VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292431 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-23537 | redhat_vex | feast: Unauthenticated Arbitrary File Write | known not affected: 14 | 2026-07-01T15:24:04+00:00 | Vulnerability · Source |
| CVE-2026-56016 | redhat_vex | perl-CGI-Session: perl-CGI-Session: Authentication bypass via predictable session IDs | known affected: 2 | 2026-07-01T15:12:21+00:00 | Vulnerability · Source |
| CVE-2026-56377 | redhat_vex | Imagemagick: ImageMagick - Policy Bypass via Incorrect Path Validation | known affected: 14 | 2026-07-01T15:02:42+00:00 | Vulnerability · Source |
| CVE-2026-41992 | microsoft_vex | Global Buffer Overflow in GNU gzip | fixed: 2 known affected: 2 | 2026-07-01T14:48:18+00:00 | Vulnerability · Source |
| CVE-2026-54369 | microsoft_vex | acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions | known affected: 2 | 2026-07-01T14:47:53+00:00 | Vulnerability · Source |
| CVE-2026-48142 | microsoft_vex | NGINX ngx_http_charset_module vulnerability | fixed: 2 known affected: 3 | 2026-07-01T14:47:22+00:00 | Vulnerability · Source |
| CVE-2026-57062 | microsoft_vex | CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182. | fixed: 2 known affected: 2 | 2026-07-01T14:47:15+00:00 | Vulnerability · Source |
| CVE-2026-55203 | microsoft_vex | HAProxy - Integer Overflow in FCGI Demux Record Length Field | fixed: 2 known affected: 2 | 2026-07-01T14:44:40+00:00 | Vulnerability · Source |
| CVE-2021-33623 | redhat_vex | nodejs-trim-newlines: ReDoS in .end() method | fixed: 6 known affected: 14 known not affected: 134 | 2026-07-01T14:42:57+00:00 | Vulnerability · Source |
| CVE-2020-7753 | redhat_vex | nodejs-trim: Regular Expression Denial of Service (ReDoS) in trim function | fixed: 4 known affected: 1 known not affected: 93 | 2026-07-01T14:42:57+00:00 | Vulnerability · Source |
| CVE-2026-55204 | microsoft_vex | HAProxy - NULL Pointer Dereference in hpack_dht_insert Function | fixed: 2 known affected: 2 | 2026-07-01T14:42:43+00:00 | Vulnerability · Source |
| CVE-2026-48914 | microsoft_vex | Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling | fixed: 3 known affected: 3 | 2026-07-01T14:41:57+00:00 | Vulnerability · Source |
| CVE-2026-44967 | microsoft_vex | opentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response | fixed: 2 known affected: 2 known not affected: 1 | 2026-07-01T14:41:51+00:00 | Vulnerability · Source |
| CVE-2026-43894 | microsoft_vex | jq: Wild stack write via signed-integer overflow in decNumber D2U() macro | known affected: 3 | 2026-07-01T14:41:34+00:00 | Vulnerability · Source |
| CVE-2025-9403 | microsoft_vex | jqlang jq JSON jq_test.c run_jq_tests assertion | fixed: 4 known affected: 5 | 2026-07-01T14:41:28+00:00 | Vulnerability · Source |
| CVE-2025-1180 | microsoft_vex | GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption | fixed: 2 known affected: 21 | 2026-07-01T14:40:58+00:00 | Vulnerability · Source |
| CVE-2025-1150 | microsoft_vex | GNU Binutils ld libbfd.c bfd_malloc memory leak | known affected: 19 | 2026-07-01T14:40:52+00:00 | Vulnerability · Source |
| CVE-2025-1149 | microsoft_vex | GNU Binutils ld xmalloc.c xstrdup memory leak | known affected: 4 under investigation: 27 | 2026-07-01T14:40:40+00:00 | Vulnerability · Source |
| CVE-2025-1151 | microsoft_vex | GNU Binutils ld xmemdup.c xmemdup memory leak | known affected: 30 | 2026-07-01T14:40:31+00:00 | Vulnerability · Source |
| CVE-2023-50230 | redhat_vex | bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability | fixed: 134 known affected: 21 known not affected: 5 | 2026-07-01T14:39:46+00:00 | Vulnerability · Source |
| CVE-2026-13484 | redhat_vex | mlflow: MLflow: Unauthorized access and data manipulation via missing API authorization | known affected: 19 | 2026-07-01T14:20:39+00:00 | Vulnerability · Source |
| CVE-2026-56116 | redhat_vex | dhcpcd: dhcpcd: Denial of Service via IPv6 Router Advertisement memory leak | known affected: 1 | 2026-07-01T14:13:02+00:00 | Vulnerability · Source |
| CVE-2026-52956 | redhat_vex | kernel: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() | known affected: 260 known not affected: 14 | 2026-07-01T14:08:27+00:00 | Vulnerability · Source |
| CVE-2026-53194 | redhat_vex | kernel: USB: serial: kl5kusb105: fix bulk-out buffer overflow | known affected: 260 known not affected: 14 | 2026-07-01T14:08:18+00:00 | Vulnerability · Source |
| CVE-2026-52945 | redhat_vex | kernel: Revert "wireguard: device: enable threaded NAPI" | known affected: 184 known not affected: 90 | 2026-07-01T14:08:13+00:00 | Vulnerability · Source |
