VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292260 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-15574 | redhat_vex | vllm-orchestrator-gateway: vllm-orchestrator-gateway: Authorization header and full chat payloads logged at hard-coded DEBUG default | under investigation: 1 | 2026-07-13T09:05:52+00:00 | Vulnerability · Source |
| CVE-2026-58467 | redhat_vex | cockpit: Cockpit CMS: Arbitrary file read and code execution via path traversal | known affected: 32 | 2026-07-13T07:20:57+00:00 | Vulnerability · Source |
| CVE-2023-54365 | redhat_vex | github.com/traefik/traefik: net/http2: Traefik: Denial of Service via HTTP/2 Rapid Reset technique | known not affected: 3 | 2026-07-13T07:15:40+00:00 | Vulnerability · Source |
| CVE-2026-58253 | redhat_vex | github.com/nats-io/nats-server: NATS Server: Authentication bypass and privilege escalation via parser fast path | known not affected: 2 | 2026-07-13T07:11:35+00:00 | Vulnerability · Source |
| CVE-2026-58208 | redhat_vex | github.com/nats-io/nats-server: NATS Server: Denial of Service due to incorrect MQTT-over-WebSocket request routing | known not affected: 2 | 2026-07-13T07:06:26+00:00 | Vulnerability · Source |
| CVE-2026-58252 | redhat_vex | github.com/nats-io/nats-server: NATS Server: Information disclosure via access control bypass in wildcard and queue subscriptions | known not affected: 2 | 2026-07-13T06:57:04+00:00 | Vulnerability · Source |
| CVE-2026-58251 | redhat_vex | github.com/nats-io/nats-server: NATS Server: Information disclosure due to bypass of subject deny rules via queue subscriptions | known not affected: 2 | 2026-07-13T06:21:08+00:00 | Vulnerability · Source |
| CVE-2026-58250 | redhat_vex | github.com/nats-io/nats-server: NATS Server: Denial of Service via repeated leafnode INFO messages during pre-authentication | known not affected: 2 | 2026-07-13T06:16:01+00:00 | Vulnerability · Source |
| CVE-2026-53309 | redhat_vex | kernel: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison | known not affected: 274 | 2026-07-13T05:50:22+00:00 | Vulnerability · Source |
| CVE-2025-38096 | microsoft_vex | wifi: iwlwifi: don't warn when if there is a FW error | known affected: 17 under investigation: 3 | 2026-07-13T01:46:49+00:00 | Vulnerability · Source |
| CVE-2019-3498 | suse_vex | SUSE CVE CVE-2019-3498 | recommended: 690 | 2026-07-13T01:44:26+00:00 | Vulnerability · Source |
| CVE-2021-35042 | suse_vex | SUSE CVE CVE-2021-35042 | known not affected: 6 recommended: 15 | 2026-07-13T01:43:34+00:00 | Vulnerability · Source |
| CVE-2023-36053 | suse_vex | SUSE CVE CVE-2023-36053 | recommended: 26 | 2026-07-13T01:42:44+00:00 | Vulnerability · Source |
| CVE-2022-4543 | microsoft_vex | A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems. | fixed: 2 known affected: 23 | 2026-07-13T01:38:47+00:00 | Vulnerability · Source |
| CVE-2024-36024 | microsoft_vex | drm/amd/display: Disable idle reallow as part of command/gpint execution | known affected: 19 under investigation: 1 | 2026-07-12T15:02:39+00:00 | Vulnerability · Source |
| CVE-2025-37882 | microsoft_vex | usb: xhci: Fix isochronous Ring Underrun/Overrun event handling | known affected: 8 under investigation: 12 | 2026-07-12T15:02:11+00:00 | Vulnerability · Source |
| CVE-2025-37807 | microsoft_vex | bpf: Fix kmemleak warning for percpu hashmap | known affected: 20 | 2026-07-12T15:01:53+00:00 | Vulnerability · Source |
| CVE-2024-24856 | microsoft_vex | NULL pointer deference in acpi_db_convert_to_package of Linux acpi module | under investigation: 17 | 2026-07-12T15:01:27+00:00 | Vulnerability · Source |
| CVE-2025-37745 | microsoft_vex | PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() | known affected: 18 under investigation: 2 | 2026-07-12T15:00:46+00:00 | Vulnerability · Source |
| CVE-2024-35794 | microsoft_vex | dm-raid: really frozen sync_thread during suspend | fixed: 2 known affected: 21 under investigation: 1 | 2026-07-12T14:59:44+00:00 | Vulnerability · Source |
| CVE-2023-4622 | redhat_vex | kernel: use after free in unix_stream_sendpage | fixed: 1773 known affected: 22 known not affected: 15 | 2026-07-12T14:20:16+00:00 | Vulnerability · Source |
| CVE-2026-53246 | redhat_vex | kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing | known affected: 274 | 2026-07-12T10:58:39+00:00 | Vulnerability · Source |
| CVE-2026-31636 | redhat_vex | kernel: rxrpc: fix RESPONSE authenticator parser OOB read | fixed: 309 known not affected: 198 | 2026-07-12T10:21:13+00:00 | Vulnerability · Source |
| CVE-2026-43322 | redhat_vex | kernel: Bluetooth: hci_sync: Fix UAF in le_read_features_complete | fixed: 309 known not affected: 198 | 2026-07-12T09:50:58+00:00 | Vulnerability · Source |
| CVE-2026-31772 | redhat_vex | kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync | fixed: 612 known affected: 22 known not affected: 90 | 2026-07-12T09:50:56+00:00 | Vulnerability · Source |
