VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292260 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-54432 | redhat_vex | roundcubemail: Roundcube Webmail: Stored Cross-Site Scripting via unescaped attachment MIME type | known not affected: 1 | 2026-07-14T18:05:07+00:00 | Vulnerability · Source |
| CVE-2026-52990 | redhat_vex | kernel: fsnotify: fix inode reference leak in fsnotify_recalc_mask() | known affected: 184 known not affected: 90 | 2026-07-14T18:05:06+00:00 | Vulnerability · Source |
| CVE-2026-62641 | redhat_vex | roundcubemail: Roundcube Webmail: Denial of Service via crafted TNEF compressed-RTF size | known not affected: 1 | 2026-07-14T18:05:04+00:00 | Vulnerability · Source |
| CVE-2026-52977 | redhat_vex | kernel: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup | known affected: 184 known not affected: 90 | 2026-07-14T18:05:03+00:00 | Vulnerability · Source |
| CVE-2026-52980 | redhat_vex | kernel: sched/fair: Clear rel_deadline when initializing forked entities | known affected: 76 known not affected: 198 | 2026-07-14T18:05:02+00:00 | Vulnerability · Source |
| CVE-2026-62644 | redhat_vex | roundcubemail: Roundcube Webmail: Account takeover via username spoofing in password plugin | known not affected: 1 | 2026-07-14T18:05:01+00:00 | Vulnerability · Source |
| CVE-2026-62642 | redhat_vex | roundcubemail: Roundcube Webmail: Denial of Service via infinite loop in TNEF decoder | known not affected: 1 | 2026-07-14T18:05:01+00:00 | Vulnerability · Source |
| CVE-2026-46173 | redhat_vex | kernel: exit: prevent preemption of oopsing TASK_DEAD task | fixed: 1658 known affected: 36 known not affected: 76 | 2026-07-14T18:04:39+00:00 | Vulnerability · Source |
| CVE-2026-43414 | redhat_vex | kernel: scsi: qla2xxx: Completely fix fcport double free | fixed: 1224 known affected: 36 known not affected: 76 | 2026-07-14T18:04:33+00:00 | Vulnerability · Source |
| CVE-2026-43330 | redhat_vex | kernel: crypto: caam - fix overflow on long hmac keys | fixed: 616 known not affected: 198 | 2026-07-14T18:04:31+00:00 | Vulnerability · Source |
| CVE-2026-24308 | redhat_vex | Apache ZooKeeper: Apache ZooKeeper: Information disclosure via improper handling of configuration values | fixed: 6 known affected: 7 known not affected: 210 | 2026-07-14T17:41:40+00:00 | Vulnerability · Source |
| CVE-2026-62643 | redhat_vex | roundcubemail: Roundcube Webmail: Server-Side Request Forgery via insufficient CSS sanitization | known not affected: 1 | 2026-07-14T17:40:12+00:00 | Vulnerability · Source |
| CVE-2026-44825 | redhat_vex | solr: Apache Solr: Remote attacker gains administrative access via hardcoded credentials in Basic Authentication setup. | known not affected: 2 | 2026-07-14T17:38:46+00:00 | Vulnerability · Source |
| CVE-2026-52972 | redhat_vex | kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 | known affected: 232 known not affected: 42 | 2026-07-14T17:38:42+00:00 | Vulnerability · Source |
| CVE-2026-54433 | redhat_vex | roundcubemail: Roundcube Webmail: Arbitrary code execution via zero-click cross-site scripting | known not affected: 1 | 2026-07-14T17:38:40+00:00 | Vulnerability · Source |
| CVE-2026-41159 | redhat_vex | mermaid: Mermaid: Information disclosure and page defacement via CSS injection | known affected: 3 | 2026-07-14T16:31:17+00:00 | Vulnerability · Source |
| CVE-2026-44897 | redhat_vex | mistune: Mistune: Cross-site scripting (XSS) via improper sanitization of HTML heading ID attribute | known affected: 23 known not affected: 2 | 2026-07-14T16:31:15+00:00 | Vulnerability · Source |
| CVE-2026-53439 | redhat_vex | jenkins: Jenkins: Information Disclosure via Missing Permission Checks | known affected: 1 | 2026-07-14T16:30:56+00:00 | Vulnerability · Source |
| CVE-2026-52962 | redhat_vex | kernel: ceph: fix a buffer leak in __ceph_setxattr() | known affected: 260 known not affected: 14 | 2026-07-14T16:28:48+00:00 | Vulnerability · Source |
| CVE-2026-56140 | redhat_vex | org.apache.camel/camel-aws2-sns: Apache Camel AWS SNS Component: Defense-in-depth hardening due to improper input validation | known not affected: 4 | 2026-07-14T16:28:46+00:00 | Vulnerability · Source |
| CVE-2026-48775 | redhat_vex | langgraph: langgraph-checkpoint: LangGraph: Arbitrary code execution via insecure deserialization of modified checkpoint bytes | known affected: 7 | 2026-07-14T16:28:40+00:00 | Vulnerability · Source |
| CVE-2026-52963 | redhat_vex | kernel: ALSA: usb-audio: Bound MIDI endpoint descriptor scans | known affected: 246 known not affected: 28 | 2026-07-14T16:28:35+00:00 | Vulnerability · Source |
| CVE-2026-48776 | redhat_vex | langgraph: langgraph-sdk: LangGraph Python SDK: Unsafe URL path construction leads to unauthorized resource access | known affected: 7 | 2026-07-14T16:28:32+00:00 | Vulnerability · Source |
| CVE-2026-12199 | redhat_vex | nltk: NLTK: Remote unauthenticated denial of service in WordNet Browser HTTP server | known affected: 11 | 2026-07-14T16:28:27+00:00 | Vulnerability · Source |
