VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294458 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-7345 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Feedback | known not affected: 1 | 2026-06-28T07:46:17+00:00 | Vulnerability · Source |
| CVE-2026-7309 | redhat_vex | openshift-controller-manager: OpenShift Container Platform: Information disclosure via environment variable injection | known affected: 1 | 2026-06-28T07:46:16+00:00 | Vulnerability · Source |
| CVE-2026-7233 | redhat_vex | mupdf: Artifex MuPDF: Information disclosure due to out-of-bounds read | known not affected: 1 | 2026-06-28T07:46:14+00:00 | Vulnerability · Source |
| CVE-2026-6994 | redhat_vex | envoy: Envoy: Injection vulnerability in Query Parameter Handler | known not affected: 2 | 2026-06-28T07:46:14+00:00 | Vulnerability · Source |
| CVE-2026-6848 | redhat_vex | quay: Red Hat Quay: Authentication bypass allows privileged actions without valid credentials | known affected: 2 | 2026-06-28T07:46:13+00:00 | Vulnerability · Source |
| CVE-2026-6915 | redhat_vex | mongodb: MongoDB: Authorization flaw allows modification of other user's authentication data | known affected: 12 | 2026-06-28T07:46:13+00:00 | Vulnerability · Source |
| CVE-2026-6873 | redhat_vex | python-django: Django: Information disclosure via non-injective cookie salt derivation | known affected: 19 | 2026-06-28T07:46:12+00:00 | Vulnerability · Source |
| CVE-2026-6855 | redhat_vex | instructlab: InstructLab: Path traversal allows arbitrary directory creation and file write | known affected: 6 | 2026-06-28T07:46:11+00:00 | Vulnerability · Source |
| CVE-2021-3178 | redhat_vex | kernel: path traversal in fs/nfsd/nfs3xdr.c may lead to Information Disclosure or RCE | known affected: 91 known not affected: 106 | 2026-06-28T07:46:10+00:00 | Vulnerability · Source |
| CVE-2021-3177 | redhat_vex | python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c | fixed: 819 known affected: 17 known not affected: 102 | 2026-06-28T07:46:10+00:00 | Vulnerability · Source |
| CVE-2023-5366 | redhat_vex | openvswitch: openvswitch don't match packets on nd_target field | fixed: 158 known affected: 87 known not affected: 13 | 2026-06-28T07:46:09+00:00 | Vulnerability · Source |
| CVE-2026-6783 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component | known not affected: 11 | 2026-06-28T07:46:09+00:00 | Vulnerability · Source |
| CVE-2026-6784 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox 150 and Thunderbird 150 | known not affected: 11 | 2026-06-28T07:46:07+00:00 | Vulnerability · Source |
| CVE-2026-6781 | redhat_vex | firefox: thunderbird: Denial-of-service in the Audio/Video: Playback component | known not affected: 11 | 2026-06-28T07:46:07+00:00 | Vulnerability · Source |
| CVE-2026-6782 | redhat_vex | firefox: thunderbird: Information disclosure in the IP Protection component | known not affected: 11 | 2026-06-28T07:46:07+00:00 | Vulnerability · Source |
| CVE-2026-6777 | redhat_vex | firefox: thunderbird: Other issue in the Networking: DNS component | known not affected: 11 | 2026-06-28T07:46:06+00:00 | Vulnerability · Source |
| CVE-2026-6780 | redhat_vex | firefox: thunderbird: Denial-of-service in the Audio/Video: Playback component | known not affected: 11 | 2026-06-28T07:46:06+00:00 | Vulnerability · Source |
| CVE-2026-6775 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the WebRTC component | known not affected: 11 | 2026-06-28T07:46:05+00:00 | Vulnerability · Source |
| CVE-2026-6768 | redhat_vex | firefox: thunderbird: Mitigation bypass in the Networking: Cookies component | known not affected: 11 | 2026-06-28T07:46:03+00:00 | Vulnerability · Source |
| CVE-2026-6758 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component | known not affected: 20 | 2026-06-28T07:46:01+00:00 | Vulnerability · Source |
| CVE-2026-6691 | redhat_vex | MongoDB C Driver: Cyrus SASL: MongoDB C Driver: Heap buffer overflow via unsafe username canonicalization | known not affected: 1 | 2026-06-28T07:45:56+00:00 | Vulnerability · Source |
| CVE-2026-6667 | redhat_vex | PgBouncer: PgBouncer: Denial of Service via improper authorization for KILL_CLIENT command | known not affected: 1 | 2026-06-28T07:45:56+00:00 | Vulnerability · Source |
| CVE-2026-6666 | redhat_vex | PgBouncer: PgBouncer: Denial of Service via malicious server error response | known not affected: 1 | 2026-06-28T07:45:56+00:00 | Vulnerability · Source |
| CVE-2026-6665 | redhat_vex | PgBouncer: PgBouncer: Arbitrary code execution or Denial of Service via SCRAM server-final-message | known not affected: 1 | 2026-06-28T07:45:56+00:00 | Vulnerability · Source |
