VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2010-3652 | redhat_vex | flash-plugin: security bulletin APSB10-26 | fixed: 9 | 2026-06-28T11:06:16+00:00 | Vulnerability · Source |
| CVE-2010-3619 | redhat_vex | acroread: multiple code execution flaws (APSB10-21) | fixed: 12 known not affected: 2 | 2026-06-28T11:06:16+00:00 | Vulnerability · Source |
| CVE-2025-2913 | redhat_vex | hdf5: HDF5 H5FL.c H5FL__blk_gc_list use after free | known affected: 1 | 2026-06-28T11:06:15+00:00 | Vulnerability · Source |
| CVE-2026-0821 | redhat_vex | quickjs-ng: quickjs-ng: Heap-based buffer overflow in js_typed_array_constructor function | known not affected: 1 | 2026-06-28T11:06:15+00:00 | Vulnerability · Source |
| CVE-2010-2208 | redhat_vex | acroread: multiple code execution flaws (APSB10-15) | fixed: 12 | 2026-06-28T11:06:15+00:00 | Vulnerability · Source |
| CVE-2010-0847 | redhat_vex | OpenJDK ImagingLib arbitrary code execution vulnerability (6914866) | fixed: 594 | 2026-06-28T11:06:13+00:00 | Vulnerability · Source |
| CVE-2016-1102 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T11:06:12+00:00 | Vulnerability · Source |
| CVE-2009-4324 | redhat_vex | acroread: media.newplayer JavaScript API code execution vulnerability (APSB10-02) | fixed: 16 | 2026-06-28T11:06:11+00:00 | Vulnerability · Source |
| CVE-2016-10516 | redhat_vex | python-werkzeug: Cross-site scripting in render_full function in debug/tbtools.py | fixed: 1215 known affected: 9 | 2026-06-28T11:06:11+00:00 | Vulnerability · Source |
| CVE-2010-0429 | redhat_vex | libspice: Relying on guest provided data structures to indicate memory allocation | fixed: 13 | 2026-06-28T11:06:11+00:00 | Vulnerability · Source |
| CVE-2026-0710 | redhat_vex | SIPp/sipp: SIPp: Denial of Service and potential Arbitrary Code Execution vulnerability | known not affected: 1 | 2026-06-28T11:06:11+00:00 | Vulnerability · Source |
| CVE-2025-48979 | redhat_vex | uisp: UISP Command Injection Vulnerability | known not affected: 1 | 2026-06-28T11:06:10+00:00 | Vulnerability · Source |
| CVE-2009-1106 | redhat_vex | OpenJDK: Improper parsing of crossdomain.xml files (intended access restriction bypass) (6798948) | fixed: 338 | 2026-06-28T11:06:09+00:00 | Vulnerability · Source |
| CVE-2009-3879 | redhat_vex | OpenJDK GraphicsConfiguration information leak(6822057) | fixed: 168 | 2026-06-28T11:06:09+00:00 | Vulnerability · Source |
| CVE-2026-0598 | redhat_vex | ansible-lightspeed: Broken Object Level Authorization Leading to Cross-User AI Conversation Context Injection in Ansible Lightspeed API | fixed: 4 known not affected: 143 | 2026-06-28T11:06:08+00:00 | Vulnerability · Source |
| CVE-2008-1194 | redhat_vex | JRE image parsing library allows privilege escalation (CVE-2008-1194) | fixed: 286 | 2026-06-28T11:06:08+00:00 | Vulnerability · Source |
| CVE-2016-8327 | redhat_vex | mysql: Server: Replication unspecified vulnerability (CPU Jan 2017) | fixed: 114 known not affected: 57 | 2026-06-28T11:06:08+00:00 | Vulnerability · Source |
| CVE-2008-0890 | redhat_vex | 7.1: insecure default permissions on jars directory | fixed: 8 | 2026-06-28T11:06:07+00:00 | Vulnerability · Source |
| CVE-2007-1825 | redhat_vex | php imap_mail_compose() buffer overflow via type.parameters | fixed: 608 | 2026-06-28T11:06:06+00:00 | Vulnerability · Source |
| CVE-2008-0883 | redhat_vex | acroread: insecure handling of temporary files | fixed: 20 | 2026-06-28T11:06:06+00:00 | Vulnerability · Source |
| CVE-2007-5239 | redhat_vex | Untrusted Application or Applet May Move or Copy Arbitrary Files | fixed: 430 | 2026-06-28T11:06:06+00:00 | Vulnerability · Source |
| CVE-2026-3934 | redhat_vex | chromium-browser: Insufficient policy enforcement in ChromeDriver | known not affected: 1 | 2026-06-28T11:06:05+00:00 | Vulnerability · Source |
| CVE-2004-1019 | redhat_vex | security flaw | fixed: 336 | 2026-06-28T11:06:05+00:00 | Vulnerability · Source |
| CVE-2026-11130 | redhat_vex | chromium-browser: Use after free in Media | known not affected: 1 | 2026-06-28T11:06:03+00:00 | Vulnerability · Source |
| CVE-2026-0531 | redhat_vex | kibana: allocation of resources without limits or throttling via specially crafted bulk retrieval request | known affected: 1 | 2026-06-28T11:06:02+00:00 | Vulnerability · Source |
| CVE-2026-11177 | redhat_vex | chromium-browser: Use after free in Omnibox | known not affected: 1 | 2026-06-28T11:05:58+00:00 | Vulnerability · Source |
