VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292431 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-6402 | redhat_vex | webpack-dev-server: webpack-dev-server: Information disclosure due to cross-origin source code exposure | known affected: 77 | 2026-07-02T12:46:18+00:00 | Vulnerability · Source |
| CVE-2026-5404 | redhat_vex | wireshark: Wireshark: Denial of service due to K12 RF5 file parser crash | known affected: 20 | 2026-07-02T12:46:11+00:00 | Vulnerability · Source |
| CVE-2026-5407 | redhat_vex | Wireshark: Wireshark: Denial of Service from malicious SMB2 protocol data | known affected: 20 | 2026-07-02T12:46:11+00:00 | Vulnerability · Source |
| CVE-2026-5401 | redhat_vex | wireshark: Wireshark: Denial of service via AFP Spotlight protocol dissector crash | known affected: 20 | 2026-07-02T12:44:19+00:00 | Vulnerability · Source |
| CVE-2026-58517 | redhat_vex | wikilambda: WikiLambda Extension: Authentication bypass due to improper input neutralization | known not affected: 1 | 2026-07-02T12:31:28+00:00 | Vulnerability · Source |
| CVE-2026-43048 | redhat_vex | kernel: HID: core: Mitigate potential OOB by removing bogus memset() | known affected: 274 | 2026-07-02T12:26:50+00:00 | Vulnerability · Source |
| CVE-2021-34432 | redhat_vex | mosquitto: DoS when client tries to send a PUBLISH packet with topic length = 0 | known not affected: 1 | 2026-07-02T11:20:47+00:00 | Vulnerability · Source |
| CVE-2026-54257 | redhat_vex | electron: Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow | known not affected: 1 | 2026-07-02T08:58:24+00:00 | Vulnerability · Source |
| CVE-2016-2183 | redhat_vex | SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) | fixed: 1036 known affected: 26 known not affected: 749 | 2026-07-02T08:57:53+00:00 | Vulnerability · Source |
| CVE-2026-49356 | redhat_vex | @babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment | known not affected: 110 | 2026-07-02T08:22:16+00:00 | Vulnerability · Source |
| CVE-2026-14101 | redhat_vex | chromium-browser: Insufficient policy enforcement in Sandbox | known not affected: 1 | 2026-07-02T00:14:58+00:00 | Vulnerability · Source |
| CVE-2026-5135 | redhat_vex | foreman: Foreman: Unauthorized modification of host configurations via broken access control | fixed: 103 known affected: 17 known not affected: 132 | 2026-07-01T23:53:14+00:00 | Vulnerability · Source |
| CVE-2026-5142 | redhat_vex | foreman: foreman: Cross-tenant private SSH key disclosure via taxonomy scoping bypass | fixed: 103 known affected: 17 known not affected: 132 | 2026-07-01T23:53:12+00:00 | Vulnerability · Source |
| CVE-2026-5138 | redhat_vex | foreman: Foreman: Information disclosure via improper validation of nested request parameters | fixed: 103 known affected: 17 known not affected: 132 | 2026-07-01T23:53:11+00:00 | Vulnerability · Source |
| CVE-2026-5136 | redhat_vex | foreman: Foreman: Privilege escalation to administrator-level access via usergroup role assignment manipulation | fixed: 103 known affected: 17 known not affected: 132 | 2026-07-01T23:40:26+00:00 | Vulnerability · Source |
| CVE-2026-55628 | redhat_vex | ImageMagick: ImageMagick: Unauthorized file access due to missing policy checks in concatenate operation | known affected: 14 | 2026-07-01T23:08:56+00:00 | Vulnerability · Source |
| CVE-2026-53466 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via integer overflow in XCF decoder | known affected: 14 | 2026-07-01T23:08:56+00:00 | Vulnerability · Source |
| CVE-2026-55577 | redhat_vex | ImageMagick: ImageMagick: Heap buffer overflow in MVG decoder allows out-of-bounds write | known affected: 14 | 2026-07-01T23:08:56+00:00 | Vulnerability · Source |
| CVE-2026-55594 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted image in MVG decoder | known affected: 14 | 2026-07-01T23:01:49+00:00 | Vulnerability · Source |
| CVE-2026-55595 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via invalid arguments to connected-components option | known affected: 14 | 2026-07-01T22:25:25+00:00 | Vulnerability · Source |
| CVE-2026-53467 | redhat_vex | ImageMagick: ImageMagick: Information disclosure vulnerability in MNG decoder | known affected: 14 | 2026-07-01T22:25:25+00:00 | Vulnerability · Source |
| CVE-2026-55510 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted 8BIM profile | known affected: 14 | 2026-07-01T22:20:58+00:00 | Vulnerability · Source |
| CVE-2026-55597 | redhat_vex | ImageMagick: ImageMagick: Heap buffer overwrite via incorrect argument handling in JP2 encoder | known affected: 14 | 2026-07-01T22:09:47+00:00 | Vulnerability · Source |
| CVE-2026-45491 | redhat_vex | dotnet: .NET: Local file tampering via link following vulnerability | fixed: 1441 known not affected: 2 | 2026-07-01T21:04:35+00:00 | Vulnerability · Source |
