VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
293999 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-6859 | redhat_vex | instructlab: InstructLab: Arbitrary code execution due to hardcoded `trust_remote_code=True` | known affected: 4 known not affected: 2 | 2026-06-30T03:41:00+00:00 | Vulnerability · Source |
| CVE-2026-6654 | redhat_vex | thin-vec: mozilla/thin-vec: Memory corruption vulnerability via Double-Free/Use-After-Free | known not affected: 71 | 2026-06-30T03:40:28+00:00 | Vulnerability · Source |
| CVE-2026-6388 | redhat_vex | argocd-image-updater: ArgoCD Image Updater: Cross-Namespace Privilege Escalation via insufficient namespace validation | known affected: 1 | 2026-06-30T03:40:07+00:00 | Vulnerability · Source |
| CVE-2026-6384 | redhat_vex | gimp: GIMP: Arbitrary code execution or denial of service via buffer overflow in GIF image processing | known affected: 24 known not affected: 8 | 2026-06-30T03:40:04+00:00 | Vulnerability · Source |
| CVE-2026-6104 | redhat_vex | php: global buffer over-read in mb_convert_encoding() with attacker-supplied encoding | fixed: 201 known not affected: 253 | 2026-06-30T03:39:47+00:00 | Vulnerability · Source |
| CVE-2026-5807 | redhat_vex | Vault: Vault: Denial of Service via unauthenticated root token generation or rekey operations | known affected: 6 known not affected: 7 | 2026-06-30T03:39:27+00:00 | Vulnerability · Source |
| CVE-2026-5735 | redhat_vex | thunderbird: firefox: Memory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.2 | known not affected: 12 | 2026-06-30T03:39:20+00:00 | Vulnerability · Source |
| CVE-2026-5734 | redhat_vex | thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 | fixed: 316 known affected: 8 | 2026-06-30T03:39:15+00:00 | Vulnerability · Source |
| CVE-2026-5731 | redhat_vex | thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 | fixed: 316 known affected: 8 | 2026-06-30T03:39:12+00:00 | Vulnerability · Source |
| CVE-2026-5656 | redhat_vex | wireshark: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark | fixed: 74 known not affected: 16 | 2026-06-30T03:39:11+00:00 | Vulnerability · Source |
| CVE-2026-5483 | redhat_vex | odh-dashboard: ODH Dashboard Kubernetes Service Account Exposure | fixed: 13 known not affected: 7 | 2026-06-30T03:38:50+00:00 | Vulnerability · Source |
| CVE-2026-5405 | redhat_vex | wireshark: Heap-based Buffer Overflow in Wireshark | fixed: 74 known not affected: 16 | 2026-06-30T03:38:48+00:00 | Vulnerability · Source |
| CVE-2026-5403 | redhat_vex | wireshark: Heap-based Buffer Overflow in Wireshark | known affected: 4 known not affected: 16 | 2026-06-30T03:38:41+00:00 | Vulnerability · Source |
| CVE-2026-5402 | redhat_vex | wireshark: Heap-based Buffer Overflow in Wireshark | known not affected: 20 | 2026-06-30T03:38:37+00:00 | Vulnerability · Source |
| CVE-2021-29923 | redhat_vex | golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet | fixed: 860 known affected: 169 known not affected: 119 | 2026-06-30T03:17:42+00:00 | Vulnerability · Source |
| CVE-2019-25067 | redhat_vex | podman: Privilege escalation in API component | known affected: 19 known not affected: 37 | 2026-06-30T03:17:20+00:00 | Vulnerability · Source |
| CVE-2022-0696 | redhat_vex | vim: NULL Pointer Dereference in vim prior to 8.2 | known not affected: 30 | 2026-06-30T03:17:17+00:00 | Vulnerability · Source |
| CVE-2022-0629 | redhat_vex | vim: Stack-based Buffer Overflow in vim prior to 8.2. | known not affected: 30 | 2026-06-30T03:17:14+00:00 | Vulnerability · Source |
| CVE-2022-25844 | redhat_vex | angular: Regular Expression Denial of Service (ReDoS) in angular | known affected: 12 known not affected: 59 | 2026-06-30T03:17:05+00:00 | Vulnerability · Source |
| CVE-2022-3599 | redhat_vex | libtiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c | fixed: 42 known affected: 17 | 2026-06-30T03:17:03+00:00 | Vulnerability · Source |
| CVE-2022-3627 | redhat_vex | libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c | fixed: 84 known affected: 13 | 2026-06-30T03:16:53+00:00 | Vulnerability · Source |
| CVE-2022-3598 | redhat_vex | libtiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c | fixed: 42 known affected: 17 | 2026-06-30T03:16:52+00:00 | Vulnerability · Source |
| CVE-2022-3970 | redhat_vex | libtiff: integer overflow in function TIFFReadRGBATileExt of the file | fixed: 84 known affected: 13 | 2026-06-30T03:16:49+00:00 | Vulnerability · Source |
| CVE-2022-3626 | redhat_vex | libtiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c | fixed: 42 known affected: 11 known not affected: 6 | 2026-06-30T03:16:48+00:00 | Vulnerability · Source |
| CVE-2022-3570 | redhat_vex | libtiff: heap Buffer overflows in tiffcrop.c | fixed: 42 known affected: 17 | 2026-06-30T03:16:40+00:00 | Vulnerability · Source |
