VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297730 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-16845 | redhat_vex | nginx: Denial of service and memory disclosure via mp4 module | fixed: 302 known not affected: 21 | 2026-06-28T11:22:46+00:00 | Vulnerability · Source |
| CVE-2026-11297 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Reader Mode | known not affected: 1 | 2026-06-28T11:22:45+00:00 | Vulnerability · Source |
| CVE-2026-41726 | redhat_vex | spring-kafka: Spring-kafka: Denial of Service due to unbounded heap growth via unique header values | known affected: 2 | 2026-06-28T11:22:45+00:00 | Vulnerability · Source |
| CVE-2018-7566 | redhat_vex | kernel: race condition in snd_seq_write() may lead to UAF or OOB-access | fixed: 556 known not affected: 33 | 2026-06-28T11:22:42+00:00 | Vulnerability · Source |
| CVE-2022-25636 | redhat_vex | kernel: heap out of bounds write in nf_dup_netdev.c | fixed: 428 known not affected: 171 | 2026-06-28T11:22:42+00:00 | Vulnerability · Source |
| CVE-2015-4760 | redhat_vex | ICU: missing boundary checks in layout engine (OpenJDK 2D, 8071715) | fixed: 1026 known affected: 11 | 2026-06-28T11:22:41+00:00 | Vulnerability · Source |
| CVE-2015-5131 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T11:22:40+00:00 | Vulnerability · Source |
| CVE-2015-4860 | redhat_vex | OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688) | fixed: 1136 | 2026-06-28T11:22:40+00:00 | Vulnerability · Source |
| CVE-2020-36516 | redhat_vex | kernel: off-path attacker may inject data or terminate victim's TCP session | fixed: 475 known affected: 42 | 2026-06-28T11:22:38+00:00 | Vulnerability · Source |
| CVE-2019-19528 | redhat_vex | kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver | fixed: 150 known affected: 55 known not affected: 1 | 2026-06-28T11:22:33+00:00 | Vulnerability · Source |
| CVE-2018-20449 | redhat_vex | kernel: reading "callback=" lines in a debugfs file in drivers/dma/qcom/hidma_dbg.c results in information disclosure | known not affected: 104 | 2026-06-28T11:22:32+00:00 | Vulnerability · Source |
| CVE-2020-25220 | redhat_vex | kernel: use-after-free because skcd->no_refcnt was not considered during the backport of CVE-2020-14356 | known not affected: 104 | 2026-06-28T11:22:31+00:00 | Vulnerability · Source |
| CVE-2020-10734 | redhat_vex | keycloak: OIDC logout endpoint CSRF | known affected: 4 | 2026-06-28T11:22:30+00:00 | Vulnerability · Source |
| CVE-2026-11669 | redhat_vex | chromium-browser: Integer overflow in Media | known not affected: 1 | 2026-06-28T11:22:30+00:00 | Vulnerability · Source |
| CVE-2010-2221 | redhat_vex | scsi-target-utils: stack buffer overflow vulnerability | fixed: 9 known affected: 1 known not affected: 2 | 2026-06-28T11:22:30+00:00 | Vulnerability · Source |
| CVE-2018-20225 | redhat_vex | python-pip: when --extra-index-url option is used and package does not already exist in the public index, the installation of malicious package with arbitrary version number is possible. | known affected: 11 | 2026-06-28T11:22:30+00:00 | Vulnerability · Source |
| CVE-2026-53039 | redhat_vex | kernel: ocfs2: validate group add input before caching | known not affected: 274 | 2026-06-28T11:22:29+00:00 | Vulnerability · Source |
| CVE-2025-48997 | redhat_vex | multer: Multer vulnerable to Denial of Service via unhandled exception | fixed: 1 known affected: 1 known not affected: 3 | 2026-06-28T11:22:28+00:00 | Vulnerability · Source |
| CVE-2026-9912 | redhat_vex | chromium-browser: Inappropriate implementation in GPU | known not affected: 1 | 2026-06-28T11:22:28+00:00 | Vulnerability · Source |
| CVE-2021-47560 | redhat_vex | kernel: mlxsw: spectrum: Protect driver from buggy firmware | fixed: 651 known affected: 28 known not affected: 14 | 2026-06-28T11:22:27+00:00 | Vulnerability · Source |
| CVE-2025-49466 | redhat_vex | aerc: Aerc Attachment Path Traversal Vulnerability | known not affected: 1 | 2026-06-28T11:22:26+00:00 | Vulnerability · Source |
| CVE-2021-47556 | redhat_vex | kernel: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() | fixed: 346 known affected: 42 | 2026-06-28T11:22:26+00:00 | Vulnerability · Source |
| CVE-2014-7924 | redhat_vex | chromium-browser: use-after-free in IndexedDB | fixed: 15 | 2026-06-28T11:22:26+00:00 | Vulnerability · Source |
| CVE-2024-49878 | redhat_vex | kernel: resource: fix region_intersects() vs add_memory_driver_managed() | fixed: 305 known affected: 64 known not affected: 48 | 2026-06-28T11:22:25+00:00 | Vulnerability · Source |
