VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292257 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-13030 | redhat_vex | chromium-browser: chromium-browser: Uninitialized Use in GPU | known not affected: 1 | 2026-07-15T13:26:56+00:00 | Vulnerability · Source |
| CVE-2026-52994 | redhat_vex | kernel: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting | known affected: 184 known not affected: 90 | 2026-07-15T13:17:29+00:00 | Vulnerability · Source |
| CVE-2026-52995 | redhat_vex | kernel: net/rds: zero per-item info buffer before handing it to visitors | known affected: 14 known not affected: 260 | 2026-07-15T13:17:27+00:00 | Vulnerability · Source |
| CVE-2026-34487 | redhat_vex | Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files | fixed: 43 known affected: 55 under investigation: 1 | 2026-07-15T13:15:11+00:00 | Vulnerability · Source |
| CVE-2026-34483 | redhat_vex | Apache Tomcat: Apache Tomcat: Information disclosure due to improper encoding in JsonAccessLogValve | fixed: 43 known affected: 55 under investigation: 1 | 2026-07-15T13:15:10+00:00 | Vulnerability · Source |
| CVE-2026-29129 | redhat_vex | Apache Tomcat: Apache Tomcat: Configured cipher preference order not preserved | fixed: 9 known affected: 55 known not affected: 2 | 2026-07-15T13:15:07+00:00 | Vulnerability · Source |
| CVE-2026-25854 | redhat_vex | Apache Tomcat: Apache Tomcat: Open Redirect vulnerability via LoadBalancerDrainingValve | fixed: 43 known affected: 56 | 2026-07-15T13:15:06+00:00 | Vulnerability · Source |
| CVE-2026-24880 | redhat_vex | Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension | fixed: 43 known affected: 56 | 2026-07-15T13:15:04+00:00 | Vulnerability · Source |
| CVE-2026-29145 | redhat_vex | Apache Tomcat: Apache Tomcat: Authentication bypass due to CLIENT_CERT soft fail misconfiguration | fixed: 43 known affected: 56 | 2026-07-15T13:14:50+00:00 | Vulnerability · Source |
| CVE-2026-24734 | redhat_vex | tomcat: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation | fixed: 74 known affected: 1 known not affected: 37 | 2026-07-15T13:13:36+00:00 | Vulnerability · Source |
| CVE-2026-15779 | redhat_vex | samba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validation | known affected: 5 | 2026-07-15T13:06:57+00:00 | Vulnerability · Source |
| CVE-2026-46635 | redhat_vex | twig/twig: Twig: Information disclosure via column filter in template language | known not affected: 1 | 2026-07-15T12:49:31+00:00 | Vulnerability · Source |
| CVE-2026-47730 | redhat_vex | twig/twig: Twig: Cross-site Scripting (XSS) vulnerability in HTML profiler dump | known not affected: 1 | 2026-07-15T12:49:30+00:00 | Vulnerability · Source |
| CVE-2026-48808 | redhat_vex | twig/twig: Twig: Information Disclosure via Sandbox Bypass in Column Filter | known not affected: 1 | 2026-07-15T12:49:30+00:00 | Vulnerability · Source |
| CVE-2026-48805 | redhat_vex | twig/twig: Twig: Sandbox bypass vulnerability via deprecated internal wrappers | known not affected: 1 | 2026-07-15T12:49:28+00:00 | Vulnerability · Source |
| CVE-2026-53633 | redhat_vex | @vitest/browser: vite-plus: Vitest: Remote code execution via exposed Chrome DevTools Protocol API | known not affected: 1 | 2026-07-15T12:35:56+00:00 | Vulnerability · Source |
| CVE-2026-48806 | redhat_vex | twig/twig: Twig: Information disclosure and limited data modification via sandbox bypass | known not affected: 1 | 2026-07-15T12:29:14+00:00 | Vulnerability · Source |
| CVE-2026-46633 | redhat_vex | twig/twig: Twig: Arbitrary code execution via crafted template name | known not affected: 1 | 2026-07-15T12:29:13+00:00 | Vulnerability · Source |
| CVE-2026-49981 | redhat_vex | twig/twig: Twig: Information disclosure via sandbox bypass | known not affected: 1 | 2026-07-15T12:28:51+00:00 | Vulnerability · Source |
| CVE-2026-46639 | redhat_vex | twig/twig: Twig: Sandbox bypass allows information disclosure and method invocation | known not affected: 1 | 2026-07-15T12:27:46+00:00 | Vulnerability · Source |
| CVE-2026-46638 | redhat_vex | twig/twig: Twig: Security bypass allows unauthorized template execution | known not affected: 1 | 2026-07-15T12:25:18+00:00 | Vulnerability · Source |
| CVE-2026-46640 | redhat_vex | twig/twig: Twig: Arbitrary code execution via improper handling of dynamic attributes | known not affected: 1 | 2026-07-15T12:24:57+00:00 | Vulnerability · Source |
| CVE-2026-48807 | redhat_vex | twig/twig: Twig: Sandbox bypass allows information disclosure | known not affected: 1 | 2026-07-15T12:24:43+00:00 | Vulnerability · Source |
