VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299464 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-1288 | redhat_vex | chromium-browser: Spell checking dictionaries fetched over HTTP in unspecified | fixed: 12 | 2026-06-28T08:26:23+00:00 | Vulnerability · Source |
| CVE-2015-1351 | redhat_vex | php: use after free in opcache extension | fixed: 394 known affected: 30 known not affected: 112 | 2026-06-28T08:26:23+00:00 | Vulnerability · Source |
| CVE-2015-1248 | redhat_vex | chromium-browser: SafeBrowsing bypass | fixed: 15 | 2026-06-28T08:26:22+00:00 | Vulnerability · Source |
| CVE-2015-1212 | redhat_vex | chromium-browser: various security fixes in Chrome 40.0.2214.111 | fixed: 15 known affected: 9 | 2026-06-28T08:26:22+00:00 | Vulnerability · Source |
| CVE-2015-1251 | redhat_vex | chromium-browser: Use-after-free in Speech. | fixed: 12 | 2026-06-28T08:26:22+00:00 | Vulnerability · Source |
| CVE-2015-0391 | redhat_vex | mysql: unspecified vulnerability related to Server:DDL (CPU Jan 2015) | fixed: 270 known affected: 11 | 2026-06-28T08:26:20+00:00 | Vulnerability · Source |
| CVE-2015-0501 | redhat_vex | mysql: unspecified vulnerability related to Server:Compiling (CPU April 2015) | fixed: 358 known affected: 5 known not affected: 9 under investigation: 9 | 2026-06-28T08:26:19+00:00 | Vulnerability · Source |
| CVE-2015-0374 | redhat_vex | mysql: unspecified vulnerability related to Server:Security:Privileges:Foreign Key (CPU Jan 2015) | fixed: 333 under investigation: 9 | 2026-06-28T08:26:17+00:00 | Vulnerability · Source |
| CVE-2015-0381 | redhat_vex | mysql: unspecified vulnerability related to Server:Replication (CPU Jan 2015) | fixed: 333 under investigation: 9 | 2026-06-28T08:26:17+00:00 | Vulnerability · Source |
| CVE-2015-0352 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-06 | fixed: 5 | 2026-06-28T08:26:16+00:00 | Vulnerability · Source |
| CVE-2015-0203 | redhat_vex | qpid-cpp: 3 qpidd DoS issues in AMQP 0-10 protocol handling | fixed: 1231 known affected: 14 | 2026-06-28T08:26:15+00:00 | Vulnerability · Source |
| CVE-2015-0257 | redhat_vex | ovirt-engine-dwh: incorrect permissions on plugin file containing passwords | fixed: 20 | 2026-06-28T08:26:13+00:00 | Vulnerability · Source |
| CVE-2015-0224 | redhat_vex | qpid-cpp: AMQP 0-10 protocol sequence-set maximal range DoS (incomplete CVE-2015-0203 fix) | fixed: 1231 known affected: 14 | 2026-06-28T08:26:12+00:00 | Vulnerability · Source |
| CVE-2015-0232 | redhat_vex | php: Free called on unitialized pointer in exif.c | fixed: 849 known affected: 55 known not affected: 31 | 2026-06-28T08:26:12+00:00 | Vulnerability · Source |
| CVE-2014-8443 | redhat_vex | flash-plugin: Multiple code-execution flaws (APSB14-27) | fixed: 5 | 2026-06-28T08:26:11+00:00 | Vulnerability · Source |
| CVE-2014-8891 | redhat_vex | JDK: unspecified full Java sandbox bypass fixed in Feb 2015 update | fixed: 388 | 2026-06-28T08:26:11+00:00 | Vulnerability · Source |
| CVE-2014-8441 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-24) | fixed: 6 | 2026-06-28T08:26:10+00:00 | Vulnerability · Source |
| CVE-2014-8137 | redhat_vex | jasper: double-free in in jas_iccattrval_destroy() (oCERT-2014-012) | fixed: 144 known not affected: 1 | 2026-06-28T08:26:09+00:00 | Vulnerability · Source |
| CVE-2014-8437 | redhat_vex | flash-plugin: information disclosure leading to session token leak (APSB14-24) | fixed: 6 | 2026-06-28T08:26:09+00:00 | Vulnerability · Source |
| CVE-2014-8440 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-24) | fixed: 6 | 2026-06-28T08:26:09+00:00 | Vulnerability · Source |
| CVE-2014-8136 | redhat_vex | libvirt: local denial of service in qemu/qemu_driver.c | fixed: 153 known affected: 1 under investigation: 7 | 2026-06-28T08:26:09+00:00 | Vulnerability · Source |
| CVE-2026-27572 | redhat_vex | wasmtime: Wasmtime: Denial of Service via excessive HTTP header fields | known affected: 1 | 2026-06-28T08:26:08+00:00 | Vulnerability · Source |
| CVE-2026-27195 | redhat_vex | wasmtime: Wasmtime: Denial of Service via repeated async function calls | known affected: 1 | 2026-06-28T08:26:08+00:00 | Vulnerability · Source |
| CVE-2014-7906 | redhat_vex | chromium-browser: Use-after-free in pepper plugins | fixed: 18 | 2026-06-28T08:26:07+00:00 | Vulnerability · Source |
| CVE-2014-7928 | redhat_vex | chromium-browser: memory corruption in V8 | fixed: 15 | 2026-06-28T08:26:07+00:00 | Vulnerability · Source |
