VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292431 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-34778 | redhat_vex | Electron: Electron: Integrity issue due to IPC channel spoofing by a service worker | known affected: 3 | 2026-06-30T11:43:07+00:00 | Vulnerability · Source |
| CVE-2026-34776 | redhat_vex | Electron: Electron: Information disclosure via crafted second-instance message | known affected: 3 | 2026-06-30T11:43:05+00:00 | Vulnerability · Source |
| CVE-2026-34777 | redhat_vex | Electron: Electron: Unauthorized permission granting and information disclosure via incorrect iframe origin | known affected: 3 | 2026-06-30T11:43:04+00:00 | Vulnerability · Source |
| CVE-2026-34775 | redhat_vex | Electron: Electron: Arbitrary code execution and information disclosure due to incorrect Node.js integration scoping | known affected: 3 | 2026-06-30T11:42:59+00:00 | Vulnerability · Source |
| CVE-2026-34773 | redhat_vex | electron: Electron: Protocol handler hijacking via improper validation of protocol names | known not affected: 3 | 2026-06-30T11:42:56+00:00 | Vulnerability · Source |
| CVE-2026-34772 | redhat_vex | Electron: Electron: Use-after-free vulnerability leads to memory corruption or crash | known affected: 3 | 2026-06-30T11:42:55+00:00 | Vulnerability · Source |
| CVE-2026-34767 | redhat_vex | electron: Electron: HTTP Response Header Injection via attacker-controlled input | known affected: 3 | 2026-06-30T11:42:52+00:00 | Vulnerability · Source |
| CVE-2026-34765 | redhat_vex | electron: Electron: Arbitrary code execution or information disclosure via incorrect window handling | known affected: 6 | 2026-06-30T11:42:51+00:00 | Vulnerability · Source |
| CVE-2026-34763 | redhat_vex | rack: Rack: Information disclosure via regular expression metacharacters in root path | known affected: 50 | 2026-06-30T11:42:50+00:00 | Vulnerability · Source |
| CVE-2026-34760 | redhat_vex | vLLM: Librosa: numpy: Librosa: AI model data integrity impact due to audio processing discrepancy | known affected: 21 | 2026-06-30T11:42:48+00:00 | Vulnerability · Source |
| CVE-2026-34475 | redhat_vex | Varnish Cache: Varnish Cache and Varnish Enterprise: Cache poisoning and authentication bypass via unchecked URL handling | known affected: 12 known not affected: 9 | 2026-06-30T11:42:42+00:00 | Vulnerability · Source |
| CVE-2026-5673 | redhat_vex | libtheora: libtheora: Denial of Service or Information Disclosure via malformed AVI file processing | known affected: 17 | 2026-06-30T11:42:37+00:00 | Vulnerability · Source |
| CVE-2026-5318 | redhat_vex | LibRaw: LibRaw: Denial of Service via out-of-bounds write in JPEG DHT Parser | known affected: 16 | 2026-06-30T11:42:36+00:00 | Vulnerability · Source |
| CVE-2026-5530 | redhat_vex | ollama: Ollama: Server-Side Request Forgery via Model Pull API manipulation | known affected: 11 | 2026-06-30T11:42:35+00:00 | Vulnerability · Source |
| CVE-2026-5342 | redhat_vex | LibRaw: LibRaw: Out-of-bounds read via `load_flags/raw_width` argument manipulation | known affected: 16 | 2026-06-30T11:42:33+00:00 | Vulnerability · Source |
| CVE-2026-5265 | redhat_vex | ovn: ovn: Heap Over-Read in ICMP Error Response Generation | fixed: 333 known affected: 83 | 2026-06-30T11:42:29+00:00 | Vulnerability · Source |
| CVE-2026-5165 | redhat_vex | virtio-win: virtio-win: Memory corruption via use-after-free in VirtIO BLK device reset | known affected: 3 known not affected: 1 | 2026-06-30T11:42:26+00:00 | Vulnerability · Source |
| CVE-2026-5164 | redhat_vex | virtio-win: virtio-win: Denial of Service via unvalidated descriptor count in unmap request | known affected: 3 known not affected: 1 | 2026-06-30T11:42:26+00:00 | Vulnerability · Source |
| CVE-2026-5119 | redhat_vex | libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment | fixed: 317 known affected: 3 | 2026-06-30T11:42:19+00:00 | Vulnerability · Source |
| CVE-2026-5107 | redhat_vex | FRRouting FRR: frr: FRRouting FRR: Improper access controls in EVPN Type-2 Route Handler | known affected: 13 | 2026-06-30T11:42:17+00:00 | Vulnerability · Source |
| CVE-2026-4980 | redhat_vex | Inkscape: Inkscape: Information disclosure via crafted SVG file with malicious XInclude tags | known affected: 3 known not affected: 13 | 2026-06-30T11:42:16+00:00 | Vulnerability · Source |
| CVE-2026-4923 | redhat_vex | path-to-regexp: path-to-regexp: Denial of Service via specially crafted paths with multiple wildcards | fixed: 1 known affected: 105 known not affected: 2 | 2026-06-30T11:42:12+00:00 | Vulnerability · Source |
| CVE-2017-1002102 | redhat_vex | kubernetes: Malicious containers can delete any file from the node | fixed: 72 known affected: 1 known not affected: 4 | 2026-06-30T11:41:09+00:00 | Vulnerability · Source |