| CVE-2026-12045 | redhat_vex | pgadmin4: pgAdmin 4: Remote code execution via prompt injection in AI Assistant | known not affected: 1 | 2026-06-28T11:22:25+00:00 | Vulnerability · Source |
| CVE-2007-5240 | redhat_vex | Applets or Applications are allowed to display an oversized window | fixed: 430 | 2026-06-28T11:22:24+00:00 | Vulnerability · Source |
| CVE-2026-9995 | redhat_vex | chromium-browser: Use after free in WebXR | known not affected: 1 | 2026-06-28T11:22:18+00:00 | Vulnerability · Source |
| CVE-2026-10007 | redhat_vex | chromium-browser: Use after free in SVG | known not affected: 1 | 2026-06-28T11:22:16+00:00 | Vulnerability · Source |
| CVE-2015-8047 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:22:15+00:00 | Vulnerability · Source |
| CVE-2020-16166 | redhat_vex | kernel: information exposure in drivers/char/random.c and kernel/time/timer.c | fixed: 397 known affected: 44 known not affected: 64 | 2026-06-28T11:22:15+00:00 | Vulnerability · Source |
| CVE-2015-2783 | redhat_vex | php: buffer over-read in Phar metadata parsing | fixed: 1063 known affected: 27 known not affected: 1 | 2026-06-28T11:22:15+00:00 | Vulnerability · Source |
| CVE-2023-28756 | redhat_vex | ruby: ReDoS vulnerability in Time | fixed: 834 known affected: 95 | 2026-06-28T11:22:13+00:00 | Vulnerability · Source |
| CVE-2026-9924 | redhat_vex | chromium-browser: Heap buffer overflow in ANGLE | known not affected: 1 | 2026-06-28T11:22:11+00:00 | Vulnerability · Source |
| CVE-2021-3544 | redhat_vex | QEMU: vhost-user-gpu: multiple memory leaks | known affected: 17 known not affected: 109 | 2026-06-28T11:22:11+00:00 | Vulnerability · Source |
| CVE-2013-6639 | redhat_vex | v8: DoS (out-of-bounds write) in DehoistArrayIndex function in hydrogen.cc | fixed: 36 known affected: 9 known not affected: 1819 | 2026-06-28T11:22:07+00:00 | Vulnerability · Source |
| CVE-2025-58148 | redhat_vex | xen: x86: Incorrect input sanitisation in Viridian hypercalls | known not affected: 1 | 2026-06-28T11:22:07+00:00 | Vulnerability · Source |
| CVE-2026-40505 | redhat_vex | MuPDF: MuPDF mutool: Terminal manipulation through unsanitized PDF metadata | known not affected: 1 | 2026-06-28T11:22:07+00:00 | Vulnerability · Source |
| CVE-2017-0750 | redhat_vex | kernel: Out-of-bounds write in f2fs allows code execution when mounted malicious file system | known not affected: 88 | 2026-06-28T11:22:07+00:00 | Vulnerability · Source |
| CVE-2026-40560 | redhat_vex | Starman: Starman: HTTP Request Smuggling via improper header precedence | known not affected: 1 | 2026-06-28T11:22:03+00:00 | Vulnerability · Source |
| CVE-2021-3516 | redhat_vex | libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c | fixed: 193 known affected: 12 known not affected: 4 | 2026-06-28T11:22:00+00:00 | Vulnerability · Source |
| CVE-2026-40499 | redhat_vex | radare2: radare2: Arbitrary command execution via command injection in PDB parser | known not affected: 1 | 2026-06-28T11:22:00+00:00 | Vulnerability · Source |
| CVE-2018-18311 | redhat_vex | perl: Integer overflow leading to buffer overflow in Perl_my_setenv() | fixed: 934 known affected: 52 known not affected: 55 | 2026-06-28T11:21:58+00:00 | Vulnerability · Source |
| CVE-2020-1728 | redhat_vex | keycloak: security headers missing on REST endpoints | fixed: 13 known affected: 3 known not affected: 1 | 2026-06-28T11:21:54+00:00 | Vulnerability · Source |
| CVE-2018-17477 | redhat_vex | chromium-browser: UI spoof in Extensions | fixed: 12 | 2026-06-28T11:21:54+00:00 | Vulnerability · Source |
| CVE-2014-4698 | redhat_vex | php: ArrayIterator use-after-free due to object change during sorting | fixed: 970 known affected: 2 known not affected: 1 | 2026-06-28T11:21:52+00:00 | Vulnerability · Source |
| CVE-2013-0623 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T11:21:52+00:00 | Vulnerability · Source |
| CVE-2018-17082 | redhat_vex | php: Cross-site scripting (XSS) flaw in Apache2 component via body of 'Transfer-Encoding: chunked' request | fixed: 486 known affected: 88 known not affected: 77 | 2026-06-28T11:21:50+00:00 | Vulnerability · Source |
| CVE-2021-2293 | redhat_vex | mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T11:21:50+00:00 | Vulnerability · Source |
| CVE-2021-3527 | redhat_vex | QEMU: usb: unbounded stack allocation in usbredir | known affected: 102 known not affected: 24 | 2026-06-28T11:21:49+00:00 | Vulnerability · Source |
| CVE-2020-36311 | redhat_vex | kernel: DoS by triggering destruction of a large SEV VM | known affected: 48 known not affected: 149 | 2026-06-28T11:21:48+00:00 | Vulnerability · Source |