VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-4000 | redhat_vex | LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks | fixed: 1481 known affected: 9 | 2026-06-28T11:08:06+00:00 | Vulnerability · Source |
| CVE-2016-3443 | redhat_vex | JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D) | fixed: 666 | 2026-06-28T11:08:05+00:00 | Vulnerability · Source |
| CVE-2023-3141 | redhat_vex | kernel: Use after free bug in r592_remove | fixed: 666 known affected: 64 | 2026-06-28T11:08:04+00:00 | Vulnerability · Source |
| CVE-2026-10199 | redhat_vex | assimp: Assimp: Denial of Service via null pointer dereference in glTF2::LazyDict | known affected: 4 known not affected: 4 | 2026-06-28T11:08:02+00:00 | Vulnerability · Source |
| CVE-2014-3669 | redhat_vex | php: integer overflow in unserialize() | fixed: 1258 | 2026-06-28T11:08:01+00:00 | Vulnerability · Source |
| CVE-2026-10198 | redhat_vex | assimp: Assimp: Denial of Service via null pointer dereference in glTFImporter | known affected: 4 known not affected: 4 | 2026-06-28T11:08:01+00:00 | Vulnerability · Source |
| CVE-2015-3307 | redhat_vex | php: invalid pointer free() in phar_tar_process_metadata() | fixed: 1063 known affected: 27 known not affected: 1 | 2026-06-28T11:08:00+00:00 | Vulnerability · Source |
| CVE-2026-1001 | redhat_vex | Domoticz: Domoticz: Arbitrary script execution via stored cross-site scripting in web interface | known not affected: 1 | 2026-06-28T11:07:59+00:00 | Vulnerability · Source |
| CVE-2016-3141 | redhat_vex | php: Use after free in WDDX Deserialize when processing XML data | fixed: 251 known affected: 110 | 2026-06-28T11:07:59+00:00 | Vulnerability · Source |
| CVE-2026-11219 | redhat_vex | chromium-browser: Insufficient data validation in Navigation | known not affected: 1 | 2026-06-28T11:07:58+00:00 | Vulnerability · Source |
| CVE-2026-11225 | redhat_vex | chromium-browser: Incorrect security UI in WebUI | known not affected: 1 | 2026-06-28T11:07:55+00:00 | Vulnerability · Source |
| CVE-2026-11178 | redhat_vex | chromium-browser: Policy bypass in WebView | known not affected: 1 | 2026-06-28T11:07:55+00:00 | Vulnerability · Source |
| CVE-2015-3096 | redhat_vex | flash-plugin: cross-site request forgery against JSONP endpoints fixed in APSB15-11 (incomplete fix for CVE-2014-5333) | fixed: 5 | 2026-06-28T11:07:54+00:00 | Vulnerability · Source |
| CVE-2024-36882 | redhat_vex | kernel: mm: use memalloc_nofs_save() in page_cache_ra_order() | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T11:07:54+00:00 | Vulnerability · Source |
| CVE-2024-36920 | redhat_vex | kernel: scsi: mpi3mr: Avoid memcpy field-spanning write WARNING | fixed: 1063 known affected: 22 known not affected: 51 | 2026-06-28T11:07:54+00:00 | Vulnerability · Source |
| CVE-2015-1302 | redhat_vex | chromium-browser: information leak in PDF viewer | fixed: 12 | 2026-06-28T11:07:53+00:00 | Vulnerability · Source |
| CVE-2015-2590 | redhat_vex | OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401) | fixed: 1026 | 2026-06-28T11:07:53+00:00 | Vulnerability · Source |
| CVE-2015-1242 | redhat_vex | chromium-browser: Type confusion in V8 | fixed: 15 | 2026-06-28T11:07:51+00:00 | Vulnerability · Source |
| CVE-2008-5339 | redhat_vex | JavaWebStart allows unauthorized network connections | fixed: 571 | 2026-06-28T11:07:51+00:00 | Vulnerability · Source |
| CVE-2016-9806 | redhat_vex | kernel: netlink: double-free in netlink_dump | fixed: 201 known not affected: 22 | 2026-06-28T11:07:51+00:00 | Vulnerability · Source |
| CVE-2015-1252 | redhat_vex | chromium-browser: Sandbox escape in Chrome. | fixed: 12 | 2026-06-28T11:07:51+00:00 | Vulnerability · Source |
| CVE-2015-1238 | redhat_vex | chromium-browser: Out-of-bounds write in Skia | fixed: 15 | 2026-06-28T11:07:49+00:00 | Vulnerability · Source |
| CVE-2016-9650 | redhat_vex | chromium-browser: csp referrer disclosure | fixed: 12 | 2026-06-28T11:07:45+00:00 | Vulnerability · Source |
| CVE-2025-8880 | redhat_vex | chromium-browser: Chrome V8 Sandbox Code Execution Vulnerability | known not affected: 1 | 2026-06-28T11:07:44+00:00 | Vulnerability · Source |
| CVE-2014-8161 | redhat_vex | postgresql: information leak through constraint violation errors | fixed: 347 known affected: 17 | 2026-06-28T11:07:42+00:00 | Vulnerability · Source |