| CVE-2014-7851 | redhat_vex | ovirt-engine-webadmin: does not invalidate all sessions upon logout | fixed: 18 | 2026-06-28T08:26:06+00:00 | Vulnerability · Source |
| CVE-2014-7815 | redhat_vex | qemu: vnc: insufficient bits_per_pixel from the client sanitization | fixed: 72 known affected: 6 known not affected: 1 | 2026-06-28T08:26:05+00:00 | Vulnerability · Source |
| CVE-2014-6519 | redhat_vex | OpenJDK: missing BootstrapMethods bounds check (Hotspot, 8041717) | fixed: 420 known not affected: 20 | 2026-06-28T08:26:05+00:00 | Vulnerability · Source |
| CVE-2014-6507 | redhat_vex | mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014) | fixed: 278 under investigation: 9 | 2026-06-28T08:26:04+00:00 | Vulnerability · Source |
| CVE-2014-6469 | redhat_vex | mysql: unspecified vulnerability related to SERVER:OPTIMIZER (CPU October 2014) | fixed: 278 under investigation: 9 | 2026-06-28T08:26:03+00:00 | Vulnerability · Source |
| CVE-2014-6506 | redhat_vex | OpenJDK: insufficient permission checks when setting resource bundle on system logger (Libraries, 8041564) | fixed: 961 | 2026-06-28T08:26:03+00:00 | Vulnerability · Source |
| CVE-2014-4218 | redhat_vex | OpenJDK: Clone interfaces passed to proxy methods (Libraries, 8035009) | fixed: 840 | 2026-06-28T08:26:02+00:00 | Vulnerability · Source |
| CVE-2014-6464 | redhat_vex | mysql: unspecified vulnerability related to SERVER:INNODB DML FOREIGN KEYS (CPU October 2014) | fixed: 278 under investigation: 9 | 2026-06-28T08:26:01+00:00 | Vulnerability · Source |
| CVE-2014-4219 | redhat_vex | OpenJDK: Bytecode verification does not prevent ctor calls to this() and super() (Hotspot, 8035119) | fixed: 840 | 2026-06-28T08:25:59+00:00 | Vulnerability · Source |
| CVE-2014-4671 | redhat_vex | flash-plugin: vulnerable JSONP callback APIs issue (APSB14-17) | fixed: 5 | 2026-06-28T08:25:59+00:00 | Vulnerability · Source |
| CVE-2014-3619 | redhat_vex | glusterfs: fragment header infinite loop DoS | fixed: 126 known affected: 23 | 2026-06-28T08:25:53+00:00 | Vulnerability · Source |
| CVE-2014-3653 | redhat_vex | foreman: cross-site scripting (XSS) flaw in template preview screen | fixed: 1929 known affected: 2 | 2026-06-28T08:25:53+00:00 | Vulnerability · Source |
| CVE-2014-3561 | redhat_vex | ovirt-engine-log-collector: database password disclosed in process listing | fixed: 2 | 2026-06-28T08:25:52+00:00 | Vulnerability · Source |
| CVE-2014-3587 | redhat_vex | file: incomplete fix for CVE-2012-1571 in cdf_read_property_info | fixed: 1133 known not affected: 4 | 2026-06-28T08:25:52+00:00 | Vulnerability · Source |
| CVE-2014-3585 | redhat_vex | redhat-upgrade-tool: does not check GPG signatures on package installation | fixed: 12 | 2026-06-28T08:25:51+00:00 | Vulnerability · Source |
| CVE-2014-3483 | redhat_vex | rubygem-activerecord: SQL injection vulnerability in 'range' quoting | fixed: 15 known not affected: 8 | 2026-06-28T08:25:43+00:00 | Vulnerability · Source |
| CVE-2025-71154 | redhat_vex | kernel: net: usb: rtl8150: fix memory leak on usb_submit_urb() failure | known affected: 274 | 2026-06-28T08:25:41+00:00 | Vulnerability · Source |
| CVE-2014-2428 | redhat_vex | JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment) | fixed: 484 known not affected: 22 | 2026-06-28T08:25:38+00:00 | Vulnerability · Source |
| CVE-2026-22994 | redhat_vex | kernel: Kernel: Resource leak in BPF via missing buffer conversion call | known affected: 184 known not affected: 90 | 2026-06-28T08:25:37+00:00 | Vulnerability · Source |
| CVE-2026-22983 | redhat_vex | kernel: net: do not write to msg_get_inq in callee | known affected: 14 known not affected: 260 | 2026-06-28T08:25:37+00:00 | Vulnerability · Source |
| CVE-2014-0555 | redhat_vex | flash-plugin: multiple code execution or security bypass flaws (APSB14-21) | fixed: 5 | 2026-06-28T08:25:36+00:00 | Vulnerability · Source |
| CVE-2014-0549 | redhat_vex | flash-plugin: multiple code execution or security bypass flaws (APSB14-21) | fixed: 5 | 2026-06-28T08:25:35+00:00 | Vulnerability · Source |
| CVE-2014-0460 | redhat_vex | OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731) | fixed: 856 known not affected: 7 | 2026-06-28T08:25:34+00:00 | Vulnerability · Source |
| CVE-2014-0373 | redhat_vex | OpenJDK: SnmpStatusException handling issues (Serviceability, 7068126) | fixed: 690 known not affected: 21 | 2026-06-28T08:25:33+00:00 | Vulnerability · Source |
| CVE-2019-17596 | redhat_vex | golang: invalid public key causes panic in dsa.Verify | fixed: 73 known affected: 62 known not affected: 44 | 2026-06-28T08:25:31+00:00 | Vulnerability · Source |