VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297714 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-32716 | redhat_vex | scitokens: SciTokens: Authorization Bypass due to incorrect scope path validation | known not affected: 1 | 2026-06-28T11:35:38+00:00 | Vulnerability · Source |
| CVE-2026-32596 | redhat_vex | glances: unauthenticated API exposure | known not affected: 1 | 2026-06-28T11:35:35+00:00 | Vulnerability · Source |
| CVE-2026-43121 | redhat_vex | kernel: io_uring/zcrx: fix user_ref race between scrub and refill paths | known not affected: 274 | 2026-06-28T11:35:35+00:00 | Vulnerability · Source |
| CVE-2026-31764 | redhat_vex | kernel: iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only | known not affected: 274 | 2026-06-28T11:35:34+00:00 | Vulnerability · Source |
| CVE-2026-43289 | redhat_vex | kernel: kexec: derive purgatory entry from symbol | known affected: 184 known not affected: 90 | 2026-06-28T11:35:34+00:00 | Vulnerability · Source |
| CVE-2010-2889 | redhat_vex | acroread: multiple code execution flaws (APSB10-21) | fixed: 12 known not affected: 2 | 2026-06-28T11:35:33+00:00 | Vulnerability · Source |
| CVE-2009-0520 | redhat_vex | flash-plugin: Buffer overflow (arbitrary code execution) via crafted SWF file. | fixed: 10 | 2026-06-28T11:35:33+00:00 | Vulnerability · Source |
| CVE-2026-43184 | redhat_vex | kernel: rnbd-srv: Zero the rsp buffer before using it | known not affected: 274 | 2026-06-28T11:35:32+00:00 | Vulnerability · Source |
| CVE-2008-7313 | redhat_vex | snoopy: incomplete fixes for command execution flaws | fixed: 18 known affected: 7 | 2026-06-28T11:35:32+00:00 | Vulnerability · Source |
| CVE-2026-7361 | redhat_vex | chromium-browser: chromium-browser: Use after free in iOS | known not affected: 1 | 2026-06-28T11:35:31+00:00 | Vulnerability · Source |
| CVE-2012-4165 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-19) | fixed: 5 | 2026-06-28T11:35:31+00:00 | Vulnerability · Source |
| CVE-2026-43100 | redhat_vex | kernel: bridge: guard local VLAN-0 FDB helpers against NULL vlan group | known affected: 90 known not affected: 184 | 2026-06-28T11:35:29+00:00 | Vulnerability · Source |
| CVE-2025-48795 | redhat_vex | org.apache.cxf/cxf: Apache CXF denial of service and data exposure | known affected: 3 | 2026-06-28T11:35:28+00:00 | Vulnerability · Source |
| CVE-2026-31761 | redhat_vex | kernel: iio: gyro: mpu3050: Move iio_device_register() to correct location | known not affected: 274 | 2026-06-28T11:35:28+00:00 | Vulnerability · Source |
| CVE-2025-29917 | redhat_vex | suricata: Suricata decode_base64: signature can do large memory allocation | known not affected: 1 | 2026-06-28T11:35:26+00:00 | Vulnerability · Source |
| CVE-2007-0044 | redhat_vex | Acrobat Reader Universal CSRF and session riding | fixed: 20 | 2026-06-28T11:35:26+00:00 | Vulnerability · Source |
| CVE-2010-2180 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:35:26+00:00 | Vulnerability · Source |
| CVE-2010-2206 | redhat_vex | acroread: multiple code execution flaws (APSB10-15) | fixed: 12 | 2026-06-28T11:35:24+00:00 | Vulnerability · Source |
| CVE-2019-16869 | redhat_vex | netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers | fixed: 319 known affected: 3 known not affected: 24 | 2026-06-28T11:35:22+00:00 | Vulnerability · Source |
| CVE-2026-23129 | redhat_vex | kernel: Linux kernel: Denial of Service in DPLL framework due to duplicate pin registrations | known affected: 184 known not affected: 90 | 2026-06-28T11:35:22+00:00 | Vulnerability · Source |
| CVE-2026-31691 | redhat_vex | kernel: igb: remove napi_synchronize() in igb_down() | known affected: 184 known not affected: 90 | 2026-06-28T11:35:21+00:00 | Vulnerability · Source |
| CVE-2019-15921 | redhat_vex | kernel: memory leak in genl_register_family() in net/netlink/genetlink.c | fixed: 154 known affected: 56 | 2026-06-28T11:35:20+00:00 | Vulnerability · Source |
| CVE-2019-16234 | redhat_vex | kernel: null pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c | fixed: 150 known affected: 56 | 2026-06-28T11:35:19+00:00 | Vulnerability · Source |
| CVE-2019-5811 | redhat_vex | chromium-browser: CORS bypass in Blink | fixed: 14 | 2026-06-28T11:35:19+00:00 | Vulnerability · Source |
| CVE-2019-16168 | redhat_vex | sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c | fixed: 126 known not affected: 13 | 2026-06-28T11:35:18+00:00 | Vulnerability · Source |
| CVE-2019-16089 | redhat_vex | kernel: Improper return check in nbd_genl_status function in drivers/block/nbd.c | known affected: 154 known not affected: 56 | 2026-06-28T11:35:18+00:00 | Vulnerability · Source |
