VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294018 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-37807 | redhat_vex | kernel: bpf: Fix kmemleak warning for percpu hashmap | known affected: 260 known not affected: 14 | 2026-06-30T00:35:34+00:00 | Vulnerability · Source |
| CVE-2025-37786 | redhat_vex | kernel: net: dsa: free routing table on probe failure | known affected: 14 known not affected: 260 | 2026-06-30T00:35:14+00:00 | Vulnerability · Source |
| CVE-2025-37780 | redhat_vex | kernel: isofs: Prevent the use of too small fid | known affected: 76 known not affected: 198 | 2026-06-30T00:35:09+00:00 | Vulnerability · Source |
| CVE-2025-37773 | redhat_vex | kernel: virtiofs: add filesystem context source name check | known affected: 232 known not affected: 42 | 2026-06-30T00:35:05+00:00 | Vulnerability · Source |
| CVE-2025-37762 | redhat_vex | kernel: drm/virtio: Fix missed dmabuf unpinning in error path of prepare_fb() | known affected: 28 known not affected: 246 | 2026-06-30T00:35:02+00:00 | Vulnerability · Source |
| CVE-2025-37760 | redhat_vex | kernel: mm/vma: add give_up_on_oom option on modify/merge, use in uffd release | known affected: 28 known not affected: 246 | 2026-06-30T00:34:56+00:00 | Vulnerability · Source |
| CVE-2025-37759 | redhat_vex | kernel: ublk: fix handling recovery & reissue in ublk_abort_queue() | known affected: 76 known not affected: 198 | 2026-06-30T00:34:55+00:00 | Vulnerability · Source |
| CVE-2025-37758 | redhat_vex | kernel: ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() | known not affected: 274 | 2026-06-30T00:34:51+00:00 | Vulnerability · Source |
| CVE-2025-37747 | redhat_vex | kernel: perf: Fix hang while freeing sigtrap event | known affected: 226 known not affected: 48 | 2026-06-30T00:34:41+00:00 | Vulnerability · Source |
| CVE-2025-37745 | redhat_vex | kernel: PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() | known affected: 274 | 2026-06-30T00:34:40+00:00 | Vulnerability · Source |
| CVE-2025-37742 | redhat_vex | kernel: jfs: Fix uninit-value access of imap allocated in the diMount() function | known affected: 14 known not affected: 260 | 2026-06-30T00:34:36+00:00 | Vulnerability · Source |
| CVE-2025-37740 | redhat_vex | kernel: jfs: add sanity check for agwidth in dbMount | known affected: 14 known not affected: 260 | 2026-06-30T00:34:32+00:00 | Vulnerability · Source |
| CVE-2025-32464 | redhat_vex | haproxy: Buffer Overflow via Improper Back-Reference Replacement Length Check | known affected: 14 known not affected: 2 | 2026-06-30T00:34:05+00:00 | Vulnerability · Source |
| CVE-2025-32364 | redhat_vex | poppler: Floating-Point Exception in Poppler | known affected: 59 | 2026-06-30T00:33:56+00:00 | Vulnerability · Source |
| CVE-2025-31344 | redhat_vex | giflib: The giflib open-source component has a buffer overflow vulnerability | known affected: 16 known not affected: 180 | 2026-06-30T00:33:42+00:00 | Vulnerability · Source |
| CVE-2025-62507 | redhat_vex | redis: Redis: Bug in XACKDEL may lead to stack overflow and potential RCE | known not affected: 12 | 2026-06-30T00:31:10+00:00 | Vulnerability · Source |
| CVE-2025-61779 | redhat_vex | trustee: Trustee's attestation-policy endpoint missing autentication | known not affected: 2 | 2026-06-30T00:30:54+00:00 | Vulnerability · Source |
| CVE-2025-59775 | redhat_vex | httpd: Apache HTTP Server: NTLM Leakage on Windows via SSRF | fixed: 4 known not affected: 55 | 2026-06-30T00:30:30+00:00 | Vulnerability · Source |
| CVE-2025-59162 | redhat_vex | color-convert: color-convert@3.1.1 contains malware after npm account takeover | known not affected: 490 | 2026-06-30T00:30:26+00:00 | Vulnerability · Source |
| CVE-2025-59331 | redhat_vex | is-arrayish: is-arrayish@0.3.3 contains malware after npm account takeover | known not affected: 181 | 2026-06-30T00:30:25+00:00 | Vulnerability · Source |
| CVE-2025-59330 | redhat_vex | error-ex: error-ex: npm account takeover leads to malware | known not affected: 180 | 2026-06-30T00:30:23+00:00 | Vulnerability · Source |
| CVE-2025-59145 | redhat_vex | color-name: color-name@2.0.1 contains malware after npm account takeover | known not affected: 493 | 2026-06-30T00:30:20+00:00 | Vulnerability · Source |
| CVE-2025-59144 | redhat_vex | debug: debug@4.4.2 contains malware after npm account takeover | known affected: 25 known not affected: 304 | 2026-06-30T00:30:15+00:00 | Vulnerability · Source |
| CVE-2025-58098 | redhat_vex | httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... | fixed: 971 known not affected: 77 | 2026-06-30T00:30:11+00:00 | Vulnerability · Source |
