VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299424 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2010-0419 | redhat_vex | kvm: emulator privilege escalation segment selector check | fixed: 15 | 2026-06-28T10:58:08+00:00 | Vulnerability · Source |
| CVE-2024-35859 | redhat_vex | kernel: block: fix module reference leakage from bdev_open_by_dev error path | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T10:58:07+00:00 | Vulnerability · Source |
| CVE-2015-5963 | redhat_vex | python-django: Denial-of-service possibility in logout() view by filling session store | fixed: 16 | 2026-06-28T10:58:06+00:00 | Vulnerability · Source |
| CVE-2025-51495 | redhat_vex | mongoose: Integer Overflow in Mongoose's WebSocket component | known not affected: 1 | 2026-06-28T10:58:05+00:00 | Vulnerability · Source |
| CVE-2023-0330 | redhat_vex | QEMU: lsi53c895a: DMA reentrancy issue leads to stack overflow | known not affected: 99 | 2026-06-28T10:58:05+00:00 | Vulnerability · Source |
| CVE-2025-51427 | redhat_vex | ModelScope: ModelScope: Arbitrary code execution via crafted configuration module | known not affected: 4 | 2026-06-28T10:58:01+00:00 | Vulnerability · Source |
| CVE-2015-5313 | redhat_vex | libvirt: filesystem storage volume names path traversal flaw | fixed: 194 known affected: 7 | 2026-06-28T10:58:01+00:00 | Vulnerability · Source |
| CVE-2019-9436 | redhat_vex | kernel: secure boot bypass in bootloader leads to local privilege escalation | known not affected: 104 | 2026-06-28T10:58:01+00:00 | Vulnerability · Source |
| CVE-2026-23416 | redhat_vex | kernel: mm/mseal: update VMA end correctly on merge | known not affected: 274 | 2026-06-28T10:57:59+00:00 | Vulnerability · Source |
| CVE-2015-8460 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-01 | fixed: 5 | 2026-06-28T10:57:57+00:00 | Vulnerability · Source |
| CVE-2025-71157 | redhat_vex | kernel: Kernel: Resource management flaw in RDMA/core can lead to denial of service | known affected: 198 known not affected: 76 | 2026-06-28T10:57:57+00:00 | Vulnerability · Source |
| CVE-2014-1876 | redhat_vex | OpenJDK: insecure temporary file use in unpack200 (Libraries, 8033618) | fixed: 856 known affected: 1 known not affected: 14 | 2026-06-28T10:57:54+00:00 | Vulnerability · Source |
| CVE-2015-1205 | redhat_vex | chromium-browser: multiple unspecified vulnerabilities | fixed: 15 | 2026-06-28T10:57:53+00:00 | Vulnerability · Source |
| CVE-2009-4537 | redhat_vex | kernel: r8169 issue reported at 26c3 | fixed: 394 known not affected: 20 | 2026-06-28T10:57:52+00:00 | Vulnerability · Source |
| CVE-2009-4536 | redhat_vex | kernel: e1000 issue reported at 26c3 | fixed: 428 known not affected: 20 | 2026-06-28T10:57:50+00:00 | Vulnerability · Source |
| CVE-2021-2352 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Jul 2021) | fixed: 155 known not affected: 119 | 2026-06-28T10:57:50+00:00 | Vulnerability · Source |
| CVE-2025-71138 | redhat_vex | kernel: drm/msm/dpu: Add missing NULL pointer check for pingpong interface | known not affected: 274 | 2026-06-28T10:57:49+00:00 | Vulnerability · Source |
| CVE-2026-44048 | redhat_vex | netatalk: stack buffer overflow via UCS-2 type confusion in convert_charset() | known not affected: 1 | 2026-06-28T10:57:48+00:00 | Vulnerability · Source |
| CVE-2025-68696 | redhat_vex | httparty: Httparty: Server-Side Request Forgery (SSRF) allows information disclosure and unauthorized internal access. | known not affected: 1 | 2026-06-28T10:57:43+00:00 | Vulnerability · Source |
| CVE-2015-5225 | redhat_vex | Qemu: ui: vnc: heap memory corruption in vnc_refresh_server_surface | fixed: 35 known not affected: 17 | 2026-06-28T10:57:42+00:00 | Vulnerability · Source |
| CVE-2026-48772 | redhat_vex | proxysql: ProxySQL: Routing and Access Control List bypass via spoofed PROXY protocol header | known not affected: 1 | 2026-06-28T10:57:39+00:00 | Vulnerability · Source |
| CVE-2025-71228 | redhat_vex | kernel: LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED | known not affected: 274 | 2026-06-28T10:57:37+00:00 | Vulnerability · Source |
| CVE-2026-54387 | redhat_vex | tinyproxy: HTTP Request Smuggling via CL/TE desynchronization | known not affected: 1 | 2026-06-28T10:57:36+00:00 | Vulnerability · Source |
| CVE-2015-4601 | redhat_vex | php: type confusion issue in unserialize() with various SOAP methods | fixed: 849 known affected: 56 known not affected: 30 | 2026-06-28T10:57:32+00:00 | Vulnerability · Source |
