VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291935 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2013-6426 | redhat_vex | Heat: CFN policy rules not all enforced | fixed: 6 known affected: 1 | 2026-07-31T11:41:27+00:00 | Vulnerability · Source |
| CVE-2013-2167 | redhat_vex | python-keystoneclient: middleware memcache encryption and signing bypass | fixed: 3 | 2026-07-31T11:41:24+00:00 | Vulnerability · Source |
| CVE-2014-4615 | redhat_vex | pycadf: token leak to message queue | fixed: 8 known affected: 3 known not affected: 3 | 2026-07-31T11:41:20+00:00 | Vulnerability · Source |
| CVE-2014-0105 | redhat_vex | python-keystoneclient: Potential context confusion in Keystone middleware | fixed: 13 | 2026-07-31T11:41:16+00:00 | Vulnerability · Source |
| CVE-2014-0071 | redhat_vex | PackStack: Neutron Security Groups fail to block network traffic | fixed: 3 known affected: 1 | 2026-07-31T11:41:14+00:00 | Vulnerability · Source |
| CVE-2014-3476 | redhat_vex | openstack-keystone: privilege escalation through trust chained delegation | fixed: 8 known affected: 1 | 2026-07-31T11:41:10+00:00 | Vulnerability · Source |
| CVE-2013-2157 | redhat_vex | openstack-keystone: Authentication bypass when using LDAP backend | fixed: 8 | 2026-07-31T11:41:07+00:00 | Vulnerability · Source |
| CVE-2014-0162 | redhat_vex | openstack-glance: remote code execution in Glance Sheepdog backend | fixed: 4 known affected: 1 known not affected: 1 | 2026-07-31T11:40:55+00:00 | Vulnerability · Source |
| CVE-2015-0259 | redhat_vex | openstack-nova: console Cross-Site WebSocket hijacking | fixed: 48 known affected: 1 | 2026-07-31T11:38:50+00:00 | Vulnerability · Source |
| CVE-2020-13558 | redhat_vex | webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution | fixed: 59 known affected: 9 known not affected: 379 | 2026-07-31T11:29:27+00:00 | Vulnerability · Source |
| CVE-2023-39928 | redhat_vex | webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports | fixed: 105 known affected: 9 | 2026-07-31T11:29:23+00:00 | Vulnerability · Source |
| CVE-2023-6185 | redhat_vex | libreoffice: Improper Input Validation leading to arbitrary gstreamer plugin execution | fixed: 4468 known affected: 487 | 2026-07-31T11:24:15+00:00 | Vulnerability · Source |
| CVE-2026-43368 | redhat_vex | kernel: drm/i915: Fix potential overflow of shmem scatterlist length | known affected: 184 known not affected: 90 | 2026-07-31T10:48:09+00:00 | Vulnerability · Source |
| CVE-2023-40476 | redhat_vex | gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite | fixed: 62 known affected: 13 | 2026-07-31T10:43:39+00:00 | Vulnerability · Source |
| CVE-2023-50186 | redhat_vex | gstreamer-plugins-bad-free: buffer overflow vulnerability | fixed: 31 known not affected: 7 | 2026-07-31T10:43:32+00:00 | Vulnerability · Source |
| CVE-2024-0444 | redhat_vex | gstreamer: AV1 Video Parsing Stack-based Buffer Overflow | fixed: 59 known affected: 14 known not affected: 85 | 2026-07-31T10:43:30+00:00 | Vulnerability · Source |
| CVE-2023-40475 | redhat_vex | gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio | fixed: 62 known affected: 13 | 2026-07-31T10:38:14+00:00 | Vulnerability · Source |
| CVE-2023-40474 | redhat_vex | gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video | fixed: 62 known affected: 13 | 2026-07-31T10:38:12+00:00 | Vulnerability · Source |
| CVE-2023-37329 | redhat_vex | gstreamer-plugins-bad: heap overwrite in PGS subtitle overlay decoder | known affected: 13 known not affected: 7 | 2026-07-31T10:38:11+00:00 | Vulnerability · Source |
| CVE-2023-37328 | redhat_vex | gstreamer-plugins-base: heap overwrite in subtitle parsing | fixed: 56 known affected: 16 | 2026-07-31T10:23:44+00:00 | Vulnerability · Source |
| CVE-2026-23466 | redhat_vex | kernel: drm/xe: Open-code GGTT MMIO access protection | known affected: 184 known not affected: 90 | 2026-07-31T10:13:46+00:00 | Vulnerability · Source |
| CVE-2009-1932 | redhat_vex | gstreamer-plugins-good: PNG decoder integer overflow | fixed: 31 | 2026-07-31T10:08:44+00:00 | Vulnerability · Source |
| CVE-2016-9813 | redhat_vex | gstreamer-plugins-bad-free: NULL pointer dereference in mpegts parser | fixed: 58 known not affected: 12 | 2026-07-31T10:04:19+00:00 | Vulnerability · Source |
| CVE-2021-3497 | redhat_vex | gstreamer-plugins-good: Use-after-free in matroska demuxing | fixed: 26 known affected: 8 known not affected: 3 | 2026-07-31T10:04:06+00:00 | Vulnerability · Source |
| CVE-2026-10079 | redhat_vex | stackrox: stackrox: Deploy-time policy enforcement and visibility bypass via label injection | known affected: 3 | 2026-07-31T10:03:58+00:00 | Vulnerability · Source |
| CVE-2009-0386 | redhat_vex | gstreamer-plugins-good: heap-based buffer overflow while parsing malformed QuickTime media files via crafted Composition Time To Sample (aka ctts) atom data | fixed: 31 | 2026-07-31T10:03:56+00:00 | Vulnerability · Source |
