VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297743 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-35788 | redhat_vex | kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() | fixed: 1638 known not affected: 14 | 2026-06-28T11:15:17+00:00 | Vulnerability · Source |
| CVE-2016-5175 | redhat_vex | chromium-browser: various fixes from internal audits | fixed: 12 | 2026-06-28T11:15:17+00:00 | Vulnerability · Source |
| CVE-2017-7495 | redhat_vex | kernel: ext4: power failure during write(2) causes on-disk information leak | fixed: 201 known not affected: 38 | 2026-06-28T11:15:15+00:00 | Vulnerability · Source |
| CVE-2026-46246 | redhat_vex | kernel: power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler | known not affected: 274 | 2026-06-28T11:15:15+00:00 | Vulnerability · Source |
| CVE-2017-7484 | redhat_vex | postgresql: Selectivity estimators bypass SELECT privilege checks | fixed: 436 known affected: 15 | 2026-06-28T11:15:15+00:00 | Vulnerability · Source |
| CVE-2016-5130 | redhat_vex | chromium-browser: url spoofing | fixed: 12 | 2026-06-28T11:15:13+00:00 | Vulnerability · Source |
| CVE-2019-3805 | redhat_vex | wildfly: Race condition on PID file allows for termination of arbitrary processes by local users | fixed: 395 known affected: 4 known not affected: 8 | 2026-06-28T11:15:13+00:00 | Vulnerability · Source |
| CVE-2016-5129 | redhat_vex | chromium-browser: memory corruption in v8 | fixed: 12 | 2026-06-28T11:15:13+00:00 | Vulnerability · Source |
| CVE-2025-21999 | redhat_vex | kernel: proc: fix UAF in proc_get_inode() | fixed: 1092 known affected: 22 known not affected: 90 | 2026-06-28T11:15:11+00:00 | Vulnerability · Source |
| CVE-2016-0483 | redhat_vex | OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017) | fixed: 1044 | 2026-06-28T11:15:10+00:00 | Vulnerability · Source |
| CVE-2026-46191 | redhat_vex | kernel: fbcon: Avoid OOB font access if console rotation fails | known affected: 232 known not affected: 42 | 2026-06-28T11:15:10+00:00 | Vulnerability · Source |
| CVE-2018-3209 | redhat_vex | JDK: unspecified vulnerability fixed in 8u191 (JavaFX) | fixed: 64 | 2026-06-28T11:15:09+00:00 | Vulnerability · Source |
| CVE-2017-7477 | redhat_vex | kernel: net: Heap overflow in skb_to_sgvec in macsec.c | fixed: 191 known not affected: 27 | 2026-06-28T11:15:09+00:00 | Vulnerability · Source |
| CVE-2018-2941 | redhat_vex | JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX) | fixed: 130 | 2026-06-28T11:15:06+00:00 | Vulnerability · Source |
| CVE-2018-2814 | redhat_vex | OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025) | fixed: 659 | 2026-06-28T11:15:06+00:00 | Vulnerability · Source |
| CVE-2026-46207 | redhat_vex | kernel: vsock/virtio: fix empty payload in tap skb for non-linear buffers | known affected: 184 known not affected: 90 | 2026-06-28T11:15:06+00:00 | Vulnerability · Source |
| CVE-2018-2796 | redhat_vex | OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) | fixed: 770 | 2026-06-28T11:15:05+00:00 | Vulnerability · Source |
| CVE-2017-7400 | redhat_vex | python-django-horizon: XSS in federation mappings UI | fixed: 8 known not affected: 12 | 2026-06-28T11:15:04+00:00 | Vulnerability · Source |
| CVE-2021-2399 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Jul 2021) | fixed: 155 known not affected: 119 | 2026-06-28T11:15:03+00:00 | Vulnerability · Source |
| CVE-2017-7308 | redhat_vex | kernel: net/packet: overflow in check for priv area size | fixed: 387 known not affected: 1 | 2026-06-28T11:15:02+00:00 | Vulnerability · Source |
| CVE-2006-6731 | redhat_vex | security flaw | fixed: 222 | 2026-06-28T11:14:59+00:00 | Vulnerability · Source |
| CVE-2017-7233 | redhat_vex | python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs | fixed: 1130 known affected: 19 known not affected: 6 | 2026-06-28T11:14:59+00:00 | Vulnerability · Source |
| CVE-2026-30928 | redhat_vex | glances: unauthenticated configuration secrets exposure | known not affected: 1 | 2026-06-28T11:14:58+00:00 | Vulnerability · Source |
| CVE-2024-26707 | redhat_vex | kernel: net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T11:14:58+00:00 | Vulnerability · Source |
| CVE-2017-7184 | redhat_vex | kernel: Out-of-bounds heap access in xfrm | fixed: 305 known not affected: 15 | 2026-06-28T11:14:56+00:00 | Vulnerability · Source |