| CVE-2024-36889 | redhat_vex | kernel: mptcp: ensure snd_nxt is properly initialized on connect | fixed: 929 known affected: 22 known not affected: 43 | 2026-06-28T11:07:41+00:00 | Vulnerability · Source |
| CVE-2015-0478 | redhat_vex | OpenJDK: insufficient hardening of RSA-CRT implementation (JCE, 8071726) | fixed: 1043 | 2026-06-28T11:07:40+00:00 | Vulnerability · Source |
| CVE-2015-0329 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T11:07:39+00:00 | Vulnerability · Source |
| CVE-2019-5828 | redhat_vex | chromium-browser: Use after free in ServiceWorker | fixed: 14 | 2026-06-28T11:07:39+00:00 | Vulnerability · Source |
| CVE-2016-1620 | redhat_vex | chromium-browser: various fixes from internal audits | fixed: 12 | 2026-06-28T11:07:38+00:00 | Vulnerability · Source |
| CVE-2015-0321 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T11:07:38+00:00 | Vulnerability · Source |
| CVE-2015-0241 | redhat_vex | postgresql: buffer overflow in the to_char() function | fixed: 347 known affected: 17 | 2026-06-28T11:07:38+00:00 | Vulnerability · Source |
| CVE-2014-7968 | redhat_vex | vdsm: ssl_accept may block connections on uncompleted handshake | fixed: 26 | 2026-06-28T11:07:37+00:00 | Vulnerability · Source |
| CVE-2015-0223 | redhat_vex | qpid-cpp: anonymous access to qpidd cannot be prevented | fixed: 1231 known affected: 14 | 2026-06-28T11:07:37+00:00 | Vulnerability · Source |
| CVE-2014-7945 | redhat_vex | chromium-browser: out-of-bounds read in PDFium | fixed: 15 | 2026-06-28T11:07:37+00:00 | Vulnerability · Source |
| CVE-2014-7169 | redhat_vex | bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271) | fixed: 171 | 2026-06-28T11:07:36+00:00 | Vulnerability · Source |
| CVE-2014-3668 | redhat_vex | php: xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime() | fixed: 967 known not affected: 1 | 2026-06-28T11:07:35+00:00 | Vulnerability · Source |
| CVE-2016-9596 | redhat_vex | libxml2: stack exhaustion while parsing xml files in recovery mode (unfixed CVE-2016-3627 in JBCS) | fixed: 1 known affected: 1 known not affected: 11 | 2026-06-28T11:07:35+00:00 | Vulnerability · Source |
| CVE-2026-45624 | redhat_vex | ImageMagick: ImageMagick: Data exposure due to image processing vulnerability | known affected: 14 | 2026-06-28T11:07:34+00:00 | Vulnerability · Source |
| CVE-2014-6517 | redhat_vex | OpenJDK: StAX parser parameter entity XXE (JAXP, 8039533) | fixed: 522 known not affected: 23 | 2026-06-28T11:07:33+00:00 | Vulnerability · Source |
| CVE-2024-36941 | redhat_vex | kernel: wifi: nl80211: don't free NULL coalescing rule | fixed: 927 known affected: 64 known not affected: 11 | 2026-06-28T11:07:33+00:00 | Vulnerability · Source |
| CVE-2014-6593 | redhat_vex | OpenJDK: incorrect tracking of ChangeCipherSpec during SSL/TLS handshake (JSSE, 8057555) | fixed: 948 known not affected: 24 | 2026-06-28T11:07:33+00:00 | Vulnerability · Source |
| CVE-2014-5008 | redhat_vex | snoopy: incomplete fixes for command execution flaws | fixed: 18 known affected: 7 | 2026-06-28T11:07:31+00:00 | Vulnerability · Source |
| CVE-2014-3514 | redhat_vex | rubygem-activerecord: Strong Parameter bypass with create_with | fixed: 15 known not affected: 11 | 2026-06-28T11:07:31+00:00 | Vulnerability · Source |
| CVE-2014-3200 | redhat_vex | chromium: multiple unspecified issues fixed in Chrome 38.0.2125.101 | fixed: 15 known affected: 9 | 2026-06-28T11:07:30+00:00 | Vulnerability · Source |
| CVE-2019-5780 | redhat_vex | chromium-browser: Insufficient policy enforcement | fixed: 12 | 2026-06-28T11:07:29+00:00 | Vulnerability · Source |
| CVE-2007-6637 | redhat_vex | Flash Player content injection flaw | fixed: 10 | 2026-06-28T11:07:29+00:00 | Vulnerability · Source |
| CVE-2017-15423 | redhat_vex | chromium-browser: issue with spake implementation in boringssl | fixed: 12 | 2026-06-28T11:07:29+00:00 | Vulnerability · Source |
| CVE-2014-0536 | redhat_vex | flash-plugin: arbitrary code execution flaws (APSB14-16) | fixed: 5 | 2026-06-28T11:07:29+00:00 | Vulnerability · Source |
| CVE-2014-0584 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-24) | fixed: 6 | 2026-06-28T11:07:29+00:00 | Vulnerability · Source |