| CVE-2026-52964 | redhat_vex | kernel: ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans | known affected: 184 known not affected: 90 | 2026-07-14T16:28:24+00:00 | Vulnerability · Source |
| CVE-2026-10142 | redhat_vex | kafka-python: kafka-python: Denial of Service due to crafted frame length in protocol parser | known affected: 2 | 2026-07-14T16:28:14+00:00 | Vulnerability · Source |
| CVE-2026-42567 | redhat_vex | svelte: Svelte: Regular Expression Denial of Service (ReDoS) | known affected: 2 | 2026-07-14T16:28:09+00:00 | Vulnerability · Source |
| CVE-2026-40977 | redhat_vex | Spring Boot: Spring Boot: Local file corruption via PID file manipulation | fixed: 1 known affected: 21 | 2026-07-14T16:03:28+00:00 | Vulnerability · Source |
| CVE-2026-39245 | redhat_vex | decompress: decompress: path traversal via indexOf containment bypass allows arbitrary file write (bypass of CVE-2020-12265 fix) | fixed: 3 known affected: 1 known not affected: 2 | 2026-07-14T14:58:03+00:00 | Vulnerability · Source |
| CVE-2026-15605 | redhat_vex | wandb: wandb: Information disclosure due to weak hash in artifact integrity validation | known affected: 3 | 2026-07-14T14:14:12+00:00 | Vulnerability · Source |
| CVE-2025-26465 | redhat_vex | openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled | fixed: 285 known affected: 18 known not affected: 9 | 2026-07-14T14:13:58+00:00 | Vulnerability · Source |
| CVE-2026-23103 | redhat_vex | kernel: ipvlan: Make the addrs_lock be per port | known affected: 232 known not affected: 42 | 2026-07-14T14:13:03+00:00 | Vulnerability · Source |
| CVE-2026-22992 | redhat_vex | kernel: libceph: return the handler error from mon_handle_auth_done() | known affected: 232 known not affected: 42 | 2026-07-14T14:13:02+00:00 | Vulnerability · Source |
| CVE-2026-22980 | redhat_vex | kernel: nfsd: provide locking for v4_end_grace | known affected: 274 | 2026-07-14T14:12:58+00:00 | Vulnerability · Source |
| CVE-2026-41080 | redhat_vex | libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML | fixed: 3 known affected: 21 | 2026-07-14T14:07:47+00:00 | Vulnerability · Source |
| CVE-2026-23273 | redhat_vex | kernel: macvlan: observe an RCU grace period in macvlan_common_newlink() error path | known affected: 14 known not affected: 260 | 2026-07-14T14:07:45+00:00 | Vulnerability · Source |
| CVE-2026-43057 | redhat_vex | kernel: net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback | known affected: 14 known not affected: 260 | 2026-07-14T14:07:40+00:00 | Vulnerability · Source |
| CVE-2024-24855 | redhat_vex | kernel: Race condition in lpfc_unregister_fcf_rescan() in scsi/lpfc/lpfc_hbadisc.c | known affected: 198 | 2026-07-14T13:25:30+00:00 | Vulnerability · Source |
| CVE-2023-6780 | redhat_vex | glibc: integer overflow in __vsyslog_internal() | known not affected: 452 | 2026-07-14T13:25:26+00:00 | Vulnerability · Source |
| CVE-2023-4527 | redhat_vex | glibc: Stack read overflow in getaddrinfo in no-aaaa mode | fixed: 2031 known not affected: 21 | 2026-07-14T13:23:13+00:00 | Vulnerability · Source |
| CVE-2023-4806 | redhat_vex | glibc: potential use-after-free in getaddrinfo() | fixed: 3046 known affected: 21 | 2026-07-14T13:23:03+00:00 | Vulnerability · Source |
| CVE-2024-12243 | redhat_vex | gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS | fixed: 304 known affected: 19 | 2026-07-14T13:22:54+00:00 | Vulnerability · Source |
| CVE-2026-59674 | redhat_vex | suricata: Suricata: Privilege escalation via symbolic link following | known not affected: 1 | 2026-07-14T13:17:29+00:00 | Vulnerability · Source |
| CVE-2023-6779 | redhat_vex | glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() | known not affected: 452 | 2026-07-14T13:13:24+00:00 | Vulnerability · Source |
| CVE-2023-6246 | redhat_vex | glibc: heap-based buffer overflow in __vsyslog_internal() | known not affected: 452 | 2026-07-14T13:12:54+00:00 | Vulnerability · Source |
| CVE-2026-40372 | redhat_vex | ASP.NET Core: ASP.NET: ASP.NET Core: Privilege escalation via improper cryptographic signature verification | known not affected: 47 | 2026-07-14T13:07:30+00:00 | Vulnerability · Source |
| CVE-2026-58470 | redhat_vex | wget: GNU Wget: Integer overflow in Content-Range header parsing causes download desynchronization | known affected: 9 | 2026-07-14T11:58:12+00:00 | Vulnerability · Source |
| CVE-2026-43304 | redhat_vex | kernel: libceph: define and enforce CEPH_MAX_KEY_LEN | known affected: 260 known not affected: 14 | 2026-07-14T11:37:43+00:00 | Vulnerability · Source |
| CVE-2026-12478 | redhat_vex | libsoup: Incomplete fix for CVE-2026-0716: Out-of-bounds read in libsoup WebSocket frame processing (unmasked path) | known affected: 4 | 2026-07-14T10:06:12+00:00 | Vulnerability · Source |
| CVE-2025-55005 | redhat_vex | imagemagick: ImageMagick: heap-buffer overflow | known affected: 14 | 2026-07-14T05:37:06+00:00 | Vulnerability · Source |