VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304636 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-40527 | redhat_vex | radare2: radare2: Arbitrary code execution via crafted ELF binaries with DWARF parameter names | known not affected: 1 | 2026-06-28T07:33:21+00:00 | Vulnerability · Source |
| CVE-2026-40517 | redhat_vex | radare2: radare2: Arbitrary OS command execution via PDB parser command injection | known not affected: 1 | 2026-06-28T07:33:21+00:00 | Vulnerability · Source |
| CVE-2020-16120 | redhat_vex | kernel: incorrect unprivileged overlayfs permission checking may lead to information disclosure | known affected: 1 known not affected: 92 | 2026-06-28T07:33:21+00:00 | Vulnerability · Source |
| CVE-2026-40490 | redhat_vex | async-http-client: AsyncHttpClient: Credential leakage via improper handling of authorization headers during redirects | known affected: 7 | 2026-06-28T07:33:20+00:00 | Vulnerability · Source |
| CVE-2026-40466 | redhat_vex | org.apache.activemq/activemq-all: org.apache.activemq/activemq-broker: Apache ActiveMQ: Arbitrary code execution via improper input validation in HTTP Discovery transport | known affected: 1 known not affected: 13 | 2026-06-28T07:33:20+00:00 | Vulnerability · Source |
| CVE-2020-16016 | redhat_vex | chromium-browser: Inappropriate implementation in base | fixed: 14 | 2026-06-28T07:33:19+00:00 | Vulnerability · Source |
| CVE-2026-40396 | redhat_vex | varnish: Varnish Cache: Denial of Service via workspace overflow during HTTP/1 pipelining | known not affected: 14 | 2026-06-28T07:33:19+00:00 | Vulnerability · Source |
| CVE-2020-16013 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | fixed: 14 | 2026-06-28T07:33:19+00:00 | Vulnerability · Source |
| CVE-2020-15999 | redhat_vex | freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png | fixed: 162 known not affected: 10 | 2026-06-28T07:33:18+00:00 | Vulnerability · Source |
| CVE-2020-16002 | redhat_vex | chromium-browser: Use after free in PDFium | fixed: 14 | 2026-06-28T07:33:18+00:00 | Vulnerability · Source |
| CVE-2020-15991 | redhat_vex | chromium-browser: Use after free in password manager | fixed: 14 | 2026-06-28T07:33:18+00:00 | Vulnerability · Source |
| CVE-2020-16001 | redhat_vex | chromium-browser: Use after free in media | fixed: 14 | 2026-06-28T07:33:18+00:00 | Vulnerability · Source |
| CVE-2020-15992 | redhat_vex | chromium-browser: Insufficient policy enforcement in networking | fixed: 14 | 2026-06-28T07:33:18+00:00 | Vulnerability · Source |
| CVE-2020-15989 | redhat_vex | chromium-browser: Uninitialized use in PDFium | fixed: 14 | 2026-06-28T07:33:17+00:00 | Vulnerability · Source |
| CVE-2020-15990 | redhat_vex | chromium-browser: Use after free in autofill | fixed: 14 | 2026-06-28T07:33:17+00:00 | Vulnerability · Source |
| CVE-2020-15988 | redhat_vex | chromium-browser: Insufficient policy enforcement in downloads | fixed: 14 | 2026-06-28T07:33:17+00:00 | Vulnerability · Source |
| CVE-2020-15987 | redhat_vex | chromium-browser: Use after free in WebRTC | fixed: 14 | 2026-06-28T07:33:17+00:00 | Vulnerability · Source |
| CVE-2020-15981 | redhat_vex | chromium-browser: Out of bounds read in audio | fixed: 14 | 2026-06-28T07:33:16+00:00 | Vulnerability · Source |
| CVE-2020-15986 | redhat_vex | chromium-browser: Integer overflow in media | fixed: 14 | 2026-06-28T07:33:16+00:00 | Vulnerability · Source |
| CVE-2020-15980 | redhat_vex | chromium-browser: Insufficient policy enforcement in Intents | fixed: 14 | 2026-06-28T07:33:16+00:00 | Vulnerability · Source |
| CVE-2020-15983 | redhat_vex | chromium-browser: Insufficient data validation in webUI | fixed: 14 | 2026-06-28T07:33:16+00:00 | Vulnerability · Source |
| CVE-2020-15978 | redhat_vex | chromium-browser: Insufficient data validation in navigation | fixed: 14 | 2026-06-28T07:33:16+00:00 | Vulnerability · Source |
| CVE-2020-15984 | redhat_vex | chromium-browser: Insufficient policy enforcement in Omnibox | fixed: 14 | 2026-06-28T07:33:16+00:00 | Vulnerability · Source |
| CVE-2020-15985 | redhat_vex | chromium-browser: Inappropriate implementation in Blink | fixed: 14 | 2026-06-28T07:33:16+00:00 | Vulnerability · Source |
| CVE-2020-15979 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | fixed: 14 | 2026-06-28T07:33:15+00:00 | Vulnerability · Source |
