VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
104719 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-50082 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Jul 2025) | fixed: 310 known not affected: 9 | 2026-10-16T10:06:57+00:00 | Vulnerability · Source |
| CVE-2025-50080 | redhat_vex | mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025) | fixed: 310 known not affected: 9 | 2026-10-16T10:06:55+00:00 | Vulnerability · Source |
| CVE-2025-50079 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Jul 2025) | fixed: 310 known not affected: 9 | 2026-10-16T10:06:52+00:00 | Vulnerability · Source |
| CVE-2025-50078 | redhat_vex | mysql: DML unspecified vulnerability (CPU Jul 2025) | fixed: 310 known not affected: 9 | 2026-10-16T10:06:49+00:00 | Vulnerability · Source |
| CVE-2025-50077 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jul 2025) | fixed: 310 known not affected: 9 | 2026-10-16T10:06:45+00:00 | Vulnerability · Source |
| CVE-2025-47914 | redhat_vex | golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages | fixed: 153 known affected: 382 known not affected: 247 | 2026-10-16T10:06:42+00:00 | Vulnerability · Source |
| CVE-2025-46421 | redhat_vex | libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host when being redirected by a server | fixed: 279 known affected: 6 | 2026-10-16T10:06:37+00:00 | Vulnerability · Source |
| CVE-2025-32914 | redhat_vex | libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process | fixed: 285 known affected: 3 | 2026-10-16T10:06:36+00:00 | Vulnerability · Source |
| CVE-2025-46420 | redhat_vex | libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c | fixed: 261 known affected: 6 known not affected: 4 | 2026-10-16T10:06:34+00:00 | Vulnerability · Source |
| CVE-2025-32912 | redhat_vex | libsoup: NULL pointer dereference in client when server omits the "nonce" parameter in an Unauthorized response with Digest authentication | fixed: 18 known affected: 12 | 2026-10-16T10:06:28+00:00 | Vulnerability · Source |
| CVE-2025-32053 | redhat_vex | libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() | fixed: 135 known affected: 6 known not affected: 4 | 2026-10-16T10:06:26+00:00 | Vulnerability · Source |
| CVE-2025-32052 | redhat_vex | libsoup: Heap buffer overflow in sniff_unknown() | fixed: 135 known affected: 6 known not affected: 4 | 2026-10-16T10:06:25+00:00 | Vulnerability · Source |
| CVE-2025-30754 | redhat_vex | openjdk: Enhance TLS protocol support (Oracle CPU 2025-07) | fixed: 2354 known affected: 41 | 2026-10-16T10:06:18+00:00 | Vulnerability · Source |
| CVE-2025-30761 | redhat_vex | openjdk: Improve scripting supports (Oracle CPU 2025-07) | fixed: 1016 known affected: 41 known not affected: 130 | 2026-10-16T10:06:18+00:00 | Vulnerability · Source |
| CVE-2025-27614 | redhat_vex | gitk: git script execution flaw | fixed: 150 known affected: 34 | 2026-10-16T10:06:14+00:00 | Vulnerability · Source |
| CVE-2025-25184 | redhat_vex | rubygem-rack: Possible Log Injection in Rack::CommonLogger | fixed: 58 known affected: 16 known not affected: 4 | 2026-10-16T10:06:08+00:00 | Vulnerability · Source |
| CVE-2025-14331 | redhat_vex | firefox: thunderbird: Same-origin policy bypass in the Request Handling component | fixed: 320 known affected: 8 | 2026-10-16T10:06:06+00:00 | Vulnerability · Source |
| CVE-2025-10529 | redhat_vex | firefox: thunderbird: Same-origin policy bypass in the Layout component | fixed: 264 known affected: 8 | 2026-10-16T10:06:04+00:00 | Vulnerability · Source |
| CVE-2025-8419 | redhat_vex | org.keycloak/keycloak-services: Keycloak SMTP Inject Vulnerability | fixed: 18 known affected: 1 | 2026-10-16T10:06:03+00:00 | Vulnerability · Source |
| CVE-2025-5987 | redhat_vex | libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend | fixed: 110 known affected: 9 known not affected: 107 | 2026-10-16T10:06:01+00:00 | Vulnerability · Source |
| CVE-2025-7458 | redhat_vex | sqlite: SQLite integer overflow | known affected: 49 known not affected: 54 | 2026-10-16T10:06:00+00:00 | Vulnerability · Source |
| CVE-2025-5455 | redhat_vex | qt6-qtbase: qt5-qtbase: QtCore Assertion Failure Denial of Service | fixed: 384 known affected: 23 | 2026-10-16T10:05:53+00:00 | Vulnerability · Source |
| CVE-2026-0891 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 | fixed: 320 known affected: 7 | 2026-10-16T10:05:46+00:00 | Vulnerability · Source |
| CVE-2026-0882 | redhat_vex | firefox: thunderbird: Use-after-free in the IPC component | fixed: 320 known affected: 7 | 2026-10-16T10:05:43+00:00 | Vulnerability · Source |
| CVE-2026-0880 | redhat_vex | firefox: thunderbird: Sandbox escape due to integer overflow in the Graphics component | fixed: 320 known affected: 7 | 2026-10-16T10:05:42+00:00 | Vulnerability · Source |
