VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
302983 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-82397 | redhat_vex | python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields | known affected: 70 | 2026-09-30T00:18:53+00:00 | Vulnerability · Source |
| CVE-2026-33814 | redhat_vex | net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame | fixed: 2046 known affected: 388 known not affected: 25141 under investigation: 496 | 2026-09-29T23:49:35+00:00 | Vulnerability · Source |
| CVE-2026-54876 | redhat_vex | openssl: openssl-src: OpenSSL: Memory leak leads to Denial of Service in OCSP response checking | fixed: 25 known affected: 29 known not affected: 47 under investigation: 128 | 2026-09-29T23:46:39+00:00 | Vulnerability · Source |
| CVE-2026-41178 | redhat_vex | github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers | fixed: 1075 known affected: 216 known not affected: 6386 | 2026-09-29T23:46:39+00:00 | Vulnerability · Source |
| CVE-2026-102930 | redhat_vex | virtualenv: virtualenv: Arbitrary code execution via unverified downloaded seed wheels | known affected: 43 known not affected: 5 | 2026-09-29T23:27:01+00:00 | Vulnerability · Source |
| CVE-2026-102496 | redhat_vex | org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service (DoS) via deeply nested schema structures | known affected: 13 known not affected: 5 | 2026-09-29T23:11:36+00:00 | Vulnerability · Source |
| CVE-2026-93748 | redhat_vex | http-cache-semantics: http-cache-semantics: Information Disclosure via max-stale directive | known affected: 225 known not affected: 4 | 2026-09-29T23:11:30+00:00 | Vulnerability · Source |
| CVE-2026-102495 | redhat_vex | org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service via unbounded recursion during schema parsing | known affected: 13 known not affected: 5 | 2026-09-29T23:11:30+00:00 | Vulnerability · Source |
| CVE-2026-100666 | redhat_vex | io.netty/netty-codec-http: Netty: HTTP response desynchronization via HttpServerCodec | known affected: 47 known not affected: 6 | 2026-09-29T23:11:30+00:00 | Vulnerability · Source |
| CVE-2026-84782 | redhat_vex | openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission | fixed: 35 known affected: 644 known not affected: 78 | 2026-09-29T23:11:30+00:00 | Vulnerability · Source |
| CVE-2026-89407 | redhat_vex | com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking | known affected: 166 known not affected: 11 | 2026-09-29T23:11:30+00:00 | Vulnerability · Source |
| CVE-2026-84784 | redhat_vex | openssl: OpenSSL: Denial of Service via unbounded QUIC connection identifier backlog | known affected: 2 known not affected: 1 | 2026-09-29T23:07:42+00:00 | Vulnerability · Source |
| CVE-2026-84783 | redhat_vex | openssl: openssl: Denial of Service via race condition in certificate extension caching | fixed: 22 known affected: 86 known not affected: 1 | 2026-09-29T23:07:42+00:00 | Vulnerability · Source |
| CVE-2026-75806 | redhat_vex | openssl: OpenSSL: Denial of Service via undersized DTLS record | known affected: 88 known not affected: 1 | 2026-09-29T23:07:37+00:00 | Vulnerability · Source |
| CVE-2026-77696 | redhat_vex | openssl: OpenSSL: Private key recovery via SM2 timing side-channel | known affected: 87 known not affected: 1 | 2026-09-29T23:07:37+00:00 | Vulnerability · Source |
| CVE-2026-75805 | redhat_vex | openssl: openssl: Denial of Service via crafted CMP certificate revocation response | known affected: 88 known not affected: 1 | 2026-09-29T23:07:35+00:00 | Vulnerability · Source |
| CVE-2026-72897 | redhat_vex | openssl: openssl: Denial of Service via out-of-bounds write during TLS context switch | known affected: 87 known not affected: 1 | 2026-09-29T23:07:33+00:00 | Vulnerability · Source |
| CVE-2026-54875 | redhat_vex | openssl: openssl: information disclosure via non-constant-time SM2 scalar multiplication on ARM64 and RISC-V | known affected: 87 known not affected: 1 | 2026-09-29T23:07:30+00:00 | Vulnerability · Source |
| CVE-2026-54873 | redhat_vex | openssl: openssl: Denial of Service via excessive QUIC packet buffer retention | known affected: 88 known not affected: 1 | 2026-09-29T23:07:27+00:00 | Vulnerability · Source |
| CVE-2026-75804 | redhat_vex | openssl: OpenSSL: Denial of Service via unenforced QUIC connection flow control | known affected: 87 known not affected: 1 | 2026-09-29T23:07:20+00:00 | Vulnerability · Source |
| CVE-2026-35191 | redhat_vex | openssl: openssl: Traffic amplification Denial of Service via QUIC packet over-accounting | known affected: 87 known not affected: 1 | 2026-09-29T23:07:15+00:00 | Vulnerability · Source |
| CVE-2026-54872 | redhat_vex | openssl: OpenSSL: Private key recovery via timing side-channel in generic elliptic curve operations | known affected: 88 known not affected: 1 | 2026-09-29T23:07:15+00:00 | Vulnerability · Source |
| CVE-2026-42772 | redhat_vex | openssl: openssl: Denial of Service via inefficient QUIC stream reassembly | known affected: 88 known not affected: 1 | 2026-09-29T23:07:15+00:00 | Vulnerability · Source |
| CVE-2026-35189 | redhat_vex | openssl: openssl: Denial of Service via excessive memory allocation in CRL distribution point processing | known affected: 88 known not affected: 1 | 2026-09-29T23:07:15+00:00 | Vulnerability · Source |
