VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294458 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2013-4287 | redhat_vex | rubygems: version regex algorithmic complexity vulnerability | fixed: 75 known affected: 8 known not affected: 16 | 2026-06-28T08:25:02+00:00 | Vulnerability · Source |
| CVE-2013-6393 | redhat_vex | libyaml: heap-based buffer overflow when parsing YAML tags | fixed: 27 known affected: 12 known not affected: 6 | 2026-06-28T08:25:00+00:00 | Vulnerability · Source |
| CVE-2025-40300 | redhat_vex | kernel: x86/vmscape: Add conditional IBPB mitigation | fixed: 2171 known affected: 64 known not affected: 65 | 2026-06-28T08:24:59+00:00 | Vulnerability · Source |
| CVE-2024-35845 | redhat_vex | kernel: wifi: iwlwifi: dbg-tlv: ensure NUL termination | fixed: 927 known affected: 50 known not affected: 33 | 2026-06-28T08:24:57+00:00 | Vulnerability · Source |
| CVE-2026-29022 | redhat_vex | dr_libs: dr_libs: Heap buffer overflow via crafted WAV files | known not affected: 1 | 2026-06-28T08:24:52+00:00 | Vulnerability · Source |
| CVE-2017-12440 | redhat_vex | openstack-aodh: Aodh can be used to launder Keystone trusts | fixed: 20 known affected: 17 known not affected: 9 | 2026-06-28T08:24:52+00:00 | Vulnerability · Source |
| CVE-2026-2597 | redhat_vex | Crypt-SysRandom-XS: heap-based buffer overflow in the XS function random_bytes() | known not affected: 1 | 2026-06-28T08:24:47+00:00 | Vulnerability · Source |
| CVE-2024-35925 | redhat_vex | kernel: block: prevent division by zero in blk_rq_stat_sum() | fixed: 709 known affected: 50 known not affected: 22 | 2026-06-28T08:24:46+00:00 | Vulnerability · Source |
| CVE-2019-17531 | redhat_vex | jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* | fixed: 459 known affected: 6 known not affected: 24 | 2026-06-28T08:24:42+00:00 | Vulnerability · Source |
| CVE-2024-35930 | redhat_vex | kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() | fixed: 709 known affected: 64 known not affected: 8 | 2026-06-28T08:24:41+00:00 | Vulnerability · Source |
| CVE-2024-36005 | redhat_vex | kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path | fixed: 1056 known affected: 50 known not affected: 23 | 2026-06-28T08:24:36+00:00 | Vulnerability · Source |
| CVE-2024-35912 | redhat_vex | kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks | fixed: 709 known affected: 50 known not affected: 22 | 2026-06-28T08:24:36+00:00 | Vulnerability · Source |
| CVE-2024-35801 | redhat_vex | kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD | fixed: 709 known affected: 22 known not affected: 50 | 2026-06-28T08:24:30+00:00 | Vulnerability · Source |
| CVE-2024-26840 | redhat_vex | kernel: cachefiles: fix memory leak in cachefiles_add_cache() | fixed: 709 known affected: 64 known not affected: 8 | 2026-06-28T08:24:24+00:00 | Vulnerability · Source |
| CVE-2024-27025 | redhat_vex | kernel: nbd: null check for nla_nest_start | fixed: 709 known affected: 36 known not affected: 36 | 2026-06-28T08:24:24+00:00 | Vulnerability · Source |
| CVE-2024-26743 | redhat_vex | kernel: RDMA/qedr: Fix qedr_create_user_qp error flow | fixed: 709 known affected: 50 known not affected: 22 | 2026-06-28T08:24:22+00:00 | Vulnerability · Source |
| CVE-2019-17267 | redhat_vex | jackson-databind: Serialization gadgets in classes of the ehcache package | fixed: 315 known affected: 23 known not affected: 6 | 2026-06-28T08:24:16+00:00 | Vulnerability · Source |
| CVE-2026-32236 | redhat_vex | @backstage/plugin-auth-backend: @backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch | known affected: 2 | 2026-06-28T08:24:13+00:00 | Vulnerability · Source |
| CVE-2025-57852 | redhat_vex | openshift-ai: privilege escalation via excessive /etc/passwd permissions | fixed: 5 known not affected: 146 | 2026-06-28T08:24:06+00:00 | Vulnerability · Source |
| CVE-2026-31959 | redhat_vex | github.com/anchore/quill: Quill: Sensitive data exfiltration via Server-Side Request Forgery (SSRF) | known not affected: 1 | 2026-06-28T08:24:04+00:00 | Vulnerability · Source |
| CVE-2025-46818 | redhat_vex | Redis: Redis: Authenticated users can execute LUA scripts as a different user | fixed: 147 known not affected: 147 | 2026-06-28T08:23:55+00:00 | Vulnerability · Source |
| CVE-2026-25882 | redhat_vex | github.com/gofiber/fiber/v2: Fiber: Denial of Service via excessive route parameters | known not affected: 1 | 2026-06-28T08:23:34+00:00 | Vulnerability · Source |
| CVE-2026-28208 | redhat_vex | com.github.junrar/junrar: Junrar: Remote code execution via path traversal when extracting crafted RAR archives | known affected: 3 | 2026-06-28T08:23:30+00:00 | Vulnerability · Source |
| CVE-2025-46819 | redhat_vex | Redis: Redis is vulnerable to DoS via specially crafted LUA scripts | fixed: 147 known not affected: 147 | 2026-06-28T08:23:21+00:00 | Vulnerability · Source |
