VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
293841 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-43406 | redhat_vex | kernel: libceph: prevent potential out-of-bounds reads in process_message_header() | known affected: 232 known not affected: 42 | 2026-07-02T12:46:50+00:00 | Vulnerability · Source |
| CVE-2026-43403 | redhat_vex | kernel: nsfs: tighten permission checks for ns iteration ioctls | known affected: 76 known not affected: 198 | 2026-07-02T12:46:46+00:00 | Vulnerability · Source |
| CVE-2026-43402 | redhat_vex | kernel: kthread: consolidate kthread exit paths to prevent use-after-free | known affected: 198 known not affected: 76 | 2026-07-02T12:46:45+00:00 | Vulnerability · Source |
| CVE-2026-43374 | redhat_vex | kernel: net: nexthop: fix percpu use-after-free in remove_nh_grp_entry | known affected: 184 known not affected: 90 | 2026-07-02T12:46:40+00:00 | Vulnerability · Source |
| CVE-2026-43366 | redhat_vex | kernel: io_uring/kbuf: check if target buffer list is still legacy on recycle | known affected: 184 known not affected: 90 | 2026-07-02T12:46:36+00:00 | Vulnerability · Source |
| CVE-2026-43365 | redhat_vex | kernel: xfs: fix undersized l_iclog_roundoff values | known affected: 246 known not affected: 28 | 2026-07-02T12:46:35+00:00 | Vulnerability · Source |
| CVE-2026-6870 | redhat_vex | Wireshark: Wireshark: Denial of service via GSM RP protocol dissector crash | known affected: 20 | 2026-07-02T12:46:31+00:00 | Vulnerability · Source |
| CVE-2026-6867 | redhat_vex | wireshark: Wireshark: Denial of service via SMB2 protocol dissector crash | known affected: 20 | 2026-07-02T12:46:29+00:00 | Vulnerability · Source |
| CVE-2026-6534 | redhat_vex | wireshark: Wireshark: Denial of Service via USB HID protocol dissector infinite loop | known affected: 20 | 2026-07-02T12:46:26+00:00 | Vulnerability · Source |
| CVE-2026-6532 | redhat_vex | wireshark: Wireshark: Denial of service via Kismet protocol dissector crash | known affected: 20 | 2026-07-02T12:46:24+00:00 | Vulnerability · Source |
| CVE-2026-6530 | redhat_vex | wireshark: Wireshark: Denial of Service via DCP-ETSI protocol dissector crash | known affected: 20 | 2026-07-02T12:46:22+00:00 | Vulnerability · Source |
| CVE-2026-6524 | redhat_vex | wireshark: Wireshark: Denial of Service via MySQL protocol dissector crash | known affected: 20 | 2026-07-02T12:46:20+00:00 | Vulnerability · Source |
| CVE-2026-6402 | redhat_vex | webpack-dev-server: webpack-dev-server: Information disclosure due to cross-origin source code exposure | known affected: 77 | 2026-07-02T12:46:18+00:00 | Vulnerability · Source |
| CVE-2026-5404 | redhat_vex | wireshark: Wireshark: Denial of service due to K12 RF5 file parser crash | known affected: 20 | 2026-07-02T12:46:11+00:00 | Vulnerability · Source |
| CVE-2026-5407 | redhat_vex | Wireshark: Wireshark: Denial of Service from malicious SMB2 protocol data | known affected: 20 | 2026-07-02T12:46:11+00:00 | Vulnerability · Source |
| CVE-2026-5401 | redhat_vex | wireshark: Wireshark: Denial of service via AFP Spotlight protocol dissector crash | known affected: 20 | 2026-07-02T12:44:19+00:00 | Vulnerability · Source |
| CVE-2026-58517 | redhat_vex | wikilambda: WikiLambda Extension: Authentication bypass due to improper input neutralization | known not affected: 1 | 2026-07-02T12:31:28+00:00 | Vulnerability · Source |
| CVE-2026-43048 | redhat_vex | kernel: HID: core: Mitigate potential OOB by removing bogus memset() | known affected: 274 | 2026-07-02T12:26:50+00:00 | Vulnerability · Source |
| CVE-2021-34432 | redhat_vex | mosquitto: DoS when client tries to send a PUBLISH packet with topic length = 0 | known not affected: 1 | 2026-07-02T11:20:47+00:00 | Vulnerability · Source |
| CVE-2026-54257 | redhat_vex | electron: Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow | known not affected: 1 | 2026-07-02T08:58:24+00:00 | Vulnerability · Source |
| CVE-2016-2183 | redhat_vex | SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) | fixed: 1036 known affected: 26 known not affected: 749 | 2026-07-02T08:57:53+00:00 | Vulnerability · Source |
| CVE-2026-49356 | redhat_vex | @babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment | known not affected: 110 | 2026-07-02T08:22:16+00:00 | Vulnerability · Source |
| CVE-2026-14101 | redhat_vex | chromium-browser: Insufficient policy enforcement in Sandbox | known not affected: 1 | 2026-07-02T00:14:58+00:00 | Vulnerability · Source |
| CVE-2026-5135 | redhat_vex | foreman: Foreman: Unauthorized modification of host configurations via broken access control | fixed: 103 known affected: 17 known not affected: 132 | 2026-07-01T23:53:14+00:00 | Vulnerability · Source |
| CVE-2026-5142 | redhat_vex | foreman: foreman: Cross-tenant private SSH key disclosure via taxonomy scoping bypass | fixed: 103 known affected: 17 known not affected: 132 | 2026-07-01T23:53:12+00:00 | Vulnerability · Source |
