VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299459 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2009-4537 | redhat_vex | kernel: r8169 issue reported at 26c3 | fixed: 394 known not affected: 20 | 2026-06-28T10:57:52+00:00 | Vulnerability · Source |
| CVE-2009-4536 | redhat_vex | kernel: e1000 issue reported at 26c3 | fixed: 428 known not affected: 20 | 2026-06-28T10:57:50+00:00 | Vulnerability · Source |
| CVE-2021-2352 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Jul 2021) | fixed: 155 known not affected: 119 | 2026-06-28T10:57:50+00:00 | Vulnerability · Source |
| CVE-2025-71138 | redhat_vex | kernel: drm/msm/dpu: Add missing NULL pointer check for pingpong interface | known not affected: 274 | 2026-06-28T10:57:49+00:00 | Vulnerability · Source |
| CVE-2026-44048 | redhat_vex | netatalk: stack buffer overflow via UCS-2 type confusion in convert_charset() | known not affected: 1 | 2026-06-28T10:57:48+00:00 | Vulnerability · Source |
| CVE-2025-68696 | redhat_vex | httparty: Httparty: Server-Side Request Forgery (SSRF) allows information disclosure and unauthorized internal access. | known not affected: 1 | 2026-06-28T10:57:43+00:00 | Vulnerability · Source |
| CVE-2015-5225 | redhat_vex | Qemu: ui: vnc: heap memory corruption in vnc_refresh_server_surface | fixed: 35 known not affected: 17 | 2026-06-28T10:57:42+00:00 | Vulnerability · Source |
| CVE-2026-48772 | redhat_vex | proxysql: ProxySQL: Routing and Access Control List bypass via spoofed PROXY protocol header | known not affected: 1 | 2026-06-28T10:57:39+00:00 | Vulnerability · Source |
| CVE-2025-71228 | redhat_vex | kernel: LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED | known not affected: 274 | 2026-06-28T10:57:37+00:00 | Vulnerability · Source |
| CVE-2026-54387 | redhat_vex | tinyproxy: HTTP Request Smuggling via CL/TE desynchronization | known not affected: 1 | 2026-06-28T10:57:36+00:00 | Vulnerability · Source |
| CVE-2015-4601 | redhat_vex | php: type confusion issue in unserialize() with various SOAP methods | fixed: 849 known affected: 56 known not affected: 30 | 2026-06-28T10:57:32+00:00 | Vulnerability · Source |
| CVE-2023-27536 | redhat_vex | curl: GSS delegation too eager connection re-use | fixed: 164 known affected: 9 known not affected: 4 | 2026-06-28T10:57:30+00:00 | Vulnerability · Source |
| CVE-2021-3672 | redhat_vex | c-ares: Missing input validation of host names may lead to domain hijacking | fixed: 215 known affected: 5 known not affected: 23 | 2026-06-28T10:57:28+00:00 | Vulnerability · Source |
| CVE-2026-7350 | redhat_vex | chromium-browser: Use after free in WebMIDI | known not affected: 1 | 2026-06-28T10:57:20+00:00 | Vulnerability · Source |
| CVE-2020-9746 | redhat_vex | flash-plugin: Arbitrary Code Execution vulnerability (APSB20-58) | fixed: 3 | 2026-06-28T10:57:16+00:00 | Vulnerability · Source |
| CVE-2020-8649 | redhat_vex | kernel: invalid read location in vgacon_invert_region function in drivers/video/console/vgacon.c | fixed: 504 known affected: 32 | 2026-06-28T10:57:15+00:00 | Vulnerability · Source |
| CVE-2025-3046 | redhat_vex | llama-index: Path Traversal llama_index | known affected: 4 | 2026-06-28T10:57:13+00:00 | Vulnerability · Source |
| CVE-2014-0586 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-24) | fixed: 6 | 2026-06-28T10:57:13+00:00 | Vulnerability · Source |
| CVE-2026-31498 | redhat_vex | kernel: Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop | known affected: 260 known not affected: 14 | 2026-06-28T10:57:11+00:00 | Vulnerability · Source |
| CVE-2025-32955 | redhat_vex | Harden-Runner: Harden-Runner Evasion of 'disable-sudo' policy | known affected: 9 | 2026-06-28T10:57:11+00:00 | Vulnerability · Source |
| CVE-2015-3331 | redhat_vex | Kernel: crypto: buffer overruns in RFC4106 implementation using AESNI | fixed: 472 known not affected: 2 | 2026-06-28T10:57:10+00:00 | Vulnerability · Source |
| CVE-2026-31432 | redhat_vex | kernel: ksmbd: fix OOB write in QUERY_INFO for compound requests | known not affected: 274 | 2026-06-28T10:57:09+00:00 | Vulnerability · Source |
| CVE-2025-71187 | redhat_vex | kernel: dmaengine: sh: rz-dmac: fix device leak on probe failure | known not affected: 274 | 2026-06-28T10:57:08+00:00 | Vulnerability · Source |
| CVE-2026-25884 | redhat_vex | Exiv2: Exiv2: Denial of service via out-of-bounds read in CRW image parser | known affected: 28 | 2026-06-28T10:57:08+00:00 | Vulnerability · Source |
| CVE-2014-0437 | redhat_vex | mysql: unspecified vulnerability related to Optimizer DoS (CPU Jan 2014) | fixed: 206 known not affected: 9 | 2026-06-28T10:57:05+00:00 | Vulnerability · Source |
