VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
293999 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-25223 | redhat_vex | Fastify: Fastify: Validation bypass due to malformed Content-Type header leading to integrity impact | fixed: 13 known affected: 3 known not affected: 283 | 2026-06-30T04:16:51+00:00 | Vulnerability · Source |
| CVE-2026-25153 | redhat_vex | @backstage/plugin-techdocs-node: @backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks | fixed: 2 known affected: 1 known not affected: 4 | 2026-06-30T04:16:49+00:00 | Vulnerability · Source |
| CVE-2026-24882 | redhat_vex | GnuPG: GnuPG: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution | fixed: 66 known not affected: 12 | 2026-06-30T04:16:45+00:00 | Vulnerability · Source |
| CVE-2026-24881 | redhat_vex | GnuPG: GnuPG: Remote code execution and denial of service via crafted CMS EnvelopedData message | known affected: 3 known not affected: 12 | 2026-06-30T04:16:43+00:00 | Vulnerability · Source |
| CVE-2026-24834 | redhat_vex | containerd-shim-kata-v2: Kata Containers: Arbitrary code execution in guest virtual machine via file system modification | known affected: 2 known not affected: 1 | 2026-06-30T04:16:39+00:00 | Vulnerability · Source |
| CVE-2026-24747 | redhat_vex | pytorch: PyTorch: Arbitrary code execution via malicious checkpoint file loading | fixed: 1 known not affected: 214 | 2026-06-30T04:16:30+00:00 | Vulnerability · Source |
| CVE-2026-24678 | redhat_vex | freerdp: FreeRDP: Denial of Service via use after free in ecam_channel_write | fixed: 195 known affected: 5 known not affected: 19 | 2026-06-30T04:16:22+00:00 | Vulnerability · Source |
| CVE-2026-24660 | redhat_vex | LibRaw: LibRaw: Memory Corruption via Malicious File Processing | fixed: 96 known affected: 10 known not affected: 3 | 2026-06-30T04:16:20+00:00 | Vulnerability · Source |
| CVE-2026-24120 | redhat_vex | vm2: vm2: Arbitrary code execution due to sandbox escape vulnerability | known not affected: 2 | 2026-06-30T04:16:12+00:00 | Vulnerability · Source |
| CVE-2026-24118 | redhat_vex | vm2: vm2: Arbitrary code execution due to sandbox breakout | known affected: 1 known not affected: 1 | 2026-06-30T04:16:08+00:00 | Vulnerability · Source |
| CVE-2026-24046 | redhat_vex | backstage/backend-defaults: backstage/plugin-scaffolder-backend: backstage/plugin-scaffolder-node: possible symlink path traversal in scaffolder actions | fixed: 2 known not affected: 4 | 2026-06-30T04:16:05+00:00 | Vulnerability · Source |
| CVE-2026-24031 | redhat_vex | dovecot: Dovecot: Authentication bypass and user enumeration due to cleared auth_username_chars configuration | known affected: 6 known not affected: 24 | 2026-06-30T04:16:02+00:00 | Vulnerability · Source |
| CVE-2026-24001 | redhat_vex | jsdiff: denial of service vulnerability in parsePatch and applyPatch | known affected: 1 | 2026-06-30T04:16:00+00:00 | Vulnerability · Source |
| CVE-2026-23960 | redhat_vex | argo-workflows: Argo Workflows: Privilege escalation and information disclosure via stored Cross-Site Scripting (XSS) | known affected: 14 | 2026-06-30T04:15:58+00:00 | Vulnerability · Source |
| CVE-2026-23883 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server | fixed: 460 known affected: 5 known not affected: 7 | 2026-06-30T04:15:55+00:00 | Vulnerability · Source |
| CVE-2026-23884 | redhat_vex | freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability | fixed: 667 known affected: 5 | 2026-06-30T04:15:54+00:00 | Vulnerability · Source |
| CVE-2026-23876 | redhat_vex | ImageMagick: ImageMagick: Arbitrary code execution via a crafted XBM image file | fixed: 51 known affected: 7 | 2026-06-30T04:15:49+00:00 | Vulnerability · Source |
| CVE-2026-23869 | redhat_vex | react-server-dom-parcel: react-server-dom-turbopack: react-server-dom-webpack: denial of service via specially crafted HTTP requests to Server Function endpoints | known not affected: 1 | 2026-06-30T04:15:45+00:00 | Vulnerability · Source |
| CVE-2026-23666 | redhat_vex | dotnet: .NET Framework: Denial of Service via Race Condition | known not affected: 133 | 2026-06-30T04:15:44+00:00 | Vulnerability · Source |
| CVE-2026-23534 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow | fixed: 390 known affected: 5 known not affected: 7 | 2026-06-30T04:15:40+00:00 | Vulnerability · Source |
| CVE-2026-23533 | redhat_vex | freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution | fixed: 667 known affected: 5 | 2026-06-30T04:15:35+00:00 | Vulnerability · Source |
| CVE-2026-23532 | redhat_vex | freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow | fixed: 667 known affected: 5 | 2026-06-30T04:15:31+00:00 | Vulnerability · Source |
| CVE-2026-23531 | redhat_vex | freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and potential code execution. | fixed: 667 known affected: 5 | 2026-06-30T04:15:26+00:00 | Vulnerability · Source |
| CVE-2026-23530 | redhat_vex | freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server. | fixed: 667 known affected: 5 | 2026-06-30T04:15:23+00:00 | Vulnerability · Source |
