VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299459 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-0437 | redhat_vex | OpenJDK: code generation issue (Hotspot, 8064524) | fixed: 99 known not affected: 92 | 2026-06-28T10:56:11+00:00 | Vulnerability · Source |
| CVE-2025-67856 | redhat_vex | moodle: Moodle: Privilege escalation via incomplete role checks in badge awarding | known not affected: 1 | 2026-06-28T10:56:11+00:00 | Vulnerability · Source |
| CVE-2010-0192 | redhat_vex | Acroread: Multiple code execution flaws (APSB10-09) | fixed: 12 | 2026-06-28T10:56:11+00:00 | Vulnerability · Source |
| CVE-2015-0407 | redhat_vex | OpenJDK: directory information leak via file chooser (Swing, 8055304) | fixed: 948 known not affected: 24 | 2026-06-28T10:56:10+00:00 | Vulnerability · Source |
| CVE-2013-6417 | redhat_vex | rubygem-actionpack: unsafe query generation risk (incomplete fix for CVE-2013- 0155) | fixed: 32 known affected: 5 known not affected: 3 | 2026-06-28T10:56:09+00:00 | Vulnerability · Source |
| CVE-2025-67851 | redhat_vex | moodle: moodle: Formula injection allows arbitrary formula execution via unescaped data export | known not affected: 1 | 2026-06-28T10:56:09+00:00 | Vulnerability · Source |
| CVE-2025-67850 | redhat_vex | moodle: moodle: Cross-Site Scripting vulnerability via inadequate input filtering in formula editor | known not affected: 1 | 2026-06-28T10:56:08+00:00 | Vulnerability · Source |
| CVE-2025-51006 | redhat_vex | tcpreplay: double free in tcprewrite via a crafted pcap file | known not affected: 1 | 2026-06-28T10:56:08+00:00 | Vulnerability · Source |
| CVE-2015-0383 | redhat_vex | OpenJDK: insecure hsperfdata temporary file handling (Hotspot, 8050807) | fixed: 560 | 2026-06-28T10:56:08+00:00 | Vulnerability · Source |
| CVE-2015-0354 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-06 | fixed: 5 | 2026-06-28T10:56:07+00:00 | Vulnerability · Source |
| CVE-2025-67847 | redhat_vex | moodle: Moodle: Remote Code Execution via insufficient restore input validation | known not affected: 1 | 2026-06-28T10:56:06+00:00 | Vulnerability · Source |
| CVE-2015-0351 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-06 | fixed: 5 | 2026-06-28T10:56:06+00:00 | Vulnerability · Source |
| CVE-2015-0320 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T10:56:06+00:00 | Vulnerability · Source |
| CVE-2026-43103 | redhat_vex | kernel: net: lapbether: handle NETDEV_PRE_TYPE_CHANGE | known not affected: 274 | 2026-06-28T10:56:05+00:00 | Vulnerability · Source |
| CVE-2026-42089 | redhat_vex | yeoman-environment: Yeoman Environment: Arbitrary code execution via unconfirmed package installation | known not affected: 1 | 2026-06-28T10:56:03+00:00 | Vulnerability · Source |
| CVE-2007-5232 | redhat_vex | Security Vulnerability in Java Runtime Environment With Applet Caching | fixed: 430 | 2026-06-28T10:56:03+00:00 | Vulnerability · Source |
| CVE-2026-42225 | redhat_vex | pjsip: pjproject: GnuTLS backend silently skips certificate chain verification when verify_peer is false | known not affected: 1 | 2026-06-28T10:56:02+00:00 | Vulnerability · Source |
| CVE-2025-67479 | redhat_vex | MediaWiki: MediaWiki: Vulnerability in parsing and sanitization | known not affected: 1 | 2026-06-28T10:55:58+00:00 | Vulnerability · Source |
| CVE-2026-12008 | redhat_vex | chromium-browser: chromium-browser: Use after free DigitalCredentials | known not affected: 1 | 2026-06-28T10:55:58+00:00 | Vulnerability · Source |
| CVE-2026-12016 | redhat_vex | chromium-browser: chromium-browser: Insufficient validation of untrusted input DevTools | known not affected: 1 | 2026-06-28T10:55:57+00:00 | Vulnerability · Source |
| CVE-2026-12033 | redhat_vex | chromium-browser: chromium-browser: Out of bounds read VideoCapture | known not affected: 1 | 2026-06-28T10:55:57+00:00 | Vulnerability · Source |
| CVE-2026-1220 | redhat_vex | chromium-browser: chromium-browser: Race in V8 | known not affected: 1 | 2026-06-28T10:55:57+00:00 | Vulnerability · Source |
| CVE-2026-12025 | redhat_vex | chromium-browser: chromium-browser: Insufficient validation of untrusted input Network | known not affected: 1 | 2026-06-28T10:55:57+00:00 | Vulnerability · Source |
| CVE-2026-12031 | redhat_vex | chromium-browser: chromium-browser: Inappropriate implementation Views | known not affected: 1 | 2026-06-28T10:55:57+00:00 | Vulnerability · Source |
| CVE-2025-67477 | redhat_vex | MediaWiki: MediaWiki: Cross-site Scripting vulnerability | known not affected: 1 | 2026-06-28T10:55:57+00:00 | Vulnerability · Source |
