VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297698 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-5104 | redhat_vex | chromium-browser: ui spoofing in browser | fixed: 12 | 2026-06-28T11:38:47+00:00 | Vulnerability · Source |
| CVE-2014-6502 | redhat_vex | OpenJDK: LogRecord use of incorrect CL when loading ResourceBundle (Libraries, 8042797) | fixed: 961 | 2026-06-28T11:38:46+00:00 | Vulnerability · Source |
| CVE-2026-48683 | redhat_vex | fastnetmon: FastNetMon: Information disclosure or Denial of Service via out-of-bounds read in NetFlow v9 processing | known not affected: 1 | 2026-06-28T11:38:44+00:00 | Vulnerability · Source |
| CVE-2017-5103 | redhat_vex | chromium-browser: uninitialized use in skia | fixed: 12 | 2026-06-28T11:38:44+00:00 | Vulnerability · Source |
| CVE-2017-13672 | redhat_vex | QEMU: vga: OOB read access during display update | fixed: 102 known affected: 17 | 2026-06-28T11:38:43+00:00 | Vulnerability · Source |
| CVE-2017-13168 | redhat_vex | kernel: scsi: sg driver can improperly access userspace memory | known not affected: 104 | 2026-06-28T11:38:43+00:00 | Vulnerability · Source |
| CVE-2014-5120 | redhat_vex | php: gd extension NUL byte injection in file names | fixed: 548 known not affected: 30 | 2026-06-28T11:38:42+00:00 | Vulnerability · Source |
| CVE-2019-15217 | redhat_vex | kernel: null pointer dereference in drivers/media/usb/zr364xx/zr364xx.c driver | fixed: 204 known affected: 90 known not affected: 1 | 2026-06-28T11:38:41+00:00 | Vulnerability · Source |
| CVE-2005-3390 | redhat_vex | security flaw | fixed: 336 | 2026-06-28T11:38:41+00:00 | Vulnerability · Source |
| CVE-2014-4221 | redhat_vex | OpenJDK: MethodHandles.Lookup insufficient modifiers checks (Libraries, 8035788) | fixed: 374 known not affected: 33 | 2026-06-28T11:38:40+00:00 | Vulnerability · Source |
| CVE-2025-71297 | redhat_vex | kernel: wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() | known affected: 260 known not affected: 14 | 2026-06-28T11:38:39+00:00 | Vulnerability · Source |
| CVE-2026-10921 | redhat_vex | chromium-browser: Integer overflow in Dawn | known not affected: 1 | 2026-06-28T11:38:39+00:00 | Vulnerability · Source |
| CVE-2017-5011 | redhat_vex | chromium-browser: unauthorised file access in devtools | fixed: 12 | 2026-06-28T11:38:39+00:00 | Vulnerability · Source |
| CVE-2017-5020 | redhat_vex | chromium-browser: universal xss in chrome://downloads | fixed: 12 | 2026-06-28T11:38:39+00:00 | Vulnerability · Source |
| CVE-2017-5024 | redhat_vex | chromium-browser: heap overflow in ffmpeg | fixed: 12 | 2026-06-28T11:38:39+00:00 | Vulnerability · Source |
| CVE-2019-3828 | redhat_vex | Ansible: path traversal in the fetch module | fixed: 17 known affected: 22 known not affected: 2 | 2026-06-28T11:38:38+00:00 | Vulnerability · Source |
| CVE-2020-14893 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020) | fixed: 155 known not affected: 92 | 2026-06-28T11:38:38+00:00 | Vulnerability · Source |
| CVE-2020-14846 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020) | fixed: 155 known not affected: 92 | 2026-06-28T11:38:38+00:00 | Vulnerability · Source |
| CVE-2026-7835 | redhat_vex | netatalk: Netatalk: Denial of Service via format string argument mismatch | known not affected: 1 | 2026-06-28T11:38:38+00:00 | Vulnerability · Source |
| CVE-2017-5010 | redhat_vex | chromium-browser: universal xss in blink | fixed: 12 | 2026-06-28T11:38:38+00:00 | Vulnerability · Source |
| CVE-2017-3645 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017) | fixed: 54 known not affected: 86 | 2026-06-28T11:38:36+00:00 | Vulnerability · Source |
| CVE-2020-14623 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jul 2020) | fixed: 337 known not affected: 92 | 2026-06-28T11:38:36+00:00 | Vulnerability · Source |
| CVE-2017-3647 | redhat_vex | mysql: Server: Replication unspecified vulnerability (CPU Jul 2017) | fixed: 114 known not affected: 77 | 2026-06-28T11:38:36+00:00 | Vulnerability · Source |
| CVE-2021-28363 | redhat_vex | python-urllib3: HTTPS proxy host name not validated when using default SSLContext | fixed: 2 known affected: 2 known not affected: 133 | 2026-06-28T11:38:35+00:00 | Vulnerability · Source |
| CVE-2017-3638 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017) | fixed: 54 known not affected: 86 | 2026-06-28T11:38:35+00:00 | Vulnerability · Source |