| CVE-2020-9633 | redhat_vex | flash-plugin: Arbitrary Code Execution vulnerability (APSB20-30) | fixed: 3 | 2026-06-28T10:57:04+00:00 | Vulnerability · Source |
| CVE-2025-68617 | redhat_vex | FluidSynth: FluidSynth: Race Condition in DLS Unloading Allows Code Execution and Privilege Escalation | known not affected: 1 | 2026-06-28T10:57:03+00:00 | Vulnerability · Source |
| CVE-2026-3147 | redhat_vex | libvips: libvips: Heap-based buffer overflow | known not affected: 1 | 2026-06-28T10:57:02+00:00 | Vulnerability · Source |
| CVE-2022-48757 | redhat_vex | kernel: net: fix information leakage in /proc/net/ptype | fixed: 270 known affected: 150 | 2026-06-28T10:57:02+00:00 | Vulnerability · Source |
| CVE-2021-3518 | redhat_vex | libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c | fixed: 193 known affected: 12 known not affected: 4 | 2026-06-28T10:57:01+00:00 | Vulnerability · Source |
| CVE-2009-1107 | redhat_vex | OpenJDK: Signed applet remote misuse possibility (6782871) | fixed: 408 | 2026-06-28T10:57:00+00:00 | Vulnerability · Source |
| CVE-2020-0110 | redhat_vex | kernel: out of bound write when writing 0 bytes to PSI files which could result in local privilege escalation | known not affected: 104 | 2026-06-28T10:57:00+00:00 | Vulnerability · Source |
| CVE-2009-1102 | redhat_vex | OpenJDK code generation vulnerability (6636360) | fixed: 98 | 2026-06-28T10:57:00+00:00 | Vulnerability · Source |
| CVE-2015-3212 | redhat_vex | kernel: SCTP race condition allows list corruption and panic from userlevel | fixed: 198 known not affected: 16 | 2026-06-28T10:56:59+00:00 | Vulnerability · Source |
| CVE-2015-3215 | redhat_vex | virtio-win: netkvm: malformed packet can cause BSOD | fixed: 6 known affected: 1 | 2026-06-28T10:56:58+00:00 | Vulnerability · Source |
| CVE-2014-9715 | redhat_vex | kernel: netfilter connection tracking extensions denial of service | fixed: 198 known not affected: 15 | 2026-06-28T10:56:57+00:00 | Vulnerability · Source |
| CVE-2025-5419 | redhat_vex | chromium: Chrome Heap Corruption Vulnerability | known not affected: 1 | 2026-06-28T10:56:57+00:00 | Vulnerability · Source |
| CVE-2025-32442 | redhat_vex | Fastify: Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass | known not affected: 2 | 2026-06-28T10:56:56+00:00 | Vulnerability · Source |
| CVE-2019-11135 | redhat_vex | hw: TSX Transaction Asynchronous Abort (TAA) | fixed: 2781 known affected: 63 known not affected: 38 | 2026-06-28T10:56:54+00:00 | Vulnerability · Source |
| CVE-2015-3201 | redhat_vex | thermostat: world-readable configuration file containing credentials | fixed: 150 known affected: 4 | 2026-06-28T10:56:54+00:00 | Vulnerability · Source |
| CVE-2015-3197 | redhat_vex | OpenSSL: SSLv2 doesn't block disabled ciphers | fixed: 442 known affected: 6 | 2026-06-28T10:56:54+00:00 | Vulnerability · Source |
| CVE-2018-16395 | redhat_vex | ruby: OpenSSL::X509:: Name equality check does not work correctly | fixed: 825 known affected: 13 known not affected: 47 | 2026-06-28T10:56:53+00:00 | Vulnerability · Source |
| CVE-2019-9857 | redhat_vex | kernel: memory leak in inotify_update_existing_watch() leads to denial of service | known not affected: 104 | 2026-06-28T10:56:53+00:00 | Vulnerability · Source |
| CVE-2015-3195 | redhat_vex | OpenSSL: X509_ATTRIBUTE memory leak | fixed: 196 known affected: 8 known not affected: 1 | 2026-06-28T10:56:50+00:00 | Vulnerability · Source |
| CVE-2015-3165 | redhat_vex | postgresql: double-free after authentication timeout | fixed: 421 known affected: 5 | 2026-06-28T10:56:49+00:00 | Vulnerability · Source |
| CVE-2020-7060 | redhat_vex | php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function | fixed: 605 known affected: 133 | 2026-06-28T10:56:49+00:00 | Vulnerability · Source |
| CVE-2020-6530 | redhat_vex | chromium-browser: Out of bounds memory access in developer tools | fixed: 14 | 2026-06-28T10:56:47+00:00 | Vulnerability · Source |
| CVE-2024-27004 | redhat_vex | kernel: clk: Get runtime PM before walking tree during disable_unused | fixed: 280 known affected: 98 known not affected: 22 | 2026-06-28T10:56:47+00:00 | Vulnerability · Source |
| CVE-2024-27010 | redhat_vex | kernel: net/sched: Fix mirred deadlock on device recursion | fixed: 709 known affected: 64 known not affected: 8 | 2026-06-28T10:56:47+00:00 | Vulnerability · Source |
| CVE-2020-6438 | redhat_vex | chromium-browser: Insufficient policy enforcement in extensions | fixed: 14 | 2026-06-28T10:56:46+00:00 | Vulnerability · Source |