VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
306035 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-98363 | redhat_vex | kernel: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS | known affected: 235 known not affected: 42 | 2026-10-08T12:02:16+00:00 | Vulnerability · Source |
| CVE-2026-93019 | redhat_vex | perl-Imager: Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read | known not affected: 1 | 2026-10-08T12:02:16+00:00 | Vulnerability · Source |
| CVE-2026-45991 | redhat_vex | kernel: udf: fix partition descriptor append bookkeeping | fixed: 1311 known affected: 22 known not affected: 28 under investigation: 14 | 2026-10-08T12:01:58+00:00 | Vulnerability · Source |
| CVE-2026-43186 | redhat_vex | kernel: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() | fixed: 616 known affected: 14 known not affected: 184 | 2026-10-08T12:01:57+00:00 | Vulnerability · Source |
| CVE-2025-40237 | redhat_vex | kernel: fs/notify: call exportfs_encode_fid with s_umount | fixed: 616 known affected: 108 known not affected: 90 | 2026-10-08T12:01:56+00:00 | Vulnerability · Source |
| CVE-2026-80864 | redhat_vex | kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp | fixed: 852 known affected: 186 known not affected: 91 | 2026-10-08T12:01:48+00:00 | Vulnerability · Source |
| CVE-2026-80863 | redhat_vex | kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources() | fixed: 852 known affected: 169 known not affected: 108 | 2026-10-08T12:01:46+00:00 | Vulnerability · Source |
| CVE-2026-46133 | redhat_vex | kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing | fixed: 1305 known affected: 50 known not affected: 91 | 2026-10-08T12:01:37+00:00 | Vulnerability · Source |
| CVE-2026-46114 | redhat_vex | kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads | fixed: 841 known affected: 22 known not affected: 167 | 2026-10-08T12:01:36+00:00 | Vulnerability · Source |
| CVE-2026-46043 | redhat_vex | kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv | fixed: 1305 known affected: 50 known not affected: 91 | 2026-10-08T12:01:35+00:00 | Vulnerability · Source |
| CVE-2026-45910 | redhat_vex | kernel: RDMA/rxe: Fix race condition in QP timer handlers | fixed: 841 known affected: 22 known not affected: 167 | 2026-10-08T12:01:30+00:00 | Vulnerability · Source |
| CVE-2026-91956 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel | fixed: 195 known affected: 12 | 2026-10-08T12:01:26+00:00 | Vulnerability · Source |
| CVE-2026-91954 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command | fixed: 195 known affected: 12 | 2026-10-08T12:01:24+00:00 | Vulnerability · Source |
| CVE-2026-91953 | redhat_vex | FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption. | fixed: 195 known affected: 12 | 2026-10-08T12:01:22+00:00 | Vulnerability · Source |
| CVE-2026-91959 | redhat_vex | FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway | fixed: 195 known affected: 12 | 2026-10-08T12:01:21+00:00 | Vulnerability · Source |
| CVE-2025-26791 | redhat_vex | dompurify: Mutation XSS in DOMPurify Due to Improper Template Literal Handling | fixed: 285 known affected: 36 known not affected: 418 | 2026-10-08T12:00:14+00:00 | Vulnerability · Source |
| CVE-2025-24976 | redhat_vex | distribution: Distribution's token authentication allows attacker to inject an untrusted signing key in a JWT | fixed: 24 known affected: 12 known not affected: 300 | 2026-10-08T11:59:59+00:00 | Vulnerability · Source |
| CVE-2023-26125 | redhat_vex | golang-github-gin-gonic-gin: Improper Input Validation | fixed: 9 known affected: 15 known not affected: 906 | 2026-10-08T11:59:16+00:00 | Vulnerability · Source |
| CVE-2024-8184 | redhat_vex | org.eclipse.jetty:jetty-server: jetty: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks | fixed: 3 known affected: 11 known not affected: 6 | 2026-10-08T11:59:02+00:00 | Vulnerability · Source |
| CVE-2024-2700 | redhat_vex | quarkus-core: Leak of local configuration properties into Quarkus applications | fixed: 146 known affected: 7 known not affected: 2067 | 2026-10-08T11:59:00+00:00 | Vulnerability · Source |
| CVE-2023-1428 | redhat_vex | gRPC: Reachable Assertion | fixed: 9 known affected: 6 known not affected: 299 | 2026-10-08T11:58:37+00:00 | Vulnerability · Source |
| CVE-2023-29401 | redhat_vex | golang-github-gin-gonic-gin: Gin Web Framework does not properly sanitize filename parameter of Context.FileAttachment function | fixed: 13 known affected: 16 known not affected: 2030 | 2026-10-08T11:58:19+00:00 | Vulnerability · Source |
| CVE-2024-9676 | redhat_vex | Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) | fixed: 711 known affected: 19 known not affected: 4893 | 2026-10-08T11:58:04+00:00 | Vulnerability · Source |
| CVE-2026-104846 | redhat_vex | seroval: Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940) | known affected: 1 | 2026-10-08T11:57:54+00:00 | Vulnerability · Source |
| CVE-2026-102282 | redhat_vex | adm-zip: adm-zip: Privilege escalation via unfiltered permission bits in extracted archives | known affected: 22 known not affected: 2 | 2026-10-08T11:57:50+00:00 | Vulnerability · Source |