| CVE-2009-0397 | redhat_vex | gstreamer-plugins-good: heap-based buffer overflow while parsing malformed QuickTime media files via crafted Time-to-sample (stss) atom data | fixed: 77 | 2026-07-31T10:03:45+00:00 | Vulnerability · Source |
| CVE-2009-0387 | redhat_vex | gstreamer-plugins-good: Array index error while parsing malformed QuickTime media files via crafted Sync Sample (aka stss) atom data | fixed: 31 | 2026-07-31T10:03:32+00:00 | Vulnerability · Source |
| CVE-2009-0398 | redhat_vex | gstreamer-plugins: Array index error while parsing malformed QuickTime media files | fixed: 46 | 2026-07-31T10:03:32+00:00 | Vulnerability · Source |
| CVE-2016-9812 | redhat_vex | gstreamer1-plugins-bad-free: Out-of-bounds read in gst_mpegts_section_new | fixed: 58 known not affected: 12 | 2026-07-31T09:59:59+00:00 | Vulnerability · Source |
| CVE-2016-9809 | redhat_vex | gstreamer-plugins-bad-free: Off-by-one read in gst_h264_parse_set_caps | fixed: 116 known affected: 3 known not affected: 5 | 2026-07-31T09:59:57+00:00 | Vulnerability · Source |
| CVE-2016-9807 | redhat_vex | gstreamer-plugins-good: Invalid memory read in flx_decode_chunks | fixed: 118 known affected: 4 | 2026-07-31T09:59:56+00:00 | Vulnerability · Source |
| CVE-2026-48501 | redhat_vex | github-cli: GitHub CLI: Information disclosure via incorrect authorization header handling | known affected: 3 | 2026-07-31T09:59:37+00:00 | Vulnerability · Source |
| CVE-2026-45830 | redhat_vex | chromadb: ChromaDB: Unauthorized data manipulation due to improper authorization validation | known affected: 4 known not affected: 1 | 2026-07-31T09:59:24+00:00 | Vulnerability · Source |
| CVE-2016-9636 | redhat_vex | gstreamer-plugins-good: Heap buffer overflow in FLIC decoder | fixed: 118 known affected: 4 | 2026-07-31T09:59:13+00:00 | Vulnerability · Source |
| CVE-2016-9808 | redhat_vex | gstreamer-plugins-good: Heap buffer overflow in FLIC decoder | fixed: 118 known affected: 4 | 2026-07-31T09:58:33+00:00 | Vulnerability · Source |
| CVE-2016-9445 | redhat_vex | gstreamer-plugins-bad-free: Integer overflow when allocating render buffer in VMnc decoder | fixed: 177 known affected: 3 known not affected: 13 | 2026-07-31T09:54:22+00:00 | Vulnerability · Source |
| CVE-2026-45833 | redhat_vex | chromadb: ChromaDB: Arbitrary Code Execution via Code Injection | known affected: 4 known not affected: 1 | 2026-07-31T09:54:16+00:00 | Vulnerability · Source |
| CVE-2016-9447 | redhat_vex | gstreamer-plugins-bad-free: Memory corruption flaw in NSF decoder | fixed: 119 known affected: 3 known not affected: 17 | 2026-07-31T09:54:14+00:00 | Vulnerability · Source |
| CVE-2026-45832 | redhat_vex | chromadb: ChromaDB: Authorization bypass in V1 collection-level endpoints | known affected: 4 known not affected: 1 | 2026-07-31T09:54:10+00:00 | Vulnerability · Source |
| CVE-2016-9634 | redhat_vex | gstreamer-plugins-good: Heap buffer overflow in FLIC decoder | fixed: 118 known affected: 4 | 2026-07-31T09:53:41+00:00 | Vulnerability · Source |
| CVE-2016-9635 | redhat_vex | gstreamer-plugins-good: Heap buffer overflow in FLIC decoder | fixed: 118 known affected: 4 | 2026-07-31T09:53:19+00:00 | Vulnerability · Source |
| CVE-2026-43370 | redhat_vex | kernel: drm/amdgpu: Fix use-after-free race in VM acquire | known affected: 274 | 2026-07-31T09:43:22+00:00 | Vulnerability · Source |
| CVE-2026-31656 | redhat_vex | kernel: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat | known affected: 184 known not affected: 90 | 2026-07-31T09:43:21+00:00 | Vulnerability · Source |
| CVE-2026-66066 | redhat_vex | activestorage: Active Storage: Remote Code Execution via Unsafe libvips Operations | known not affected: 19 | 2026-07-31T08:21:22+00:00 | Vulnerability · Source |
| CVE-2026-18203 | redhat_vex | keycloak-services: keycloak-services: Group policy extendChildren matches sibling group path prefixes | known affected: 3 known not affected: 3 | 2026-07-31T08:04:22+00:00 | Vulnerability · Source |
| CVE-2026-18208 | redhat_vex | keycloak-services: keycloak-services: Inactive out-of-audience token introspection leaks signed JWT claim | known affected: 3 known not affected: 3 | 2026-07-31T08:04:16+00:00 | Vulnerability · Source |
| CVE-2026-16105 | redhat_vex | keycloak-services: keycloak-services: Missing per-role authorization on RoleContainerResource composite endpoints | known affected: 3 known not affected: 3 | 2026-07-31T08:04:00+00:00 | Vulnerability · Source |
| CVE-2026-31566 | redhat_vex | kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib | known affected: 232 known not affected: 42 | 2026-07-31T06:33:08+00:00 | Vulnerability · Source |
| CVE-2026-31479 | redhat_vex | kernel: drm/xe: always keep track of remap prev/next | known affected: 184 known not affected: 90 | 2026-07-31T06:28:09+00:00 | Vulnerability · Source |