VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224787 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-21502 | redhat_vex | openjdk: Enhance array handling (Oracle CPU 2025-01) | fixed: 1653 known affected: 116 known not affected: 77 | 2026-06-30T03:02:30+00:00 | Vulnerability · Source |
| CVE-2025-1767 | redhat_vex | kubelet: GitRepo Volume Inadvertent Local Repository Access | known affected: 128 | 2026-06-30T03:02:29+00:00 | Vulnerability · Source |
| CVE-2026-50221 | redhat_vex | openstack-swift: OpenStack Swift: SSRF via internal update header injection in proxy-server | known affected: 36 | 2026-06-30T03:02:25+00:00 | Vulnerability · Source |
| CVE-2025-21947 | redhat_vex | kernel: ksmbd: fix type confusion via race condition when using ipc_msg_send_request | known not affected: 274 | 2026-06-30T03:02:23+00:00 | Vulnerability · Source |
| CVE-2025-26466 | redhat_vex | openssh: Denial-of-service in OpenSSH | known not affected: 41 | 2026-06-30T03:02:20+00:00 | Vulnerability · Source |
| CVE-2025-27220 | redhat_vex | CGI: ReDoS in CGI::Util#escapeElement | fixed: 351 known affected: 96 known not affected: 72 | 2026-06-30T03:02:18+00:00 | Vulnerability · Source |
| CVE-2025-30761 | redhat_vex | openjdk: Improve scripting supports (Oracle CPU 2025-07) | fixed: 1016 known affected: 41 known not affected: 130 | 2026-06-30T03:02:16+00:00 | Vulnerability · Source |
| CVE-2025-27219 | redhat_vex | CGI: Denial of Service in CGI::Cookie.parse | fixed: 735 known affected: 73 | 2026-06-30T03:02:14+00:00 | Vulnerability · Source |
| CVE-2025-39946 | redhat_vex | kernel: tls: make sure to abort the stream if headers are bogus | fixed: 309 known affected: 108 known not affected: 90 | 2026-06-30T03:01:19+00:00 | Vulnerability · Source |
| CVE-2022-49405 | redhat_vex | kernel: staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan() | known not affected: 274 | 2026-06-30T03:00:00+00:00 | Vulnerability · Source |
| CVE-2025-40355 | redhat_vex | kernel: sysfs: check visibility before changing group attribute ownership | known affected: 246 known not affected: 28 | 2026-06-30T02:59:53+00:00 | Vulnerability · Source |
| CVE-2025-40220 | redhat_vex | kernel: fuse: fix livelock in synchronous file put from fuseblk workers | known affected: 274 | 2026-06-30T02:59:52+00:00 | Vulnerability · Source |
| CVE-2025-40359 | redhat_vex | kernel: perf/x86/intel: Fix KASAN global-out-of-bounds warning | known affected: 184 known not affected: 90 | 2026-06-30T02:59:44+00:00 | Vulnerability · Source |
| CVE-2025-40363 | redhat_vex | kernel: net: ipv6: fix field-spanning memcpy warning in AH output | known affected: 274 | 2026-06-30T02:59:41+00:00 | Vulnerability · Source |
| CVE-2025-40330 | redhat_vex | kernel: bnxt_en: Shutdown FW DMA in bnxt_shutdown() | known affected: 184 known not affected: 90 | 2026-06-30T02:59:39+00:00 | Vulnerability · Source |
| CVE-2025-40329 | redhat_vex | kernel: drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb | known affected: 232 known not affected: 42 | 2026-06-30T02:59:37+00:00 | Vulnerability · Source |
| CVE-2025-40339 | redhat_vex | kernel: drm/amdgpu: fix nullptr err of vm_handle_moved | known not affected: 274 | 2026-06-30T02:59:30+00:00 | Vulnerability · Source |
| CVE-2025-40353 | redhat_vex | kernel: arm64: mte: Do not warn if the page is already tagged in copy_highpage() | known affected: 260 known not affected: 14 | 2026-06-30T02:59:29+00:00 | Vulnerability · Source |
| CVE-2025-40327 | redhat_vex | kernel: perf/core: Fix system hang caused by cpu-clock usage | known affected: 90 known not affected: 184 | 2026-06-30T02:59:22+00:00 | Vulnerability · Source |
| CVE-2025-40312 | redhat_vex | kernel: Linux kernel (JFS): Data corruption, information disclosure, and system unavailability via invalid inode mode. | known affected: 14 known not affected: 260 | 2026-06-30T02:59:20+00:00 | Vulnerability · Source |
| CVE-2025-53032 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Jul 2025) | known not affected: 49 | 2026-06-30T02:59:09+00:00 | Vulnerability · Source |
| CVE-2025-50095 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Jul 2025) | known not affected: 49 | 2026-06-30T02:59:07+00:00 | Vulnerability · Source |
| CVE-2025-43228 | redhat_vex | webkitgtk: Visiting a malicious website may lead to address bar spoofing | known affected: 27 | 2026-06-30T02:59:04+00:00 | Vulnerability · Source |
| CVE-2025-50068 | redhat_vex | mysql: General unspecified vulnerability (CPU Jul 2025) | known not affected: 49 | 2026-06-30T02:59:02+00:00 | Vulnerability · Source |
| CVE-2025-50076 | redhat_vex | mysql: DML unspecified vulnerability (CPU Jul 2025) | known not affected: 49 | 2026-06-30T02:59:00+00:00 | Vulnerability · Source |