| CVE-2026-33818 | redhat_vex | encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal | fixed: 5482 known affected: 208 known not affected: 2554 | 2026-09-29T22:49:33+00:00 | Vulnerability · Source |
| CVE-2026-97950 | redhat_vex | kernel: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry | known not affected: 1 | 2026-09-29T22:49:33+00:00 | Vulnerability · Source |
| CVE-2026-97949 | redhat_vex | kernel: configfs: unhash the dentry before dropping the item in rmdir | known not affected: 1 | 2026-09-29T22:43:11+00:00 | Vulnerability · Source |
| CVE-2026-56860 | redhat_vex | net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution | fixed: 5541 known affected: 289 known not affected: 2947 | 2026-09-29T22:43:05+00:00 | Vulnerability · Source |
| CVE-2026-56859 | redhat_vex | encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue | fixed: 5032 known affected: 269 known not affected: 3161 | 2026-09-29T22:42:45+00:00 | Vulnerability · Source |
| CVE-2026-56858 | redhat_vex | html/template: golang: Go html/template: Cross-Site Scripting via pathological input | fixed: 5210 known affected: 236 known not affected: 2705 | 2026-09-29T22:42:44+00:00 | Vulnerability · Source |
| CVE-2026-97948 | redhat_vex | kernel: powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver | known not affected: 1 | 2026-09-29T22:37:23+00:00 | Vulnerability · Source |
| CVE-2026-102621 | redhat_vex | poppler: poppler: Denial of Service via integer overflow in SplashClip | known affected: 60 | 2026-09-29T22:37:18+00:00 | Vulnerability · Source |
| CVE-2026-97944 | redhat_vex | kernel: x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash() | known affected: 16 known not affected: 260 | 2026-09-29T22:37:15+00:00 | Vulnerability · Source |
| CVE-2026-95308 | redhat_vex | chromium-browser: chromium-browser: Information disclosure outside the sandbox via integer overflow in Metrics | known not affected: 1 | 2026-09-29T22:37:15+00:00 | Vulnerability · Source |
| CVE-2026-97492 | redhat_vex | kernel: wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed | known affected: 234 known not affected: 42 | 2026-09-29T22:37:14+00:00 | Vulnerability · Source |
| CVE-2026-97491 | redhat_vex | kernel: net/rds: Don't sleep inside rds_ib_conn_path_shutdown | known affected: 14 known not affected: 262 | 2026-09-29T22:37:13+00:00 | Vulnerability · Source |
| CVE-2026-97947 | redhat_vex | kernel: x86/amd_node: Fix potential NULL pointer dereference | known not affected: 1 | 2026-09-29T22:35:52+00:00 | Vulnerability · Source |
| CVE-2026-97946 | redhat_vex | kernel: x86/amd_node: Fix PCI device reference counting in amd_smn_init() | known not affected: 1 | 2026-09-29T22:35:40+00:00 | Vulnerability · Source |
| CVE-2025-68121 | redhat_vex | crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption | fixed: 8230 known affected: 186 known not affected: 9015 under investigation: 42 | 2026-09-29T22:30:41+00:00 | Vulnerability · Source |
| CVE-2025-61728 | redhat_vex | golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip | fixed: 7014 known affected: 113 known not affected: 4133 | 2026-09-29T22:30:26+00:00 | Vulnerability · Source |
| CVE-2025-58754 | redhat_vex | axios: Axios DoS via lack of data size check | fixed: 361 known affected: 41 known not affected: 1163 | 2026-09-29T22:30:17+00:00 | Vulnerability · Source |
| CVE-2025-58183 | redhat_vex | golang: archive/tar: Unbounded allocation when parsing GNU sparse map | fixed: 8922 known affected: 131 known not affected: 8348 | 2026-09-29T22:30:14+00:00 | Vulnerability · Source |
| CVE-2026-97945 | redhat_vex | kernel: x86/mm: Fix user-space data loss with MADV_FREE and THP | known affected: 200 known not affected: 76 | 2026-09-29T22:30:05+00:00 | Vulnerability · Source |
| CVE-2026-97943 | redhat_vex | kernel: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF | known affected: 76 known not affected: 200 | 2026-09-29T22:27:13+00:00 | Vulnerability · Source |
| CVE-2026-96749 | redhat_vex | pymongo: pymongo: Out-of-bounds write via integer overflow during BSON encoding | known affected: 23 | 2026-09-29T22:27:11+00:00 | Vulnerability · Source |
| CVE-2026-42502 | redhat_vex | golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering | fixed: 782 known affected: 244 known not affected: 5429 | 2026-09-29T22:27:08+00:00 | Vulnerability · Source |
| CVE-2024-24786 | redhat_vex | golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON | fixed: 2152 known affected: 112 known not affected: 11937 under investigation: 57 | 2026-09-29T22:23:19+00:00 | Vulnerability · Source |
| CVE-2023-39326 | redhat_vex | golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests | fixed: 2570 known affected: 72 known not affected: 987 | 2026-09-29T22:23:19+00:00 | Vulnerability · Source |
| CVE-2022-30631 | redhat_vex | golang: compress/gzip: stack exhaustion in Reader.Read | fixed: 4253 known affected: 91 known not affected: 2159 | 2026-09-29T22:23:15+00:00 | Vulnerability · Source |
| CVE-2026-97942 | redhat_vex | kernel: x86/alternatives: Exclude text poking against change_page_attr() | known affected: 90 known not affected: 186 | 2026-09-29T22:22:37+00:00 | Vulnerability · Source |