| CVE-2017-15138 | redhat_vex | atomic-openshift: cluster-reader can escalate to creating builds via webhooks in any project | fixed: 986 known affected: 31 | 2026-06-30T11:41:00+00:00 | Vulnerability · Source |
| CVE-2017-15125 | redhat_vex | cloudforms: XSS in self-service UI snapshot feature | fixed: 179 | 2026-06-30T11:40:56+00:00 | Vulnerability · Source |
| CVE-2017-15137 | redhat_vex | atomic-openshift: image import whitelist can be bypassed by creating an imagestream or using oc tag | fixed: 986 known affected: 17 known not affected: 14 | 2026-06-30T11:40:55+00:00 | Vulnerability · Source |
| CVE-2017-15123 | redhat_vex | CloudForms: RSS links are accessible without any authentication | known not affected: 2 | 2026-06-30T11:40:52+00:00 | Vulnerability · Source |
| CVE-2017-15119 | redhat_vex | qemu: DoS via large option request | fixed: 46 known affected: 19 known not affected: 19 | 2026-06-30T11:40:50+00:00 | Vulnerability · Source |
| CVE-2017-15101 | redhat_vex | liblouis: incomplete fix for CVE-2014-8184 | fixed: 72 | 2026-06-30T11:40:47+00:00 | Vulnerability · Source |
| CVE-2017-15097 | redhat_vex | postgresql: Start scripts permit database administrator to modify root-owned files | fixed: 586 known affected: 13 under investigation: 3 | 2026-06-30T11:40:44+00:00 | Vulnerability · Source |
| CVE-2017-14461 | redhat_vex | dovecot: Information Leak Vulnerability in rfc822_parse_domain leading to denial-of-service | known affected: 12 known not affected: 7 | 2026-06-30T11:40:43+00:00 | Vulnerability · Source |
| CVE-2017-13098 | redhat_vex | bouncycastle: TLS server vulnerable to Adaptive Chosen Ciphertext attack when using JCE allowing plaintext recovery or MITM attack | known affected: 2 known not affected: 7 | 2026-06-30T11:40:41+00:00 | Vulnerability · Source |
| CVE-2017-12196 | redhat_vex | undertow: Client can use bogus uri in Digest authentication | fixed: 324 known affected: 2 known not affected: 1 | 2026-06-30T11:40:37+00:00 | Vulnerability · Source |
| CVE-2017-12195 | redhat_vex | 3: authentication bypass for elasticsearch with external routes | fixed: 995 | 2026-06-30T11:40:34+00:00 | Vulnerability · Source |
| CVE-2017-12175 | redhat_vex | 6: XSS in discovery rule filter autocomplete functionality | fixed: 1110 | 2026-06-30T11:40:33+00:00 | Vulnerability · Source |
| CVE-2017-12173 | redhat_vex | sssd: unsanitized input when searching in local cache database | fixed: 860 known affected: 1 known not affected: 1 | 2026-06-30T11:40:31+00:00 | Vulnerability · Source |
| CVE-2017-12171 | redhat_vex | httpd: # character matches all IPs | fixed: 62 known not affected: 34 | 2026-06-30T11:40:28+00:00 | Vulnerability · Source |
| CVE-2017-12167 | redhat_vex | EAP-7: Wrong privileges on multiple property files | fixed: 983 | 2026-06-30T11:40:27+00:00 | Vulnerability · Source |
| CVE-2017-12163 | redhat_vex | Samba: Server memory information leak over SMB1 | fixed: 602 known affected: 1 | 2026-06-30T11:40:24+00:00 | Vulnerability · Source |
| CVE-2017-12164 | redhat_vex | gdm: lock screen can be circumvented when autologin is set | known not affected: 11 | 2026-06-30T11:40:24+00:00 | Vulnerability · Source |
| CVE-2017-12151 | redhat_vex | samba: SMB2 connections don't keep encryption across DFS redirects | fixed: 317 known affected: 15 known not affected: 16 | 2026-06-30T11:40:23+00:00 | Vulnerability · Source |
| CVE-2017-12150 | redhat_vex | samba: Some code path don't enforce smb signing, when they should | fixed: 602 known affected: 2 | 2026-06-30T11:40:16+00:00 | Vulnerability · Source |
| CVE-2017-2835 | redhat_vex | freerdp: Out-of-bounds write in rdp_recv_tpkt_pdu | known affected: 12 | 2026-06-30T11:40:15+00:00 | Vulnerability · Source |
| CVE-2017-2820 | redhat_vex | poppler: Integer overflow in the JPEG 2000 image parsing functionality | known not affected: 22 | 2026-06-30T11:40:13+00:00 | Vulnerability · Source |
| CVE-2017-2834 | redhat_vex | freerdp: Out-of-bounds write in license_recv() | known affected: 12 | 2026-06-30T11:40:11+00:00 | Vulnerability · Source |
| CVE-2017-2818 | redhat_vex | poppler: Heap-buffer overflow in the image rendering functionality | known not affected: 22 | 2026-06-30T11:40:09+00:00 | Vulnerability · Source |
| CVE-2017-2814 | redhat_vex | poppler: Heap-buffer overflow in DCTStream::readScan() | known not affected: 22 | 2026-06-30T11:40:06+00:00 | Vulnerability · Source |
| CVE-2017-2674 | redhat_vex | business-central: Multiple stored XSS in task and process filters | fixed: 2 | 2026-06-30T11:40:05+00:00 | Vulnerability · Source |
| CVE-2017-2672 | redhat_vex | foreman: Image password leak | fixed: 276 known affected: 2 | 2026-06-30T11:40:01+00:00 | Vulnerability · Source |
| CVE-2017-2670 | redhat_vex | undertow: IO thread DoS via unclean Websocket closing | fixed: 1119 known affected: 5 | 2026-06-30T11:40:00+00:00 | Vulnerability · Source |