VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292268 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-32289 | redhat_vex | html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals | fixed: 29 known affected: 354 | 2026-07-09T13:42:21+00:00 | Vulnerability · Source |
| CVE-2026-44332 | redhat_vex | github.com/gofiber/fiber: GoFiber: Remote Username Enumeration via BasicAuth Middleware Short-Circuit Evaluation | known not affected: 1 | 2026-07-09T13:35:03+00:00 | Vulnerability · Source |
| CVE-2025-3110 | redhat_vex | OpenVPN Access Server: OpenVPN Access Server: HTTP request smuggling via bare line-feed sequences in HTTP headers | known not affected: 1 | 2026-07-09T12:55:22+00:00 | Vulnerability · Source |
| CVE-2026-54591 | redhat_vex | asyncssh: AsyncSSH: Arbitrary file write via path traversal in SCP client | known not affected: 1 | 2026-07-09T12:45:11+00:00 | Vulnerability · Source |
| CVE-2026-59928 | redhat_vex | mistune: Mistune: Denial of Service via crafted Markdown document with reference-link definitions | known affected: 25 | 2026-07-09T11:55:15+00:00 | Vulnerability · Source |
| CVE-2026-54267 | redhat_vex | @angular/core: Angular Client Hydration DOM Clobbering & Response-Cache Poisoning | known not affected: 81 | 2026-07-09T11:11:08+00:00 | Vulnerability · Source |
| CVE-2026-53262 | redhat_vex | kernel: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() | known affected: 274 | 2026-07-09T10:45:28+00:00 | Vulnerability · Source |
| CVE-2026-11827 | redhat_vex | gitlab-ee: GitLab EE: Information disclosure via improper authorization controls | known affected: 4 | 2026-07-09T09:35:35+00:00 | Vulnerability · Source |
| CVE-2026-54906 | redhat_vex | concurrent-ruby: rubygem-concurrent-ruby: concurrent-ruby: Synchronization flaw in ReadWriteLock allows unauthorized lock release and denial of service | known not affected: 20 | 2026-07-09T09:22:36+00:00 | Vulnerability · Source |
| CVE-2026-54753 | redhat_vex | Nx: Nx: `nx graph` dev server permissive CORS policy | known affected: 7 | 2026-07-09T09:22:21+00:00 | Vulnerability · Source |
| CVE-2026-45692 | redhat_vex | github.com/caddyserver/caddy/v2: Caddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization | known not affected: 1 | 2026-07-09T09:22:01+00:00 | Vulnerability · Source |
| CVE-2026-46056 | redhat_vex | kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers | fixed: 762 known affected: 64 | 2026-07-09T09:21:00+00:00 | Vulnerability · Source |
| CVE-2026-50021 | redhat_vex | pnpm: pnpm: Integrity bypass allows installation of altered packages via modified lockfile | known affected: 1 known not affected: 3 | 2026-07-09T08:44:40+00:00 | Vulnerability · Source |
| CVE-2026-50016 | redhat_vex | pnpm: pnpm: Arbitrary code execution due to path traversal in dependency aliases | known affected: 1 known not affected: 3 | 2026-07-09T08:40:10+00:00 | Vulnerability · Source |
| CVE-2026-55698 | redhat_vex | pnpm: pnpm: Arbitrary code execution via malicious package-manager lockfile | known affected: 1 known not affected: 3 | 2026-07-09T08:39:53+00:00 | Vulnerability · Source |
| CVE-2026-55697 | redhat_vex | pnpm: pnpm: Arbitrary code execution via improper handling of config dependencies | known affected: 1 known not affected: 3 | 2026-07-09T08:35:54+00:00 | Vulnerability · Source |
| CVE-2026-48995 | redhat_vex | pnpm: pnpm: Supply chain compromise from unverified dependencies | known affected: 1 known not affected: 3 | 2026-07-09T08:20:01+00:00 | Vulnerability · Source |
| CVE-2026-55700 | redhat_vex | pnpm: pnpm: Unauthorized file modification via crafted package manifest | known affected: 1 known not affected: 3 | 2026-07-09T08:10:40+00:00 | Vulnerability · Source |
| CVE-2026-31554 | redhat_vex | kernel: futex: Require sys_futex_requeue() to have identical flags | known affected: 184 known not affected: 90 | 2026-07-09T07:53:29+00:00 | Vulnerability · Source |
| CVE-2026-59194 | redhat_vex | pnpm: pnpm: patch-remove could delete project-selected files outside the patches directory | known affected: 1 known not affected: 3 | 2026-07-09T07:35:27+00:00 | Vulnerability · Source |
| CVE-2026-59195 | redhat_vex | pnpm: pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config | known affected: 1 known not affected: 3 | 2026-07-09T07:30:52+00:00 | Vulnerability · Source |
