VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
293841 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-57451 | microsoft_vex | Vim: Out-of-bounds Read in Text Property Count | fixed: 1 known affected: 2 | 2026-06-30T15:40:26+00:00 | Vulnerability · Source |
| CVE-2026-55892 | microsoft_vex | Vim: Out-of-bounds Write in Spell File Prefix Dump | fixed: 1 known affected: 2 | 2026-06-30T15:40:19+00:00 | Vulnerability · Source |
| CVE-2026-57456 | microsoft_vex | Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings | fixed: 1 known affected: 2 | 2026-06-30T15:40:11+00:00 | Vulnerability · Source |
| CVE-2026-55693 | microsoft_vex | Vim: Out-of-bounds Write in Spell File Word Count | fixed: 1 known affected: 2 | 2026-06-30T15:39:59+00:00 | Vulnerability · Source |
| CVE-2026-55895 | microsoft_vex | Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename | fixed: 1 known affected: 2 | 2026-06-30T15:39:51+00:00 | Vulnerability · Source |
| CVE-2026-57455 | microsoft_vex | Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument | fixed: 1 known affected: 2 | 2026-06-30T15:39:44+00:00 | Vulnerability · Source |
| CVE-2026-57452 | microsoft_vex | Vim: Out-of-bounds Read with libsodium-encrypted Files | fixed: 1 known affected: 2 | 2026-06-30T15:39:36+00:00 | Vulnerability · Source |
| CVE-2026-57235 | microsoft_vex | Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` | fixed: 1 known affected: 1 | 2026-06-30T15:39:29+00:00 | Vulnerability · Source |
| CVE-2026-57234 | microsoft_vex | Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247 | fixed: 1 known affected: 1 | 2026-06-30T15:39:21+00:00 | Vulnerability · Source |
| CVE-2026-57436 | microsoft_vex | Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type | fixed: 1 known affected: 1 | 2026-06-30T15:39:14+00:00 | Vulnerability · Source |
| CVE-2026-57434 | microsoft_vex | Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes | fixed: 1 known affected: 1 | 2026-06-30T15:39:05+00:00 | Vulnerability · Source |
| CVE-2026-57437 | microsoft_vex | Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime | fixed: 1 known affected: 1 | 2026-06-30T15:38:57+00:00 | Vulnerability · Source |
| CVE-2026-57236 | microsoft_vex | Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception | fixed: 1 known affected: 1 | 2026-06-30T15:38:49+00:00 | Vulnerability · Source |
| CVE-2026-57435 | microsoft_vex | Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` | fixed: 1 known affected: 1 | 2026-06-30T15:38:42+00:00 | Vulnerability · Source |
| CVE-2026-57438 | microsoft_vex | Nokogiri: Possible Use-After-Free in XInclude Processing | fixed: 1 known affected: 1 | 2026-06-30T15:38:34+00:00 | Vulnerability · Source |
| CVE-2026-49851 | microsoft_vex | Mistune: Potential DoS via quadratic-time parsing in parse_link_text | fixed: 1 known affected: 1 | 2026-06-30T15:38:27+00:00 | Vulnerability · Source |
| CVE-2026-9539 | microsoft_vex | libslirp TCP URG OOB Read Information Leak | fixed: 1 known affected: 1 | 2026-06-30T15:38:06+00:00 | Vulnerability · Source |
| CVE-2026-44889 | microsoft_vex | WebOb: Location header normalization during redirect leads to open redirect | fixed: 1 known affected: 1 | 2026-06-30T15:33:04+00:00 | Vulnerability · Source |
| CVE-2026-53433 | redhat_vex | fzf: fzf: Denial of Service via inefficient HTTP body processing | known not affected: 1 | 2026-06-30T14:28:17+00:00 | Vulnerability · Source |
| CVE-2026-53432 | redhat_vex | github.com/junegunn/fzf: fzf: Denial of Service via Integer Overflow in FuzzyMatchV2 function | known not affected: 1 | 2026-06-30T14:28:16+00:00 | Vulnerability · Source |
| CVE-2026-43056 | redhat_vex | kernel: net: mana: fix use-after-free in add_adev() error path | fixed: 762 known affected: 22 known not affected: 42 | 2026-06-30T14:28:13+00:00 | Vulnerability · Source |
| CVE-2024-22257 | redhat_vex | spring-security: Broken Access Control With Direct Use of AuthenticatedVoter | fixed: 3 known affected: 9 known not affected: 7 | 2026-06-30T14:22:37+00:00 | Vulnerability · Source |
| CVE-2026-1287 | redhat_vex | Django: Django: SQL Injection via crafted column aliases | fixed: 122 known affected: 6 known not affected: 4552 | 2026-06-30T14:14:29+00:00 | Vulnerability · Source |
| CVE-2026-0880 | redhat_vex | firefox: thunderbird: Sandbox escape due to integer overflow in the Graphics component | fixed: 320 known affected: 7 | 2026-06-30T14:14:29+00:00 | Vulnerability · Source |
| CVE-2026-2807 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox 148 and Thunderbird 148 | known not affected: 23 | 2026-06-30T14:11:29+00:00 | Vulnerability · Source |