| CVE-2026-23185 | redhat_vex | kernel: wifi: iwlwifi: mld: cancel mlo_scan_start_wk | known affected: 184 known not affected: 90 | 2026-06-30T04:15:16+00:00 | Vulnerability · Source |
| CVE-2026-23074 | redhat_vex | kernel: Linux kernel: Use-after-free in teql queueing discipline can lead to privilege escalation | fixed: 604 known not affected: 184 | 2026-06-30T04:15:10+00:00 | Vulnerability · Source |
| CVE-2026-22860 | redhat_vex | rubygem-rack: Rack Directory Traversal via Rack:Directory | known affected: 25 known not affected: 21 | 2026-06-30T04:15:08+00:00 | Vulnerability · Source |
| CVE-2026-22822 | redhat_vex | external-secrets: External Secrets Operator: Cross-Namespace Secret Disclosure via `getSecretKey` Function | known affected: 4 known not affected: 4 | 2026-06-30T04:15:04+00:00 | Vulnerability · Source |
| CVE-2026-22754 | redhat_vex | Spring Security: Spring Security: Authorization bypass due to incorrect servlet path matching | known not affected: 18 | 2026-06-30T04:14:59+00:00 | Vulnerability · Source |
| CVE-2026-22747 | redhat_vex | Spring Security: Spring Security: User impersonation via malformed X.509 certificate Common Name (CN) values | known not affected: 18 | 2026-06-30T04:14:55+00:00 | Vulnerability · Source |
| CVE-2026-22016 | redhat_vex | openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04) | fixed: 3262 known affected: 39 | 2026-06-30T04:14:50+00:00 | Vulnerability · Source |
| CVE-2026-21884 | redhat_vex | react-router: @remix-run/react: React Router SSR XSS in ScrollRestoration | fixed: 26 known not affected: 1990 | 2026-06-30T04:14:49+00:00 | Vulnerability · Source |
| CVE-2026-21863 | redhat_vex | valkey: Valkey: Denial of Service via invalid clusterbus packet | fixed: 55 | 2026-06-30T04:14:45+00:00 | Vulnerability · Source |
| CVE-2026-21720 | redhat_vex | grafana: Grafana: Denial of Service via resource exhaustion from avatar requests | known not affected: 23 | 2026-06-30T04:14:39+00:00 | Vulnerability · Source |
| CVE-2026-21710 | redhat_vex | Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header | fixed: 440 | 2026-06-30T04:14:36+00:00 | Vulnerability · Source |
| CVE-2026-21413 | redhat_vex | LibRaw: LibRaw: Arbitrary code execution via heap-based buffer overflow in lossless JPEG loading | fixed: 270 known affected: 10 | 2026-06-30T04:14:34+00:00 | Vulnerability · Source |
| CVE-2026-20911 | redhat_vex | LibRaw: LibRaw: Arbitrary Code Execution via specially crafted file | known affected: 10 known not affected: 6 | 2026-06-30T04:14:31+00:00 | Vulnerability · Source |
| CVE-2026-20889 | redhat_vex | LibRaw: LibRaw: Arbitrary code execution via specially crafted image file | fixed: 96 known affected: 10 known not affected: 3 | 2026-06-30T04:14:30+00:00 | Vulnerability · Source |
| CVE-2026-20736 | redhat_vex | gitea: Gitea Web Attachment Deletion: Cross-Repository Unauthorized Deletion via Missing Repo Ownership Check | known not affected: 9 | 2026-06-30T04:14:27+00:00 | Vulnerability · Source |
| CVE-2026-20664 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:14:25+00:00 | Vulnerability · Source |
| CVE-2026-20636 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:14:22+00:00 | Vulnerability · Source |
| CVE-2026-20635 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:14:21+00:00 | Vulnerability · Source |
| CVE-2026-20608 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:14:19+00:00 | Vulnerability · Source |
| CVE-2026-12773 | redhat_vex | litellm: BerriAI litellm: Improper authentication in MCP Proxy via UserAPIKeyAuth function | known affected: 1 known not affected: 5 | 2026-06-30T04:14:08+00:00 | Vulnerability · Source |
| CVE-2026-11800 | redhat_vex | org.keycloak:keycloak-services: Keycloak: Authentication bypass via JWT algorithm confusion | fixed: 10 known affected: 1 known not affected: 4 | 2026-06-30T04:13:53+00:00 | Vulnerability · Source |
| CVE-2026-10843 | redhat_vex | cloud-credential-operator: CCO Mint-mode CredentialsRequest manifests grant account-wide IAM access beyond cluster scope on AWS | known affected: 2 | 2026-06-30T04:13:45+00:00 | Vulnerability · Source |
| CVE-2026-2492 | redhat_vex | tensorflow: TensorFlow: Local privilege escalation via uncontrolled search path for plugins | fixed: 4 known not affected: 210 | 2026-06-30T04:13:35+00:00 | Vulnerability · Source |
| CVE-2026-10118 | redhat_vex | poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication | fixed: 856 known not affected: 10 | 2026-06-30T04:13:34+00:00 | Vulnerability · Source |
| CVE-2026-2472 | redhat_vex | google-cloud-aiplatform: google-cloud-aiplatform: Arbitrary code execution via Stored Cross-Site Scripting (XSS) | fixed: 2 known not affected: 206 | 2026-06-30T04:13:30+00:00 | Vulnerability · Source |
| CVE-2026-2370 | redhat_vex | GitLab: GitLab: Improper authorization allows credential disclosure and GitLab app impersonation | known not affected: 3 | 2026-06-30T04:13:24+00:00 | Vulnerability · Source |