VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294458 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-27407 | redhat_vex | graphql-ruby: Remote code execution when loading a crafted GraphQL schema | fixed: 10 known not affected: 2029 | 2026-06-28T08:20:37+00:00 | Vulnerability · Source |
| CVE-2025-26803 | redhat_vex | passenger: DoS while parsing a request with an invalid HTTP method | known not affected: 1 | 2026-06-28T08:20:33+00:00 | Vulnerability · Source |
| CVE-2025-27104 | redhat_vex | vyper: double eval in For List Iter in Vyper | known not affected: 1 | 2026-06-28T08:20:33+00:00 | Vulnerability · Source |
| CVE-2025-27105 | redhat_vex | vyper: AugAssign evaluation order causing OOB write within the object in Vyper | known not affected: 1 | 2026-06-28T08:20:33+00:00 | Vulnerability · Source |
| CVE-2025-26623 | redhat_vex | exiv2: Use After Free in Exiv2 | fixed: 38 known affected: 19 known not affected: 4 | 2026-06-28T08:20:29+00:00 | Vulnerability · Source |
| CVE-2025-26531 | redhat_vex | moodle: IDOR in badges allows disabling of arbitrary badges | known not affected: 1 | 2026-06-28T08:20:28+00:00 | Vulnerability · Source |
| CVE-2025-26519 | redhat_vex | musl-libc: input-controlled out-of-bounds write primitive in iconv() | known not affected: 1 | 2026-06-28T08:20:27+00:00 | Vulnerability · Source |
| CVE-2025-26529 | redhat_vex | moodle: Stored XSS risk in admin live log | known not affected: 1 | 2026-06-28T08:20:27+00:00 | Vulnerability · Source |
| CVE-2025-26520 | redhat_vex | cacti: SQL Injection in Cacti | known not affected: 1 | 2026-06-28T08:20:27+00:00 | Vulnerability · Source |
| CVE-2025-26530 | redhat_vex | moodle: Reflected XSS via question bank filter | known not affected: 1 | 2026-06-28T08:20:27+00:00 | Vulnerability · Source |
| CVE-2025-25975 | redhat_vex | parse-git-config: Prototype Pollution Vulneralbility in parse-git-config | known not affected: 1 | 2026-06-28T08:20:26+00:00 | Vulnerability · Source |
| CVE-2025-25469 | redhat_vex | ffmpeg: Memory Leak in libavutil/iamf.c in FFmpeg | known not affected: 1 | 2026-06-28T08:20:25+00:00 | Vulnerability · Source |
| CVE-2025-25294 | redhat_vex | envoyproxy/gateway: Envoy Gateway Log Injection Vulnerability | known affected: 2 | 2026-06-28T08:20:24+00:00 | Vulnerability · Source |
| CVE-2025-25204 | redhat_vex | gh: `gh attestation verify` returns incorrect exit code during verification if no attestations are present | known not affected: 1 | 2026-06-28T08:20:24+00:00 | Vulnerability · Source |
| CVE-2025-25472 | redhat_vex | dcmtk: Buffer Overflow in DCMTK Leading to DoS | known not affected: 1 | 2026-06-28T08:20:24+00:00 | Vulnerability · Source |
| CVE-2025-25186 | redhat_vex | net-imap: Net::IMAP vulnerable to possible DoS by memory exhaustion | fixed: 426 known affected: 124 known not affected: 50 | 2026-06-28T08:20:23+00:00 | Vulnerability · Source |
| CVE-2024-50075 | redhat_vex | kernel: xhci: tegra: fix checked USB2 port number | fixed: 305 known affected: 22 known not affected: 90 | 2026-06-28T08:20:20+00:00 | Vulnerability · Source |
| CVE-2026-2770 | redhat_vex | firefox: thunderbird: Use-after-free in the DOM: Bindings (WebIDL) component | fixed: 320 known affected: 8 | 2026-06-28T08:20:20+00:00 | Vulnerability · Source |
| CVE-2026-2790 | redhat_vex | firefox: thunderbird: Same-origin policy bypass in the Networking: JAR component | fixed: 320 known affected: 6 | 2026-06-28T08:20:13+00:00 | Vulnerability · Source |
| CVE-2026-2760 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component | fixed: 320 known affected: 6 | 2026-06-28T08:20:11+00:00 | Vulnerability · Source |
| CVE-2026-2784 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Security component | fixed: 320 known affected: 6 | 2026-06-28T08:20:06+00:00 | Vulnerability · Source |
| CVE-2024-49766 | redhat_vex | werkzeug: python-werkzeug: Werkzeug safe_join not safe on Windows | known not affected: 15 | 2026-06-28T08:19:46+00:00 | Vulnerability · Source |
| CVE-2024-48873 | redhat_vex | kernel: wifi: rtw89: check return value of ieee80211_probereq_get() for RNR | fixed: 305 known affected: 146 known not affected: 42 | 2026-06-28T08:19:42+00:00 | Vulnerability · Source |
| CVE-2024-8354 | redhat_vex | qemu-kvm: usb: assertion failure in usb_ep_get() | known affected: 98 | 2026-06-28T08:18:52+00:00 | Vulnerability · Source |