| CVE-2026-32934 | redhat_vex | coredns: github.com/coredns/coredns: CoreDNS: Denial of Service due to unbounded resource growth in DNS-over-QUIC (DoQ) stream handling | known affected: 3 | 2026-06-28T11:14:55+00:00 | Vulnerability · Source |
| CVE-2019-3831 | redhat_vex | vdsm: privilege escalation to root via systemd_run | fixed: 60 | 2026-06-28T11:14:54+00:00 | Vulnerability · Source |
| CVE-2017-9048 | redhat_vex | libxml2: Stack-based buffer overflow in function xmlSnprintfElementContent | fixed: 1 known affected: 16 known not affected: 4 | 2026-06-28T11:14:53+00:00 | Vulnerability · Source |
| CVE-2017-6001 | redhat_vex | kernel: Race condition between multiple sys_perf_event_open() calls | fixed: 381 known not affected: 8 | 2026-06-28T11:14:51+00:00 | Vulnerability · Source |
| CVE-2017-9047 | redhat_vex | libxml2: Buffer overflow in function xmlSnprintfElementContent | fixed: 1 known affected: 16 known not affected: 4 | 2026-06-28T11:14:51+00:00 | Vulnerability · Source |
| CVE-2017-5715 | redhat_vex | hw: cpu: speculative execution branch target injection | fixed: 1662 known affected: 91 known not affected: 6 | 2026-06-28T11:14:51+00:00 | Vulnerability · Source |
| CVE-2017-5754 | redhat_vex | hw: cpu: speculative execution permission faults handling | fixed: 894 | 2026-06-28T11:14:51+00:00 | Vulnerability · Source |
| CVE-2017-5753 | redhat_vex | hw: cpu: speculative execution bounds-check bypass | fixed: 894 | 2026-06-28T11:14:50+00:00 | Vulnerability · Source |
| CVE-2026-43231 | redhat_vex | kernel: media: radio-keene: fix memory leak in error path | known not affected: 274 | 2026-06-28T11:14:48+00:00 | Vulnerability · Source |
| CVE-2026-11284 | redhat_vex | chromium-browser: Side-channel information leakage in PerformanceAPIs | known not affected: 1 | 2026-06-28T11:14:47+00:00 | Vulnerability · Source |
| CVE-2026-3381 | redhat_vex | compress-raw-zlib: Compress::Raw::Zlib: Vulnerabilities due to outdated zlib library | known not affected: 7 | 2026-06-28T11:14:47+00:00 | Vulnerability · Source |
| CVE-2017-7645 | redhat_vex | kernel: nfsd: Incorrect handling of long RPC replies | fixed: 387 known affected: 1 | 2026-06-28T11:14:47+00:00 | Vulnerability · Source |
| CVE-2015-8835 | redhat_vex | php: type confusion issue in Soap Client call() method | fixed: 251 known affected: 110 | 2026-06-28T11:14:46+00:00 | Vulnerability · Source |
| CVE-2026-11288 | redhat_vex | chromium-browser: Policy bypass in CSS | known not affected: 1 | 2026-06-28T11:14:45+00:00 | Vulnerability · Source |
| CVE-2015-8820 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:14:44+00:00 | Vulnerability · Source |
| CVE-2025-48946 | redhat_vex | liboqs: liboqs affected by theoretical design flaw in HQC | known affected: 2 | 2026-06-28T11:14:43+00:00 | Vulnerability · Source |
| CVE-2026-23182 | redhat_vex | kernel: spi: tegra: Fix a memory leak in tegra_slink_probe() | known not affected: 274 | 2026-06-28T11:14:41+00:00 | Vulnerability · Source |
| CVE-2014-0510 | redhat_vex | flash-plugin: use-after-free flaw leads to arbitrary code execution | fixed: 5 | 2026-06-28T11:14:41+00:00 | Vulnerability · Source |
| CVE-2014-0237 | redhat_vex | file: cdf_unpack_summary_info() excessive looping DoS | fixed: 1133 known not affected: 4 | 2026-06-28T11:14:40+00:00 | Vulnerability · Source |
| CVE-2026-11237 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Media | known not affected: 1 | 2026-06-28T11:14:39+00:00 | Vulnerability · Source |
| CVE-2026-2303 | redhat_vex | mongo-go-driver: heap-based buffer over-read in GSSAPI error handling | known not affected: 1 | 2026-06-28T11:14:39+00:00 | Vulnerability · Source |
| CVE-2025-37734 | redhat_vex | kibana: Kibana: Origin Validation Error leads to Server-Side Request Forgery | known not affected: 1 | 2026-06-28T11:14:38+00:00 | Vulnerability · Source |
| CVE-2025-31501 | redhat_vex | bestpractical.com/request-tracker: Best Practical RT Permalinks XSS Vulnerability | known not affected: 1 | 2026-06-28T11:14:37+00:00 | Vulnerability · Source |
| CVE-2021-3772 | redhat_vex | kernel: sctp: Invalid chunks may be used to remotely remove existing associations | fixed: 150 known affected: 43 known not affected: 108 | 2026-06-28T11:14:37+00:00 | Vulnerability · Source |
| CVE-2026-12464 | redhat_vex | chromium-browser: chromium-browser: Use after free in Browser | known not affected: 1 | 2026-06-28T11:14:37+00:00 | Vulnerability · Source |