| CVE-2026-6664 | redhat_vex | PgBouncer: PgBouncer: Denial of Service via malformed SCRAM authentication packet | known not affected: 1 | 2026-06-28T07:45:56+00:00 | Vulnerability · Source |
| CVE-2023-52922 | redhat_vex | kernel: can: bcm: Fix UAF in bcm_proc_show() | fixed: 1924 known affected: 22 known not affected: 76 | 2026-06-28T07:45:54+00:00 | Vulnerability · Source |
| CVE-2023-52917 | redhat_vex | kernel: ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() | fixed: 305 known affected: 98 known not affected: 14 | 2026-06-28T07:45:48+00:00 | Vulnerability · Source |
| CVE-2026-6494 | redhat_vex | aap-mcp-server: AAP MCP server: Log injection allows social engineering attacks via unsanitized input | known affected: 1 | 2026-06-28T07:45:46+00:00 | Vulnerability · Source |
| CVE-2026-6315 | redhat_vex | chromium-browser: Use after free in Permissions | known not affected: 1 | 2026-06-28T07:45:45+00:00 | Vulnerability · Source |
| CVE-2026-6437 | redhat_vex | github.com/kubernetes-sigs/aws-efs-csi-driver: AWS EFS CSI Driver: Arbitrary mount option injection | known affected: 1 | 2026-06-28T07:45:44+00:00 | Vulnerability · Source |
| CVE-2026-6300 | redhat_vex | chromium-browser: Use after free in CSS | known not affected: 1 | 2026-06-28T07:45:44+00:00 | Vulnerability · Source |
| CVE-2026-6361 | redhat_vex | chromium-browser: Heap buffer overflow in PDFium | known not affected: 1 | 2026-06-28T07:45:43+00:00 | Vulnerability · Source |
| CVE-2026-6410 | redhat_vex | @fastify/static: @fastify/static: Information disclosure via path traversal when directory listing is enabled. | known affected: 9 | 2026-06-28T07:45:43+00:00 | Vulnerability · Source |
| CVE-2026-6314 | redhat_vex | chromium-browser: Out of bounds write in GPU | known not affected: 1 | 2026-06-28T07:45:43+00:00 | Vulnerability · Source |
| CVE-2026-6414 | redhat_vex | @fastify/static: @fastify/static: Security bypass via percent-encoded path separators | known affected: 9 | 2026-06-28T07:45:43+00:00 | Vulnerability · Source |
| CVE-2026-6385 | redhat_vex | ffmpeg: FFmpeg: Denial of Service and potential arbitrary code execution via signed integer overflow in DVD subtitle parser | known affected: 10 | 2026-06-28T07:45:42+00:00 | Vulnerability · Source |
| CVE-2026-6362 | redhat_vex | chromium-browser: Use after free in Codecs | known not affected: 1 | 2026-06-28T07:45:42+00:00 | Vulnerability · Source |
| CVE-2026-6360 | redhat_vex | chromium-browser: Use after free in FileSystem | known not affected: 1 | 2026-06-28T07:45:42+00:00 | Vulnerability · Source |
| CVE-2026-6358 | redhat_vex | chromium-browser: Use after free in XR | known not affected: 1 | 2026-06-28T07:45:42+00:00 | Vulnerability · Source |
| CVE-2026-6359 | redhat_vex | chromium-browser: Use after free in Video | known not affected: 1 | 2026-06-28T07:45:42+00:00 | Vulnerability · Source |
| CVE-2026-6383 | redhat_vex | kubevirt: KubeVirt: Unauthorized subresource access due to improper RBAC evaluation | known affected: 1 | 2026-06-28T07:45:42+00:00 | Vulnerability · Source |
| CVE-2026-6317 | redhat_vex | chromium-browser: Use after free in Cast | known not affected: 1 | 2026-06-28T07:45:41+00:00 | Vulnerability · Source |
| CVE-2026-6316 | redhat_vex | chromium-browser: Use after free in Forms | known not affected: 1 | 2026-06-28T07:45:41+00:00 | Vulnerability · Source |
| CVE-2026-6307 | redhat_vex | chromium-browser: Type Confusion in Turbofan | known not affected: 1 | 2026-06-28T07:45:40+00:00 | Vulnerability · Source |
| CVE-2026-6299 | redhat_vex | chromium-browser: Use after free in Prerender | known not affected: 1 | 2026-06-28T07:45:40+00:00 | Vulnerability · Source |
| CVE-2026-6304 | redhat_vex | chromium-browser: Use after free in Graphite | known not affected: 1 | 2026-06-28T07:45:40+00:00 | Vulnerability · Source |
| CVE-2026-6306 | redhat_vex | chromium-browser: Heap buffer overflow in PDFium | known not affected: 1 | 2026-06-28T07:45:40+00:00 | Vulnerability · Source |
| CVE-2026-6210 | redhat_vex | Qt SVG: Qt SVG: Denial of Service via crafted SVG image | known affected: 17 | 2026-06-28T07:45:40+00:00 | Vulnerability · Source |
| CVE-2026-6309 | redhat_vex | chromium-browser: Use after free in Viz | known not affected: 1 | 2026-06-28T07:45:40+00:00 | Vulnerability · Source |
| CVE-2021-30178 | redhat_vex | kernel: NULL pointer dereference in synic_get function in arch/x86/kvm/hyperv.c for certain accesses to the SynIC Hyper-V context | known not affected: 197 | 2026-06-28T07:45:40+00:00 | Vulnerability · Source |