| CVE-2015-6788 | redhat_vex | chromium-browser: Type confusion in extensions | fixed: 12 | 2026-06-28T08:18:48+00:00 | Vulnerability · Source |
| CVE-2015-6792 | redhat_vex | chromium-browser: Fixes from internal audits and fuzzing | fixed: 12 | 2026-06-28T08:18:48+00:00 | Vulnerability · Source |
| CVE-2015-6787 | redhat_vex | chromium-browser: Various fixes from internal audits | fixed: 12 | 2026-06-28T08:18:48+00:00 | Vulnerability · Source |
| CVE-2015-6785 | redhat_vex | chromium-browser: Wildcard matching issue in CSP | fixed: 12 | 2026-06-28T08:18:47+00:00 | Vulnerability · Source |
| CVE-2015-6786 | redhat_vex | chromium-browser: Scheme bypass in CSP | fixed: 12 | 2026-06-28T08:18:47+00:00 | Vulnerability · Source |
| CVE-2015-6784 | redhat_vex | chromium-browser: Escaping issue in saved pages | fixed: 12 | 2026-06-28T08:18:46+00:00 | Vulnerability · Source |
| CVE-2015-6782 | redhat_vex | chromium-browser: Content spoofing in Omnibox | fixed: 12 | 2026-06-28T08:18:45+00:00 | Vulnerability · Source |
| CVE-2015-6781 | redhat_vex | chromium-browser: Integer overflow in Sfntly | fixed: 12 | 2026-06-28T08:18:44+00:00 | Vulnerability · Source |
| CVE-2024-6505 | redhat_vex | qemu-kvm: virtio-net: queue index out-of-bounds access in software RSS | known affected: 98 | 2026-06-28T08:18:42+00:00 | Vulnerability · Source |
| CVE-2024-8612 | redhat_vex | qemu-kvm: information leak in virtio devices | known affected: 98 | 2026-06-28T08:18:41+00:00 | Vulnerability · Source |
| CVE-2024-8235 | redhat_vex | libvirt: Crash of virtinterfaced via virConnectListInterfaces() | fixed: 336 known affected: 33 known not affected: 101 | 2026-06-28T08:18:31+00:00 | Vulnerability · Source |
| CVE-2015-6768 | redhat_vex | chromium-browser: Cross-origin bypass in DOM | fixed: 12 | 2026-06-28T08:18:28+00:00 | Vulnerability · Source |
| CVE-2015-6767 | redhat_vex | chromium-browser: Use-after-free in AppCache | fixed: 12 | 2026-06-28T08:18:08+00:00 | Vulnerability · Source |
| CVE-2024-57807 | redhat_vex | kernel: scsi: megaraid_sas: Fix for a potential deadlock | fixed: 150 known affected: 150 | 2026-06-28T08:18:00+00:00 | Vulnerability · Source |
| CVE-2025-60458 | redhat_vex | UxPlay: double free via specially crafted RTSP TEARDOWN request | known not affected: 1 | 2026-06-28T08:17:58+00:00 | Vulnerability · Source |
| CVE-2024-7383 | redhat_vex | libnbd: NBD server improper certificate validation | fixed: 1014 known affected: 15 | 2026-06-28T08:17:58+00:00 | Vulnerability · Source |
| CVE-2024-7264 | redhat_vex | curl: libcurl: ASN.1 date parser overread | fixed: 196 known affected: 35 known not affected: 21 | 2026-06-28T08:17:57+00:00 | Vulnerability · Source |
| CVE-2026-2788 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component | fixed: 320 known affected: 8 | 2026-06-28T08:17:54+00:00 | Vulnerability · Source |
| CVE-2024-56783 | redhat_vex | kernel: netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level | fixed: 305 known affected: 22 known not affected: 90 | 2026-06-28T08:17:54+00:00 | Vulnerability · Source |
| CVE-2024-56779 | redhat_vex | kernel: nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur | fixed: 305 known affected: 112 | 2026-06-28T08:17:52+00:00 | Vulnerability · Source |
| CVE-2024-56760 | redhat_vex | kernel: PCI/MSI: Handle lack of irqdomain gracefully | fixed: 305 known affected: 22 known not affected: 90 | 2026-06-28T08:17:50+00:00 | Vulnerability · Source |
| CVE-2024-56729 | redhat_vex | kernel: smb: Initialize cfid->tcon before performing network ops | fixed: 305 known affected: 22 known not affected: 90 | 2026-06-28T08:17:39+00:00 | Vulnerability · Source |
| CVE-2024-56693 | redhat_vex | kernel: brd: defer automatic disk creation until module initialization succeeds | fixed: 305 known affected: 64 known not affected: 48 | 2026-06-28T08:17:07+00:00 | Vulnerability · Source |
| CVE-2024-56667 | redhat_vex | kernel: drm/i915: Fix NULL pointer dereference in capture_engine | fixed: 305 known affected: 112 | 2026-06-28T08:16:58+00:00 | Vulnerability · Source |
| CVE-2024-56654 | redhat_vex | kernel: Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating | fixed: 305 known affected: 64 known not affected: 48 | 2026-06-28T08:16:54+00:00 | Vulnerability · Source |
| CVE-2024-57903 | redhat_vex | kernel: net: restrict SO_REUSEPORT to inet sockets | fixed: 305 known affected: 112 known not affected: 76 | 2026-06-28T08:16:49+00:00 | Vulnerability · Source |