VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
305835 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-78437 | redhat_vex | tomcat: Apache Tomcat: Denial of Service via malformed HTTP/2 request | fixed: 42 known affected: 61 known not affected: 30 | 2026-10-08T04:16:08+00:00 | Vulnerability · Source |
| CVE-2026-107183 | redhat_vex | llama.cpp: llama.cpp: Arbitrary code execution via crafted completion request | known not affected: 1 | 2026-10-08T04:12:29+00:00 | Vulnerability · Source |
| CVE-2026-106376 | redhat_vex | chromium-browser: Uninitialized resource in ANGLE | known not affected: 1 | 2026-10-08T04:12:28+00:00 | Vulnerability · Source |
| CVE-2026-106258 | redhat_vex | chromium-browser: Uninitialized resource in ANGLE | known not affected: 1 | 2026-10-08T04:12:27+00:00 | Vulnerability · Source |
| CVE-2026-86248 | redhat_vex | tomcat: Apache Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled | fixed: 42 known affected: 53 known not affected: 38 | 2026-10-08T04:09:23+00:00 | Vulnerability · Source |
| CVE-2026-73581 | redhat_vex | tomcat: Apache Tomcat: TLS implementations ignore Certificate Revocation Lists | fixed: 42 known affected: 68 known not affected: 22 | 2026-10-08T04:09:18+00:00 | Vulnerability · Source |
| CVE-2026-106366 | redhat_vex | chromium-browser: Incomplete cleanup in CustomTabs | known not affected: 1 | 2026-10-08T04:07:58+00:00 | Vulnerability · Source |
| CVE-2026-106327 | redhat_vex | chromium-browser: Incorrect authorization in Core | known not affected: 1 | 2026-10-08T04:07:58+00:00 | Vulnerability · Source |
| CVE-2026-106245 | redhat_vex | chromium-browser: Uninitialized resource in ANGLE | known not affected: 1 | 2026-10-08T04:02:36+00:00 | Vulnerability · Source |
| CVE-2026-102322 | redhat_vex | chromium-browser: Incorrect Authorization in SiteIsolation | known not affected: 1 | 2026-10-08T04:02:35+00:00 | Vulnerability · Source |
| CVE-2026-106382 | redhat_vex | chromium-browser: Use after free in Chromecast | known not affected: 1 | 2026-10-08T03:55:53+00:00 | Vulnerability · Source |
| CVE-2026-106197 | redhat_vex | chromium-browser: Use after free in Browser | known not affected: 1 | 2026-10-08T03:55:47+00:00 | Vulnerability · Source |
| CVE-2026-88029 | redhat_vex | pymongo: MongoDB Python Driver: Data disclosure and denial of service via query-operator injection | known affected: 33 known not affected: 2 | 2026-10-08T03:55:42+00:00 | Vulnerability · Source |
| CVE-2026-106358 | redhat_vex | chromium-browser: Use after free in Navigation | known not affected: 1 | 2026-10-08T03:55:35+00:00 | Vulnerability · Source |
| CVE-2026-105816 | redhat_vex | github.com/hashicorp/vault: Vault: Arbitrary code execution via plugin catalog entries in restored snapshots | known affected: 3 | 2026-10-08T03:31:59+00:00 | Vulnerability · Source |
| CVE-2026-89407 | redhat_vex | com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking | known affected: 141 known not affected: 36 | 2026-10-08T03:22:02+00:00 | Vulnerability · Source |
| CVE-2021-29425 | redhat_vex | apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 | fixed: 250 known affected: 16 known not affected: 2195 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2021-21342 | redhat_vex | XStream: SSRF via crafted input stream | fixed: 6 known affected: 14 known not affected: 4 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2020-26259 | redhat_vex | XStream: arbitrary file deletion on the local host when unmarshalling | fixed: 6 known affected: 13 known not affected: 4 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2021-21348 | redhat_vex | XStream: ReDoS vulnerability | fixed: 6 known affected: 14 known not affected: 4 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2022-2596 | redhat_vex | node-fetch: Denial of Service in GitHub repository node-fetch | known not affected: 209 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2020-10735 | redhat_vex | python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS | fixed: 685 known affected: 41 known not affected: 93 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2022-36313 | redhat_vex | file-type: a malformed MKV file could cause the file type detector to get caught in an infinite loop | fixed: 1 known affected: 8 known not affected: 4 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2021-21351 | redhat_vex | XStream: allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream | fixed: 6 known affected: 14 known not affected: 4 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2020-26258 | redhat_vex | XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling | fixed: 6 known affected: 13 known not affected: 4 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2026-58264 | redhat_vex | fluidsynth: FluidSynth: Heap-based buffer overrun | known not affected: 1 | 2026-10-08T02:21:27+00:00 | Vulnerability · Source |
