VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292142 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-4693 | redhat_vex | grub2: out-of-bounds read at fs/ntfs.c | fixed: 81 known affected: 22 | 2026-07-21T08:03:46+00:00 | Vulnerability · Source |
| CVE-2026-53401 | redhat_vex | kernel: fbdev: omap2: fix use-after-free in omapfb_mmap | known not affected: 275 | 2026-07-21T08:03:43+00:00 | Vulnerability · Source |
| CVE-2026-64165 | redhat_vex | kernel: ARM: integrator: Fix early initialization | known not affected: 274 | 2026-07-21T08:03:19+00:00 | Vulnerability · Source |
| CVE-2026-63806 | redhat_vex | kernel: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() | known not affected: 274 | 2026-07-21T08:03:15+00:00 | Vulnerability · Source |
| CVE-2026-64044 | redhat_vex | kernel: ovpn: respect peer refcount in CMD_NEW_PEER error path | known not affected: 275 | 2026-07-21T08:03:13+00:00 | Vulnerability · Source |
| CVE-2021-3981 | redhat_vex | grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content | fixed: 41 known affected: 22 known not affected: 16 | 2026-07-21T08:03:09+00:00 | Vulnerability · Source |
| CVE-2026-53389 | redhat_vex | kernel: net/tcp-ao: fix use-after-free of key in del_async path | known not affected: 275 | 2026-07-21T08:02:59+00:00 | Vulnerability · Source |
| CVE-2026-53390 | redhat_vex | kernel: ksmbd: fix out-of-bounds read in smb_check_perm_dacl() | known not affected: 275 | 2026-07-21T08:02:56+00:00 | Vulnerability · Source |
| CVE-2026-63828 | redhat_vex | kernel: apparmor: mediate the implicit connect of TCP fast open sendmsg | known not affected: 274 | 2026-07-21T08:02:44+00:00 | Vulnerability · Source |
| CVE-2026-28378 | redhat_vex | grafana: Grafana: Unauthorized public dashboard deletion across organizations | known not affected: 28 | 2026-07-21T08:02:43+00:00 | Vulnerability · Source |
| CVE-2026-63815 | redhat_vex | kernel: f2fs: bound i_inline_xattr_size for non-inline-xattr inodes | known not affected: 274 | 2026-07-21T08:02:06+00:00 | Vulnerability · Source |
| CVE-2026-64092 | redhat_vex | kernel: batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown | known not affected: 274 | 2026-07-21T08:01:56+00:00 | Vulnerability · Source |
| CVE-2026-63820 | redhat_vex | kernel: f2fs: fix missing read bio submission on large folio error | known not affected: 274 | 2026-07-21T08:01:31+00:00 | Vulnerability · Source |
| CVE-2026-63817 | redhat_vex | kernel: f2fs: validate compress cache inode only when enabled | known not affected: 274 | 2026-07-21T08:01:27+00:00 | Vulnerability · Source |
| CVE-2026-63814 | redhat_vex | kernel: f2fs: validate ACL entry sizes in f2fs_acl_from_disk() | known not affected: 274 | 2026-07-21T08:01:21+00:00 | Vulnerability · Source |
| CVE-2024-39329 | redhat_vex | python-django: Username enumeration through timing difference for users with unusable passwords | fixed: 14 known affected: 19 known not affected: 3729 | 2026-07-21T08:01:16+00:00 | Vulnerability · Source |
| CVE-2026-48935 | redhat_vex | nodejs: Node.js: Unauthorized file metadata modification | fixed: 255 known affected: 14 | 2026-07-21T08:01:14+00:00 | Vulnerability · Source |
| CVE-2026-64074 | redhat_vex | kernel: fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap | known not affected: 274 | 2026-07-21T07:52:33+00:00 | Vulnerability · Source |
| CVE-2026-64138 | redhat_vex | kernel: ksmbd: validate SID in parent security descriptor during ACL inheritance | known not affected: 275 | 2026-07-21T07:52:28+00:00 | Vulnerability · Source |
| CVE-2026-63832 | redhat_vex | kernel: wifi: mt76: add wcid publish check in mt76_sta_add | known affected: 232 known not affected: 42 | 2026-07-21T07:24:06+00:00 | Vulnerability · Source |
| CVE-2026-64117 | redhat_vex | kernel: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb | known affected: 246 known not affected: 29 | 2026-07-21T07:20:53+00:00 | Vulnerability · Source |
| CVE-2026-64076 | redhat_vex | kernel: netfilter: bridge: eb_tables: close module init race | known affected: 198 known not affected: 76 | 2026-07-21T07:20:49+00:00 | Vulnerability · Source |
| CVE-2026-64059 | redhat_vex | kernel: netfs: Fix folio->private handling in netfs_perform_write() | known affected: 76 known not affected: 199 | 2026-07-21T07:20:45+00:00 | Vulnerability · Source |
| CVE-2026-64053 | redhat_vex | kernel: block: don't overwrite bip_vcnt in bio_integrity_copy_user() | known affected: 184 known not affected: 90 | 2026-07-21T07:04:35+00:00 | Vulnerability · Source |
| CVE-2026-39879 | redhat_vex | syslog-ng: syslog-ng: SQL Injection vulnerability leading to denial of service and data manipulation | known not affected: 1 | 2026-07-21T07:04:08+00:00 | Vulnerability · Source |