| CVE-2024-1139 | redhat_vex | cluster-monitoring-operator: credentials leak | fixed: 679 known affected: 1 known not affected: 1945 | 2026-10-08T11:57:15+00:00 | Vulnerability · Source |
| CVE-2023-3462 | redhat_vex | Hashicorp/vault: Vault’s LDAP Auth Method Allows for User Enumeration | fixed: 15 known affected: 4 known not affected: 1492 | 2026-10-08T11:57:14+00:00 | Vulnerability · Source |
| CVE-2024-45230 | redhat_vex | python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() | fixed: 8 known affected: 14 known not affected: 115 | 2026-10-08T11:57:07+00:00 | Vulnerability · Source |
| CVE-2024-39249 | redhat_vex | nodejs-async: Regular expression denial of service while parsing function in autoinject | fixed: 57 known affected: 28 known not affected: 453 | 2026-10-08T11:56:45+00:00 | Vulnerability · Source |
| CVE-2024-42461 | redhat_vex | elliptic: nodejs/elliptic: ECDSA implementation malleability due to BER-enconded signatures being allowed | fixed: 733 known affected: 41 known not affected: 362 | 2026-10-08T11:54:54+00:00 | Vulnerability · Source |
| CVE-2024-42460 | redhat_vex | elliptic: nodejs/elliptic: ECDSA signature malleability due to missing checks | fixed: 733 known affected: 36 known not affected: 352 | 2026-10-08T11:54:52+00:00 | Vulnerability · Source |
| CVE-2024-42459 | redhat_vex | elliptic: nodejs/elliptic: EDDSA signature malleability due to missing signature length check | fixed: 733 known affected: 19 known not affected: 381 | 2026-10-08T11:54:51+00:00 | Vulnerability · Source |
| CVE-2024-0874 | redhat_vex | coredns: CD bit response is cached and served later | fixed: 16 known affected: 1 known not affected: 2034 | 2026-10-08T11:54:39+00:00 | Vulnerability · Source |
| CVE-2024-42005 | redhat_vex | python-django: Potential SQL injection in QuerySet.values() and values_list() | fixed: 26 known affected: 4 known not affected: 3976 | 2026-10-08T11:54:32+00:00 | Vulnerability · Source |
| CVE-2024-41991 | redhat_vex | python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget | fixed: 22 known affected: 2 known not affected: 407 | 2026-10-08T11:54:26+00:00 | Vulnerability · Source |
| CVE-2024-41990 | redhat_vex | python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() | fixed: 14 known affected: 5 known not affected: 337 | 2026-10-08T11:54:23+00:00 | Vulnerability · Source |
| CVE-2024-41989 | redhat_vex | python-django: Memory exhaustion in django.utils.numberformat.floatformat() | fixed: 18 known affected: 7 known not affected: 450 | 2026-10-08T11:54:18+00:00 | Vulnerability · Source |
| CVE-2018-12608 | redhat_vex | moby: cert signing bypass | fixed: 40 known affected: 3 known not affected: 5 | 2026-10-08T11:54:09+00:00 | Vulnerability · Source |
| CVE-2024-45801 | redhat_vex | dompurify: XSS vulnerability via prototype pollution | fixed: 270 known affected: 19 known not affected: 768 | 2026-10-08T11:53:45+00:00 | Vulnerability · Source |
| CVE-2024-34158 | redhat_vex | go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion | fixed: 4783 known affected: 64 known not affected: 2270 | 2026-10-08T11:53:42+00:00 | Vulnerability · Source |
| CVE-2024-34155 | redhat_vex | go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion | fixed: 4833 known affected: 61 known not affected: 2308 | 2026-10-08T11:53:39+00:00 | Vulnerability · Source |
| CVE-2024-6104 | redhat_vex | go-retryablehttp: url might write sensitive information to log file | fixed: 1777 known affected: 32 known not affected: 14136 | 2026-10-08T11:50:23+00:00 | Vulnerability · Source |
| CVE-2023-45857 | redhat_vex | axios: exposure of confidential data stored in cookies | fixed: 71 known affected: 13 known not affected: 585 | 2026-10-08T11:50:18+00:00 | Vulnerability · Source |
| CVE-2023-26159 | redhat_vex | follow-redirects: Improper Input Validation due to the improper handling of URLs by the url.parse() | fixed: 165 known affected: 29 known not affected: 1365 | 2026-10-08T11:50:16+00:00 | Vulnerability · Source |
| CVE-2024-43788 | redhat_vex | webpack: DOM Clobbering vulnerability in AutoPublicPathRuntimeModule | fixed: 183 known affected: 41 known not affected: 326 | 2026-10-08T11:49:50+00:00 | Vulnerability · Source |
| CVE-2023-26136 | redhat_vex | tough-cookie: prototype pollution in cookie memstore | fixed: 383 known affected: 44 known not affected: 3506 | 2026-10-08T11:49:47+00:00 | Vulnerability · Source |
| CVE-2023-39322 | redhat_vex | golang: crypto/tls: lack of a limit on buffered post-handshake | fixed: 996 known affected: 70 known not affected: 1276 | 2026-10-08T11:49:33+00:00 | Vulnerability · Source |
| CVE-2023-39321 | redhat_vex | golang: crypto/tls: panic when processing post-handshake message on QUIC connections | fixed: 1022 known affected: 106 known not affected: 1213 | 2026-10-08T11:49:27+00:00 | Vulnerability · Source |
| CVE-2023-39319 | redhat_vex | golang: html/template: improper handling of special tags within script contexts | fixed: 946 known affected: 52 known not affected: 1278 under investigation: 2 | 2026-10-08T11:49:26+00:00 | Vulnerability · Source |
| CVE-2023-39318 | redhat_vex | golang: html/template: improper handling of HTML-like comments within script contexts | fixed: 972 known affected: 52 known not affected: 1252 | 2026-10-08T11:49:25+00:00 | Vulnerability · Source |