VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
314970 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-91964 | redhat_vex | FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU | fixed: 195 known affected: 12 | 2026-11-02T04:16:17+00:00 | Vulnerability · Source |
| CVE-2026-91953 | redhat_vex | FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption. | fixed: 195 known affected: 12 | 2026-11-02T04:16:17+00:00 | Vulnerability · Source |
| CVE-2025-11395 | redhat_vex | podman: Arbitrary file write when importing OCI archive | fixed: 198 known affected: 33 known not affected: 3 | 2026-11-02T04:15:06+00:00 | Vulnerability · Source |
| CVE-2019-25777 | redhat_vex | perl-yaml: perl-yaml: Arbitrary code execution via unrestricted package variable assignment | fixed: 4 known affected: 1 known not affected: 3 | 2026-11-02T03:53:10+00:00 | Vulnerability · Source |
| CVE-2017-20285 | redhat_vex | perl-yaml: perl-yaml: Arbitrary destructor method execution via crafted YAML document | fixed: 4 known affected: 1 known not affected: 3 | 2026-11-02T03:53:10+00:00 | Vulnerability · Source |
| CVE-2026-118764 | redhat_vex | minimatch: minimatch: Denial of Service via crafted glob pattern expansion | known affected: 396 known not affected: 60 | 2026-11-02T03:51:39+00:00 | Vulnerability · Source |
| CVE-2026-114115 | redhat_vex | vyper: Vyper: Data corruption via miscompiled ternary array expressions | known not affected: 1 | 2026-11-02T03:46:26+00:00 | Vulnerability · Source |
| CVE-2020-37287 | redhat_vex | vyper: vyper: Data corruption via complex type function arguments | known not affected: 1 | 2026-11-02T03:46:24+00:00 | Vulnerability · Source |
| CVE-2021-48019 | redhat_vex | vyper: vyper: data corruption via fixed return data size in forwarder proxies | known not affected: 1 | 2026-11-02T03:46:24+00:00 | Vulnerability · Source |
| CVE-2020-37289 | redhat_vex | vyper: Vyper: Contract logic bypass via unvalidated interface return values | known not affected: 1 | 2026-11-02T03:46:24+00:00 | Vulnerability · Source |
| CVE-2026-114116 | redhat_vex | vyper: Vyper: Constant value manipulation via line separator discrepancy | known not affected: 1 | 2026-11-02T03:46:24+00:00 | Vulnerability · Source |
| CVE-2020-37286 | redhat_vex | vyper: vyper: Memory corruption via nested internal function calls | known not affected: 1 | 2026-11-02T03:46:24+00:00 | Vulnerability · Source |
| CVE-2026-56434 | redhat_vex | nginx: NGINX: Heap buffer over-read allows memory modification or denial of service | fixed: 484 known affected: 1 known not affected: 5 | 2026-11-02T03:39:24+00:00 | Vulnerability · Source |
| CVE-2026-42533 | redhat_vex | nginx: NGINX: Arbitrary code execution via crafted HTTP requests | fixed: 480 known affected: 1 known not affected: 1 | 2026-11-02T03:39:19+00:00 | Vulnerability · Source |
| CVE-2026-42055 | redhat_vex | nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers | fixed: 490 known not affected: 95 | 2026-11-02T03:39:19+00:00 | Vulnerability · Source |
| CVE-2026-9256 | redhat_vex | nginx: ngx_http_rewrite_module: code execution and denial of service | fixed: 486 known affected: 1 known not affected: 6 | 2026-11-02T03:39:19+00:00 | Vulnerability · Source |
| CVE-2026-60005 | redhat_vex | nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module | fixed: 484 known affected: 1 known not affected: 5 | 2026-11-02T03:39:19+00:00 | Vulnerability · Source |
| CVE-2026-111497 | redhat_vex | brotli: Out-of-Bounds Write in Google Brotli Decoder | fixed: 1338 known affected: 27 known not affected: 533 under investigation: 1 | 2026-11-02T03:38:33+00:00 | Vulnerability · Source |
| CVE-2026-114148 | redhat_vex | dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability | fixed: 1138 known affected: 2 known not affected: 18 | 2026-11-02T03:38:33+00:00 | Vulnerability · Source |
| CVE-2026-86144 | redhat_vex | libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation. | fixed: 521 known affected: 12 known not affected: 36 | 2026-11-02T03:38:13+00:00 | Vulnerability · Source |
| CVE-2026-86142 | redhat_vex | libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation | fixed: 521 known affected: 11 known not affected: 37 | 2026-11-02T03:38:09+00:00 | Vulnerability · Source |
| CVE-2026-86143 | redhat_vex | libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks | fixed: 521 known affected: 12 known not affected: 36 | 2026-11-02T03:38:09+00:00 | Vulnerability · Source |
| CVE-2026-86138 | redhat_vex | libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow | fixed: 521 known affected: 12 known not affected: 36 | 2026-11-02T03:38:08+00:00 | Vulnerability · Source |
| CVE-2026-86140 | redhat_vex | libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements | fixed: 521 known affected: 12 known not affected: 36 | 2026-11-02T03:37:42+00:00 | Vulnerability · Source |