| CVE-2026-46117 | redhat_vex | kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() | fixed: 762 known affected: 22 known not affected: 42 | 2026-07-21T06:59:58+00:00 | Vulnerability · Source |
| CVE-2026-64040 | redhat_vex | kernel: cachefiles: Fix error return when vfs_mkdir() fails | known affected: 14 known not affected: 260 | 2026-07-21T06:44:10+00:00 | Vulnerability · Source |
| CVE-2026-64079 | redhat_vex | kernel: netfilter: x_tables: allocate hook ops while under mutex | known affected: 198 known not affected: 76 | 2026-07-21T06:27:26+00:00 | Vulnerability · Source |
| CVE-2026-64143 | redhat_vex | kernel: platform/x86: uniwill-laptop: Do not enable the charging limit even when forced | known not affected: 274 | 2026-07-21T06:23:10+00:00 | Vulnerability · Source |
| CVE-2026-64188 | redhat_vex | kernel: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() | known not affected: 275 | 2026-07-21T06:22:57+00:00 | Vulnerability · Source |
| CVE-2026-64093 | redhat_vex | kernel: batman-adv: tp_meter: directly shut down timer on cleanup | known not affected: 274 | 2026-07-21T06:22:55+00:00 | Vulnerability · Source |
| CVE-2026-64036 | redhat_vex | kernel: cgroup/rstat: validate cpu before css_rstat_cpu() access | known affected: 198 known not affected: 76 | 2026-07-21T06:22:52+00:00 | Vulnerability · Source |
| CVE-2026-64114 | redhat_vex | kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 | known affected: 274 known not affected: 1 | 2026-07-21T06:02:20+00:00 | Vulnerability · Source |
| CVE-2026-43216 | redhat_vex | kernel: net: Drop the lock in skb_may_tx_timestamp() | known affected: 246 known not affected: 28 | 2026-07-21T05:49:57+00:00 | Vulnerability · Source |
| CVE-2026-45988 | redhat_vex | kernel: rxrpc: Fix re-decryption of RESPONSE packets | known affected: 184 known not affected: 90 | 2026-07-21T05:44:16+00:00 | Vulnerability · Source |
| CVE-2026-64081 | redhat_vex | kernel: firmware: arm_ffa: Validate framework notification message layout | known not affected: 274 | 2026-07-21T05:43:54+00:00 | Vulnerability · Source |
| CVE-2026-64135 | redhat_vex | kernel: hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX | known not affected: 275 | 2026-07-21T05:15:42+00:00 | Vulnerability · Source |
| CVE-2026-12382 | redhat_vex | aap-gateway: missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing | fixed: 9 known not affected: 653 | 2026-07-21T04:16:22+00:00 | Vulnerability · Source |
| CVE-2026-42503 | redhat_vex | golang: golang.org/x/tools/gopls: gopls: Arbitrary code execution due to insecure network binding | fixed: 8 known not affected: 1 | 2026-07-21T04:00:42+00:00 | Vulnerability · Source |
| CVE-2026-41642 | redhat_vex | github.com/osrg/gobgp: golang: GoBGP: Denial of Service via malformed BGP UPDATE message | known not affected: 1 | 2026-07-21T03:50:22+00:00 | Vulnerability · Source |
| CVE-2026-42285 | redhat_vex | github.com/osrg/gobgp: golang: GoBGP: Denial of Service due to specially crafted BGP UPDATE message | known not affected: 1 | 2026-07-21T03:31:05+00:00 | Vulnerability · Source |
| CVE-2026-44312 | redhat_vex | css_parser: css_parser: Man-in-the-Middle attack due to improper HTTPS certificate validation | known affected: 5 | 2026-07-21T02:01:54+00:00 | Vulnerability · Source |
| CVE-2026-3842 | microsoft_vex | Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write | fixed: 1 known affected: 1 | 2026-07-21T01:42:10+00:00 | Vulnerability · Source |
| CVE-2026-38755 | microsoft_vex | A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. | fixed: 1 known affected: 1 | 2026-07-21T01:42:02+00:00 | Vulnerability · Source |
| CVE-2026-38754 | microsoft_vex | A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. | fixed: 1 known affected: 1 | 2026-07-21T01:41:54+00:00 | Vulnerability · Source |
| CVE-2026-60081 | microsoft_vex | DBI::ProfileData versions before 1.651 for Perl do not limit the path index | fixed: 1 known affected: 1 | 2026-07-21T01:41:32+00:00 | Vulnerability · Source |
| CVE-2026-15392 | microsoft_vex | DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location | fixed: 1 known affected: 1 | 2026-07-21T01:41:24+00:00 | Vulnerability · Source |
| CVE-2026-60082 | microsoft_vex | DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row | fixed: 1 known affected: 1 | 2026-07-21T01:41:17+00:00 | Vulnerability · Source |
| CVE-2026-15043 | microsoft_vex | DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text | fixed: 1 known affected: 1 | 2026-07-21T01:41:10+00:00 | Vulnerability · Source |
| CVE-2026-57433 | microsoft_vex | Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record | fixed: 1 known affected: 1 | 2026-07-21T01:41:02+00:00 | Vulnerability · Source |