VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297763 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-13093 | redhat_vex | kernel: NULL pointer dereference in lookup_slow function | fixed: 204 known affected: 28 known not affected: 47 | 2026-06-28T11:10:35+00:00 | Vulnerability · Source |
| CVE-2018-13094 | redhat_vex | kernel: NULL pointer dereference in xfs_da_shrink_inode function | fixed: 230 known affected: 12 known not affected: 47 | 2026-06-28T11:10:33+00:00 | Vulnerability · Source |
| CVE-2025-11966 | redhat_vex | io.vertx/vertx-web: Eclipse Vert.x cross site scripting | fixed: 3 known affected: 122 | 2026-06-28T11:10:33+00:00 | Vulnerability · Source |
| CVE-2026-5194 | redhat_vex | wolfSSL: wolfSSL: Reduced security of ECDSA authentication via missing digest size checks | known not affected: 1 | 2026-06-28T11:10:32+00:00 | Vulnerability · Source |
| CVE-2010-4476 | redhat_vex | JDK Double.parseDouble Denial-Of-Service | fixed: 921 known not affected: 10 | 2026-06-28T11:10:32+00:00 | Vulnerability · Source |
| CVE-2017-11628 | redhat_vex | php: Stack based 1-byte buffer over-write in zend_ini_do_op() function Zend/zend_ini_parser.c | fixed: 254 known affected: 87 | 2026-06-28T11:10:30+00:00 | Vulnerability · Source |
| CVE-2015-1284 | redhat_vex | chromium-browser: Use-after-free in blink. | fixed: 12 | 2026-06-28T11:10:30+00:00 | Vulnerability · Source |
| CVE-2017-11600 | redhat_vex | kernel: Out-of-bounds access via an XFRM_MSG_MIGRATE xfrm Netlink message | fixed: 350 known affected: 16 known not affected: 15 | 2026-06-28T11:10:30+00:00 | Vulnerability · Source |
| CVE-2020-10720 | redhat_vex | kernel: use-after-free read in napi_gro_frags() in the Linux kernel | fixed: 179 known affected: 15 known not affected: 41 | 2026-06-28T11:10:27+00:00 | Vulnerability · Source |
| CVE-2026-44047 | redhat_vex | netatalk: Netatalk: Arbitrary code execution and data compromise via SQL injection | known not affected: 1 | 2026-06-28T11:10:27+00:00 | Vulnerability · Source |
| CVE-2017-1000048 | redhat_vex | nodejs-qs: Prototype override protection bypass | fixed: 12 known affected: 5 known not affected: 2 under investigation: 2 | 2026-06-28T11:10:24+00:00 | Vulnerability · Source |
| CVE-2017-0898 | redhat_vex | ruby: Buffer underrun vulnerability in Kernel.sprintf | fixed: 576 known affected: 1 known not affected: 13 | 2026-06-28T11:10:23+00:00 | Vulnerability · Source |
| CVE-2017-0901 | redhat_vex | rubygems: Arbitrary file overwrite due to incorrect validation of specification name | fixed: 576 known affected: 2 under investigation: 4 | 2026-06-28T11:10:22+00:00 | Vulnerability · Source |
| CVE-2015-1237 | redhat_vex | chromium-browser: Use-after-free in IPC | fixed: 15 | 2026-06-28T11:10:21+00:00 | Vulnerability · Source |
| CVE-2026-11208 | redhat_vex | chromium-browser: Use after free in Codecs | known not affected: 1 | 2026-06-28T11:10:21+00:00 | Vulnerability · Source |
| CVE-2017-11334 | redhat_vex | Qemu: exec: oob access during dma operation | fixed: 47 known affected: 1 known not affected: 23 | 2026-06-28T11:10:21+00:00 | Vulnerability · Source |
| CVE-2010-3632 | redhat_vex | acroread: multiple code execution flaws (APSB10-21) | fixed: 12 known not affected: 2 | 2026-06-28T11:10:20+00:00 | Vulnerability · Source |
| CVE-2015-1221 | redhat_vex | chromium-browser: Use-after-free in web databases | fixed: 15 | 2026-06-28T11:10:20+00:00 | Vulnerability · Source |
| CVE-2026-11216 | redhat_vex | chromium-browser: Incorrect security UI in File Input | known not affected: 1 | 2026-06-28T11:10:19+00:00 | Vulnerability · Source |
| CVE-2026-22987 | redhat_vex | kernel: Linux kernel: Denial of Service due to invalid dereference in networking scheduler during netns teardown | known affected: 14 known not affected: 260 | 2026-06-28T11:10:18+00:00 | Vulnerability · Source |
| CVE-2024-3447 | redhat_vex | QEMU: sdhci: heap buffer overflow in sdhci_write_dataport() | known not affected: 77 | 2026-06-28T11:10:17+00:00 | Vulnerability · Source |
| CVE-2010-2178 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:10:17+00:00 | Vulnerability · Source |
| CVE-2015-0568 | redhat_vex | kernel: use-after-free in msm_set_crop function | known not affected: 93 | 2026-06-28T11:10:16+00:00 | Vulnerability · Source |
| CVE-2026-48855 | redhat_vex | erlang: Erlang OTP ssh: Information disclosure via symlink resolution in SFTP | known affected: 41 | 2026-06-28T11:10:16+00:00 | Vulnerability · Source |
