VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292260 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-53101 | redhat_vex | ImageMagick: ImageMagick Stack Buffer Overflow | known affected: 14 | 2026-07-14T05:37:02+00:00 | Vulnerability · Source |
| CVE-2025-53019 | redhat_vex | ImageMagick: ImageMagick Memory Leak | known affected: 14 | 2026-07-14T05:37:02+00:00 | Vulnerability · Source |
| CVE-2025-55298 | redhat_vex | ImageMagick: ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution | known affected: 7 known not affected: 7 | 2026-07-14T05:36:58+00:00 | Vulnerability · Source |
| CVE-2025-55004 | redhat_vex | imagemagick: ImageMagick: heap-buffer overflow | known affected: 7 known not affected: 7 | 2026-07-14T05:36:57+00:00 | Vulnerability · Source |
| CVE-2025-53015 | redhat_vex | ImageMagick: ImageMagick unbounded loop | known affected: 14 | 2026-07-14T05:36:53+00:00 | Vulnerability · Source |
| CVE-2025-55160 | redhat_vex | imagemagick: ImageMagick: Undefined Behavior | known affected: 14 | 2026-07-14T05:36:52+00:00 | Vulnerability · Source |
| CVE-2025-55154 | redhat_vex | imagemagick: ImageMagick: integer overflows in MNG magnification | fixed: 51 known affected: 7 | 2026-07-14T05:36:25+00:00 | Vulnerability · Source |
| CVE-2026-12480 | microsoft_vex | Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras | fixed: 1 known affected: 1 | 2026-07-14T01:38:59+00:00 | Vulnerability · Source |
| CVE-2026-55689 | redhat_vex | openfga: OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset | known affected: 9 | 2026-07-14T01:35:32+00:00 | Vulnerability · Source |
| CVE-2026-55170 | redhat_vex | github.com/openfga/openfga: OpenFGA: Incorrect authorization decisions due to case-insensitive comparisons in MySQL datastore | known affected: 9 | 2026-07-14T01:35:32+00:00 | Vulnerability · Source |
| CVE-2026-57158 | redhat_vex | FreeRDP: FreeRDP: Information disclosure via truncated RDPGFX planar payload | known affected: 31 | 2026-07-13T23:25:46+00:00 | Vulnerability · Source |
| CVE-2026-57157 | redhat_vex | FreeRDP: FreeRDP: Out-of-bounds read leads to information disclosure and denial of service | known affected: 31 | 2026-07-13T23:25:45+00:00 | Vulnerability · Source |
| CVE-2026-42216 | redhat_vex | OpenEXR: OpenEXR: Information disclosure and denial of service via malformed EXR files | fixed: 214 known affected: 3 known not affected: 7 | 2026-07-13T23:11:46+00:00 | Vulnerability · Source |
| CVE-2026-41142 | redhat_vex | OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing | fixed: 214 known not affected: 10 | 2026-07-13T23:11:42+00:00 | Vulnerability · Source |
| CVE-2026-56372 | redhat_vex | ImageMagick: ImageMagick: Information Disclosure and Denial of Service | known affected: 14 | 2026-07-13T22:25:36+00:00 | Vulnerability · Source |
| CVE-2026-61465 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted image due to missing memory allocation check | known affected: 14 | 2026-07-13T22:25:35+00:00 | Vulnerability · Source |
| CVE-2026-61858 | redhat_vex | ImageMagick: ImageMagick: Policy bypass allows unauthorized file writing via APNG encoder | known affected: 14 | 2026-07-13T22:15:55+00:00 | Vulnerability · Source |
| CVE-2026-61857 | redhat_vex | ImageMagick: ImageMagick: Application crashes via malicious XMP profiles | known affected: 14 | 2026-07-13T22:15:54+00:00 | Vulnerability · Source |
| CVE-2026-61861 | redhat_vex | ImageMagick: ImageMagick: Use-after-free vulnerability leading to denial of service or code execution | known affected: 14 | 2026-07-13T22:15:48+00:00 | Vulnerability · Source |
| CVE-2026-61870 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via specially crafted VIFF images | known affected: 14 | 2026-07-13T22:15:46+00:00 | Vulnerability · Source |
| CVE-2026-44024 | redhat_vex | fluentd: Fluentd: Remote Code Execution via arbitrary file write due to insufficient tag validation | known not affected: 1 | 2026-07-13T16:20:42+00:00 | Vulnerability · Source |
| CVE-2026-56366 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via memory leak in APP1JPEG image processing | known affected: 14 | 2026-07-13T15:27:12+00:00 | Vulnerability · Source |
| CVE-2026-56373 | redhat_vex | ImageMagick: ImageMagick: Use-after-free vulnerability in PDB decoder allows denial of service or limited data corruption. | known affected: 14 | 2026-07-13T15:26:59+00:00 | Vulnerability · Source |
| CVE-2026-54518 | redhat_vex | jackson-databind: jackson-databind: Information disclosure and data manipulation via view-based access control bypass | known affected: 88 known not affected: 14 | 2026-07-13T15:16:19+00:00 | Vulnerability · Source |
| CVE-2026-59818 | redhat_vex | etcd: etcd: Authentication bypass due to improper Certificate Revocation List enforcement on gRPC listener | known affected: 4 | 2026-07-13T15:05:46+00:00 | Vulnerability · Source |