| CVE-2026-5138 | redhat_vex | foreman: Foreman: Information disclosure via improper validation of nested request parameters | fixed: 103 known affected: 17 known not affected: 132 | 2026-07-01T23:53:11+00:00 | Vulnerability · Source |
| CVE-2026-5136 | redhat_vex | foreman: Foreman: Privilege escalation to administrator-level access via usergroup role assignment manipulation | fixed: 103 known affected: 17 known not affected: 132 | 2026-07-01T23:40:26+00:00 | Vulnerability · Source |
| CVE-2026-55628 | redhat_vex | ImageMagick: ImageMagick: Unauthorized file access due to missing policy checks in concatenate operation | known affected: 14 | 2026-07-01T23:08:56+00:00 | Vulnerability · Source |
| CVE-2026-53466 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via integer overflow in XCF decoder | known affected: 14 | 2026-07-01T23:08:56+00:00 | Vulnerability · Source |
| CVE-2026-55577 | redhat_vex | ImageMagick: ImageMagick: Heap buffer overflow in MVG decoder allows out-of-bounds write | known affected: 14 | 2026-07-01T23:08:56+00:00 | Vulnerability · Source |
| CVE-2026-55594 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted image in MVG decoder | known affected: 14 | 2026-07-01T23:01:49+00:00 | Vulnerability · Source |
| CVE-2026-55595 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via invalid arguments to connected-components option | known affected: 14 | 2026-07-01T22:25:25+00:00 | Vulnerability · Source |
| CVE-2026-53467 | redhat_vex | ImageMagick: ImageMagick: Information disclosure vulnerability in MNG decoder | known affected: 14 | 2026-07-01T22:25:25+00:00 | Vulnerability · Source |
| CVE-2026-55510 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted 8BIM profile | known affected: 14 | 2026-07-01T22:20:58+00:00 | Vulnerability · Source |
| CVE-2026-55597 | redhat_vex | ImageMagick: ImageMagick: Heap buffer overwrite via incorrect argument handling in JP2 encoder | known affected: 14 | 2026-07-01T22:09:47+00:00 | Vulnerability · Source |
| CVE-2026-45491 | redhat_vex | dotnet: .NET: Local file tampering via link following vulnerability | fixed: 1441 known not affected: 2 | 2026-07-01T21:04:35+00:00 | Vulnerability · Source |
| CVE-2026-5051 | redhat_vex | Vault: Vault Enterprise: HashiCorp Vault: Audit device validation bypass via legacy file audit path option | known not affected: 6 | 2026-07-01T20:33:40+00:00 | Vulnerability · Source |
| CVE-2026-53346 | redhat_vex | kernel: rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES | known not affected: 274 | 2026-07-01T20:25:20+00:00 | Vulnerability · Source |
| CVE-2026-53334 | redhat_vex | kernel: mm/damon/reclaim: handle ctx allocation failure | known not affected: 274 | 2026-07-01T19:52:12+00:00 | Vulnerability · Source |
| CVE-2026-53338 | redhat_vex | kernel: net: airoha: Add NULL check for of_reserved_mem_lookup() in airoha_qdma_init_hfwd_queues() | known not affected: 274 | 2026-07-01T19:52:00+00:00 | Vulnerability · Source |
| CVE-2026-53345 | redhat_vex | kernel: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying | known not affected: 274 | 2026-07-01T19:51:55+00:00 | Vulnerability · Source |
| CVE-2026-53343 | redhat_vex | kernel: ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow | known not affected: 274 | 2026-07-01T19:51:52+00:00 | Vulnerability · Source |
| CVE-2026-53328 | redhat_vex | kernel: sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task() | known not affected: 274 | 2026-07-01T19:51:46+00:00 | Vulnerability · Source |
| CVE-2026-53332 | redhat_vex | kernel: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd | known not affected: 274 | 2026-07-01T19:42:47+00:00 | Vulnerability · Source |
| CVE-2026-53335 | redhat_vex | kernel: mm/damon/lru_sort: handle ctx allocation failure | known not affected: 274 | 2026-07-01T19:42:37+00:00 | Vulnerability · Source |
| CVE-2026-53344 | redhat_vex | kernel: pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init | known not affected: 274 | 2026-07-01T19:41:16+00:00 | Vulnerability · Source |
| CVE-2026-7258 | redhat_vex | PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions | fixed: 1721 known affected: 56 | 2026-07-01T19:40:02+00:00 | Vulnerability · Source |
| CVE-2026-6735 | redhat_vex | PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation | fixed: 1721 known affected: 56 | 2026-07-01T19:40:01+00:00 | Vulnerability · Source |
| CVE-2026-53342 | redhat_vex | kernel: arm64: mm: call pagetable dtor when freeing hot-removed page tables | known not affected: 274 | 2026-07-01T19:21:36+00:00 | Vulnerability · Source |
| CVE-2026-58521 | redhat_vex | mediawiki-cargo-extension: Mediawiki - Cargo Extension: SQL Injection vulnerability allows information disclosure and data manipulation. | known not affected: 1 | 2026-07-01T19:17:11+00:00 | Vulnerability · Source |