| CVE-2026-50015 | redhat_vex | pnpm: pnpm: Arbitrary file write/delete due to lack of path validation in patch files | known affected: 1 known not affected: 3 | 2026-07-09T07:30:36+00:00 | Vulnerability · Source |
| CVE-2026-55487 | redhat_vex | pnpm: pnpm: Supply chain compromise via manipulated package source strings | known affected: 1 known not affected: 3 | 2026-07-09T07:30:15+00:00 | Vulnerability · Source |
| CVE-2026-54590 | redhat_vex | AsyncSSH: AsyncSSH: Unauthorized file modification via authorized-keys directory escape | known not affected: 1 | 2026-07-09T07:17:03+00:00 | Vulnerability · Source |
| CVE-2026-15174 | redhat_vex | wireshark: Wireshark: Denial of Service via Catapult DCT2000 protocol dissector crash | known affected: 20 | 2026-07-09T06:59:08+00:00 | Vulnerability · Source |
| CVE-2026-15171 | redhat_vex | wireshark: Wireshark: Denial of service via SSH protocol dissector crash | known affected: 20 | 2026-07-09T06:36:12+00:00 | Vulnerability · Source |
| CVE-2026-15173 | redhat_vex | Wireshark: Wireshark: Denial of Service via pcapng file parser crash | known affected: 20 | 2026-07-09T06:36:11+00:00 | Vulnerability · Source |
| CVE-2026-15170 | redhat_vex | wireshark: Wireshark: Denial of service via Z39.50 protocol dissector crash | known affected: 4 | 2026-07-09T03:59:33+00:00 | Vulnerability · Source |
| CVE-2007-4566 | suse_vex | SUSE CVE CVE-2007-4566 | known not affected: 188 | 2026-07-09T03:50:00+00:00 | Vulnerability · Source |
| CVE-2012-1949 | suse_vex | SUSE CVE CVE-2012-1949 | known not affected: 39 recommended: 140 | 2026-07-09T03:49:24+00:00 | Vulnerability · Source |
| CVE-2012-4191 | suse_vex | SUSE CVE CVE-2012-4191 | known affected: 3 recommended: 129 | 2026-07-09T03:49:10+00:00 | Vulnerability · Source |
| CVE-2016-0741 | suse_vex | SUSE CVE CVE-2016-0741 | known not affected: 192 recommended: 3 | 2026-07-09T03:47:55+00:00 | Vulnerability · Source |
| CVE-2017-2591 | suse_vex | SUSE CVE CVE-2017-2591 | known not affected: 188 | 2026-07-09T03:47:23+00:00 | Vulnerability · Source |
| CVE-2017-2668 | suse_vex | SUSE CVE CVE-2017-2668 | known not affected: 188 recommended: 4 | 2026-07-09T03:47:20+00:00 | Vulnerability · Source |
| CVE-2017-16228 | suse_vex | SUSE CVE CVE-2017-16228 | recommended: 41 | 2026-07-09T03:46:53+00:00 | Vulnerability · Source |
| CVE-2018-12388 | suse_vex | SUSE CVE CVE-2018-12388 | known affected: 1 recommended: 9 | 2026-07-09T03:46:30+00:00 | Vulnerability · Source |
| CVE-2019-6285 | suse_vex | SUSE CVE CVE-2019-6285 | known affected: 361 known not affected: 25 recommended: 143 | 2026-07-09T03:45:55+00:00 | Vulnerability · Source |
| CVE-2019-6292 | suse_vex | SUSE CVE CVE-2019-6292 | known affected: 361 known not affected: 25 recommended: 143 | 2026-07-09T03:45:53+00:00 | Vulnerability · Source |
| CVE-2019-9802 | suse_vex | SUSE CVE CVE-2019-9802 | known affected: 20 known not affected: 76 recommended: 9 | 2026-07-09T03:45:48+00:00 | Vulnerability · Source |
| CVE-2019-17018 | suse_vex | SUSE CVE CVE-2019-17018 | known affected: 21 | 2026-07-09T03:45:34+00:00 | Vulnerability · Source |
| CVE-2019-17023 | suse_vex | SUSE CVE CVE-2019-17023 | known affected: 21 recommended: 34 | 2026-07-09T03:45:32+00:00 | Vulnerability · Source |
| CVE-2020-6810 | suse_vex | SUSE CVE CVE-2020-6810 | recommended: 9 | 2026-07-09T03:45:11+00:00 | Vulnerability · Source |
| CVE-2020-7753 | suse_vex | SUSE CVE CVE-2020-7753 | recommended: 278 | 2026-07-09T03:45:08+00:00 | Vulnerability · Source |
| CVE-2023-6200 | redhat_vex | kernel: ICMPv6 Router Advertisement packets, aka Linux TCP/IP Remote Code Execution Vulnerability | known not affected: 222 | 2026-07-09T03:44:32+00:00 | Vulnerability · Source |
| CVE-2021-23970 | suse_vex | SUSE CVE CVE-2021-23970 | recommended: 9 | 2026-07-09T03:44:19+00:00 | Vulnerability · Source |
| CVE-2024-4765 | suse_vex | SUSE CVE CVE-2024-4765 | known affected: 33 recommended: 9 | 2026-07-09T03:41:04+00:00 | Vulnerability · Source |
| CVE-2025-1744 | suse_vex | SUSE CVE CVE-2025-1744 | recommended: 17 | 2026-07-09T03:36:56+00:00 | Vulnerability · Source |
| CVE-2025-33219 | suse_vex | SUSE CVE CVE-2025-33219 | known not affected: 100 | 2026-07-09T03:35:08+00:00 | Vulnerability · Source |
| CVE-2025-57804 | suse_vex | SUSE CVE CVE-2025-57804 | known affected: 52 recommended: 27 | 2026-07-09T03:16:09+00:00 | Vulnerability · Source |
| CVE-2025-61686 | suse_vex | SUSE CVE CVE-2025-61686 | known affected: 6 | 2026-07-09T03:15:59+00:00 | Vulnerability · Source |