| CVE-2026-50168 | redhat_vex | @angular/platform-server: Angular @angular/platform-server: Server-Side Request Forgery (SSRF) via malformed URL parsing | known not affected: 1 | 2026-07-13T15:00:27+00:00 | Vulnerability · Source |
| CVE-2026-54514 | redhat_vex | jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution | known affected: 101 known not affected: 1 | 2026-07-13T14:55:58+00:00 | Vulnerability · Source |
| CVE-2026-52846 | redhat_vex | github.com/caddyserver/caddy: Caddy: Client-side Cross-Site Scripting (XSS) due to incomplete HTML tag stripping | known not affected: 1 | 2026-07-13T14:50:46+00:00 | Vulnerability · Source |
| CVE-2026-44169 | redhat_vex | mariadb: MariaDB server: Information disclosure of stored routine definitions due to insufficient privilege check | fixed: 199 known not affected: 106 | 2026-07-13T14:45:52+00:00 | Vulnerability · Source |
| CVE-2026-59874 | microsoft_vex | node-tar: Negative tar entry size causes infinite loop in archive replace | known affected: 1 | 2026-07-13T14:41:33+00:00 | Vulnerability · Source |
| CVE-2026-59873 | microsoft_vex | node-tar: Decompression/parse DoS via unlimited input | known affected: 1 | 2026-07-13T14:41:27+00:00 | Vulnerability · Source |
| CVE-2026-59871 | microsoft_vex | node-tar: Process crash via PAX numeric path type confusion | known affected: 1 | 2026-07-13T14:41:21+00:00 | Vulnerability · Source |
| CVE-2026-59821 | redhat_vex | litellm: LiteLLM: Arbitrary code execution and information disclosure via custom code guardrails | known not affected: 7 | 2026-07-13T13:56:31+00:00 | Vulnerability · Source |
| CVE-2026-59820 | redhat_vex | litellm: LiteLLM: Directory traversal via crafted skill archive upload | known affected: 1 known not affected: 6 | 2026-07-13T13:36:04+00:00 | Vulnerability · Source |
| CVE-2026-29009 | redhat_vex | u-boot: U-Boot: Memory corruption via NFS readlink buffer overflow | known not affected: 1 | 2026-07-13T13:35:48+00:00 | Vulnerability · Source |
| CVE-2026-29008 | redhat_vex | U-Boot: U-Boot: Integer underflow leads to Denial of Service | known not affected: 1 | 2026-07-13T13:35:41+00:00 | Vulnerability · Source |
| CVE-2026-59819 | redhat_vex | litellm: LiteLLM: Information disclosure via local file read in test connection endpoint | known not affected: 7 | 2026-07-13T13:26:19+00:00 | Vulnerability · Source |
| CVE-2026-23562 | redhat_vex | xen: Xen: VM administrator gains unauthorized host hardware access via PCI passthrough | known not affected: 1 | 2026-07-13T13:26:15+00:00 | Vulnerability · Source |
| CVE-2026-42486 | redhat_vex | xen: Xen: Arbitrary dom0 file write due to improper restriction of VM parameter | known not affected: 1 | 2026-07-13T13:21:16+00:00 | Vulnerability · Source |
| CVE-2026-23560 | redhat_vex | xen: Xen: VM-admin can hide virtual machines from management and operations | known not affected: 1 | 2026-07-13T13:21:01+00:00 | Vulnerability · Source |
| CVE-2026-60108 | redhat_vex | zeek: Zeek: Denial of Service via uncontrolled memory consumption in FTP analyzer | known not affected: 1 | 2026-07-13T13:20:44+00:00 | Vulnerability · Source |
| CVE-2026-60109 | redhat_vex | zeek: Zeek: Denial of Service via crafted Kerberos KRB_ERROR message | known not affected: 1 | 2026-07-13T13:20:38+00:00 | Vulnerability · Source |
| CVE-2026-15584 | redhat_vex | RedHatInsights/incluster-checks: incluster-checks: Privileged host-chroot debug pods created in shared default namespace enable privilege escalation to node root | known affected: 1 | 2026-07-13T13:12:29+00:00 | Vulnerability · Source |
| CVE-2026-55807 | redhat_vex | Drupal core: Drupal core: Server-Side Request Forgery vulnerability | known not affected: 1 | 2026-07-13T12:53:27+00:00 | Vulnerability · Source |
| CVE-2026-55808 | redhat_vex | drupal: Drupal core: Cross-site Scripting (XSS) via improper input neutralization | known not affected: 1 | 2026-07-13T12:47:54+00:00 | Vulnerability · Source |
| CVE-2026-40973 | redhat_vex | Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory | fixed: 10 known affected: 2 known not affected: 68 | 2026-07-13T12:25:53+00:00 | Vulnerability · Source |
| CVE-2026-62147 | redhat_vex | tempo-operator: Tempo Operator: Query RBAC bypass | known affected: 2 | 2026-07-13T12:06:35+00:00 | Vulnerability · Source |
| CVE-2026-53538 | redhat_vex | python-multipart: Python-Multipart: Information disclosure due to parser differential in form data handling | known affected: 39 known not affected: 18 | 2026-07-13T11:56:42+00:00 | Vulnerability · Source |
| CVE-2026-15551 | redhat_vex | rlottie: rlottie: Buffer overflow due to integer overflow | known not affected: 1 | 2026-07-13T11:16:30+00:00 | Vulnerability · Source |
| CVE-2026-58379 | redhat_vex | gimp: gimp: Heap buffer overflow in read_channel_data() | fixed: 24 known not affected: 29 | 2026-07-13T10:55:38+00:00 | Vulnerability · Source |