VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
305789 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-77408 | redhat_vex | github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow | known affected: 9 known not affected: 5 | 2026-10-08T12:03:08+00:00 | Vulnerability · Source |
| CVE-2026-77301 | redhat_vex | adm-zip: adm-zip: Denial of Service via uncontrolled memory allocation | known affected: 24 known not affected: 2 | 2026-10-08T12:03:07+00:00 | Vulnerability · Source |
| CVE-2026-22028 | redhat_vex | preact: Preact: Arbitrary script execution via JSON serialization protection bypass | fixed: 1 known affected: 16 known not affected: 691 | 2026-10-08T12:03:02+00:00 | Vulnerability · Source |
| CVE-2026-98366 | redhat_vex | kernel: RDMA/rxe: validate access flags before swapping the MR's PD | known affected: 107 known not affected: 170 | 2026-10-08T12:02:53+00:00 | Vulnerability · Source |
| CVE-2026-102409 | redhat_vex | elasticsearch: Elasticsearch: Denial of Service via uncontrolled recursion | known affected: 1 known not affected: 2 | 2026-10-08T12:02:35+00:00 | Vulnerability · Source |
| CVE-2026-89058 | redhat_vex | resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config | known affected: 91 | 2026-10-08T12:02:24+00:00 | Vulnerability · Source |
| CVE-2026-98365 | redhat_vex | kernel: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access | known affected: 186 known not affected: 91 | 2026-10-08T12:02:22+00:00 | Vulnerability · Source |
| CVE-2026-98175 | redhat_vex | kernel: smb: client: cancel reconnect work in clean_demultiplex_info() | known affected: 235 known not affected: 42 | 2026-10-08T12:02:18+00:00 | Vulnerability · Source |
| CVE-2026-98174 | redhat_vex | kernel: smb: client: fix rlist race and missing initialization | known affected: 235 known not affected: 42 | 2026-10-08T12:02:17+00:00 | Vulnerability · Source |
| CVE-2026-98363 | redhat_vex | kernel: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS | known affected: 235 known not affected: 42 | 2026-10-08T12:02:16+00:00 | Vulnerability · Source |
| CVE-2026-93019 | redhat_vex | perl-Imager: Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read | known not affected: 1 | 2026-10-08T12:02:16+00:00 | Vulnerability · Source |
| CVE-2026-45991 | redhat_vex | kernel: udf: fix partition descriptor append bookkeeping | fixed: 1311 known affected: 22 known not affected: 28 under investigation: 14 | 2026-10-08T12:01:58+00:00 | Vulnerability · Source |
| CVE-2026-43186 | redhat_vex | kernel: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() | fixed: 616 known affected: 14 known not affected: 184 | 2026-10-08T12:01:57+00:00 | Vulnerability · Source |
| CVE-2025-40237 | redhat_vex | kernel: fs/notify: call exportfs_encode_fid with s_umount | fixed: 616 known affected: 108 known not affected: 90 | 2026-10-08T12:01:56+00:00 | Vulnerability · Source |
| CVE-2026-80864 | redhat_vex | kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp | fixed: 852 known affected: 186 known not affected: 91 | 2026-10-08T12:01:48+00:00 | Vulnerability · Source |
| CVE-2026-80863 | redhat_vex | kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources() | fixed: 852 known affected: 169 known not affected: 108 | 2026-10-08T12:01:46+00:00 | Vulnerability · Source |
| CVE-2026-46133 | redhat_vex | kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing | fixed: 1305 known affected: 50 known not affected: 91 | 2026-10-08T12:01:37+00:00 | Vulnerability · Source |
| CVE-2026-46114 | redhat_vex | kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads | fixed: 841 known affected: 22 known not affected: 167 | 2026-10-08T12:01:36+00:00 | Vulnerability · Source |
| CVE-2026-46043 | redhat_vex | kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv | fixed: 1305 known affected: 50 known not affected: 91 | 2026-10-08T12:01:35+00:00 | Vulnerability · Source |
| CVE-2026-45910 | redhat_vex | kernel: RDMA/rxe: Fix race condition in QP timer handlers | fixed: 841 known affected: 22 known not affected: 167 | 2026-10-08T12:01:30+00:00 | Vulnerability · Source |
| CVE-2026-91956 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel | fixed: 195 known affected: 12 | 2026-10-08T12:01:26+00:00 | Vulnerability · Source |
| CVE-2026-91954 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command | fixed: 195 known affected: 12 | 2026-10-08T12:01:24+00:00 | Vulnerability · Source |
| CVE-2026-91953 | redhat_vex | FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption. | fixed: 195 known affected: 12 | 2026-10-08T12:01:22+00:00 | Vulnerability · Source |
| CVE-2026-91959 | redhat_vex | FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway | fixed: 195 known affected: 12 | 2026-10-08T12:01:21+00:00 | Vulnerability · Source |
| CVE-2025-26791 | redhat_vex | dompurify: Mutation XSS in DOMPurify Due to Improper Template Literal Handling | fixed: 285 known affected: 36 known not affected: 418 | 2026-10-08T12:00:14+00:00 | Vulnerability · Source |
| CVE-2025-24976 | redhat_vex | distribution: Distribution's token authentication allows attacker to inject an untrusted signing key in a JWT | fixed: 24 known affected: 12 known not affected: 300 | 2026-10-08T11:59:59+00:00 | Vulnerability · Source |