| CVE-2023-27536 | redhat_vex | curl: GSS delegation too eager connection re-use | fixed: 164 known affected: 9 known not affected: 4 | 2026-06-28T10:57:30+00:00 | Vulnerability · Source |
| CVE-2021-3672 | redhat_vex | c-ares: Missing input validation of host names may lead to domain hijacking | fixed: 215 known affected: 5 known not affected: 23 | 2026-06-28T10:57:28+00:00 | Vulnerability · Source |
| CVE-2026-7350 | redhat_vex | chromium-browser: Use after free in WebMIDI | known not affected: 1 | 2026-06-28T10:57:20+00:00 | Vulnerability · Source |
| CVE-2020-9746 | redhat_vex | flash-plugin: Arbitrary Code Execution vulnerability (APSB20-58) | fixed: 3 | 2026-06-28T10:57:16+00:00 | Vulnerability · Source |
| CVE-2020-8649 | redhat_vex | kernel: invalid read location in vgacon_invert_region function in drivers/video/console/vgacon.c | fixed: 504 known affected: 32 | 2026-06-28T10:57:15+00:00 | Vulnerability · Source |
| CVE-2025-3046 | redhat_vex | llama-index: Path Traversal llama_index | known affected: 4 | 2026-06-28T10:57:13+00:00 | Vulnerability · Source |
| CVE-2014-0586 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-24) | fixed: 6 | 2026-06-28T10:57:13+00:00 | Vulnerability · Source |
| CVE-2026-31498 | redhat_vex | kernel: Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop | known affected: 260 known not affected: 14 | 2026-06-28T10:57:11+00:00 | Vulnerability · Source |
| CVE-2025-32955 | redhat_vex | Harden-Runner: Harden-Runner Evasion of 'disable-sudo' policy | known affected: 9 | 2026-06-28T10:57:11+00:00 | Vulnerability · Source |
| CVE-2015-3331 | redhat_vex | Kernel: crypto: buffer overruns in RFC4106 implementation using AESNI | fixed: 472 known not affected: 2 | 2026-06-28T10:57:10+00:00 | Vulnerability · Source |
| CVE-2026-31432 | redhat_vex | kernel: ksmbd: fix OOB write in QUERY_INFO for compound requests | known not affected: 274 | 2026-06-28T10:57:09+00:00 | Vulnerability · Source |
| CVE-2025-71187 | redhat_vex | kernel: dmaengine: sh: rz-dmac: fix device leak on probe failure | known not affected: 274 | 2026-06-28T10:57:08+00:00 | Vulnerability · Source |
| CVE-2026-25884 | redhat_vex | Exiv2: Exiv2: Denial of service via out-of-bounds read in CRW image parser | known affected: 28 | 2026-06-28T10:57:08+00:00 | Vulnerability · Source |
| CVE-2014-0437 | redhat_vex | mysql: unspecified vulnerability related to Optimizer DoS (CPU Jan 2014) | fixed: 206 known not affected: 9 | 2026-06-28T10:57:05+00:00 | Vulnerability · Source |
| CVE-2020-9633 | redhat_vex | flash-plugin: Arbitrary Code Execution vulnerability (APSB20-30) | fixed: 3 | 2026-06-28T10:57:04+00:00 | Vulnerability · Source |
| CVE-2025-68617 | redhat_vex | FluidSynth: FluidSynth: Race Condition in DLS Unloading Allows Code Execution and Privilege Escalation | known not affected: 1 | 2026-06-28T10:57:03+00:00 | Vulnerability · Source |
| CVE-2026-3147 | redhat_vex | libvips: libvips: Heap-based buffer overflow | known not affected: 1 | 2026-06-28T10:57:02+00:00 | Vulnerability · Source |
| CVE-2022-48757 | redhat_vex | kernel: net: fix information leakage in /proc/net/ptype | fixed: 270 known affected: 150 | 2026-06-28T10:57:02+00:00 | Vulnerability · Source |
| CVE-2021-3518 | redhat_vex | libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c | fixed: 193 known affected: 12 known not affected: 4 | 2026-06-28T10:57:01+00:00 | Vulnerability · Source |
| CVE-2009-1107 | redhat_vex | OpenJDK: Signed applet remote misuse possibility (6782871) | fixed: 408 | 2026-06-28T10:57:00+00:00 | Vulnerability · Source |
| CVE-2020-0110 | redhat_vex | kernel: out of bound write when writing 0 bytes to PSI files which could result in local privilege escalation | known not affected: 104 | 2026-06-28T10:57:00+00:00 | Vulnerability · Source |
| CVE-2009-1102 | redhat_vex | OpenJDK code generation vulnerability (6636360) | fixed: 98 | 2026-06-28T10:57:00+00:00 | Vulnerability · Source |
| CVE-2015-3212 | redhat_vex | kernel: SCTP race condition allows list corruption and panic from userlevel | fixed: 198 known not affected: 16 | 2026-06-28T10:56:59+00:00 | Vulnerability · Source |
| CVE-2015-3215 | redhat_vex | virtio-win: netkvm: malformed packet can cause BSOD | fixed: 6 known affected: 1 | 2026-06-28T10:56:58+00:00 | Vulnerability · Source |
| CVE-2014-9715 | redhat_vex | kernel: netfilter connection tracking extensions denial of service | fixed: 198 known not affected: 15 | 2026-06-28T10:56:57+00:00 | Vulnerability · Source |
| CVE-2025-5419 | redhat_vex | chromium: Chrome Heap Corruption Vulnerability | known not affected: 1 | 2026-06-28T10:56:57+00:00 | Vulnerability · Source |