VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304379 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2021-2215 | redhat_vex | mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:43:28+00:00 | Vulnerability · Source |
| CVE-2026-5185 | redhat_vex | stb_image: Nothings stb_image: Heap-based buffer overflow in GIF file handler | known not affected: 1 | 2026-06-28T07:43:27+00:00 | Vulnerability · Source |
| CVE-2026-5186 | redhat_vex | Nothings stb: Nothings stb: Denial of service and information disclosure via double free in GIF handler | known not affected: 1 | 2026-06-28T07:43:27+00:00 | Vulnerability · Source |
| CVE-2021-2193 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:43:25+00:00 | Vulnerability · Source |
| CVE-2021-2180 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2021) | fixed: 155 known affected: 22 known not affected: 89 | 2026-06-28T07:43:25+00:00 | Vulnerability · Source |
| CVE-2021-2196 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:43:25+00:00 | Vulnerability · Source |
| CVE-2026-5124 | redhat_vex | github.com/osrg/gobgp: osrg GoBGP: Information disclosure via BGP Header Handler | known not affected: 1 | 2026-06-28T07:43:25+00:00 | Vulnerability · Source |
| CVE-2021-2194 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2021) | fixed: 855 known affected: 22 known not affected: 50 | 2026-06-28T07:43:25+00:00 | Vulnerability · Source |
| CVE-2026-5122 | redhat_vex | github.com/osrg/gobgp: osrg GoBGP: Improper access controls via domainNameLen argument manipulation | known not affected: 1 | 2026-06-28T07:43:25+00:00 | Vulnerability · Source |
| CVE-2021-2203 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:43:25+00:00 | Vulnerability · Source |
| CVE-2026-5123 | redhat_vex | github.com/osrg/gobgp: osrg GoBGP: Denial of service via off-by-one error | known not affected: 1 | 2026-06-28T07:43:25+00:00 | Vulnerability · Source |
| CVE-2021-2179 | redhat_vex | mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:43:24+00:00 | Vulnerability · Source |
| CVE-2021-21781 | redhat_vex | kernel: arm: SIGPAGE information disclosure vulnerability | fixed: 120 known affected: 1 known not affected: 164 | 2026-06-28T07:43:24+00:00 | Vulnerability · Source |
| CVE-2021-2171 | redhat_vex | mysql: Server: Replication unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:43:23+00:00 | Vulnerability · Source |
| CVE-2021-21707 | redhat_vex | php: Special character breaks path in xml parsing | fixed: 423 known affected: 101 known not affected: 26 | 2026-06-28T07:43:22+00:00 | Vulnerability · Source |
| CVE-2021-2172 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:43:22+00:00 | Vulnerability · Source |
| CVE-2021-21702 | redhat_vex | php: NULL pointer dereference in SoapClient | fixed: 514 known affected: 150 known not affected: 26 | 2026-06-28T07:43:21+00:00 | Vulnerability · Source |
| CVE-2021-21703 | redhat_vex | php: Local privilege escalation via PHP-FPM | fixed: 423 known affected: 101 known not affected: 26 | 2026-06-28T07:43:21+00:00 | Vulnerability · Source |
| CVE-2021-21705 | redhat_vex | php: SSRF bypass in FILTER_VALIDATE_URL | fixed: 514 known affected: 101 known not affected: 26 | 2026-06-28T07:43:21+00:00 | Vulnerability · Source |
| CVE-2021-2170 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:43:20+00:00 | Vulnerability · Source |
| CVE-2026-5089 | redhat_vex | perl-YAML-Syck: perl-YAML-Syck: Information disclosure via out-of-bounds read in base60 parsing | known affected: 3 | 2026-06-28T07:43:20+00:00 | Vulnerability · Source |
| CVE-2026-5091 | redhat_vex | perl-Catalyst-Plugin-Authentication: Catalyst::Plugin::Authentication: Information disclosure via timing attack | known not affected: 1 | 2026-06-28T07:43:20+00:00 | Vulnerability · Source |
| CVE-2026-5037 | redhat_vex | mxml: mxml: Denial of Service via stack-based buffer overflow in index_sort | known not affected: 1 | 2026-06-28T07:43:19+00:00 | Vulnerability · Source |
| CVE-2026-5052 | redhat_vex | Vault: Vault: Information disclosure via Server-Side Request Forgery in ACME challenge validation | known affected: 13 | 2026-06-28T07:43:18+00:00 | Vulnerability · Source |
| CVE-2021-2166 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Apr 2021) | fixed: 889 known affected: 22 known not affected: 24 | 2026-06-28T07:43:18+00:00 | Vulnerability · Source |
| CVE-2021-2164 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:43:16+00:00 | Vulnerability · Source |