| CVE-2015-0243 | redhat_vex | postgresql: buffer overflow flaws in contrib/pgcrypto | fixed: 347 known affected: 17 | 2026-06-28T10:55:56+00:00 | Vulnerability · Source |
| CVE-2015-0236 | redhat_vex | libvirt: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save images and snapshots objects | fixed: 153 known affected: 1 under investigation: 7 | 2026-06-28T10:55:54+00:00 | Vulnerability · Source |
| CVE-2026-27172 | redhat_vex | org.apache.camel/camel-consul: Apache Camel camel-consul: Arbitrary code execution via deserialization of untrusted data | known not affected: 5 | 2026-06-28T10:55:54+00:00 | Vulnerability · Source |
| CVE-2025-30087 | redhat_vex | bestpractical.com/request-tracker: Best Practical RT search URL XSS Vulnerability | known not affected: 1 | 2026-06-28T10:55:52+00:00 | Vulnerability · Source |
| CVE-2021-2144 | redhat_vex | mysql: Server: Parser unspecified vulnerability (CPU Apr 2021) | fixed: 1147 known affected: 13 known not affected: 50 | 2026-06-28T10:55:52+00:00 | Vulnerability · Source |
| CVE-2022-32148 | redhat_vex | golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working | fixed: 1720 known affected: 67 known not affected: 2031 | 2026-06-28T10:55:51+00:00 | Vulnerability · Source |
| CVE-2015-0138 | redhat_vex | JDK: ephemeral RSA keys accepted for non-export SSL/TLS cipher suites (FREAK) | fixed: 393 | 2026-06-28T10:55:50+00:00 | Vulnerability · Source |
| CVE-2024-2201 | redhat_vex | hw: cpu: intel: Native Branch History Injection (BHI) | fixed: 768 known affected: 36 known not affected: 5 | 2026-06-28T10:55:48+00:00 | Vulnerability · Source |
| CVE-2026-33002 | redhat_vex | jenkins: Jenkins: Origin validation bypass via DNS rebinding in CLI WebSocket endpoint | known affected: 1 known not affected: 1 | 2026-06-28T10:55:47+00:00 | Vulnerability · Source |
| CVE-2016-8612 | redhat_vex | mod_cluster: Protocol parsing logic error | fixed: 130 known affected: 4 known not affected: 1 | 2026-06-28T08:30:25+00:00 | Vulnerability · Source |
| CVE-2016-7130 | redhat_vex | php: wddx_deserialize null dereference | fixed: 251 known affected: 110 | 2026-06-28T08:30:25+00:00 | Vulnerability · Source |
| CVE-2013-0609 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T08:30:23+00:00 | Vulnerability · Source |
| CVE-2013-0606 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T08:30:23+00:00 | Vulnerability · Source |
| CVE-2013-0604 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T08:30:22+00:00 | Vulnerability · Source |
| CVE-2013-0504 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-08) | fixed: 4 | 2026-06-28T08:30:22+00:00 | Vulnerability · Source |
| CVE-2025-67724 | redhat_vex | tornado: Tornado Header Injection and XSS via reason argument | known affected: 67 | 2026-06-28T08:30:21+00:00 | Vulnerability · Source |
| CVE-2018-20615 | redhat_vex | haproxy: Mishandling of priority flag in short HEADERS frame by HTTP/2 decoder allows for crash | fixed: 111 known affected: 1 known not affected: 15 | 2026-06-28T08:30:19+00:00 | Vulnerability · Source |
| CVE-2026-25598 | redhat_vex | harden-runner: Harden-Runner: Outbound network connections can evade audit logging via specific socket system calls. | known affected: 12 known not affected: 8 | 2026-06-28T08:30:18+00:00 | Vulnerability · Source |
| CVE-2023-27539 | redhat_vex | rubygem-rack: denial of service in header parsing | fixed: 92 known affected: 5 known not affected: 2043 | 2026-06-28T08:30:18+00:00 | Vulnerability · Source |
| CVE-2026-27588 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddyhttp: Caddy: Access control bypass due to case-sensitive host matching | known not affected: 1 | 2026-06-28T08:30:17+00:00 | Vulnerability · Source |
| CVE-2026-27589 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddyhttp: Caddy: Unauthorized configuration modification via cross-origin requests to the admin API | known not affected: 1 | 2026-06-28T08:30:17+00:00 | Vulnerability · Source |
| CVE-2026-27587 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddyhttp: Caddy: Access control bypass due to improper handling of percent-escape sequences in HTTP path matcher | known not affected: 1 | 2026-06-28T08:30:17+00:00 | Vulnerability · Source |
| CVE-2015-5233 | redhat_vex | foreman: reports show/destroy not restricted by host authorization | fixed: 179 known affected: 2 | 2026-06-28T08:30:16+00:00 | Vulnerability · Source |
| CVE-2014-9162 | redhat_vex | flash-plugin: Information disclosure vulnerability (APSB14-27) | fixed: 5 | 2026-06-28T08:30:15+00:00 | Vulnerability · Source |
| CVE-2014-9164 | redhat_vex | flash-plugin: Multiple code-execution flaws (APSB14-27) | fixed: 5 | 2026-06-28T08:30:15+00:00 | Vulnerability · Source |