| CVE-2026-69249 | redhat_vex | python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building | fixed: 62 known affected: 6 known not affected: 9 | 2026-10-08T02:21:27+00:00 | Vulnerability · Source |
| CVE-2026-95387 | redhat_vex | wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector | known affected: 20 | 2026-10-08T01:47:37+00:00 | Vulnerability · Source |
| CVE-2021-45949 | redhat_vex | ghostscript: heap-based buffer overflow in sampled_data_finish | known affected: 26 known not affected: 14 | 2026-10-08T01:27:19+00:00 | Vulnerability · Source |
| CVE-2015-20107 | redhat_vex | python: mailcap: findmatch() function does not sanitize the second argument | fixed: 893 known affected: 12 known not affected: 65 | 2026-10-08T01:27:19+00:00 | Vulnerability · Source |
| CVE-2026-96419 | redhat_vex | wireshark: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark | known affected: 4 known not affected: 16 | 2026-10-08T01:19:53+00:00 | Vulnerability · Source |
| CVE-2025-22037 | redhat_vex | kernel: ksmbd: fix null pointer dereference in alloc_preauth_hash() | known not affected: 275 | 2026-10-08T00:57:37+00:00 | Vulnerability · Source |
| CVE-2024-53907 | redhat_vex | django: Potential denial-of-service in django.utils.html.strip_tags() | fixed: 282 known affected: 3 known not affected: 198 | 2026-10-08T00:45:25+00:00 | Vulnerability · Source |
| CVE-2013-2168 | suse_vex | SUSE CVE CVE-2013-2168 | recommended: 189 | 2026-10-08T00:02:12+00:00 | Vulnerability · Source |
| CVE-2013-7041 | suse_vex | SUSE CVE CVE-2013-7041 | known affected: 1 known not affected: 353 recommended: 22 | 2026-10-08T00:02:07+00:00 | Vulnerability · Source |
| CVE-2014-0050 | suse_vex | SUSE CVE CVE-2014-0050 | known affected: 394 known not affected: 50 recommended: 254 | 2026-10-08T00:02:04+00:00 | Vulnerability · Source |
| CVE-2015-1197 | suse_vex | SUSE CVE CVE-2015-1197 | known not affected: 16 recommended: 83 | 2026-10-08T00:01:54+00:00 | Vulnerability · Source |
| CVE-2015-3245 | suse_vex | SUSE CVE CVE-2015-3245 | recommended: 3 | 2026-10-08T00:01:49+00:00 | Vulnerability · Source |
| CVE-2016-3092 | suse_vex | SUSE CVE CVE-2016-3092 | known affected: 395 known not affected: 157 recommended: 275 | 2026-10-08T00:01:37+00:00 | Vulnerability · Source |
| CVE-2016-1000031 | suse_vex | SUSE CVE CVE-2016-1000031 | known affected: 7 known not affected: 15 recommended: 76 | 2026-10-08T00:01:24+00:00 | Vulnerability · Source |
| CVE-2017-18191 | suse_vex | SUSE CVE CVE-2017-18191 | recommended: 15 | 2026-10-08T00:01:09+00:00 | Vulnerability · Source |
| CVE-2017-18361 | suse_vex | SUSE CVE CVE-2017-18361 | recommended: 8 | 2026-10-08T00:01:06+00:00 | Vulnerability · Source |
| CVE-2018-20852 | suse_vex | SUSE CVE CVE-2018-20852 | known affected: 468 recommended: 1874 | 2026-10-08T00:00:49+00:00 | Vulnerability · Source |
| CVE-2019-8720 | suse_vex | SUSE CVE CVE-2019-8720 | known not affected: 10 recommended: 1060 | 2026-10-08T00:00:42+00:00 | Vulnerability · Source |
| CVE-2019-9455 | suse_vex | SUSE CVE CVE-2019-9455 | known affected: 15 known not affected: 40 recommended: 644 | 2026-10-08T00:00:39+00:00 | Vulnerability · Source |
| CVE-2019-9740 | suse_vex | SUSE CVE CVE-2019-9740 | known affected: 375 known not affected: 710 recommended: 741 | 2026-10-08T00:00:34+00:00 | Vulnerability · Source |
| CVE-2019-9947 | suse_vex | SUSE CVE CVE-2019-9947 | known affected: 398 known not affected: 19 recommended: 1674 | 2026-10-08T00:00:30+00:00 | Vulnerability · Source |
| CVE-2019-10160 | suse_vex | SUSE CVE CVE-2019-10160 | known affected: 491 known not affected: 43 recommended: 1751 | 2026-10-08T00:00:28+00:00 | Vulnerability · Source |
| CVE-2019-10906 | suse_vex | SUSE CVE CVE-2019-10906 | known affected: 344 known not affected: 3 recommended: 470 | 2026-10-08T00:00:25+00:00 | Vulnerability · Source |
| CVE-2019-14866 | suse_vex | SUSE CVE CVE-2019-14866 | known affected: 339 recommended: 294 | 2026-10-08T00:00:19+00:00 | Vulnerability · Source |