| CVE-2026-102559 | redhat_vex | libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking | fixed: 170 known affected: 6 | 2026-11-02T03:37:40+00:00 | Vulnerability · Source |
| CVE-2026-102558 | redhat_vex | libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth | fixed: 170 known affected: 6 | 2026-11-02T03:37:37+00:00 | Vulnerability · Source |
| CVE-2026-102557 | redhat_vex | libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly | fixed: 170 known affected: 6 | 2026-11-02T03:37:36+00:00 | Vulnerability · Source |
| CVE-2026-102556 | redhat_vex | libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion | fixed: 170 known affected: 6 | 2026-11-02T03:37:35+00:00 | Vulnerability · Source |
| CVE-2026-11979 | redhat_vex | libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow | fixed: 572 known affected: 22 known not affected: 6 | 2026-11-02T03:36:56+00:00 | Vulnerability · Source |
| CVE-2026-74860 | redhat_vex | libxml2: double-free/UAF in libxml2 Python bindings | fixed: 517 known affected: 10 known not affected: 39 | 2026-11-02T03:36:50+00:00 | Vulnerability · Source |
| CVE-2026-6653 | redhat_vex | libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free | fixed: 455 known affected: 3 known not affected: 22 | 2026-11-02T03:36:44+00:00 | Vulnerability · Source |
| CVE-2026-33818 | redhat_vex | encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal | fixed: 8457 known affected: 314 known not affected: 4450 | 2026-11-02T03:34:54+00:00 | Vulnerability · Source |
| CVE-2025-6170 | redhat_vex | libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling | fixed: 633 known affected: 13 known not affected: 5 | 2026-11-02T03:31:41+00:00 | Vulnerability · Source |
| CVE-2026-120325 | redhat_vex | knip: knip: Arbitrary file overwrite via path traversal | known not affected: 2 | 2026-11-02T03:28:44+00:00 | Vulnerability · Source |
| CVE-2026-79678 | redhat_vex | freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service | fixed: 1007 known affected: 23 known not affected: 14 | 2026-11-02T03:28:35+00:00 | Vulnerability · Source |
| CVE-2026-76578 | redhat_vex | ipa: freeipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI | fixed: 1026 known affected: 23 | 2026-11-02T03:28:34+00:00 | Vulnerability · Source |
| CVE-2026-73198 | redhat_vex | ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read | fixed: 1007 known affected: 7 known not affected: 14 | 2026-11-02T03:28:30+00:00 | Vulnerability · Source |
| CVE-2026-73197 | redhat_vex | ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read | fixed: 1026 known affected: 7 | 2026-11-02T03:28:25+00:00 | Vulnerability · Source |
| CVE-2026-19550 | redhat_vex | freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes | fixed: 1026 known not affected: 7 | 2026-11-02T03:28:24+00:00 | Vulnerability · Source |
| CVE-2026-13097 | redhat_vex | ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore | fixed: 1026 known affected: 23 | 2026-11-02T03:28:19+00:00 | Vulnerability · Source |
| CVE-2026-18147 | redhat_vex | freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL | fixed: 1026 known affected: 7 | 2026-11-02T03:28:19+00:00 | Vulnerability · Source |
| CVE-2026-11861 | redhat_vex | FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships | fixed: 1026 known affected: 7 | 2026-11-02T03:28:19+00:00 | Vulnerability · Source |
| CVE-2026-8177 | redhat_vex | perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names | fixed: 86 known affected: 2 known not affected: 34 | 2026-11-02T03:27:32+00:00 | Vulnerability · Source |
| CVE-2026-99161 | redhat_vex | kernel: kernel: Denial of service via clock resource leak in wmt_i2c_probe | known not affected: 279 | 2026-11-02T03:27:20+00:00 | Vulnerability · Source |
| CVE-2026-99166 | redhat_vex | kernel: kernel: Denial of Service via uninitialized pointer dereference in RDS | known affected: 14 known not affected: 265 | 2026-11-02T03:25:27+00:00 | Vulnerability · Source |
| CVE-2026-99165 | redhat_vex | kernel: kernel: Denial of service via NULL pointer dereference in SCTP stream handling | known affected: 279 | 2026-11-02T03:25:25+00:00 | Vulnerability · Source |
| CVE-2026-99164 | redhat_vex | kernel: kernel: Denial of Service via undersized DMA bounce buffers in i.MX SPI driver | known affected: 188 known not affected: 91 | 2026-11-02T03:25:22+00:00 | Vulnerability · Source |
| CVE-2026-99162 | redhat_vex | kernel: kernel: Denial of Service via use-after-free in GPIO subsystem | known not affected: 279 | 2026-11-02T03:25:20+00:00 | Vulnerability · Source |
| CVE-2026-99160 | redhat_vex | kernel: kernel: Denial of Service via null pointer dereference in ring buffer metadata | known affected: 265 known not affected: 14 | 2026-11-02T03:25:17+00:00 | Vulnerability · Source |
| CVE-2026-99159 | redhat_vex | kernel: kernel: Denial of Service via null pointer dereference in persistent ring buffer | known affected: 265 known not affected: 14 | 2026-11-02T03:25:14+00:00 | Vulnerability · Source |