| CVE-2026-2774 | redhat_vex | firefox: thunderbird: Integer overflow in the Audio/Video component | fixed: 320 known affected: 8 | 2026-06-30T14:11:27+00:00 | Vulnerability · Source |
| CVE-2026-2765 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript Engine component | fixed: 320 known affected: 6 | 2026-06-30T14:11:24+00:00 | Vulnerability · Source |
| CVE-2026-2762 | redhat_vex | firefox: thunderbird: Integer overflow in the JavaScript: Standard Library component | fixed: 320 known affected: 6 | 2026-06-30T14:11:20+00:00 | Vulnerability · Source |
| CVE-2026-38993 | redhat_vex | Cockpit: Cockpit: Arbitrary file write via directory traversal in Buckets component | known not affected: 32 | 2026-06-30T13:41:39+00:00 | Vulnerability · Source |
| CVE-2026-11790 | redhat_vex | 389-ds-base: 389-ds-base: PBKDF2 password storage plugin unbounded iteration count denial of service | known affected: 29 known not affected: 4 | 2026-06-30T13:38:24+00:00 | Vulnerability · Source |
| CVE-2026-12388 | redhat_vex | keycloak-broker: Keycloak: Privilege escalation to realm administrator via improper authorization in identity provider mapper | known affected: 1 | 2026-06-30T13:38:21+00:00 | Vulnerability · Source |
| CVE-2026-11789 | redhat_vex | 389-ds-base: 389-ds-base: SMD5 password storage plugin salt length integer underflow crash | known affected: 33 | 2026-06-30T13:38:19+00:00 | Vulnerability · Source |
| CVE-2026-28942 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T13:38:17+00:00 | Vulnerability · Source |
| CVE-2026-28857 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T13:38:11+00:00 | Vulnerability · Source |
| CVE-2026-2764 | redhat_vex | firefox: thunderbird: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component | fixed: 320 known affected: 6 | 2026-06-30T13:38:05+00:00 | Vulnerability · Source |
| CVE-2026-4696 | redhat_vex | firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component | fixed: 320 known affected: 8 | 2026-06-30T13:37:12+00:00 | Vulnerability · Source |
| CVE-2026-6746 | redhat_vex | firefox: thunderbird: Use-after-free in the DOM: Core & HTML component | fixed: 368 known affected: 8 | 2026-06-30T13:36:21+00:00 | Vulnerability · Source |
| CVE-2026-6747 | redhat_vex | firefox: thunderbird: Use-after-free in the WebRTC component | fixed: 368 known affected: 8 | 2026-06-30T13:36:21+00:00 | Vulnerability · Source |
| CVE-2026-45834 | redhat_vex | kernel: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() | known affected: 260 known not affected: 14 | 2026-06-30T12:21:03+00:00 | Vulnerability · Source |
| CVE-2025-4476 | redhat_vex | libsoup: Null pointer dereference in libsoup may lead to Denial Of Service | known affected: 16 | 2026-06-30T11:53:09+00:00 | Vulnerability · Source |
| CVE-2025-4056 | redhat_vex | glib: glib crash after long command line | known not affected: 61 | 2026-06-30T11:53:06+00:00 | Vulnerability · Source |
| CVE-2026-33762 | redhat_vex | github.com/go-git/go-git/v5: go-git: Denial of Service via crafted Git index file | known affected: 198 | 2026-06-30T11:53:05+00:00 | Vulnerability · Source |
| CVE-2026-33535 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via out-of-bounds write in X11 display interaction path | known affected: 14 | 2026-06-30T11:53:03+00:00 | Vulnerability · Source |
| CVE-2026-31401 | redhat_vex | kernel: HID: bpf: prevent buffer overflow in hid_hw_request | known affected: 184 known not affected: 90 | 2026-06-30T11:53:00+00:00 | Vulnerability · Source |
| CVE-2026-27860 | redhat_vex | dovecot: Dovecot: Authentication bypass and information disclosure via LDAP filter injection | known affected: 30 | 2026-06-30T11:52:57+00:00 | Vulnerability · Source |
| CVE-2026-26961 | redhat_vex | github.com/rack/rack: Rack: Content smuggling via multipart boundary parsing mismatch | known not affected: 6 | 2026-06-30T11:52:57+00:00 | Vulnerability · Source |
| CVE-2026-23458 | redhat_vex | kernel: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() | known affected: 274 | 2026-06-30T11:52:53+00:00 | Vulnerability · Source |
| CVE-2026-23434 | redhat_vex | kernel: mtd: rawnand: serialize lock/unlock against other NAND operations | known affected: 108 known not affected: 166 | 2026-06-30T11:52:53+00:00 | Vulnerability · Source |
| CVE-2026-21716 | redhat_vex | nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership via incomplete security fix. | fixed: 127 known affected: 47 | 2026-06-30T11:52:50+00:00 | Vulnerability · Source |
| CVE-2026-21715 | redhat_vex | Node.js: Node.js: Information disclosure due to `fs.realpathSync.native()` bypassing filesystem read restrictions | fixed: 111 known affected: 47 | 2026-06-30T11:52:48+00:00 | Vulnerability · Source |