| CVE-2024-25742 | redhat_vex | hw: amd: Instruction raise #VC exception at exit | fixed: 949 known affected: 22 known not affected: 43 | 2026-06-28T11:05:57+00:00 | Vulnerability · Source |
| CVE-2016-10166 | redhat_vex | gd: Unsigned integer underflow _gdContributionsAlloc() | fixed: 972 known affected: 62 known not affected: 124 | 2026-06-28T11:05:52+00:00 | Vulnerability · Source |
| CVE-2025-27154 | redhat_vex | spotipy: Spotipy's cache file, containing spotify auth token, is created with overly broad permissions | known not affected: 1 | 2026-06-28T11:05:52+00:00 | Vulnerability · Source |
| CVE-2009-2948 | redhat_vex | samba: information disclosure in suid mount.cifs | fixed: 151 | 2026-06-28T11:05:50+00:00 | Vulnerability · Source |
| CVE-2017-11292 | redhat_vex | flash-plugin: remote code execution vulnerability (APSB17-32) | fixed: 3 | 2026-06-28T11:05:49+00:00 | Vulnerability · Source |
| CVE-2026-46085 | redhat_vex | kernel: rxrpc: Fix rxkad crypto unalignment handling | known not affected: 274 | 2026-06-28T11:05:49+00:00 | Vulnerability · Source |
| CVE-2017-11362 | redhat_vex | php: Stack-based buffer over-read in msgfmt_parse_message function | fixed: 254 known affected: 86 known not affected: 1 | 2026-06-28T11:05:49+00:00 | Vulnerability · Source |
| CVE-2025-30474 | redhat_vex | apache-commons-vfs: Apache Commons VFS: Failing to find an FTP file can reveal the URI's password in an error message | known not affected: 1 | 2026-06-28T11:05:48+00:00 | Vulnerability · Source |
| CVE-2026-27586 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddytls: Caddy: Authentication bypass via mTLS client certificate validation failure | known not affected: 1 | 2026-06-28T11:05:45+00:00 | Vulnerability · Source |
| CVE-2024-23848 | redhat_vex | kernel: use-after-free in cec_queue_msg_fh | fixed: 709 known affected: 22 known not affected: 50 | 2026-06-28T11:05:43+00:00 | Vulnerability · Source |
| CVE-2021-41816 | redhat_vex | ruby: buffer overflow in CGI.escape_html | fixed: 130 known not affected: 259 | 2026-06-28T11:05:39+00:00 | Vulnerability · Source |
| CVE-2026-53099 | redhat_vex | kernel: bpf: Switch CONFIG_CFI_CLANG to CONFIG_CFI | known not affected: 274 | 2026-06-28T11:05:39+00:00 | Vulnerability · Source |
| CVE-2017-11089 | redhat_vex | kernel: Out-of-bounds read in nl80211_set_station allows privileged local attacker to cause system crash or possibly code execution | known affected: 14 known not affected: 74 | 2026-06-28T11:05:38+00:00 | Vulnerability · Source |
| CVE-2026-53098 | redhat_vex | kernel: wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() | known not affected: 274 | 2026-06-28T11:05:34+00:00 | Vulnerability · Source |
| CVE-2016-1012 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-10 | fixed: 5 | 2026-06-28T11:05:33+00:00 | Vulnerability · Source |
| CVE-2024-57890 | redhat_vex | kernel: RDMA/uverbs: Prevent integer overflow issue | fixed: 305 known affected: 112 known not affected: 76 | 2026-06-28T11:05:31+00:00 | Vulnerability · Source |
| CVE-2015-5587 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-23 | fixed: 5 | 2026-06-28T11:05:31+00:00 | Vulnerability · Source |
| CVE-2015-5561 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T11:05:30+00:00 | Vulnerability · Source |
| CVE-2025-26533 | redhat_vex | moodle: SQL injection risk in course search module list filter | known not affected: 1 | 2026-06-28T11:05:27+00:00 | Vulnerability · Source |
| CVE-2026-8533 | redhat_vex | chromium-browser: chromium-browser: Use after free in Accessibility | known not affected: 1 | 2026-06-28T11:05:27+00:00 | Vulnerability · Source |
| CVE-2024-49767 | redhat_vex | werkzeug: python-werkzeug: Werkzeug possible resource exhaustion when parsing file data in forms | fixed: 2 known affected: 1 known not affected: 52 | 2026-06-28T11:05:27+00:00 | Vulnerability · Source |
| CVE-2024-56631 | redhat_vex | kernel: scsi: sg: Fix slab-use-after-free read in sg_release() | fixed: 305 known affected: 112 known not affected: 76 | 2026-06-28T11:05:26+00:00 | Vulnerability · Source |
| CVE-2013-5908 | redhat_vex | mysql: unspecified vulnerability related to Error Handling DoS (CPU Jan 2014) | fixed: 206 known not affected: 9 | 2026-06-28T11:05:25+00:00 | Vulnerability · Source |
| CVE-2024-56601 | redhat_vex | kernel: net: inet: do not leave a dangling sk pointer in inet_create() | fixed: 305 known affected: 112 known not affected: 76 | 2026-06-28T11:05:24+00:00 | Vulnerability · Source |