| CVE-2024-21536 | redhat_vex | http-proxy-middleware: http-proxy-middleware: Denial of Service via unhandled error during path matching | fixed: 253 known affected: 58 known not affected: 960 | 2026-10-08T11:59:42+00:00 | Vulnerability · Source |
| CVE-2023-26125 | redhat_vex | golang-github-gin-gonic-gin: Improper Input Validation | fixed: 9 known affected: 15 known not affected: 906 | 2026-10-08T11:59:16+00:00 | Vulnerability · Source |
| CVE-2024-8184 | redhat_vex | org.eclipse.jetty:jetty-server: jetty: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks | fixed: 3 known affected: 11 known not affected: 6 | 2026-10-08T11:59:02+00:00 | Vulnerability · Source |
| CVE-2024-2700 | redhat_vex | quarkus-core: Leak of local configuration properties into Quarkus applications | fixed: 146 known affected: 7 known not affected: 2067 | 2026-10-08T11:59:00+00:00 | Vulnerability · Source |
| CVE-2023-1428 | redhat_vex | gRPC: Reachable Assertion | fixed: 9 known affected: 6 known not affected: 299 | 2026-10-08T11:58:37+00:00 | Vulnerability · Source |
| CVE-2023-29401 | redhat_vex | golang-github-gin-gonic-gin: Gin Web Framework does not properly sanitize filename parameter of Context.FileAttachment function | fixed: 13 known affected: 16 known not affected: 2030 | 2026-10-08T11:58:19+00:00 | Vulnerability · Source |
| CVE-2024-9676 | redhat_vex | Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) | fixed: 711 known affected: 19 known not affected: 4893 | 2026-10-08T11:58:04+00:00 | Vulnerability · Source |
| CVE-2026-104846 | redhat_vex | seroval: Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940) | known affected: 1 | 2026-10-08T11:57:54+00:00 | Vulnerability · Source |
| CVE-2026-102282 | redhat_vex | adm-zip: adm-zip: Privilege escalation via unfiltered permission bits in extracted archives | known affected: 22 known not affected: 2 | 2026-10-08T11:57:50+00:00 | Vulnerability · Source |
| CVE-2024-1139 | redhat_vex | cluster-monitoring-operator: credentials leak | fixed: 679 known affected: 1 known not affected: 1945 | 2026-10-08T11:57:15+00:00 | Vulnerability · Source |
| CVE-2023-3462 | redhat_vex | Hashicorp/vault: Vault’s LDAP Auth Method Allows for User Enumeration | fixed: 15 known affected: 4 known not affected: 1492 | 2026-10-08T11:57:14+00:00 | Vulnerability · Source |
| CVE-2024-45230 | redhat_vex | python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() | fixed: 8 known affected: 14 known not affected: 115 | 2026-10-08T11:57:07+00:00 | Vulnerability · Source |
| CVE-2024-39249 | redhat_vex | nodejs-async: Regular expression denial of service while parsing function in autoinject | fixed: 57 known affected: 28 known not affected: 453 | 2026-10-08T11:56:45+00:00 | Vulnerability · Source |
| CVE-2024-42461 | redhat_vex | elliptic: nodejs/elliptic: ECDSA implementation malleability due to BER-enconded signatures being allowed | fixed: 733 known affected: 41 known not affected: 362 | 2026-10-08T11:54:54+00:00 | Vulnerability · Source |
| CVE-2024-42460 | redhat_vex | elliptic: nodejs/elliptic: ECDSA signature malleability due to missing checks | fixed: 733 known affected: 36 known not affected: 352 | 2026-10-08T11:54:52+00:00 | Vulnerability · Source |
| CVE-2024-42459 | redhat_vex | elliptic: nodejs/elliptic: EDDSA signature malleability due to missing signature length check | fixed: 733 known affected: 19 known not affected: 381 | 2026-10-08T11:54:51+00:00 | Vulnerability · Source |
| CVE-2024-0874 | redhat_vex | coredns: CD bit response is cached and served later | fixed: 16 known affected: 1 known not affected: 2034 | 2026-10-08T11:54:39+00:00 | Vulnerability · Source |
| CVE-2024-42005 | redhat_vex | python-django: Potential SQL injection in QuerySet.values() and values_list() | fixed: 26 known affected: 4 known not affected: 3976 | 2026-10-08T11:54:32+00:00 | Vulnerability · Source |
| CVE-2024-41991 | redhat_vex | python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget | fixed: 22 known affected: 2 known not affected: 407 | 2026-10-08T11:54:26+00:00 | Vulnerability · Source |
| CVE-2024-41990 | redhat_vex | python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() | fixed: 14 known affected: 5 known not affected: 337 | 2026-10-08T11:54:23+00:00 | Vulnerability · Source |
| CVE-2024-41989 | redhat_vex | python-django: Memory exhaustion in django.utils.numberformat.floatformat() | fixed: 18 known affected: 7 known not affected: 450 | 2026-10-08T11:54:18+00:00 | Vulnerability · Source |
| CVE-2018-12608 | redhat_vex | moby: cert signing bypass | fixed: 40 known affected: 3 known not affected: 5 | 2026-10-08T11:54:09+00:00 | Vulnerability · Source |
| CVE-2024-45801 | redhat_vex | dompurify: XSS vulnerability via prototype pollution | fixed: 270 known affected: 19 known not affected: 768 | 2026-10-08T11:53:45+00:00 | Vulnerability · Source |
| CVE-2024-34158 | redhat_vex | go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion | fixed: 4783 known affected: 64 known not affected: 2270 | 2026-10-08T11:53:42+00:00 | Vulnerability · Source |