| CVE-2026-5051 | redhat_vex | Vault: Vault Enterprise: HashiCorp Vault: Audit device validation bypass via legacy file audit path option | known not affected: 6 | 2026-07-01T20:33:40+00:00 | Vulnerability · Source |
| CVE-2026-53346 | redhat_vex | kernel: rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES | known not affected: 274 | 2026-07-01T20:25:20+00:00 | Vulnerability · Source |
| CVE-2026-53334 | redhat_vex | kernel: mm/damon/reclaim: handle ctx allocation failure | known not affected: 274 | 2026-07-01T19:52:12+00:00 | Vulnerability · Source |
| CVE-2026-53338 | redhat_vex | kernel: net: airoha: Add NULL check for of_reserved_mem_lookup() in airoha_qdma_init_hfwd_queues() | known not affected: 274 | 2026-07-01T19:52:00+00:00 | Vulnerability · Source |
| CVE-2026-53345 | redhat_vex | kernel: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying | known not affected: 274 | 2026-07-01T19:51:55+00:00 | Vulnerability · Source |
| CVE-2026-53343 | redhat_vex | kernel: ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow | known not affected: 274 | 2026-07-01T19:51:52+00:00 | Vulnerability · Source |
| CVE-2026-53328 | redhat_vex | kernel: sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task() | known not affected: 274 | 2026-07-01T19:51:46+00:00 | Vulnerability · Source |
| CVE-2026-53332 | redhat_vex | kernel: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd | known not affected: 274 | 2026-07-01T19:42:47+00:00 | Vulnerability · Source |
| CVE-2026-53335 | redhat_vex | kernel: mm/damon/lru_sort: handle ctx allocation failure | known not affected: 274 | 2026-07-01T19:42:37+00:00 | Vulnerability · Source |
| CVE-2026-53344 | redhat_vex | kernel: pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init | known not affected: 274 | 2026-07-01T19:41:16+00:00 | Vulnerability · Source |
| CVE-2026-7258 | redhat_vex | PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions | fixed: 1721 known affected: 56 | 2026-07-01T19:40:02+00:00 | Vulnerability · Source |
| CVE-2026-6735 | redhat_vex | PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation | fixed: 1721 known affected: 56 | 2026-07-01T19:40:01+00:00 | Vulnerability · Source |
| CVE-2026-53342 | redhat_vex | kernel: arm64: mm: call pagetable dtor when freeing hot-removed page tables | known not affected: 274 | 2026-07-01T19:21:36+00:00 | Vulnerability · Source |
| CVE-2026-58521 | redhat_vex | mediawiki-cargo-extension: Mediawiki - Cargo Extension: SQL Injection vulnerability allows information disclosure and data manipulation. | known not affected: 1 | 2026-07-01T19:17:11+00:00 | Vulnerability · Source |
| CVE-2026-7568 | redhat_vex | php: signed integer overflow in metaphone() | fixed: 1718 known not affected: 55 | 2026-07-01T18:57:21+00:00 | Vulnerability · Source |
| CVE-2026-7262 | redhat_vex | php: NULL pointer dereference in SOAP apache:Map decoder with missing <value> | fixed: 1718 known not affected: 55 | 2026-07-01T18:57:12+00:00 | Vulnerability · Source |
| CVE-2026-53336 | redhat_vex | kernel: nvmem: layouts: onie-tlv: fix hang on unknown types | known not affected: 274 | 2026-07-01T16:54:13+00:00 | Vulnerability · Source |
| CVE-2026-53331 | redhat_vex | kernel: slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock | known not affected: 274 | 2026-07-01T16:50:31+00:00 | Vulnerability · Source |
| CVE-2026-33154 | redhat_vex | dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection | fixed: 34 known affected: 4 known not affected: 479 | 2026-07-01T16:42:04+00:00 | Vulnerability · Source |
| CVE-2026-58031 | redhat_vex | MediaWiki: MediaWiki: Cross-site scripting vulnerability due to improper input neutralization | known not affected: 1 | 2026-07-01T15:46:24+00:00 | Vulnerability · Source |
| CVE-2026-41001 | redhat_vex | spring-boot: Spring Boot: Local attacker can manipulate data directory due to predictable path | known affected: 9 known not affected: 2 | 2026-07-01T15:46:14+00:00 | Vulnerability · Source |
| CVE-2026-41697 | redhat_vex | Spring Data Relational: Spring Data Relational: Information disclosure via improper input escaping in Query By Example | known affected: 1 | 2026-07-01T15:34:25+00:00 | Vulnerability · Source |
| CVE-2026-41721 | redhat_vex | Spring Data Commons: Spring Data Commons: Denial of Service via specially crafted HTTP request with @ProjectedPayload | known affected: 5 | 2026-07-01T15:32:27+00:00 | Vulnerability · Source |
| CVE-2026-41719 | redhat_vex | spring-data-keyvalue: spring-data-redis: Spring Data KeyValue: Information Disclosure via SpEL Injection | known affected: 5 | 2026-07-01T15:32:23+00:00 | Vulnerability · Source |
| CVE-2026-41711 | redhat_vex | Spring Data Commons: Spring Data Commons: Denial of Service via parsing Sort parameters | known affected: 5 | 2026-07-01T15:32:20+00:00 | Vulnerability · Source |
| CVE-2026-13083 | redhat_vex | pen-drive: pen-drive: stored XSS via unescaped cluster data in HTML report | known affected: 1 | 2026-07-01T15:32:01+00:00 | Vulnerability · Source |