| CVE-2020-15965 | redhat_vex | chromium-browser: Out of bounds write in V8 | fixed: 14 | 2026-06-28T07:33:15+00:00 | Vulnerability · Source |
| CVE-2020-15976 | redhat_vex | chromium-browser: Use after free in WebXR | fixed: 14 | 2026-06-28T07:33:15+00:00 | Vulnerability · Source |
| CVE-2020-15977 | redhat_vex | chromium-browser: Insufficient data validation in dialogs | fixed: 14 | 2026-06-28T07:33:15+00:00 | Vulnerability · Source |
| CVE-2020-15974 | redhat_vex | chromium-browser: Integer overflow in Blink | fixed: 14 | 2026-06-28T07:33:14+00:00 | Vulnerability · Source |
| CVE-2020-15969 | redhat_vex | chromium-browser: Use after free in WebRTC | fixed: 149 known affected: 2 | 2026-06-28T07:33:14+00:00 | Vulnerability · Source |
| CVE-2020-15972 | redhat_vex | chromium-browser: Use after free in audio | fixed: 14 | 2026-06-28T07:33:14+00:00 | Vulnerability · Source |
| CVE-2020-15970 | redhat_vex | chromium-browser: Use after free in NFC | fixed: 14 | 2026-06-28T07:33:14+00:00 | Vulnerability · Source |
| CVE-2020-15975 | redhat_vex | chromium-browser: Integer overflow in SwiftShader | fixed: 14 | 2026-06-28T07:33:14+00:00 | Vulnerability · Source |
| CVE-2020-15963 | redhat_vex | chromium-browser: Insufficient policy enforcement in extensions | fixed: 14 | 2026-06-28T07:33:13+00:00 | Vulnerability · Source |
| CVE-2020-15968 | redhat_vex | chromium-browser: Use after free in Blink | fixed: 14 | 2026-06-28T07:33:13+00:00 | Vulnerability · Source |
| CVE-2020-15967 | redhat_vex | chromium-browser: Use after free in payments | fixed: 14 | 2026-06-28T07:33:12+00:00 | Vulnerability · Source |
| CVE-2020-15966 | redhat_vex | chromium-browser: Insufficient policy enforcement in extensions | fixed: 14 | 2026-06-28T07:33:12+00:00 | Vulnerability · Source |
| CVE-2020-15964 | redhat_vex | chromium-browser: Insufficient data validation in media | fixed: 14 | 2026-06-28T07:33:11+00:00 | Vulnerability · Source |
| CVE-2026-40347 | redhat_vex | python-multipart: Python-Multipart: Denial of Service via crafted multipart/form-data requests | known affected: 39 | 2026-06-28T07:33:07+00:00 | Vulnerability · Source |
| CVE-2020-15801 | redhat_vex | python: sys.path allowing code to be loaded from arbitrary locations | known not affected: 172 | 2026-06-28T07:33:07+00:00 | Vulnerability · Source |
| CVE-2026-40342 | redhat_vex | Firebird: Firebird: Arbitrary code execution via path traversal in external engine plugin loader | known not affected: 1 | 2026-06-28T07:33:07+00:00 | Vulnerability · Source |
| CVE-2020-15852 | redhat_vex | xen: Linux ioperm bitmap context switching issues | known not affected: 104 | 2026-06-28T07:33:07+00:00 | Vulnerability · Source |
| CVE-2026-40290 | redhat_vex | optee_os: privilege escalation due to user-after-free race condition in shared memory teardown | known not affected: 1 | 2026-06-28T07:33:03+00:00 | Vulnerability · Source |
| CVE-2026-40299 | redhat_vex | next-intl: next-intl: Open Redirect vulnerability allows off-site redirection via crafted URLs | known affected: 3 known not affected: 2 | 2026-06-28T07:33:03+00:00 | Vulnerability · Source |
| CVE-2026-40264 | redhat_vex | OpenBao: OpenBao: Unauthorized token management by privileged administrator | known not affected: 1 | 2026-06-28T07:33:03+00:00 | Vulnerability · Source |
| CVE-2026-40193 | redhat_vex | maddy: maddy: Identity spoofing and information disclosure via LDAP injection | known not affected: 1 | 2026-06-28T07:33:01+00:00 | Vulnerability · Source |
| CVE-2026-40091 | redhat_vex | SpiceDB: SPICEDB_DATASTORE_CONN_URI is leaked on startup logs | known not affected: 3 | 2026-06-28T07:32:58+00:00 | Vulnerability · Source |
| CVE-2020-15437 | redhat_vex | kernel: NULL pointer dereference in serial8250_isa_init_ports function in drivers/tty/serial/8250/8250_core.c | fixed: 150 known not affected: 56 | 2026-06-28T07:32:58+00:00 | Vulnerability · Source |
| CVE-2026-40097 | redhat_vex | github.com/smallstep/certificates: Step CA: Denial of Service via crafted attestation key certificate | known not affected: 1 | 2026-06-28T07:32:58+00:00 | Vulnerability · Source |
| CVE-2026-40048 | redhat_vex | Apache Camel: Apache Camel: Arbitrary code execution via insecure deserialization of crafted key files | known not affected: 1 | 2026-06-28T07:32:58+00:00 | Vulnerability · Source |