VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292431 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-53319 | suse_vex | SUSE CVE CVE-2026-53319 | known not affected: 291 | 2026-07-01T03:15:56+00:00 | Vulnerability · Source |
| CVE-2026-54250 | suse_vex | SUSE CVE CVE-2026-54250 | No product status | 2026-07-01T03:15:31+00:00 | Vulnerability · Source |
| CVE-2026-55092 | suse_vex | SUSE CVE CVE-2026-55092 | recommended: 1 | 2026-07-01T03:15:17+00:00 | Vulnerability · Source |
| CVE-2026-55957 | suse_vex | SUSE CVE CVE-2026-55957 | known affected: 381 | 2026-07-01T03:15:06+00:00 | Vulnerability · Source |
| CVE-2026-56017 | suse_vex | SUSE CVE CVE-2026-56017 | recommended: 1 | 2026-07-01T03:15:04+00:00 | Vulnerability · Source |
| CVE-2026-56018 | suse_vex | SUSE CVE CVE-2026-56018 | recommended: 1 | 2026-07-01T03:15:02+00:00 | Vulnerability · Source |
| CVE-2026-56766 | suse_vex | SUSE CVE CVE-2026-56766 | recommended: 1 | 2026-07-01T03:14:56+00:00 | Vulnerability · Source |
| CVE-2026-57947 | suse_vex | SUSE CVE CVE-2026-57947 | No product status | 2026-07-01T03:14:52+00:00 | Vulnerability · Source |
| CVE-2026-57948 | suse_vex | SUSE CVE CVE-2026-57948 | No product status | 2026-07-01T03:14:51+00:00 | Vulnerability · Source |
| CVE-2024-0760 | redhat_vex | bind: bind9: A flood of DNS messages over TCP may make the server unstable | known not affected: 78 | 2026-07-01T03:02:45+00:00 | Vulnerability · Source |
| CVE-2026-43828 | redhat_vex | apache-shiro: Apache Shiro: Information disclosure via insecure cookie handling | known affected: 2 | 2026-07-01T02:22:24+00:00 | Vulnerability · Source |
| CVE-2026-55607 | redhat_vex | Claude Code: @anthropic-ai/claude-code: Claude Code: Arbitrary code execution through git directory confusion | known affected: 1 | 2026-06-30T20:20:38+00:00 | Vulnerability · Source |
| CVE-2026-13455 | redhat_vex | postgresql_anonymizer: PostgreSQL Anonymizer: Information Disclosure via brute-force attack on hash function | known not affected: 1 | 2026-06-30T20:15:38+00:00 | Vulnerability · Source |
| CVE-2026-2725 | redhat_vex | gerrit: Gerrit: Code review bypass via incorrect authorization | known not affected: 4 | 2026-06-30T19:21:08+00:00 | Vulnerability · Source |
| CVE-2026-6657 | redhat_vex | jupyter-server: jupyter-server: Arbitrary code execution due to CORS origin validation bypass | known affected: 16 | 2026-06-30T19:21:08+00:00 | Vulnerability · Source |
| CVE-2026-54475 | redhat_vex | org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: org.apache.activemq/activemq: Apache ActiveMQ: Information disclosure due to broken temporary destination isolation | known affected: 2 known not affected: 7 | 2026-06-30T18:50:43+00:00 | Vulnerability · Source |
| CVE-2026-56018 | redhat_vex | JavaScript::Minifier::XS: JavaScript::Minifier::XS: Denial of Service due to memory leak during minification. | known not affected: 1 | 2026-06-30T18:19:58+00:00 | Vulnerability · Source |
| CVE-2026-54277 | redhat_vex | aiohttp: aiohttp: Denial of Service via oversized HTTP request lines bypassing max_line_size check | known affected: 60 known not affected: 56 | 2026-06-30T18:19:54+00:00 | Vulnerability · Source |
| CVE-2026-49270 | redhat_vex | apache-activemq-broker: apache-activemq: apache-activemq-all: Apache ActiveMQ: Information disclosure via unauthenticated BrokerInfo command | known affected: 121 | 2026-06-30T18:01:01+00:00 | Vulnerability · Source |
| CVE-2026-45505 | redhat_vex | activemq: Apache ActiveMQ: Arbitrary Code Execution via crafted discovery URI bypass | known affected: 121 | 2026-06-30T18:00:56+00:00 | Vulnerability · Source |
| CVE-2026-53917 | redhat_vex | activemq: activemq-all: activemq-client: activemq-broker: Apache ActiveMQ: Denial of Service via crafted OpenWire Message | known affected: 121 | 2026-06-30T17:53:27+00:00 | Vulnerability · Source |
| CVE-2026-7259 | redhat_vex | php: NULL pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() | fixed: 402 known affected: 125 known not affected: 102 | 2026-06-30T17:39:08+00:00 | Vulnerability · Source |
| CVE-2026-46605 | redhat_vex | activemq: Apache ActiveMQ: Denial of Service via incomplete authorization | known affected: 121 | 2026-06-30T17:35:30+00:00 | Vulnerability · Source |
| CVE-2026-49434 | redhat_vex | org.apache.activemq/activemq-broker: org.apache.activemq/activemq-core: org.apache.activemq/activemq-all: Apache ActiveMQ: Unauthorized broker instantiation via improper input validation in LDAP entries | known affected: 125 | 2026-06-30T17:33:08+00:00 | Vulnerability · Source |