| CVE-2019-16231 | redhat_vex | kernel: null-pointer dereference in drivers/net/fjes/fjes_main.c | fixed: 354 known affected: 17 known not affected: 15 | 2026-06-28T11:35:18+00:00 | Vulnerability · Source |
| CVE-2019-16233 | redhat_vex | kernel: null pointer dereference in drivers/scsi/qla2xxx/qla_os.c | fixed: 354 known affected: 28 known not affected: 15 | 2026-06-28T11:35:18+00:00 | Vulnerability · Source |
| CVE-2018-5407 | redhat_vex | openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) | fixed: 383 known affected: 17 known not affected: 6 | 2026-06-28T11:35:17+00:00 | Vulnerability · Source |
| CVE-2019-9003 | redhat_vex | kernel: use-after-free and OOPS in drivers/char/ipmi/ipmi_msghandler.c | fixed: 120 known affected: 16 known not affected: 56 | 2026-06-28T11:35:15+00:00 | Vulnerability · Source |
| CVE-2018-5332 | redhat_vex | kernel: rds_message_alloc_sgs() function doesn't validate value used during DMA page allocation causes heap out-of-bounds write | fixed: 16 known affected: 14 known not affected: 62 | 2026-06-28T11:35:15+00:00 | Vulnerability · Source |
| CVE-2017-0899 | redhat_vex | rubygems: Escape sequence in the "summary" field of gemspec | fixed: 576 known affected: 2 under investigation: 4 | 2026-06-28T11:35:14+00:00 | Vulnerability · Source |
| CVE-2025-29916 | redhat_vex | suricata: Suricata datasets: ruleset declared settings can lead to resource starvation | known not affected: 1 | 2026-06-28T11:35:14+00:00 | Vulnerability · Source |
| CVE-2016-9935 | redhat_vex | php: Invalid read when wddx decodes empty boolean element | fixed: 254 known affected: 87 | 2026-06-28T11:35:14+00:00 | Vulnerability · Source |
| CVE-2019-5822 | redhat_vex | chromium-browser: CORS bypass in download manager | fixed: 14 | 2026-06-28T11:35:13+00:00 | Vulnerability · Source |
| CVE-2019-5788 | redhat_vex | chromium-browser: Use after free in FileAPI | fixed: 14 | 2026-06-28T11:35:12+00:00 | Vulnerability · Source |
| CVE-2019-5810 | redhat_vex | chromium-browser: User information disclosure in Autofill | fixed: 14 | 2026-06-28T11:35:12+00:00 | Vulnerability · Source |
| CVE-2019-5787 | redhat_vex | chromium-browser: Use after free in Canvas | fixed: 14 | 2026-06-28T11:35:11+00:00 | Vulnerability · Source |
| CVE-2019-15924 | redhat_vex | kernel: null pointer dereference in drivers/net/ethernet/intel/fm10k/fm10k_main.c | fixed: 154 known affected: 41 known not affected: 15 | 2026-06-28T11:35:11+00:00 | Vulnerability · Source |
| CVE-2026-4732 | redhat_vex | github.com/tildearrow/furnace: tildearrow furnace: Out-of-bounds Read vulnerability allows information disclosure or arbitrary code execution | known not affected: 1 | 2026-06-28T11:35:11+00:00 | Vulnerability · Source |
| CVE-2025-46206 | redhat_vex | mupdf: Mupdf uncontrolled recursion | known not affected: 1 | 2026-06-28T11:35:11+00:00 | Vulnerability · Source |
| CVE-2025-29915 | redhat_vex | Suricata: Suricata af-packet: defrag option can lead to truncated packets affecting visibility | known not affected: 1 | 2026-06-28T11:35:10+00:00 | Vulnerability · Source |
| CVE-2026-43127 | redhat_vex | kernel: ntfs3: fix circular locking dependency in run_unpack_ex | known not affected: 274 | 2026-06-28T11:35:10+00:00 | Vulnerability · Source |
| CVE-2026-31611 | redhat_vex | kernel: ksmbd: require 3 sub-authorities before reading sub_auth[2] | known not affected: 274 | 2026-06-28T11:35:10+00:00 | Vulnerability · Source |
| CVE-2016-9934 | redhat_vex | php: NULL Pointer Dereference in WDDX Packet Deserialization with PDORow | fixed: 254 known affected: 87 | 2026-06-28T11:35:10+00:00 | Vulnerability · Source |
| CVE-2019-5762 | redhat_vex | chromium-browser: Use after free in PDFium | fixed: 12 | 2026-06-28T11:35:09+00:00 | Vulnerability · Source |
| CVE-2019-16229 | redhat_vex | kernel: null pointer dereference in drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | known affected: 76 known not affected: 28 | 2026-06-28T11:35:09+00:00 | Vulnerability · Source |
| CVE-2022-0185 | redhat_vex | kernel: fs_context: heap overflow in legacy parameter handling | fixed: 392 known not affected: 164 | 2026-06-28T11:35:09+00:00 | Vulnerability · Source |
| CVE-2025-58712 | redhat_vex | amq: privilege escalation via excessive /etc/passwd permissions | fixed: 21 known affected: 4 | 2026-06-28T11:35:07+00:00 | Vulnerability · Source |
| CVE-2026-23099 | redhat_vex | kernel: bonding: limit BOND_MODE_8023AD to Ethernet devices | known affected: 274 | 2026-06-28T11:35:07+00:00 | Vulnerability · Source |