| CVE-2026-50266 | redhat_vex | openstack-neutron: OpenStack Neutron: Network spoofing via incorrect port RBAC policies | known affected: 25 | 2026-06-28T07:43:16+00:00 | Vulnerability · Source |
| CVE-2023-49582 | redhat_vex | APR: Lax permissions in Apache Portable Runtime shared memory | known affected: 2 known not affected: 21 | 2026-06-28T07:43:16+00:00 | Vulnerability · Source |
| CVE-2021-2163 | redhat_vex | OpenJDK: Incomplete enforcement of JAR signing disabled algorithms (Libraries, 8249906) | fixed: 684 known affected: 4 | 2026-06-28T07:43:15+00:00 | Vulnerability · Source |
| CVE-2022-45935 | redhat_vex | apache-james: Temporary File Information Disclosure | known not affected: 18 | 2026-06-28T07:43:14+00:00 | Vulnerability · Source |
| CVE-2021-2146 | redhat_vex | mysql: Server: Options unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:43:13+00:00 | Vulnerability · Source |
| CVE-2026-49762 | redhat_vex | elixir: Elixir Version module: Denial of Service via uncontrolled resource consumption with crafted version string | known affected: 3 | 2026-06-28T07:43:12+00:00 | Vulnerability · Source |
| CVE-2023-52594 | redhat_vex | kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() | fixed: 709 known affected: 64 known not affected: 8 | 2026-06-28T07:43:10+00:00 | Vulnerability · Source |
| CVE-2026-4985 | redhat_vex | cgif: dloebl CGIF: Denial of Service via integer overflow in GIF image handling | known not affected: 1 | 2026-06-28T07:43:10+00:00 | Vulnerability · Source |
| CVE-2026-49299 | redhat_vex | openstack-neutron: OpenStack Neutron: Unauthorized tag modification due to policy enforcement mismatch | known affected: 25 | 2026-06-28T07:43:07+00:00 | Vulnerability · Source |
| CVE-2026-4933 | redhat_vex | Unpublished Node Permissions: Drupal: Drupal Unpublished Node Permissions: Information disclosure via incorrect authorization | known not affected: 1 | 2026-06-28T07:43:07+00:00 | Vulnerability · Source |
| CVE-2026-48847 | redhat_vex | roundcubemail: arbitrary file deletion via redis/memcache session poisoning bypass | known not affected: 1 | 2026-06-28T07:43:07+00:00 | Vulnerability · Source |
| CVE-2026-49214 | redhat_vex | guzzlehttp/psr7: `guzzlehttp/psr7`: Request Smuggling and Cache Poisoning via HTTP Header Injection | known not affected: 1 | 2026-06-28T07:43:06+00:00 | Vulnerability · Source |
| CVE-2024-38629 | redhat_vex | kernel: dmaengine: idxd: Avoid unnecessary destruction of file_ida | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T07:43:05+00:00 | Vulnerability · Source |
| CVE-2026-48998 | redhat_vex | guzzlehttp/psr7: guzzlehttp/psr7: Information disclosure via improper Host header validation | known not affected: 1 | 2026-06-28T07:43:05+00:00 | Vulnerability · Source |
| CVE-2026-48920 | redhat_vex | jenkins-email-extension-plugin: Jenkins Email Extension Plugin: Information disclosure via arbitrary file read | known affected: 3 | 2026-06-28T07:43:04+00:00 | Vulnerability · Source |
| CVE-2026-48848 | redhat_vex | roundcubemail: CSS injection via an SVG document that has an animate element with the attributeName attribute | known not affected: 1 | 2026-06-28T07:43:03+00:00 | Vulnerability · Source |
| CVE-2026-48700 | redhat_vex | pcmanfm-qt: PCManFM-Qt: Arbitrary code execution via crafted URI | known not affected: 1 | 2026-06-28T07:43:03+00:00 | Vulnerability · Source |
| CVE-2026-48844 | redhat_vex | roundcubemail: code injection via insecure LDAP autovalues option | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48831 | redhat_vex | wine: Wine: Sandbox escape via blind execution of EXE files | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48840 | redhat_vex | exim: Exim: Information disclosure via mishandled short payloads in proxy configurations | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48827 | redhat_vex | org.apache.sshd/sshd-git: Apache MINA SSHD: Path Traversal Vulnerability Allows Access to Unauthorized Git Repositories | known affected: 2 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48842 | redhat_vex | roundcubemail: pre-auth SQL injection in the virtuser_query plugin via a preg_replace() backslash escape bypass | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48845 | redhat_vex | roundcubemail: privilege escalation via remote image blocking bypass | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48851 | redhat_vex | PuTTY: TELNET session data is marked with trust sigils after authenticating to a proxy | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |