VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292225 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-44029 | redhat_vex | nix: absolute path traversal when unpacking archives to disk | fixed: 14 | 2026-07-15T14:29:51+00:00 | Vulnerability · Source |
| CVE-2026-44028 | redhat_vex | nix: coroutine stack-to-heap overflow via unbounded recursion in NAR directory parser | fixed: 14 | 2026-07-15T14:29:47+00:00 | Vulnerability · Source |
| CVE-2026-23479 | redhat_vex | redis: use-after-free in unblock client flow may allow remote code execution | fixed: 95 known not affected: 8 | 2026-07-15T14:29:40+00:00 | Vulnerability · Source |
| CVE-2026-59870 | redhat_vex | js-yaml: js-yaml: Denial of Service via crafted YAML ordered-map document | fixed: 30 known affected: 1 known not affected: 189 | 2026-07-15T14:29:06+00:00 | Vulnerability · Source |
| CVE-2026-59724 | redhat_vex | engine.io: Engine.IO: Denial of Service via crafted WebTransport session ID | fixed: 3 known affected: 4 | 2026-07-15T14:19:44+00:00 | Vulnerability · Source |
| CVE-2026-11807 | redhat_vex | eda-server: websocket missing authorization allows credential theft via activation_id spoofing | fixed: 28 known not affected: 202 | 2026-07-15T14:19:38+00:00 | Vulnerability · Source |
| CVE-2026-12112 | redhat_vex | foreman-mcp-server: MCP Server: Active Session Hijacking via Insecure Session State Reuse | fixed: 2 | 2026-07-15T14:19:36+00:00 | Vulnerability · Source |
| CVE-2026-42530 | redhat_vex | nginx: ngx_http_v3_module: use-after-free issue leads to denial of service | fixed: 4 known not affected: 65 | 2026-07-15T14:18:23+00:00 | Vulnerability · Source |
| CVE-2026-25243 | redhat_vex | redis: RESTORE invalid memory access may allow remote code execution | fixed: 251 known not affected: 1 | 2026-07-15T14:17:52+00:00 | Vulnerability · Source |
| CVE-2026-23631 | redhat_vex | redis: Remote code execution via use-after-free in Lua scripting | fixed: 109 known not affected: 1 under investigation: 8 | 2026-07-15T14:17:51+00:00 | Vulnerability · Source |
| CVE-2026-15146 | redhat_vex | wget: Wget: Server-Side Request Forgery via FTP PASV response IP address validation bypass | known affected: 9 | 2026-07-15T14:16:35+00:00 | Vulnerability · Source |
| CVE-2026-53015 | redhat_vex | kernel: erofs: unify lcn as u64 for 32-bit platforms | known affected: 76 known not affected: 198 | 2026-07-15T14:07:06+00:00 | Vulnerability · Source |
| CVE-2026-53014 | redhat_vex | kernel: net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir | known affected: 198 known not affected: 76 | 2026-07-15T14:06:52+00:00 | Vulnerability · Source |
| CVE-2026-13030 | redhat_vex | chromium-browser: chromium-browser: Uninitialized Use in GPU | known not affected: 1 | 2026-07-15T13:26:56+00:00 | Vulnerability · Source |
| CVE-2026-52994 | redhat_vex | kernel: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting | known affected: 184 known not affected: 90 | 2026-07-15T13:17:29+00:00 | Vulnerability · Source |
| CVE-2026-52995 | redhat_vex | kernel: net/rds: zero per-item info buffer before handing it to visitors | known affected: 14 known not affected: 260 | 2026-07-15T13:17:27+00:00 | Vulnerability · Source |
| CVE-2026-34487 | redhat_vex | Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files | fixed: 43 known affected: 55 under investigation: 1 | 2026-07-15T13:15:11+00:00 | Vulnerability · Source |
| CVE-2026-34483 | redhat_vex | Apache Tomcat: Apache Tomcat: Information disclosure due to improper encoding in JsonAccessLogValve | fixed: 43 known affected: 55 under investigation: 1 | 2026-07-15T13:15:10+00:00 | Vulnerability · Source |
| CVE-2026-29129 | redhat_vex | Apache Tomcat: Apache Tomcat: Configured cipher preference order not preserved | fixed: 9 known affected: 55 known not affected: 2 | 2026-07-15T13:15:07+00:00 | Vulnerability · Source |
| CVE-2026-25854 | redhat_vex | Apache Tomcat: Apache Tomcat: Open Redirect vulnerability via LoadBalancerDrainingValve | fixed: 43 known affected: 56 | 2026-07-15T13:15:06+00:00 | Vulnerability · Source |
| CVE-2026-24880 | redhat_vex | Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension | fixed: 43 known affected: 56 | 2026-07-15T13:15:04+00:00 | Vulnerability · Source |
| CVE-2026-29145 | redhat_vex | Apache Tomcat: Apache Tomcat: Authentication bypass due to CLIENT_CERT soft fail misconfiguration | fixed: 43 known affected: 56 | 2026-07-15T13:14:50+00:00 | Vulnerability · Source |
| CVE-2026-24734 | redhat_vex | tomcat: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation | fixed: 74 known affected: 1 known not affected: 37 | 2026-07-15T13:13:36+00:00 | Vulnerability · Source |
| CVE-2026-15779 | redhat_vex | samba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validation | known affected: 5 | 2026-07-15T13:06:57+00:00 | Vulnerability · Source |
| CVE-2026-46635 | redhat_vex | twig/twig: Twig: Information disclosure via column filter in template language | known not affected: 1 | 2026-07-15T12:49:31+00:00 | Vulnerability · Source |
| CVE-2026-47730 | redhat_vex | twig/twig: Twig: Cross-site Scripting (XSS) vulnerability in HTML profiler dump | known not affected: 1 | 2026-07-15T12:49:30+00:00 | Vulnerability · Source |
| CVE-2026-48808 | redhat_vex | twig/twig: Twig: Information Disclosure via Sandbox Bypass in Column Filter | known not affected: 1 | 2026-07-15T12:49:30+00:00 | Vulnerability · Source |
| CVE-2026-48805 | redhat_vex | twig/twig: Twig: Sandbox bypass vulnerability via deprecated internal wrappers | known not affected: 1 | 2026-07-15T12:49:28+00:00 | Vulnerability · Source |
| CVE-2026-53633 | redhat_vex | @vitest/browser: vite-plus: Vitest: Remote code execution via exposed Chrome DevTools Protocol API | known not affected: 1 | 2026-07-15T12:35:56+00:00 | Vulnerability · Source |
| CVE-2026-48806 | redhat_vex | twig/twig: Twig: Information disclosure and limited data modification via sandbox bypass | known not affected: 1 | 2026-07-15T12:29:14+00:00 | Vulnerability · Source |
| CVE-2026-46633 | redhat_vex | twig/twig: Twig: Arbitrary code execution via crafted template name | known not affected: 1 | 2026-07-15T12:29:13+00:00 | Vulnerability · Source |
| CVE-2026-49981 | redhat_vex | twig/twig: Twig: Information disclosure via sandbox bypass | known not affected: 1 | 2026-07-15T12:28:51+00:00 | Vulnerability · Source |
| CVE-2026-46639 | redhat_vex | twig/twig: Twig: Sandbox bypass allows information disclosure and method invocation | known not affected: 1 | 2026-07-15T12:27:46+00:00 | Vulnerability · Source |
| CVE-2026-46638 | redhat_vex | twig/twig: Twig: Security bypass allows unauthorized template execution | known not affected: 1 | 2026-07-15T12:25:18+00:00 | Vulnerability · Source |
| CVE-2026-46640 | redhat_vex | twig/twig: Twig: Arbitrary code execution via improper handling of dynamic attributes | known not affected: 1 | 2026-07-15T12:24:57+00:00 | Vulnerability · Source |
| CVE-2026-48807 | redhat_vex | twig/twig: Twig: Sandbox bypass allows information disclosure | known not affected: 1 | 2026-07-15T12:24:43+00:00 | Vulnerability · Source |
| CVE-2026-47732 | redhat_vex | twig/twig: Twig: Security policy bypass leads to information disclosure | known not affected: 1 | 2026-07-15T12:24:34+00:00 | Vulnerability · Source |
| CVE-2026-47736 | redhat_vex | puma: Puma: Denial of Service due to unbounded memory growth in PROXY protocol v1 | known not affected: 19 | 2026-07-15T10:17:11+00:00 | Vulnerability · Source |
| CVE-2026-47737 | redhat_vex | puma: Puma: Source IP spoofing via PROXY protocol header re-parsing | known not affected: 19 | 2026-07-15T10:16:31+00:00 | Vulnerability · Source |
| CVE-2026-42997 | redhat_vex | OpenStack Ironic: OpenStack Ironic: Information disclosure via credential forwarding during mold import | fixed: 4 known affected: 9 known not affected: 4 | 2026-07-15T09:56:18+00:00 | Vulnerability · Source |
| CVE-2026-6523 | redhat_vex | wireshark: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark | known affected: 4 known not affected: 16 | 2026-07-15T09:08:31+00:00 | Vulnerability · Source |
| CVE-2026-6525 | redhat_vex | wireshark: NULL Pointer Dereference in Wireshark | known not affected: 20 | 2026-07-15T09:08:30+00:00 | Vulnerability · Source |
| CVE-2026-9759 | redhat_vex | wireshark: NULL Pointer Dereference in Wireshark | known affected: 4 known not affected: 16 | 2026-07-15T09:07:15+00:00 | Vulnerability · Source |
| CVE-2026-5299 | redhat_vex | wireshark: Uncontrolled Recursion in Wireshark | known affected: 4 known not affected: 16 | 2026-07-15T09:07:12+00:00 | Vulnerability · Source |
| CVE-2026-14251 | redhat_vex | gitops-operator: gitops-operator: Missing allowedNamespace check in ReconcilerHook for ClusterRole/Role cases enables potential privilege escalation and DoS | known affected: 2 | 2026-07-15T08:06:07+00:00 | Vulnerability · Source |
| CVE-2025-38521 | suse_vex | SUSE CVE CVE-2025-38521 | first fixed: 2 known affected: 394 known not affected: 391 recommended: 256 | 2026-07-15T06:07:44+00:00 | Vulnerability · Source |
| CVE-2025-38557 | suse_vex | SUSE CVE CVE-2025-38557 | first fixed: 2 known not affected: 414 recommended: 127 | 2026-07-15T06:07:07+00:00 | Vulnerability · Source |
| CVE-2025-39811 | suse_vex | SUSE CVE CVE-2025-39811 | first fixed: 2 known affected: 394 known not affected: 351 recommended: 238 | 2026-07-15T06:02:34+00:00 | Vulnerability · Source |
| CVE-2025-39816 | suse_vex | SUSE CVE CVE-2025-39816 | first fixed: 2 known affected: 456 known not affected: 317 recommended: 238 | 2026-07-15T06:02:29+00:00 | Vulnerability · Source |
| CVE-2025-39834 | suse_vex | SUSE CVE CVE-2025-39834 | first fixed: 2 known affected: 456 known not affected: 317 recommended: 238 | 2026-07-15T06:02:09+00:00 | Vulnerability · Source |