| CVE-2025-71191 | redhat_vex | kernel: dmaengine: at_hdmac: fix device leak on of_dma_xlate() | known not affected: 274 | 2026-06-28T11:38:33+00:00 | Vulnerability · Source |
| CVE-2017-3309 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017) | fixed: 416 known affected: 27 | 2026-06-28T11:38:32+00:00 | Vulnerability · Source |
| CVE-2025-71299 | redhat_vex | kernel: spi: cadence-quadspi: Parse DT for flashes with the rest of the DT parsing | known affected: 76 known not affected: 198 | 2026-06-28T11:38:31+00:00 | Vulnerability · Source |
| CVE-2017-10096 | redhat_vex | OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469) | fixed: 854 | 2026-06-28T11:38:31+00:00 | Vulnerability · Source |
| CVE-2019-15290 | redhat_vex | kernel: Null pointer dereference in the ath6kl_usb_alloc_urb_from_pipe function in the drivers/net/wireless/ath/ath6kl/usb.c | known not affected: 104 | 2026-06-28T11:38:31+00:00 | Vulnerability · Source |
| CVE-2017-3467 | redhat_vex | mysql: Server: C API unspecified vulnerability (CPU Apr 2017) | fixed: 54 known not affected: 66 | 2026-06-28T11:38:30+00:00 | Vulnerability · Source |
| CVE-2017-10090 | redhat_vex | OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries) | fixed: 720 | 2026-06-28T11:38:30+00:00 | Vulnerability · Source |
| CVE-2014-3559 | redhat_vex | ovirt-engine-backend: memory snapshots not wiped when deleting a VM with wipe-after-delete (WAD) enabled for its disks | fixed: 16 | 2026-06-28T11:38:29+00:00 | Vulnerability · Source |
| CVE-2017-3453 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017) | fixed: 416 known affected: 27 | 2026-06-28T11:38:29+00:00 | Vulnerability · Source |
| CVE-2014-3515 | redhat_vex | php: unserialize() SPL ArrayObject / SPLObjectStorage type confusion flaw | fixed: 970 known not affected: 1 | 2026-06-28T11:38:27+00:00 | Vulnerability · Source |
| CVE-2014-3479 | redhat_vex | file: cdf_check_stream_offset insufficient boundary check | fixed: 1133 known not affected: 4 | 2026-06-28T11:38:26+00:00 | Vulnerability · Source |
| CVE-2026-43355 | redhat_vex | kernel: iio: light: bh1780: fix PM runtime leak on error path | known not affected: 274 | 2026-06-28T11:38:25+00:00 | Vulnerability · Source |
| CVE-2025-71133 | redhat_vex | kernel: RDMA/irdma: avoid invalid read in irdma_net_event | known affected: 232 known not affected: 42 | 2026-06-28T11:38:25+00:00 | Vulnerability · Source |
| CVE-2017-3261 | redhat_vex | OpenJDK: integer overflow in SocketOutputStream boundary check (Networking, 8164147) | fixed: 1032 | 2026-06-28T11:38:24+00:00 | Vulnerability · Source |
| CVE-2017-3259 | redhat_vex | JDK: unspecified vulnerability fixed in 6u141, 7u131, and 8u121 (Deployment) | fixed: 630 | 2026-06-28T11:38:24+00:00 | Vulnerability · Source |
| CVE-2026-10919 | redhat_vex | chromium-browser: Use after free in ANGLE | known not affected: 1 | 2026-06-28T11:38:24+00:00 | Vulnerability · Source |
| CVE-2014-3065 | redhat_vex | JDK: privilege escalation via shared class cache | fixed: 439 | 2026-06-28T11:38:23+00:00 | Vulnerability · Source |
| CVE-2026-5292 | redhat_vex | chromium-browser: Google Chrome, Chromium: Information disclosure via out-of-bounds read in WebCodecs | known not affected: 1 | 2026-06-28T11:38:22+00:00 | Vulnerability · Source |
| CVE-2019-15211 | redhat_vex | kernel: use-after-free in drivers/media/v4l2-core/v4l2-dev.c | known not affected: 82 | 2026-06-28T11:38:22+00:00 | Vulnerability · Source |
| CVE-2026-10894 | redhat_vex | chromium-browser: Use after free in Printing | known not affected: 1 | 2026-06-28T11:38:22+00:00 | Vulnerability · Source |
| CVE-2014-2436 | redhat_vex | mysql: unspecified vulnerability related to RBR (CPU April 2014) | fixed: 190 under investigation: 9 | 2026-06-28T11:38:21+00:00 | Vulnerability · Source |
| CVE-2026-5275 | redhat_vex | chromium-browser: Heap buffer overflow in ANGLE | known not affected: 1 | 2026-06-28T11:38:20+00:00 | Vulnerability · Source |
| CVE-2026-44053 | redhat_vex | netatalk: Netatalk: Data compromise due to weak cryptography | known not affected: 1 | 2026-06-28T11:38:18+00:00 | Vulnerability · Source |
| CVE-2025-71182 | redhat_vex | kernel: can: j1939: make j1939_session_activate() fail if device is no longer registered | known affected: 184 known not affected: 90 | 2026-06-28T11:38:18+00:00 | Vulnerability · Source |
| CVE-2026-44070 | redhat_vex | netatalk: Netatalk: Denial of Service via unbounded realloc in charset conversion | known not affected: 1 | 2026-06-28T11:38:17+00:00 | Vulnerability · Source |