VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294018 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-11712 | redhat_vex | thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type | fixed: 264 known affected: 8 | 2026-06-29T23:28:42+00:00 | Vulnerability · Source |
| CVE-2025-11626 | redhat_vex | wireshark: MONGO dissector infinite loop | known affected: 20 | 2026-06-29T23:28:40+00:00 | Vulnerability · Source |
| CVE-2025-11226 | redhat_vex | ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core | known affected: 71 | 2026-06-29T23:28:35+00:00 | Vulnerability · Source |
| CVE-2025-11149 | redhat_vex | node-static: node-static denial of service | known not affected: 9 | 2026-06-29T23:28:35+00:00 | Vulnerability · Source |
| CVE-2025-10543 | redhat_vex | paho.mqtt.golang: paho.mqtt.golang: Integer Overflow in UTF-8 String Encoding | known affected: 25 | 2026-06-29T23:28:16+00:00 | Vulnerability · Source |
| CVE-2025-10533 | redhat_vex | firefox: thunderbird: Integer overflow in the SVG component | fixed: 264 known affected: 8 | 2026-06-29T23:28:16+00:00 | Vulnerability · Source |
| CVE-2025-10532 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component | fixed: 264 known affected: 8 | 2026-06-29T23:28:12+00:00 | Vulnerability · Source |
| CVE-2025-10531 | redhat_vex | firefox: Mitigation bypass in the Web Compatibility: Tooling component | known not affected: 12 | 2026-06-29T23:28:11+00:00 | Vulnerability · Source |
| CVE-2025-10530 | redhat_vex | firefox: Spoofing issue in the WebAuthn component in Firefox for Android | known not affected: 12 | 2026-06-29T23:28:08+00:00 | Vulnerability · Source |
| CVE-2025-10529 | redhat_vex | firefox: thunderbird: Same-origin policy bypass in the Layout component | fixed: 264 known affected: 8 | 2026-06-29T23:28:07+00:00 | Vulnerability · Source |
| CVE-2025-1861 | redhat_vex | php: Stream HTTP wrapper truncates redirect location to 1024 bytes | fixed: 1775 known affected: 54 | 2026-06-29T23:28:02+00:00 | Vulnerability · Source |
| CVE-2025-1736 | redhat_vex | php: Stream HTTP wrapper header check might omit basic auth header | fixed: 1775 known affected: 54 | 2026-06-29T23:27:58+00:00 | Vulnerability · Source |
| CVE-2025-1735 | redhat_vex | php: pgsql extension does not check for errors during escaping | fixed: 1115 known affected: 106 | 2026-06-29T23:27:53+00:00 | Vulnerability · Source |
| CVE-2025-1734 | redhat_vex | php: Streams HTTP wrapper does not fail for headers with invalid name and no colon | fixed: 1775 known affected: 54 | 2026-06-29T23:27:50+00:00 | Vulnerability · Source |
| CVE-2025-1647 | redhat_vex | bootstrap: Bootstrap XSS Vulnerability | known affected: 271 | 2026-06-29T23:27:49+00:00 | Vulnerability · Source |
| CVE-2025-1219 | redhat_vex | php: libxml streams use wrong content-type header when requesting a redirected resource | fixed: 1775 known affected: 54 | 2026-06-29T23:27:34+00:00 | Vulnerability · Source |
| CVE-2025-1217 | redhat_vex | php: Header parser of http stream wrapper does not handle folded headers | fixed: 1775 known affected: 54 | 2026-06-29T23:27:30+00:00 | Vulnerability · Source |
| CVE-2025-1182 | redhat_vex | binutils: GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption | known not affected: 61 | 2026-06-29T23:27:29+00:00 | Vulnerability · Source |
| CVE-2025-1181 | redhat_vex | binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption | known not affected: 61 | 2026-06-29T23:27:26+00:00 | Vulnerability · Source |
| CVE-2025-1179 | redhat_vex | binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption | known affected: 4 known not affected: 57 | 2026-06-29T23:27:25+00:00 | Vulnerability · Source |
| CVE-2025-1178 | redhat_vex | binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption | known affected: 4 known not affected: 57 | 2026-06-29T23:27:23+00:00 | Vulnerability · Source |
| CVE-2025-1176 | redhat_vex | binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow | known not affected: 61 | 2026-06-29T23:27:20+00:00 | Vulnerability · Source |
| CVE-2024-9264 | redhat_vex | grafana: Command injection and local file inclusion via SQL Expressions | known not affected: 23 | 2026-06-29T23:25:47+00:00 | Vulnerability · Source |
| CVE-2025-0840 | redhat_vex | binutils: GNU Binutils objdump.c disassemble_bytes stack-based overflow | known affected: 4 known not affected: 57 | 2026-06-29T23:25:00+00:00 | Vulnerability · Source |
| CVE-2025-0716 | redhat_vex | angular: AngularJS improper sanitization in SVG '<image>' element | known affected: 65 known not affected: 4 | 2026-06-29T23:24:58+00:00 | Vulnerability · Source |
| CVE-2025-0514 | redhat_vex | libreoffice: Executable hyperlink Windows path targets executed unconditionally on activation | known not affected: 670 | 2026-06-29T23:24:33+00:00 | Vulnerability · Source |