| CVE-2025-55752 | redhat_vex | tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE | fixed: 613 known affected: 68 known not affected: 87 | 2026-06-30T00:30:05+00:00 | Vulnerability · Source |
| CVE-2025-55184 | redhat_vex | next: React Server Components: Denial of Service via unsafe HTTP deserialization | known not affected: 32 | 2026-06-30T00:29:57+00:00 | Vulnerability · Source |
| CVE-2025-54874 | redhat_vex | openjpeg: OpenJPEG OOB heap memory write | fixed: 37 known affected: 4 known not affected: 19 | 2026-06-30T00:29:52+00:00 | Vulnerability · Source |
| CVE-2025-54351 | redhat_vex | iperf3: iperf Buffer Overflow | known not affected: 9 | 2026-06-30T00:29:48+00:00 | Vulnerability · Source |
| CVE-2025-54313 | redhat_vex | eslint-config-prettier: Eslint-config-prettier Supply Chain Compromise | known not affected: 122 | 2026-06-30T00:29:44+00:00 | Vulnerability · Source |
| CVE-2025-31215 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 320 known affected: 9 | 2026-06-30T00:29:29+00:00 | Vulnerability · Source |
| CVE-2025-31205 | redhat_vex | webkitgtk: A malicious website may exfiltrate data cross-origin | fixed: 393 known affected: 9 | 2026-06-30T00:29:26+00:00 | Vulnerability · Source |
| CVE-2025-30359 | redhat_vex | webpack-dev-server: webpack-dev-server information exposure | known affected: 89 | 2026-06-30T00:25:47+00:00 | Vulnerability · Source |
| CVE-2025-30360 | redhat_vex | webpack-dev-server: webpack-dev-server information exposure | known affected: 89 | 2026-06-30T00:25:45+00:00 | Vulnerability · Source |
| CVE-2025-30346 | redhat_vex | varnish: Client-Side Desynchronization in Varnish Cache | known affected: 4 known not affected: 10 | 2026-06-30T00:25:41+00:00 | Vulnerability · Source |
| CVE-2025-27837 | redhat_vex | Ghostscript: Access to arbitrary files through truncated path with invalid UTF-8 | known not affected: 39 | 2026-06-30T00:25:27+00:00 | Vulnerability · Source |
| CVE-2025-27836 | redhat_vex | Ghostscript: device: Print buffer overflow | known affected: 39 | 2026-06-30T00:25:26+00:00 | Vulnerability · Source |
| CVE-2025-27834 | redhat_vex | Ghostscript: Buffer overflow caused by an oversized Type 4 function in a PDF | known affected: 39 | 2026-06-30T00:25:23+00:00 | Vulnerability · Source |
| CVE-2025-27835 | redhat_vex | Ghostscript: Buffer overflow when converting glyphs to unicode | known affected: 39 | 2026-06-30T00:25:23+00:00 | Vulnerability · Source |
| CVE-2025-27833 | redhat_vex | Ghostscript: Buffer overflow with long TTF font name | known affected: 39 | 2026-06-30T00:25:17+00:00 | Vulnerability · Source |
| CVE-2025-27832 | redhat_vex | Ghostscript: NPDL device: Compression buffer overflow | fixed: 405 known affected: 13 | 2026-06-30T00:25:15+00:00 | Vulnerability · Source |
| CVE-2025-27831 | redhat_vex | Ghostscript: Text buffer overflow with long characters | known affected: 39 | 2026-06-30T00:25:13+00:00 | Vulnerability · Source |
| CVE-2025-27830 | redhat_vex | Ghostscript: Buffer overflow during serialization of DollarBlend in font | known affected: 39 | 2026-06-30T00:25:08+00:00 | Vulnerability · Source |
| CVE-2025-27209 | redhat_vex | nodejs: Node.js Rapidhash HashDoS Vulnerability | known not affected: 47 | 2026-06-30T00:24:54+00:00 | Vulnerability · Source |
| CVE-2025-27151 | redhat_vex | redis: Redis Stack Buffer Overflow | fixed: 35 known affected: 4 known not affected: 31 | 2026-06-30T00:24:51+00:00 | Vulnerability · Source |
| CVE-2025-3549 | redhat_vex | Assimp: Open Asset Import Library Assimp File MD3Loader.cpp ValidateSurfaceHeaderOffsets heap-based overflow | known not affected: 4 | 2026-06-30T00:24:32+00:00 | Vulnerability · Source |
| CVE-2025-3548 | redhat_vex | Assimp: Open Asset Import Library Assimp File types.h Set heap-based overflow | known affected: 4 | 2026-06-30T00:24:28+00:00 | Vulnerability · Source |
| CVE-2025-3454 | redhat_vex | grafana: Unauthorized Data Source Access in Grafana via URL Path Manipulation | known not affected: 21 | 2026-06-30T00:24:27+00:00 | Vulnerability · Source |
| CVE-2025-3196 | redhat_vex | assimp: Open Asset Import Library Assimp Malformed File MD2Loader.cpp InternReadFile stack-based overflow | known affected: 4 | 2026-06-30T00:24:23+00:00 | Vulnerability · Source |
| CVE-2025-2703 | redhat_vex | grafana: Cross-Site Scripting in Grafana XY Chart Panel | known not affected: 21 | 2026-06-30T00:24:05+00:00 | Vulnerability · Source |
| CVE-2025-2584 | redhat_vex | wabt: WebAssembly wabt binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflow | known affected: 4 known not affected: 18 | 2026-06-30T00:24:03+00:00 | Vulnerability · Source |