 | Vulnerability · Source |
| CVE-2026-23952 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via processing of MSL comment tags | known affected: 14 | 2026-06-28T11:51:04+00:00 | Vulnerability · Source |
| CVE-2014-3597 | redhat_vex | php: multiple buffer over-reads in php_parserr | fixed: 970 known not affected: 1 | 2026-06-28T11:51:03+00:00 | Vulnerability · Source |
| CVE-2025-67481 | redhat_vex | MediaWiki: MediaWiki: Cross-site Scripting vulnerability via improper input neutralization | known not affected: 1 | 2026-06-28T11:51:02+00:00 | Vulnerability · Source |
| CVE-2026-23920 | redhat_vex | zabbix: Zabbix: Arbitrary code execution via newline injection in script input validation | known not affected: 1 | 2026-06-28T11:51:01+00:00 | Vulnerability · Source |
| CVE-2026-28861 | redhat_vex | webkitgtk: A malicious website may be able to access script message handlers intended for other origins | known not affected: 27 | 2026-06-28T11:51:01+00:00 | Vulnerability · Source |
| CVE-2020-11984 | redhat_vex | httpd: mod_proxy_uwsgi buffer overflow | fixed: 361 known affected: 3 known not affected: 16 | 2026-06-28T11:51:01+00:00 | Vulnerability · Source |
| CVE-2022-44020 | redhat_vex | VirtualBMC: removes password protection from the managed libvirt XML domain | fixed: 2 known not affected: 5 | 2026-06-28T11:51:01+00:00 | Vulnerability · Source |
| CVE-2021-35591 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Oct 2021) | fixed: 125 known not affected: 134 | 2026-06-28T11:51:00+00:00 | Vulnerability · Source |
| CVE-2020-11884 | redhat_vex | Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation | fixed: 287 known not affected: 72 | 2026-06-28T11:50:59+00:00 | Vulnerability · Source |
| CVE-2007-5238 | redhat_vex | Vulnerabilities in Java Web Start allow to determine the location of the Java Web Start cache | fixed: 375 | 2026-06-28T11:50:58+00:00 | Vulnerability · Source |
| CVE-2026-12014 | redhat_vex | chromium-browser: chromium-browser: Use after free Cast | known not affected: 1 | 2026-06-28T11:50:58+00:00 | Vulnerability · Source |
| CVE-2019-1387 | redhat_vex | git: Remote code execution in recursive clones with nested submodules | fixed: 362 known not affected: 15 | 2026-06-28T11:50:57+00:00 | Vulnerability · Source |
| CVE-2026-31754 | redhat_vex | kernel: usb: cdns3: gadget: fix state inconsistency on gadget init failure | known affected: 76 known not affected: 198 | 2026-06-28T11:50:56+00:00 | Vulnerability · Source |
| CVE-2025-61646 | redhat_vex | MediaWiki: MediaWiki: Information disclosure via user interaction in EnhancedChangesList.Php | known not affected: 1 | 2026-06-28T11:50:56+00:00 | Vulnerability · Source |
| CVE-2026-23889 | redhat_vex | pnpm: pnpm: Arbitrary file write via path traversal on Windows | known affected: 2 | 2026-06-28T11:50:55+00:00 | Vulnerability · Source |
| CVE-2026-43174 | redhat_vex | kernel: io_uring/zcrx: fix post open error handling | known not affected: 274 | 2026-06-28T11:50:55+00:00 | Vulnerability · Source |
| CVE-2026-23888 | redhat_vex | pnpm: pnpm: Arbitrary file write via path traversal in binary fetcher leading to remote code execution | known affected: 2 | 2026-06-28T11:50:54+00:00 | Vulnerability · Source |
| CVE-2016-3134 | redhat_vex | kernel: netfilter: missing bounds check in ipt_entry structure | fixed: 207 known affected: 15 | 2026-06-28T11:50:53+00:00 | Vulnerability · Source |
| CVE-2016-3108 | redhat_vex | pulp: Insecure temporary file used when generating certificate for Pulp Nodes | fixed: 639 | 2026-06-28T11:50:52+00:00 | Vulnerability · Source |
| CVE-2018-16082 | redhat_vex | chromium-browser: Stack buffer overflow in SwiftShader | fixed: 12 | 2026-06-28T11:50:52+00:00 | Vulnerability · Source |
| CVE-2019-13764 | redhat_vex | chromium-browser: Type Confusion in V8 | fixed: 14 | 2026-06-28T11:50:52+00:00 | Vulnerability · Source |
| CVE-2018-7740 | redhat_vex | kernel: Denial of service in resv_map_release function in mm/hugetlb.c | fixed: 222 known affected: 28 known not affected: 56 | 2026-06-28T11:50:52+00:00 | Vulnerability · Source |
| CVE-2025-5264 | redhat_vex | firefox: thunderbird: Potential local code execution in “Copy as cURL” command | fixed: 249 known affected: 8 | 2026-06-28T11:50:51+00:00 | Vulnerability · Source |
| CVE-2026-12024 | redhat_vex | chromium-browser: chromium-browser: Insufficient policy enforcement DevTools | known not affected: 1 | 2026-06-28T11:50:51+00:00 | Vulnerability · Source |
| CVE-2026-23874 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via infinite recursion in MSL <write> command | known affected: 14 | 2026-06-28T11:50:51+00:00 | Vulnerability · Source |
| CVE-2014-2490 | redhat_vex | OpenJDK: Event logger format string vulnerability (Hotspot, 8037076) | fixed: 363 known not affected: 20 | 2026-06-28T11:50:51+00:00 | Vulnerability · Source |