| CVE-2026-49157 | redhat_vex | activemq: Apache ActiveMQ: Unauthorized Broker Management via Incorrect Default Permissions | known affected: 121 | 2026-06-30T17:32:50+00:00 | Vulnerability · Source |
| CVE-2026-50750 | redhat_vex | activemq: Apache ActiveMQ: Denial of Service via repeated BrokerInfo commands | known not affected: 121 | 2026-06-30T16:56:10+00:00 | Vulnerability · Source |
| CVE-2026-10601 | redhat_vex | grafana: tempo: loki: Tempo and Loki Datasource Plugins: Information disclosure and unauthorized actions via path traversal | known affected: 28 | 2026-06-30T15:55:14+00:00 | Vulnerability · Source |
| CVE-2026-47101 | redhat_vex | litellm: LiteLLM: Privilege escalation via API key generation with insufficient permission validation | known affected: 1 known not affected: 5 | 2026-06-30T15:43:13+00:00 | Vulnerability · Source |
| CVE-2026-54905 | microsoft_vex | concurrent-ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity | fixed: 1 known affected: 1 | 2026-06-30T15:41:39+00:00 | Vulnerability · Source |
| CVE-2026-54906 | microsoft_vex | concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption | fixed: 1 known affected: 1 | 2026-06-30T15:41:31+00:00 | Vulnerability · Source |
| CVE-2026-48715 | microsoft_vex | radvdump's Route Information Option Parser has a Stack Buffer Overflow | fixed: 1 known affected: 1 | 2026-06-30T15:41:24+00:00 | Vulnerability · Source |
| CVE-2026-12505 | microsoft_vex | Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall | fixed: 1 known affected: 1 | 2026-06-30T15:40:49+00:00 | Vulnerability · Source |
| CVE-2026-57454 | microsoft_vex | Vim: Out-of-bounds Read with Text Properties | fixed: 1 known affected: 2 | 2026-06-30T15:40:42+00:00 | Vulnerability · Source |
| CVE-2026-57453 | microsoft_vex | Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction | fixed: 1 known affected: 2 | 2026-06-30T15:40:34+00:00 | Vulnerability · Source |
| CVE-2026-57451 | microsoft_vex | Vim: Out-of-bounds Read in Text Property Count | fixed: 1 known affected: 2 | 2026-06-30T15:40:26+00:00 | Vulnerability · Source |
| CVE-2026-55892 | microsoft_vex | Vim: Out-of-bounds Write in Spell File Prefix Dump | fixed: 1 known affected: 2 | 2026-06-30T15:40:19+00:00 | Vulnerability · Source |
| CVE-2026-57456 | microsoft_vex | Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings | fixed: 1 known affected: 2 | 2026-06-30T15:40:11+00:00 | Vulnerability · Source |
| CVE-2026-55693 | microsoft_vex | Vim: Out-of-bounds Write in Spell File Word Count | fixed: 1 known affected: 2 | 2026-06-30T15:39:59+00:00 | Vulnerability · Source |
| CVE-2026-55895 | microsoft_vex | Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename | fixed: 1 known affected: 2 | 2026-06-30T15:39:51+00:00 | Vulnerability · Source |
| CVE-2026-57455 | microsoft_vex | Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument | fixed: 1 known affected: 2 | 2026-06-30T15:39:44+00:00 | Vulnerability · Source |
| CVE-2026-57452 | microsoft_vex | Vim: Out-of-bounds Read with libsodium-encrypted Files | fixed: 1 known affected: 2 | 2026-06-30T15:39:36+00:00 | Vulnerability · Source |
| CVE-2026-57235 | microsoft_vex | Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` | fixed: 1 known affected: 1 | 2026-06-30T15:39:29+00:00 | Vulnerability · Source |
| CVE-2026-57234 | microsoft_vex | Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247 | fixed: 1 known affected: 1 | 2026-06-30T15:39:21+00:00 | Vulnerability · Source |
| CVE-2026-57436 | microsoft_vex | Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type | fixed: 1 known affected: 1 | 2026-06-30T15:39:14+00:00 | Vulnerability · Source |
| CVE-2026-57434 | microsoft_vex | Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes | fixed: 1 known affected: 1 | 2026-06-30T15:39:05+00:00 | Vulnerability · Source |
| CVE-2026-57437 | microsoft_vex | Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime | fixed: 1 known affected: 1 | 2026-06-30T15:38:57+00:00 | Vulnerability · Source |
| CVE-2026-57236 | microsoft_vex | Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception | fixed: 1 known affected: 1 | 2026-06-30T15:38:49+00:00 | Vulnerability · Source |
| CVE-2026-57435 | microsoft_vex | Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` | fixed: 1 known affected: 1 | 2026-06-30T15:38:42+00:00 | Vulnerability · Source |
| CVE-2026-57438 | microsoft_vex | Nokogiri: Possible Use-After-Free in XInclude Processing | fixed: 1 known affected: 1 | 2026-06-30T15:38:34+00:00 | Vulnerability · Source |
| CVE-2026-49851 | microsoft_vex | Mistune: Potential DoS via quadratic-time parsing in parse_link_text | fixed: 1 known affected: 1 | 2026-06-30T15:38:27+00:00 | Vulnerability · Source |