| CVE-2026-34002 | redhat_vex | xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in XKB modifier map handling | fixed: 905 known affected: 52 | 2026-07-12T09:26:21+00:00 | Vulnerability · Source |
| CVE-2026-34000 | redhat_vex | xwayland: xorg: X.Org X server: Information disclosure and denial of service via out-of-bounds read in XKB geometry processing. | fixed: 945 known affected: 44 | 2026-07-12T09:26:07+00:00 | Vulnerability · Source |
| CVE-2026-4887 | redhat_vex | gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image | fixed: 587 known affected: 6 | 2026-07-12T09:21:10+00:00 | Vulnerability · Source |
| CVE-2026-40385 | redhat_vex | libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling | fixed: 203 known affected: 3 known not affected: 4 | 2026-07-12T09:16:09+00:00 | Vulnerability · Source |
| CVE-2024-6501 | redhat_vex | NetworkManager: Denial of Service | fixed: 223 known affected: 34 known not affected: 24 | 2026-07-12T09:11:07+00:00 | Vulnerability · Source |
| CVE-2026-40386 | redhat_vex | libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding | fixed: 261 known affected: 3 | 2026-07-12T09:10:58+00:00 | Vulnerability · Source |
| CVE-2026-23066 | redhat_vex | kernel: Linux kernel: Denial of Service via unsafe requeue in rxrpc_recvmsg | fixed: 1092 known affected: 184 known not affected: 75 | 2026-07-12T07:55:10+00:00 | Vulnerability · Source |
| CVE-2024-32475 | redhat_vex | envoy: abnormal termination when using auto_sni with authority header longer than 255 characters | fixed: 60 known affected: 3 | 2026-07-12T05:35:09+00:00 | Vulnerability · Source |
| CVE-2024-23326 | redhat_vex | envoy: Envoy incorrectly accepts HTTP 200 response for entering upgrade mode | fixed: 32 known affected: 3 | 2026-07-12T05:35:09+00:00 | Vulnerability · Source |
| CVE-2026-26104 | redhat_vex | udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API | fixed: 146 known not affected: 25 | 2026-07-12T05:05:22+00:00 | Vulnerability · Source |
| CVE-2026-23193 | redhat_vex | kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() | fixed: 2391 known affected: 22 known not affected: 14 | 2026-07-12T02:58:30+00:00 | Vulnerability · Source |
| CVE-2025-14424 | redhat_vex | gimp: GIMP: Remote Code Execution via XCF File Parsing Use-After-Free | fixed: 24 known affected: 6 known not affected: 23 | 2026-07-12T02:36:40+00:00 | Vulnerability · Source |
| CVE-2026-22998 | redhat_vex | kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec | fixed: 762 known affected: 22 known not affected: 42 | 2026-07-12T02:31:50+00:00 | Vulnerability · Source |
| CVE-2025-14422 | redhat_vex | gimp: GIMP: Remote Code Execution via PNM file parsing integer overflow | fixed: 591 known affected: 6 | 2026-07-12T02:17:37+00:00 | Vulnerability · Source |
| CVE-2025-14425 | redhat_vex | gimp: GIMP: Remote Code Execution via JP2 file parsing heap-based buffer overflow | fixed: 144 known affected: 6 known not affected: 23 | 2026-07-12T02:17:37+00:00 | Vulnerability · Source |
| CVE-2025-47905 | redhat_vex | varnish: request smuggling attacks | fixed: 200 | 2026-07-12T02:17:33+00:00 | Vulnerability · Source |
| CVE-2026-23139 | redhat_vex | kernel: netfilter: nf_conncount: update last_gc only when GC has been performed | fixed: 307 known affected: 76 known not affected: 198 | 2026-07-12T02:12:20+00:00 | Vulnerability · Source |
| CVE-2026-23010 | redhat_vex | kernel: Linux kernel: Use-after-free in IPv6 address deletion may lead to a denial of service | fixed: 309 known not affected: 198 | 2026-07-12T02:12:15+00:00 | Vulnerability · Source |
| CVE-2025-20012 | redhat_vex | microcode_ctl: From CVEorg collector | fixed: 30 known affected: 2 known not affected: 1 | 2026-07-12T01:57:30+00:00 | Vulnerability · Source |
| CVE-2026-23231 | redhat_vex | kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() | fixed: 2416 known affected: 22 known not affected: 14 | 2026-07-12T01:57:18+00:00 | Vulnerability · Source |
| CVE-2025-3158 | redhat_vex | assimp: Open Asset Import Library Assimp LWO File LWOAnimation.cpp UpdateAnimRangeSetup heap-based overflow | fixed: 160 | 2026-07-12T01:32:13+00:00 | Vulnerability · Source |
| CVE-2023-5367 | redhat_vex | xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty | fixed: 742 known affected: 9 | 2026-07-12T01:27:19+00:00 | Vulnerability · Source |
| CVE-2011-3670 | suse_vex | SUSE CVE CVE-2011-3670 | known affected: 1 known not affected: 39 recommended: 26 | 2026-07-12T01:20:50+00:00 | Vulnerability · Source |
| CVE-2018-12403 | suse_vex | SUSE CVE CVE-2018-12403 | known affected: 1 recommended: 9 | 2026-07-12T01:19:19+00:00 | Vulnerability · Source |
| CVE-2018-15750 | suse_vex | SUSE CVE CVE-2018-15750 | known affected: 394 known not affected: 526 recommended: 1095 | 2026-07-12T01:19:14+00:00 | Vulnerability · Source |