| CVE-2026-43958 | redhat_vex | rrdtool: rrdtool: Stack buffer overflow allows local code execution or denial of service | fixed: 299 known affected: 17 | 2026-07-01T14:07:17+00:00 | Vulnerability · Source |
| CVE-2026-23191 | redhat_vex | kernel: ALSA: aloop: Fix racy access at PCM trigger | fixed: 2084 known affected: 22 known not affected: 14 | 2026-07-01T14:06:06+00:00 | Vulnerability · Source |
| CVE-2025-21691 | redhat_vex | kernel: cachestat: fix page cache statistics permission checking | fixed: 917 known affected: 64 known not affected: 48 | 2026-07-01T14:06:02+00:00 | Vulnerability · Source |
| CVE-2025-21648 | redhat_vex | kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX | fixed: 608 known affected: 112 known not affected: 76 | 2026-07-01T14:06:02+00:00 | Vulnerability · Source |
| CVE-2026-43128 | redhat_vex | kernel: RDMA/umem: Fix double dma_buf_unpin in failure path | fixed: 1658 known affected: 22 known not affected: 90 | 2026-07-01T14:05:57+00:00 | Vulnerability · Source |
| CVE-2026-47102 | redhat_vex | litellm: LiteLLM: Privilege escalation through user role modification | known affected: 1 known not affected: 5 | 2026-07-01T13:31:13+00:00 | Vulnerability · Source |
| CVE-2026-54672 | redhat_vex | electron-updater: app-builder-lib: Electron-updater: Arbitrary code execution through AppImage library loading vulnerability | known not affected: 3 | 2026-07-01T13:29:49+00:00 | Vulnerability · Source |
| CVE-2026-43501 | redhat_vex | kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows | fixed: 1658 known affected: 22 known not affected: 90 | 2026-07-01T13:23:17+00:00 | Vulnerability · Source |
| CVE-2026-46176 | redhat_vex | kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() | fixed: 1224 known affected: 22 known not affected: 76 under investigation: 14 | 2026-07-01T13:23:06+00:00 | Vulnerability · Source |
| CVE-2026-50003 | redhat_vex | DCMTK: DCMTK: Arbitrary file write due to directory traversal vulnerability | known not affected: 1 | 2026-07-01T11:14:45+00:00 | Vulnerability · Source |
| CVE-2024-3183 | redhat_vex | freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force | fixed: 880 known not affected: 65 | 2026-07-01T11:04:21+00:00 | Vulnerability · Source |
| CVE-2026-13316 | redhat_vex | Foreman: SSRF to cloud metada service through unvalidated test_url parameters in Foreman config | known affected: 34 | 2026-07-01T10:11:09+00:00 | Vulnerability · Source |
| CVE-2025-21739 | redhat_vex | kernel: scsi: ufs: core: Fix use-after free in init error and remove paths | fixed: 303 known affected: 98 known not affected: 90 | 2026-07-01T10:04:47+00:00 | Vulnerability · Source |
| CVE-2024-58007 | redhat_vex | kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number | fixed: 305 known affected: 76 known not affected: 112 | 2026-07-01T09:29:03+00:00 | Vulnerability · Source |
| CVE-2023-26819 | redhat_vex | cJSON: cJSON rejects a valid text | known affected: 13 | 2026-07-01T06:10:33+00:00 | Vulnerability · Source |
| CVE-2023-53154 | redhat_vex | cjson: Heap based buffer overflow at cJSON_ParseWithLength function | known affected: 3 | 2026-07-01T06:10:31+00:00 | Vulnerability · Source |
| CVE-2026-54270 | redhat_vex | protobufjs: protobufjs: Denial of Service due to excessive memory consumption | known affected: 12 known not affected: 33 | 2026-07-01T05:08:48+00:00 | Vulnerability · Source |
| CVE-2026-54269 | redhat_vex | protobufjs: protobufjs-cli: protobufjs: Denial of Service due to name collision with runtime helpers | known affected: 12 known not affected: 33 | 2026-07-01T05:08:48+00:00 | Vulnerability · Source |
| CVE-2026-40989 | redhat_vex | spring-cloud-function-context: Spring Cloud Function: Denial of Service via infinite recursion in routing layer | known affected: 1 | 2026-07-01T04:38:32+00:00 | Vulnerability · Source |
| CVE-2017-5603 | suse_vex | SUSE CVE CVE-2017-5603 | recommended: 6 | 2026-07-01T04:10:16+00:00 | Vulnerability · Source |
| CVE-2017-11124 | suse_vex | SUSE CVE CVE-2017-11124 | recommended: 6 | 2026-07-01T04:10:01+00:00 | Vulnerability · Source |
| CVE-2017-11125 | suse_vex | SUSE CVE CVE-2017-11125 | recommended: 6 | 2026-07-01T04:10:00+00:00 | Vulnerability · Source |
| CVE-2018-18504 | suse_vex | SUSE CVE CVE-2018-18504 | known not affected: 154 recommended: 9 | 2026-07-01T04:09:20+00:00 | Vulnerability · Source |
| CVE-2019-9814 | suse_vex | SUSE CVE CVE-2019-9814 | known affected: 20 known not affected: 5 recommended: 9 | 2026-07-01T04:09:06+00:00 | Vulnerability · Source |
| CVE-2019-13173 | suse_vex | SUSE CVE CVE-2019-13173 | known affected: 82 known not affected: 96 recommended: 468 | 2026-07-01T04:08:53+00:00 | Vulnerability · Source |