| CVE-2025-5222 | redhat_vex | icu: Stack buffer overflow in the SRBRoot::addTag function | fixed: 265 known affected: 18 | 2026-06-30T02:58:59+00:00 | Vulnerability · Source |
| CVE-2025-50103 | redhat_vex | mysql: LDAP Auth unspecified vulnerability (CPU Jul 2025) | known not affected: 49 | 2026-06-30T02:58:54+00:00 | Vulnerability · Source |
| CVE-2025-53067 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Oct 2025) | known not affected: 49 | 2026-06-30T02:58:54+00:00 | Vulnerability · Source |
| CVE-2025-50089 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Jul 2025) | known not affected: 49 | 2026-06-30T02:58:53+00:00 | Vulnerability · Source |
| CVE-2026-12515 | redhat_vex | katello: missing repository authorization in content_uploads exposes cross-product content existence | known affected: 2 known not affected: 1 | 2026-06-30T02:57:47+00:00 | Vulnerability · Source |
| CVE-2026-12398 | redhat_vex | galaxy_ng: shell injection in legacy role import via unsanitized git ref names | known affected: 4 known not affected: 1 under investigation: 4 | 2026-06-30T02:57:43+00:00 | Vulnerability · Source |
| CVE-2025-40351 | redhat_vex | kernel: hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() | known not affected: 274 | 2026-06-30T02:57:26+00:00 | Vulnerability · Source |
| CVE-2025-40338 | redhat_vex | kernel: ASoC: Intel: avs: Do not share the name pointer between components | known affected: 232 known not affected: 42 | 2026-06-30T02:57:22+00:00 | Vulnerability · Source |
| CVE-2025-40340 | redhat_vex | kernel: drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test | known affected: 184 known not affected: 90 | 2026-06-30T02:57:21+00:00 | Vulnerability · Source |
| CVE-2025-40321 | redhat_vex | kernel: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode | known affected: 260 known not affected: 14 | 2026-06-30T02:57:09+00:00 | Vulnerability · Source |
| CVE-2025-40265 | redhat_vex | kernel: vfat: fix missing sb_min_blocksize() return value checks | known affected: 14 known not affected: 260 | 2026-06-30T02:57:07+00:00 | Vulnerability · Source |
| CVE-2025-40259 | redhat_vex | kernel: scsi: sg: Do not sleep in atomic context | known affected: 246 known not affected: 28 | 2026-06-30T02:57:05+00:00 | Vulnerability · Source |
| CVE-2025-40246 | redhat_vex | kernel: xfs: fix out of bounds memory read error in symlink repair | known not affected: 274 | 2026-06-30T02:57:02+00:00 | Vulnerability · Source |
| CVE-2025-40238 | redhat_vex | kernel: net/mlx5: Fix IPsec cleanup over MPV device | known affected: 198 known not affected: 76 | 2026-06-30T02:57:00+00:00 | Vulnerability · Source |
| CVE-2025-40211 | redhat_vex | kernel: ACPI: video: Fix use-after-free in acpi_video_switch_brightness() | known affected: 232 known not affected: 42 | 2026-06-30T02:56:58+00:00 | Vulnerability · Source |
| CVE-2025-40195 | redhat_vex | kernel: Linux kernel: NULL pointer dereference in mount leads to local denial of service | known affected: 274 | 2026-06-30T02:56:51+00:00 | Vulnerability · Source |
| CVE-2025-40194 | redhat_vex | kernel: cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() | known affected: 232 known not affected: 42 | 2026-06-30T02:56:50+00:00 | Vulnerability · Source |
| CVE-2022-48566 | redhat_vex | python: constant-time-defeating optimisations issue in the compare_digest function in Lib/hmac.p | known affected: 23 known not affected: 161 | 2026-06-30T02:56:18+00:00 | Vulnerability · Source |
| CVE-2022-27776 | redhat_vex | curl: auth/cookie leak on redirect | fixed: 119 known affected: 16 known not affected: 1 | 2026-06-30T02:56:14+00:00 | Vulnerability · Source |
| CVE-2022-2596 | redhat_vex | node-fetch: Denial of Service in GitHub repository node-fetch | known not affected: 208 | 2026-06-30T02:56:12+00:00 | Vulnerability · Source |
| CVE-2022-0729 | redhat_vex | vim: Use of Out-of-range Pointer Offset | known not affected: 30 | 2026-06-30T02:56:10+00:00 | Vulnerability · Source |
| CVE-2022-0368 | redhat_vex | vim: Out-of-bounds Read in vim | known not affected: 33 | 2026-06-30T02:56:10+00:00 | Vulnerability · Source |
| CVE-2020-35527 | redhat_vex | sqlite: Out of bounds access during table rename | fixed: 75 known affected: 12 known not affected: 4 | 2026-06-30T02:56:06+00:00 | Vulnerability · Source |
| CVE-2025-40160 | redhat_vex | kernel: xen/events: Return -EEXIST for bound VIRQs | known affected: 232 known not affected: 42 | 2026-06-30T02:55:53+00:00 | Vulnerability · Source |
| CVE-2025-39889 | redhat_vex | kernel: Bluetooth: l2cap: Check encryption key size on incoming connection | known affected: 232 known not affected: 42 | 2026-06-30T02:55:52+00:00 | Vulnerability · Source |