| CVE-2024-8096 | redhat_vex | curl: OCSP stapling bypass with GnuTLS | known affected: 5 known not affected: 21 | 2026-06-29T23:24:05+00:00 | Vulnerability · Source |
| CVE-2023-53076 | redhat_vex | kernel: bpf: Adjust insufficient default bpf_jit_limit | known affected: 184 known not affected: 90 | 2026-06-29T23:18:34+00:00 | Vulnerability · Source |
| CVE-2023-53075 | redhat_vex | kernel: ftrace: Fix invalid address access in lookup_rec() when index is 0 | known affected: 198 known not affected: 76 | 2026-06-29T23:16:05+00:00 | Vulnerability · Source |
| CVE-2023-53068 | redhat_vex | kernel: net: usb: lan78xx: Limit packet length to skb->len | fixed: 280 known affected: 70 known not affected: 126 | 2026-06-29T23:15:50+00:00 | Vulnerability · Source |
| CVE-2023-53066 | redhat_vex | kernel: qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info | fixed: 305 known affected: 112 known not affected: 76 | 2026-06-29T23:15:44+00:00 | Vulnerability · Source |
| CVE-2023-53064 | redhat_vex | kernel: iavf: fix hang on reboot with ice | fixed: 321 known affected: 66 known not affected: 90 | 2026-06-29T23:15:39+00:00 | Vulnerability · Source |
| CVE-2023-53062 | redhat_vex | kernel: net: usb: smsc95xx: Limit packet length to skb->len | known affected: 198 known not affected: 76 | 2026-06-29T23:15:38+00:00 | Vulnerability · Source |
| CVE-2023-53059 | redhat_vex | kernel: platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl | fixed: 280 known affected: 22 known not affected: 174 | 2026-06-29T23:15:33+00:00 | Vulnerability · Source |
| CVE-2023-53054 | redhat_vex | kernel: usb: dwc2: fix a devres leak in hw_enable upon suspend resume | known not affected: 274 | 2026-06-29T23:15:19+00:00 | Vulnerability · Source |
| CVE-2023-53041 | redhat_vex | kernel: scsi: qla2xxx: Perform lockless command completion in abort path | known affected: 198 known not affected: 76 | 2026-06-29T23:14:55+00:00 | Vulnerability · Source |
| CVE-2023-53037 | redhat_vex | kernel: scsi: mpi3mr: Bad drive in topology results kernel crash | known affected: 156 known not affected: 118 | 2026-06-29T23:14:47+00:00 | Vulnerability · Source |
| CVE-2023-53032 | redhat_vex | kernel: netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. | known affected: 198 known not affected: 76 | 2026-06-29T23:14:39+00:00 | Vulnerability · Source |
| CVE-2023-53027 | redhat_vex | kernel: erofs: fix kvcalloc() misuse with __GFP_NOFAIL | known affected: 108 known not affected: 166 | 2026-06-29T23:14:37+00:00 | Vulnerability · Source |
| CVE-2023-53023 | redhat_vex | kernel: net: nfc: Fix use-after-free in local_cleanup() | known not affected: 274 | 2026-06-29T23:14:27+00:00 | Vulnerability · Source |
| CVE-2023-53022 | redhat_vex | kernel: net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() | known not affected: 274 | 2026-06-29T23:14:24+00:00 | Vulnerability · Source |
| CVE-2023-53021 | redhat_vex | kernel: net/sched: sch_taprio: fix possible use-after-free | fixed: 321 known affected: 38 known not affected: 118 | 2026-06-29T23:14:22+00:00 | Vulnerability · Source |
| CVE-2023-53019 | redhat_vex | kernel: net: mdio: validate parameter addr in mdiobus_get_phy() | fixed: 279 known affected: 112 known not affected: 76 | 2026-06-29T23:14:19+00:00 | Vulnerability · Source |
| CVE-2023-53016 | redhat_vex | kernel: Bluetooth: Fix possible deadlock in rfcomm_sk_state_change | fixed: 279 known affected: 112 known not affected: 76 | 2026-06-29T23:14:18+00:00 | Vulnerability · Source |
| CVE-2023-53008 | redhat_vex | kernel: cifs: fix potential memory leaks in session setup | known affected: 198 known not affected: 76 | 2026-06-29T23:14:14+00:00 | Vulnerability · Source |
| CVE-2023-52999 | redhat_vex | kernel: net: fix UaF in netns ops registration error path | fixed: 279 known affected: 36 known not affected: 152 | 2026-06-29T23:14:08+00:00 | Vulnerability · Source |
| CVE-2023-52996 | redhat_vex | kernel: ipv4: prevent potential spectre v1 gadget in fib_metrics_match() | known affected: 90 known not affected: 184 | 2026-06-29T23:14:04+00:00 | Vulnerability · Source |
| CVE-2023-52995 | redhat_vex | kernel: riscv/kprobe: Fix instruction simulation of JALR | known not affected: 274 | 2026-06-29T23:14:01+00:00 | Vulnerability · Source |
| CVE-2023-52989 | redhat_vex | kernel: firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region | known affected: 90 known not affected: 184 | 2026-06-29T23:13:54+00:00 | Vulnerability · Source |
| CVE-2023-52985 | redhat_vex | kernel: arm64: dts: imx8mm-verdin: Do not power down eth-phy | fixed: 279 known affected: 22 known not affected: 166 | 2026-06-29T23:13:49+00:00 | Vulnerability · Source |