VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299459 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-1283 | redhat_vex | chromium-browser: Heap-buffer-overflow in expat. | fixed: 12 | 2026-06-28T08:30:14+00:00 | Vulnerability · Source |
| CVE-2014-9130 | redhat_vex | libyaml: assert failure when processing wrapped strings | fixed: 147 known affected: 7 known not affected: 3 | 2026-06-28T08:30:14+00:00 | Vulnerability · Source |
| CVE-2015-1280 | redhat_vex | chromium-browser: Memory corruption in skia | fixed: 12 | 2026-06-28T08:30:14+00:00 | Vulnerability · Source |
| CVE-2015-1217 | redhat_vex | chromium-browser: Type confusion in v8 bindings | fixed: 15 | 2026-06-28T08:30:13+00:00 | Vulnerability · Source |
| CVE-2015-1277 | redhat_vex | chromium-browser: Use-after-free in accessibility. | fixed: 12 | 2026-06-28T08:30:13+00:00 | Vulnerability · Source |
| CVE-2026-23736 | redhat_vex | seroval: seroval: Prototype pollution via improper input validation during JSON deserialization | known not affected: 1 | 2026-06-28T08:30:12+00:00 | Vulnerability · Source |
| CVE-2016-7418 | redhat_vex | php: Null pointer dereference in php_wddx_push_element | fixed: 254 known affected: 140 | 2026-06-28T08:30:12+00:00 | Vulnerability · Source |
| CVE-2016-7417 | redhat_vex | php: Missing type check when unserializing SplArray | fixed: 254 known affected: 140 | 2026-06-28T08:30:11+00:00 | Vulnerability · Source |
| CVE-2026-27699 | redhat_vex | basic-ftp: basic-ftp: File overwrite due to path traversal | known not affected: 1 | 2026-06-28T08:30:10+00:00 | Vulnerability · Source |
| CVE-2026-27888 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF | fixed: 2 known affected: 2 known not affected: 209 | 2026-06-28T08:30:09+00:00 | Vulnerability · Source |
| CVE-2026-27626 | redhat_vex | olivetin: OliveTin: Remote Code Execution via shell metacharacter injection and webhook processing | known not affected: 1 | 2026-06-28T08:30:09+00:00 | Vulnerability · Source |
| CVE-2025-7777 | redhat_vex | mirror-registry: host header injection in mirror-registry | known affected: 1 | 2026-06-28T08:30:08+00:00 | Vulnerability · Source |
| CVE-2025-5198 | redhat_vex | stackrox: XSS in Stackrox | known affected: 10 | 2026-06-28T08:30:08+00:00 | Vulnerability · Source |
| CVE-2026-26271 | redhat_vex | freerdp: FreeRDP: Denial of Service via crafted RDP Window Icon data | known affected: 31 | 2026-06-28T08:30:07+00:00 | Vulnerability · Source |
| CVE-2012-5676 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-27) | fixed: 5 | 2026-06-28T08:30:07+00:00 | Vulnerability · Source |
| CVE-2025-66400 | redhat_vex | mdast-util-to-hast: mdast-util-to-hast: Markdown code elements can appear as regular page content | known affected: 30 | 2026-06-28T08:30:05+00:00 | Vulnerability · Source |
| CVE-2014-0539 | redhat_vex | flash-plugin: security protection bypass (APSB14-17) | fixed: 5 | 2026-06-28T08:30:04+00:00 | Vulnerability · Source |
| CVE-2025-57347 | redhat_vex | dagre-d3-es: dagre-d3-es prototype pollution | known not affected: 1 | 2026-06-28T08:30:02+00:00 | Vulnerability · Source |
| CVE-2013-5324 | redhat_vex | flash-plugin: multiple code execution flaws (APSB13-21) | fixed: 4 | 2026-06-28T08:29:57+00:00 | Vulnerability · Source |
| CVE-2010-0199 | redhat_vex | Acroread: Multiple code execution flaws (APSB10-09) | fixed: 12 | 2026-06-28T08:29:57+00:00 | Vulnerability · Source |
| CVE-2025-9907 | redhat_vex | event-driven-ansible: Event Stream Test Mode Exposes Sensitive Headers in AAP EDA | fixed: 324 known not affected: 425 | 2026-06-28T08:29:57+00:00 | Vulnerability · Source |
| CVE-2009-3877 | redhat_vex | OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877 | fixed: 644 | 2026-06-28T08:29:54+00:00 | Vulnerability · Source |
| CVE-2009-3874 | redhat_vex | OpenJDK ImageI/O JPEG heap overflow (6874643) | fixed: 640 | 2026-06-28T08:29:54+00:00 | Vulnerability · Source |
| CVE-2009-3881 | redhat_vex | OpenJDK resurrected classloaders can still have children (6636650) | fixed: 168 | 2026-06-28T08:29:54+00:00 | Vulnerability · Source |