| CVE-2022-3597 | redhat_vex | libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix | fixed: 42 known affected: 11 known not affected: 6 | 2026-06-30T03:16:40+00:00 | Vulnerability · Source |
| CVE-2025-32914 | redhat_vex | libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process | fixed: 285 known affected: 3 | 2026-06-30T03:16:11+00:00 | Vulnerability · Source |
| CVE-2025-32912 | redhat_vex | libsoup: NULL pointer dereference in client when server omits the "nonce" parameter in an Unauthorized response with Digest authentication | fixed: 18 known affected: 12 | 2026-06-30T03:16:09+00:00 | Vulnerability · Source |
| CVE-2025-32910 | redhat_vex | libsoup: Null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an Unauthorized response with Digest authentication | fixed: 10 known affected: 9 known not affected: 4 | 2026-06-30T03:16:07+00:00 | Vulnerability · Source |
| CVE-2025-32909 | redhat_vex | libsoup: NULL Pointer Dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c | fixed: 10 known affected: 9 known not affected: 4 | 2026-06-30T03:16:05+00:00 | Vulnerability · Source |
| CVE-2025-32907 | redhat_vex | libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header | fixed: 112 known affected: 6 known not affected: 3 | 2026-06-30T03:16:05+00:00 | Vulnerability · Source |
| CVE-2025-32053 | redhat_vex | libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() | fixed: 135 known affected: 6 known not affected: 4 | 2026-06-30T03:16:01+00:00 | Vulnerability · Source |
| CVE-2025-32052 | redhat_vex | libsoup: Heap buffer overflow in sniff_unknown() | fixed: 135 known affected: 6 known not affected: 4 | 2026-06-30T03:16:00+00:00 | Vulnerability · Source |
| CVE-2025-32051 | redhat_vex | libsoup: Segmentation fault when parsing malformed data URI | known affected: 6 known not affected: 10 | 2026-06-30T03:15:57+00:00 | Vulnerability · Source |
| CVE-2025-32050 | redhat_vex | libsoup: Integer overflow in append_param_quoted | fixed: 135 known affected: 6 known not affected: 4 | 2026-06-30T03:15:56+00:00 | Vulnerability · Source |
| CVE-2025-32049 | redhat_vex | libsoup: Denial of Service attack to websocket server | fixed: 285 known affected: 3 | 2026-06-30T03:15:53+00:00 | Vulnerability · Source |
| CVE-2025-7345 | redhat_vex | gdk‑pixbuf: Heap‑buffer‑overflow in gdk‑pixbuf | fixed: 651 known affected: 3 | 2026-06-30T03:15:48+00:00 | Vulnerability · Source |
| CVE-2025-2784 | redhat_vex | libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content | fixed: 285 known affected: 3 | 2026-06-30T03:15:45+00:00 | Vulnerability · Source |
| CVE-2025-2487 | redhat_vex | 389-ds-base: null pointer dereference leads to denial of service | fixed: 157 known affected: 17 known not affected: 8 | 2026-06-30T03:15:42+00:00 | Vulnerability · Source |
| CVE-2023-43628 | redhat_vex | gpsd: integer overflow | known not affected: 3 | 2026-06-30T03:15:12+00:00 | Vulnerability · Source |
| CVE-2023-31355 | redhat_vex | linux-firmware: hw:amd: Improper Restriction of Write Operations in SNP Firmware | known not affected: 60 | 2026-06-30T03:15:03+00:00 | Vulnerability · Source |
| CVE-2025-61912 | redhat_vex | python-ldap: python-ldap Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination | known affected: 36 | 2026-06-30T03:12:22+00:00 | Vulnerability · Source |
| CVE-2025-61911 | redhat_vex | python-ldap: sanitization bypass in ldap.filter.escape_filter_chars | known affected: 36 | 2026-06-30T03:12:18+00:00 | Vulnerability · Source |
| CVE-2025-61795 | redhat_vex | tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service | fixed: 56 known affected: 127 | 2026-06-30T03:12:14+00:00 | Vulnerability · Source |
| CVE-2025-61727 | redhat_vex | golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs | fixed: 28 known affected: 1339 known not affected: 8 | 2026-06-30T03:12:05+00:00 | Vulnerability · Source |
| CVE-2025-61724 | redhat_vex | net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto | fixed: 8 known affected: 1279 | 2026-06-30T03:12:02+00:00 | Vulnerability · Source |
| CVE-2025-61107 | redhat_vex | frr: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c | known affected: 10 | 2026-06-30T03:11:48+00:00 | Vulnerability · Source |
| CVE-2025-61106 | redhat_vex | frr: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c | known affected: 10 | 2026-06-30T03:11:46+00:00 | Vulnerability · Source |
| CVE-2025-61105 | redhat_vex | FRRouting: frr: NULL Pointer Dereference in FRRouting | known affected: 10 | 2026-06-30T03:11:43+00:00 | Vulnerability · Source |
| CVE-2025-61104 | redhat_vex | frr: NULL pointer dereference in show_vty_unknown_tlv() in ospf_ext.c | known affected: 10 | 2026-06-30T03:11:42+00:00 | Vulnerability · Source |