| CVE-2026-47732 | redhat_vex | twig/twig: Twig: Security policy bypass leads to information disclosure | known not affected: 1 | 2026-07-15T12:24:34+00:00 | Vulnerability · Source |
| CVE-2026-47736 | redhat_vex | puma: Puma: Denial of Service due to unbounded memory growth in PROXY protocol v1 | known not affected: 19 | 2026-07-15T10:17:11+00:00 | Vulnerability · Source |
| CVE-2026-47737 | redhat_vex | puma: Puma: Source IP spoofing via PROXY protocol header re-parsing | known not affected: 19 | 2026-07-15T10:16:31+00:00 | Vulnerability · Source |
| CVE-2026-42997 | redhat_vex | OpenStack Ironic: OpenStack Ironic: Information disclosure via credential forwarding during mold import | fixed: 4 known affected: 9 known not affected: 4 | 2026-07-15T09:56:18+00:00 | Vulnerability · Source |
| CVE-2026-6523 | redhat_vex | wireshark: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark | known affected: 4 known not affected: 16 | 2026-07-15T09:08:31+00:00 | Vulnerability · Source |
| CVE-2026-6525 | redhat_vex | wireshark: NULL Pointer Dereference in Wireshark | known not affected: 20 | 2026-07-15T09:08:30+00:00 | Vulnerability · Source |
| CVE-2026-9759 | redhat_vex | wireshark: NULL Pointer Dereference in Wireshark | known affected: 4 known not affected: 16 | 2026-07-15T09:07:15+00:00 | Vulnerability · Source |
| CVE-2026-5299 | redhat_vex | wireshark: Uncontrolled Recursion in Wireshark | known affected: 4 known not affected: 16 | 2026-07-15T09:07:12+00:00 | Vulnerability · Source |
| CVE-2026-14251 | redhat_vex | gitops-operator: gitops-operator: Missing allowedNamespace check in ReconcilerHook for ClusterRole/Role cases enables potential privilege escalation and DoS | known affected: 2 | 2026-07-15T08:06:07+00:00 | Vulnerability · Source |
| CVE-2025-38521 | suse_vex | SUSE CVE CVE-2025-38521 | first fixed: 2 known affected: 394 known not affected: 391 recommended: 256 | 2026-07-15T06:07:44+00:00 | Vulnerability · Source |
| CVE-2025-38557 | suse_vex | SUSE CVE CVE-2025-38557 | first fixed: 2 known not affected: 414 recommended: 127 | 2026-07-15T06:07:07+00:00 | Vulnerability · Source |
| CVE-2025-39811 | suse_vex | SUSE CVE CVE-2025-39811 | first fixed: 2 known affected: 394 known not affected: 351 recommended: 238 | 2026-07-15T06:02:34+00:00 | Vulnerability · Source |
| CVE-2025-39816 | suse_vex | SUSE CVE CVE-2025-39816 | first fixed: 2 known affected: 456 known not affected: 317 recommended: 238 | 2026-07-15T06:02:29+00:00 | Vulnerability · Source |
| CVE-2025-39834 | suse_vex | SUSE CVE CVE-2025-39834 | first fixed: 2 known affected: 456 known not affected: 317 recommended: 238 | 2026-07-15T06:02:09+00:00 | Vulnerability · Source |
| CVE-2025-39929 | suse_vex | SUSE CVE CVE-2025-39929 | known affected: 394 known not affected: 386 recommended: 23 | 2026-07-15T06:00:52+00:00 | Vulnerability · Source |
| CVE-2025-40162 | suse_vex | SUSE CVE CVE-2025-40162 | first fixed: 2 known not affected: 403 recommended: 127 | 2026-07-15T05:57:29+00:00 | Vulnerability · Source |
| CVE-2025-40327 | suse_vex | SUSE CVE CVE-2025-40327 | known not affected: 406 | 2026-07-15T05:54:51+00:00 | Vulnerability · Source |
| CVE-2025-40907 | suse_vex | SUSE CVE CVE-2025-40907 | recommended: 3 | 2026-07-15T05:54:11+00:00 | Vulnerability · Source |
| CVE-2025-49014 | suse_vex | SUSE CVE CVE-2025-49014 | known not affected: 110 recommended: 3 | 2026-07-15T05:52:54+00:00 | Vulnerability · Source |
| CVE-2025-52890 | suse_vex | SUSE CVE CVE-2025-52890 | recommended: 7 | 2026-07-15T05:52:29+00:00 | Vulnerability · Source |
| CVE-2025-53013 | suse_vex | SUSE CVE CVE-2025-53013 | recommended: 32 | 2026-07-15T05:52:26+00:00 | Vulnerability · Source |
| CVE-2025-54996 | suse_vex | SUSE CVE CVE-2025-54996 | recommended: 10 | 2026-07-15T05:51:59+00:00 | Vulnerability · Source |
| CVE-2025-55193 | suse_vex | SUSE CVE CVE-2025-55193 | known affected: 12 known not affected: 106 recommended: 5 | 2026-07-15T05:51:51+00:00 | Vulnerability · Source |
| CVE-2025-61919 | suse_vex | SUSE CVE CVE-2025-61919 | known affected: 410 known not affected: 8 recommended: 16 | 2026-07-15T05:51:10+00:00 | Vulnerability · Source |
| CVE-2025-66577 | suse_vex | SUSE CVE CVE-2025-66577 | recommended: 6 | 2026-07-15T05:50:39+00:00 | Vulnerability · Source |
| CVE-2025-67899 | suse_vex | SUSE CVE CVE-2025-67899 | known affected: 3 recommended: 70 | 2026-07-15T05:50:30+00:00 | Vulnerability · Source |
| CVE-2025-68266 | suse_vex | SUSE CVE CVE-2025-68266 | known not affected: 451 | 2026-07-15T05:49:11+00:00 | Vulnerability · Source |