| CVE-2009-3797 | redhat_vex | flash-plugin: multiple code execution flaws (APSB09-19) (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800) | fixed: 2 | 2026-06-28T08:29:53+00:00 | Vulnerability · Source |
| CVE-2009-3793 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T08:29:52+00:00 | Vulnerability · Source |
| CVE-2009-3722 | redhat_vex | KVM: Check cpl before emulating debug register access | fixed: 15 | 2026-06-28T08:29:51+00:00 | Vulnerability · Source |
| CVE-2009-2721 | redhat_vex | JDK Multiple unspecified vulnerabilities in Provider class | fixed: 66 | 2026-06-28T08:29:47+00:00 | Vulnerability · Source |
| CVE-2009-2720 | redhat_vex | JDK DoS with Swing Synthcontext implementation | fixed: 138 | 2026-06-28T08:29:46+00:00 | Vulnerability · Source |
| CVE-2009-2671 | redhat_vex | OpenJDK Proxy mechanism information leaks (6801071) | fixed: 434 | 2026-06-28T08:29:45+00:00 | Vulnerability · Source |
| CVE-2009-1862 | redhat_vex | flash-plugin: Remote code execution vulnerability via malicious SWF (Shockwave Flash) content | fixed: 10 | 2026-06-28T08:29:44+00:00 | Vulnerability · Source |
| CVE-2009-1857 | redhat_vex | acroread: multiple security fixes in version 8.1.6 (APSB09-07) | fixed: 20 | 2026-06-28T08:29:42+00:00 | Vulnerability · Source |
| CVE-2009-1858 | redhat_vex | acroread: multiple security fixes in version 8.1.6 (APSB09-07) | fixed: 20 | 2026-06-28T08:29:42+00:00 | Vulnerability · Source |
| CVE-2009-1099 | redhat_vex | OpenJDK: Type1 font processing buffer overflow vulnerability | fixed: 408 | 2026-06-28T08:29:42+00:00 | Vulnerability · Source |
| CVE-2009-1103 | redhat_vex | OpenJDK: Files disclosure, arbitrary code execution via "deserializing applets" (6646860) | fixed: 408 | 2026-06-28T08:29:39+00:00 | Vulnerability · Source |
| CVE-2009-1062 | redhat_vex | acroread: multiple JBIG2-related security flaws | fixed: 20 | 2026-06-28T08:29:38+00:00 | Vulnerability · Source |
| CVE-2009-1061 | redhat_vex | acroread: multiple JBIG2-related security flaws | fixed: 20 | 2026-06-28T08:29:37+00:00 | Vulnerability · Source |
| CVE-2023-38325 | redhat_vex | python-cryptography: SSH certificate encoding/parsing incompatibility with OpenSSH | known not affected: 91 | 2026-06-28T08:29:37+00:00 | Vulnerability · Source |
| CVE-2016-4538 | redhat_vex | php: bcpowmod accepts negative scale causing heap buffer overflow corrupting _one_ definition | fixed: 251 known affected: 110 | 2026-06-28T08:29:30+00:00 | Vulnerability · Source |
| CVE-2016-8646 | redhat_vex | kernel: Oops in shash_async_export() | fixed: 207 known not affected: 15 | 2026-06-28T08:29:30+00:00 | Vulnerability · Source |
| CVE-2013-4491 | redhat_vex | rubygem-actionpack: i18n missing translation XSS | fixed: 37 known affected: 4 known not affected: 4 | 2026-06-28T08:29:29+00:00 | Vulnerability · Source |
| CVE-2016-4190 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T08:29:28+00:00 | Vulnerability · Source |
| CVE-2016-4188 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T08:29:28+00:00 | Vulnerability · Source |
| CVE-2016-4180 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-25 | fixed: 5 | 2026-06-28T08:29:28+00:00 | Vulnerability · Source |
| CVE-2016-1001 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-08 | fixed: 5 | 2026-06-28T08:29:27+00:00 | Vulnerability · Source |
| CVE-2015-8874 | redhat_vex | gd: gdImageFillToBorder deep recursion leading to stack overflow | fixed: 251 known affected: 118 | 2026-06-28T08:29:27+00:00 | Vulnerability · Source |
| CVE-2016-2512 | redhat_vex | python-django: Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth | fixed: 19 known affected: 3 known not affected: 8 | 2026-06-28T08:29:27+00:00 | Vulnerability · Source |
| CVE-2016-1000340 | redhat_vex | bouncycastle: Carry propagation bug in math.raw.Nat??? class | fixed: 1111 known affected: 5 known not affected: 7 | 2026-06-28T08:29:26+00:00 | Vulnerability · Source |
| CVE-2016-0971 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-04 | fixed: 5 | 2026-06-28T08:29:25+00:00 | Vulnerability · Source |
| CVE-2016-0970 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-04 | fixed: 5 | 2026-06-28T08:29:25+00:00 | Vulnerability · Source |