| CVE-2025-64507 | redhat_vex | Incus: Incus vulnerable to local privilege escalation through custom storage volumes | known not affected: 1 | 2026-06-28T08:23:10+00:00 | Vulnerability · Source |
| CVE-2025-45691 | redhat_vex | ragas: arbitrary file read via improper URL validation in multimodal inputs | known not affected: 2 | 2026-06-28T08:23:09+00:00 | Vulnerability · Source |
| CVE-2025-26622 | redhat_vex | vyper: sqrt doesn't define rounding behavior in Vyper | known not affected: 1 | 2026-06-28T08:23:09+00:00 | Vulnerability · Source |
| CVE-2026-31870 | redhat_vex | cpp-httplib: cpp-httplib: Denial of Service via malformed Content-Length header | known not affected: 1 | 2026-06-28T08:23:08+00:00 | Vulnerability · Source |
| CVE-2026-3979 | redhat_vex | quickjs-ng: quickjs-ng: Use-after-free vulnerability via js_iterator_concat_return function manipulation | known not affected: 1 | 2026-06-28T08:21:12+00:00 | Vulnerability · Source |
| CVE-2026-2808 | redhat_vex | github.com/hashicorp/consul: HashiCorp Consul: Arbitrary file read via Kubernetes authentication configuration | known not affected: 37 | 2026-06-28T08:21:12+00:00 | Vulnerability · Source |
| CVE-2025-58767 | redhat_vex | rexml: REXML denial of service | fixed: 765 known affected: 142 | 2026-06-28T08:21:07+00:00 | Vulnerability · Source |
| CVE-2026-30226 | redhat_vex | devalue: Devalue: Denial of Service or type confusion via prototype pollution | known not affected: 2 | 2026-06-28T08:21:05+00:00 | Vulnerability · Source |
| CVE-2026-1471 | redhat_vex | neo4j: Neo4j: Authentication context inheritance via excessive caching in SSO UserInfo endpoint | known affected: 13 | 2026-06-28T08:20:59+00:00 | Vulnerability · Source |
| CVE-2026-3949 | redhat_vex | libheif: libheif: Out-of-bounds read via local argument manipulation | known not affected: 1 | 2026-06-28T08:20:58+00:00 | Vulnerability · Source |
| CVE-2026-26127 | redhat_vex | .net: .NET: Denial of Service via out-of-bounds read | fixed: 884 known not affected: 64 | 2026-06-28T08:20:58+00:00 | Vulnerability · Source |
| CVE-2026-2789 | redhat_vex | firefox: thunderbird: Use-after-free in the Graphics: ImageLib component | fixed: 320 known affected: 6 | 2026-06-28T08:20:55+00:00 | Vulnerability · Source |
| CVE-2026-2782 | redhat_vex | firefox: thunderbird: Privilege escalation in the Netmonitor component | fixed: 320 known affected: 6 | 2026-06-28T08:20:55+00:00 | Vulnerability · Source |
| CVE-2024-56604 | redhat_vex | kernel: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() | fixed: 305 known affected: 112 | 2026-06-28T08:20:55+00:00 | Vulnerability · Source |
| CVE-2026-2786 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript Engine component | fixed: 320 known affected: 6 | 2026-06-28T08:20:50+00:00 | Vulnerability · Source |
| CVE-2026-2785 | redhat_vex | firefox: thunderbird: Invalid pointer in the JavaScript Engine component | fixed: 320 known affected: 6 | 2026-06-28T08:20:48+00:00 | Vulnerability · Source |
| CVE-2026-2780 | redhat_vex | firefox: thunderbird: Privilege escalation in the Netmonitor component | fixed: 320 known affected: 6 | 2026-06-28T08:20:47+00:00 | Vulnerability · Source |
| CVE-2026-2779 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Networking: JAR component | fixed: 320 known affected: 8 | 2026-06-28T08:20:47+00:00 | Vulnerability · Source |
| CVE-2025-27414 | redhat_vex | minio: MinIO SFTP authentication bypass due to improperly trusted SSH key | known not affected: 1 | 2026-06-28T08:20:46+00:00 | Vulnerability · Source |
| CVE-2025-25474 | redhat_vex | dcmtk: Buffer Overflow in DCMTK's diinpxt.h Component | known not affected: 1 | 2026-06-28T08:20:44+00:00 | Vulnerability · Source |
| CVE-2026-2783 | redhat_vex | firefox: thunderbird: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component | fixed: 320 known affected: 6 | 2026-06-28T08:20:41+00:00 | Vulnerability · Source |
| CVE-2025-27795 | redhat_vex | GraphicsMagick: Lack of Image Dimension Resource Limits in JXL of GraphicsMagick | known not affected: 1 | 2026-06-28T08:20:41+00:00 | Vulnerability · Source |
| CVE-2025-27624 | redhat_vex | jenkins: CSRF vulnerability in jenkins | known not affected: 2 | 2026-06-28T08:20:40+00:00 | Vulnerability · Source |
| CVE-2025-27623 | redhat_vex | jenkins: Encrypted values of secrets stored in view configuration revealed to users with View/Read permission | known affected: 1 | 2026-06-28T08:20:39+00:00 | Vulnerability · Source |
| CVE-2025-27591 | redhat_vex | below: Privilege Escalation in Below via World-Writable Directory | known not affected: 1 | 2026-06-28T08:20:38+00:00 | Vulnerability · Source |
| CVE-2025-27622 | redhat_vex | jenkins: Encrypted values of secrets stored in agent configuration revealed to users with Agent/Extended Read permission | known affected: 1 | 2026-06-28T08:20:38+00:00 | Vulnerability · Source |