| CVE-2026-0879 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component | fixed: 320 known affected: 8 | 2026-10-16T10:05:39+00:00 | Vulnerability · Source |
| CVE-2026-0878 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component | fixed: 320 known affected: 7 | 2026-10-16T10:05:37+00:00 | Vulnerability · Source |
| CVE-2026-0877 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Security component | fixed: 320 known affected: 7 | 2026-10-16T10:05:33+00:00 | Vulnerability · Source |
| CVE-2025-65104 | redhat_vex | Firebird: firebird3 client: FirebirdSQL/firebird: Firebird Client: Information leak when communicating with newer servers | known not affected: 1 | 2026-10-16T10:05:32+00:00 | Vulnerability · Source |
| CVE-2025-62727 | redhat_vex | starlette: Starlette DoS via Range header merging | fixed: 85 known affected: 17 known not affected: 424 | 2026-10-16T10:05:28+00:00 | Vulnerability · Source |
| CVE-2025-61732 | redhat_vex | cmd/cgo: Go cgo: Code smuggling due to comment parsing discrepancy | fixed: 5163 known affected: 11 known not affected: 985 | 2026-10-16T10:05:25+00:00 | Vulnerability · Source |
| CVE-2025-59734 | redhat_vex | FFmpeg: FFmpeg: Use-after-free vulnerability in SANM decoding | known not affected: 1 | 2026-10-16T10:05:23+00:00 | Vulnerability · Source |
| CVE-2025-50106 | redhat_vex | openjdk: Glyph out-of-memory access and crash (Oracle CPU 2025-07) | fixed: 2384 known affected: 41 | 2026-10-16T10:05:18+00:00 | Vulnerability · Source |
| CVE-2025-50059 | redhat_vex | openjdk: Improve HTTP client header handling (Oracle CPU 2025-07) | fixed: 1654 known affected: 41 known not affected: 66 | 2026-10-16T10:05:10+00:00 | Vulnerability · Source |
| CVE-2025-48431 | redhat_vex | Apache Thrift: c_glib: Apache Thrift c_glib: Denial of Service via specially crafted requests | fixed: 18 known affected: 20 known not affected: 595 | 2026-10-16T10:05:08+00:00 | Vulnerability · Source |
| CVE-2025-46727 | redhat_vex | rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser | fixed: 155 known affected: 8 known not affected: 72 | 2026-10-16T10:05:06+00:00 | Vulnerability · Source |
| CVE-2025-30749 | redhat_vex | openjdk: Better Glyph drawing (Oracle CPU 2025-07) | fixed: 2384 known affected: 41 | 2026-10-16T10:05:01+00:00 | Vulnerability · Source |
| CVE-2023-42503 | redhat_vex | apache-commons-compress: Denial of service via CPU consumption for malformed TAR file | known affected: 3 known not affected: 7 | 2026-10-16T10:04:51+00:00 | Vulnerability · Source |
| CVE-2023-7346 | redhat_vex | ledger: Ledger Bitcoin App 2.1.0 Address Derivation Error via Miniscript | known not affected: 1 | 2026-10-16T10:04:51+00:00 | Vulnerability · Source |
| CVE-2025-3887 | redhat_vex | gstreamer1-plugins-bad-free: mingw-gstreamer1-plugins-bad-free: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability | fixed: 238 known affected: 3 known not affected: 4 | 2026-10-16T10:04:51+00:00 | Vulnerability · Source |
| CVE-2025-4373 | redhat_vex | glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar | fixed: 625 known affected: 42 | 2026-10-16T10:04:51+00:00 | Vulnerability · Source |
| CVE-2026-9546 | redhat_vex | libcurl: libcurl: Information disclosure due to persistent Referer header | fixed: 48 known affected: 34 known not affected: 71 | 2026-10-16T10:02:16+00:00 | Vulnerability · Source |
| CVE-2026-108749 | redhat_vex | docling-serve: docling-serve: Information disclosure via missing authentication on memory endpoints | known affected: 1 | 2026-10-16T09:49:55+00:00 | Vulnerability · Source |
| CVE-2026-107727 | redhat_vex | strawberry-graphql: strawberry-graphql: Denial of service via uncleared completed subscriptions | known affected: 1 | 2026-10-16T09:49:53+00:00 | Vulnerability · Source |
| CVE-2026-100831 | redhat_vex | firefox: Use-after-free in the DOM: UI Events & Focus Handling component | known not affected: 12 | 2026-10-16T09:49:50+00:00 | Vulnerability · Source |
| CVE-2026-100830 | redhat_vex | firefox: Mitigation bypass in the DOM: Navigation component | known not affected: 12 | 2026-10-16T09:49:44+00:00 | Vulnerability · Source |
| CVE-2026-100829 | redhat_vex | firefox: Mitigation bypass in the DOM: Security component | known not affected: 12 | 2026-10-16T09:49:41+00:00 | Vulnerability · Source |
| CVE-2026-100826 | redhat_vex | firefox: Denial-of-service in the Storage: StorageManager component | known not affected: 12 | 2026-10-16T09:49:40+00:00 | Vulnerability · Source |
| CVE-2026-100823 | redhat_vex | firefox: Spoofing issue in the Downloads component in Firefox for Android | known not affected: 12 | 2026-10-16T09:49:38+00:00 | Vulnerability · Source |
| CVE-2026-100822 | redhat_vex | firefox: Spoofing issue in the Networking: HTTP component | known not affected: 12 | 2026-10-16T09:49:37+00:00 | Vulnerability · Source |