| CVE-2010-2186 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:10:15+00:00 | Vulnerability · Source |
| CVE-2010-2171 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:10:14+00:00 | Vulnerability · Source |
| CVE-2019-14820 | redhat_vex | keycloak: adapter endpoints are exposed via arbitrary URLs | fixed: 30 known affected: 2 known not affected: 1 | 2026-06-28T11:10:13+00:00 | Vulnerability · Source |
| CVE-2026-23238 | redhat_vex | kernel: romfs: check sb_set_blocksize() return value | known affected: 14 known not affected: 260 | 2026-06-28T11:10:12+00:00 | Vulnerability · Source |
| CVE-2025-68461 | redhat_vex | roundcubemail: Roundcube Webmail: Cross-Site Scripting (XSS) vulnerability via crafted SVG animate tag | known not affected: 1 | 2026-06-28T11:10:12+00:00 | Vulnerability · Source |
| CVE-2026-23188 | redhat_vex | kernel: Linux kernel: Denial of Service in r8152 USB network adapter driver | known affected: 76 known not affected: 198 | 2026-06-28T11:10:11+00:00 | Vulnerability · Source |
| CVE-2021-3847 | redhat_vex | kernel: low-privileged user privileges escalation | known not affected: 198 | 2026-06-28T11:10:10+00:00 | Vulnerability · Source |
| CVE-2015-0459 | redhat_vex | JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D) | fixed: 653 | 2026-06-28T11:10:05+00:00 | Vulnerability · Source |
| CVE-2017-10689 | redhat_vex | puppet: Unpacking of tarballs in tar/mini.rb can create files with insecure permissions | fixed: 1110 known affected: 17 | 2026-06-28T11:10:03+00:00 | Vulnerability · Source |
| CVE-2021-3859 | redhat_vex | undertow: client side invocation timeout raised when calling over HTTP2 | fixed: 120 known affected: 5 known not affected: 2216 | 2026-06-28T11:10:03+00:00 | Vulnerability · Source |
| CVE-2015-0360 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-06 | fixed: 5 | 2026-06-28T11:10:03+00:00 | Vulnerability · Source |
| CVE-2015-0357 | redhat_vex | flash-plugin: information leaks leading to ASLR bypass (APSB15-06) | fixed: 5 | 2026-06-28T11:10:02+00:00 | Vulnerability · Source |
| CVE-2015-0335 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-05 | fixed: 5 | 2026-06-28T11:10:01+00:00 | Vulnerability · Source |
| CVE-2020-15959 | redhat_vex | chromium-browser: Insufficient policy enforcement in networking | fixed: 14 | 2026-06-28T11:10:00+00:00 | Vulnerability · Source |
| CVE-2026-23291 | redhat_vex | kernel: nfc: pn533: properly drop the usb interface reference on disconnect | known not affected: 274 | 2026-06-28T11:09:59+00:00 | Vulnerability · Source |
| CVE-2017-10295 | redhat_vex | OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751) | fixed: 830 known affected: 8 | 2026-06-28T11:09:59+00:00 | Vulnerability · Source |
| CVE-2026-52913 | redhat_vex | kernel: batman-adv: v: stop OGMv2 on disabled interface | known not affected: 274 | 2026-06-28T11:09:58+00:00 | Vulnerability · Source |
| CVE-2020-7212 | redhat_vex | python-urllib3: inefficient algorithm allows a DoS (CPU consumption) in _encode_invalid_chars function in util/url.py | known not affected: 20 | 2026-06-28T11:09:57+00:00 | Vulnerability · Source |
| CVE-2026-23286 | redhat_vex | kernel: atm: lec: fix null-ptr-deref in lec_arp_clear_vccs | known affected: 198 known not affected: 76 | 2026-06-28T11:09:56+00:00 | Vulnerability · Source |
| CVE-2017-10661 | redhat_vex | kernel: Handling of might_cancel queueing is not properly pretected against race | fixed: 447 known affected: 26 known not affected: 26 | 2026-06-28T11:09:55+00:00 | Vulnerability · Source |
| CVE-2024-35840 | redhat_vex | kernel: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T11:09:54+00:00 | Vulnerability · Source |
| CVE-2017-1000410 | redhat_vex | kernel: Stack information leak in the EFS element | fixed: 562 known not affected: 1 | 2026-06-28T11:09:53+00:00 | Vulnerability · Source |
| CVE-2016-8650 | redhat_vex | kernel: Null pointer dereference via keyctl | fixed: 387 known not affected: 1 | 2026-06-28T11:09:53+00:00 | Vulnerability · Source |
| CVE-2017-10115 | redhat_vex | OpenJDK: DSA implementation timing attack (JCE, 8175106) | fixed: 854 | 2026-06-28T11:09:53+00:00 | Vulnerability · Source |
| CVE-2016-4275 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-29 | fixed: 5 | 2026-06-28T11:09:51+00:00 | Vulnerability · Source |
| CVE-2016-6294 | redhat_vex | php: Out-of-bounds access in locale_accept_from_http | fixed: 251 known affected: 109 known not affected: 1 | 2026-06-28T11:09:51+00:00 | Vulnerability · Source |