VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294458 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-55392 | redhat_vex | nilfs-utils: NILFS utilities: Denial of Service via crafted NILFS2 images | known not affected: 1 | 2026-06-28T07:45:11+00:00 | Vulnerability · Source |
| CVE-2021-28375 | redhat_vex | kernel: fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages | known not affected: 92 | 2026-06-28T07:45:10+00:00 | Vulnerability · Source |
| CVE-2026-55388 | redhat_vex | piscina: piscina: Arbitrary code execution via prototype pollution of filename option | known not affected: 1 | 2026-06-28T07:45:10+00:00 | Vulnerability · Source |
| CVE-2023-52658 | redhat_vex | kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" | fixed: 429 known affected: 50 known not affected: 14 | 2026-06-28T07:45:08+00:00 | Vulnerability · Source |
| CVE-2023-52663 | redhat_vex | kernel: ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe() | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T07:45:08+00:00 | Vulnerability · Source |
| CVE-2026-54904 | redhat_vex | concurrent-ruby: rubygem-concurrent-ruby: concurrent-ruby: Denial of Service due to infinite loop in AtomicReference#update | known not affected: 20 | 2026-06-28T07:45:07+00:00 | Vulnerability · Source |
| CVE-2023-52649 | redhat_vex | kernel: drm/vkms: Avoid reading beyond LUT array | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T07:45:06+00:00 | Vulnerability · Source |
| CVE-2023-52680 | redhat_vex | kernel: ALSA: scarlett2: Add missing error checks to *_ctl_get() | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T07:45:06+00:00 | Vulnerability · Source |
| CVE-2023-52648 | redhat_vex | kernel: drm/vmwgfx: Unmap the surface before resetting it on a plane state | fixed: 709 known affected: 64 known not affected: 8 | 2026-06-28T07:45:06+00:00 | Vulnerability · Source |
| CVE-2021-27923 | redhat_vex | python-pillow: Excessive memory allocation in ICO image reader | fixed: 22 known affected: 8 known not affected: 9 | 2026-06-28T07:45:06+00:00 | Vulnerability · Source |
| CVE-2026-54530 | redhat_vex | pypdf: python-pypdf: pypdf: Denial of Service via crafted PDF processing | known affected: 11 | 2026-06-28T07:45:05+00:00 | Vulnerability · Source |
| CVE-2023-52643 | redhat_vex | kernel: iio: core: fix memleak in iio_device_register_sysfs | fixed: 280 known affected: 50 known not affected: 70 | 2026-06-28T07:45:04+00:00 | Vulnerability · Source |
| CVE-2023-31147 | redhat_vex | c-ares: Insufficient randomness in generation of DNS query IDs | fixed: 245 known affected: 8 | 2026-06-28T07:45:03+00:00 | Vulnerability · Source |
| CVE-2026-54421 | redhat_vex | openstack ironic: OpenStack Ironic: Information disclosure via PATCH request on volume properties | known affected: 14 | 2026-06-28T07:45:01+00:00 | Vulnerability · Source |
| CVE-2024-26892 | redhat_vex | kernel: wifi: mt76: mt7921e: fix use-after-free in free_irq() | fixed: 709 known affected: 22 known not affected: 50 | 2026-06-28T07:45:01+00:00 | Vulnerability · Source |
| CVE-2021-27922 | redhat_vex | python-pillow: Excessive memory allocation in ICNS image reader | fixed: 22 known affected: 8 known not affected: 9 | 2026-06-28T07:45:00+00:00 | Vulnerability · Source |
| CVE-2021-27928 | redhat_vex | mariadb: writable system variables allows a database user with SUPER privilege to execute arbitrary code as the system mysql user | fixed: 722 known not affected: 97 | 2026-06-28T07:45:00+00:00 | Vulnerability · Source |
| CVE-2023-52625 | redhat_vex | kernel: drm/amd/display: Refactor DMCUB enter/exit idle interface | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T07:44:58+00:00 | Vulnerability · Source |
| CVE-2021-27921 | redhat_vex | python-pillow: Excessive memory allocation in BLP image reader | fixed: 22 known affected: 8 known not affected: 9 | 2026-06-28T07:44:58+00:00 | Vulnerability · Source |
| CVE-2023-52632 | redhat_vex | kernel: drm/amdkfd: lock dependency warning with srcu | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T07:44:58+00:00 | Vulnerability · Source |
| CVE-2023-52624 | redhat_vex | kernel: drm/amd/display: Wake DMCUB before executing GPINT commands | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T07:44:57+00:00 | Vulnerability · Source |
| CVE-2026-54133 | redhat_vex | jmespath.php: jmespath.php has CompilerRuntime code injection via unescaped function names | known not affected: 1 | 2026-06-28T07:44:57+00:00 | Vulnerability · Source |
| CVE-2026-54278 | redhat_vex | aiohttp: aiohttp: Denial of Service due to excessive memory consumption from compressed request body | known affected: 110 known not affected: 6 | 2026-06-28T07:44:57+00:00 | Vulnerability · Source |
| CVE-2026-54274 | redhat_vex | aiohttp: aiohttp: Denial of Service via incomplete websocket frame payloads | known affected: 110 known not affected: 6 | 2026-06-28T07:44:56+00:00 | Vulnerability · Source |
| CVE-2026-54275 | redhat_vex | aiohttp: AIOHTTP: TLS SNI check bypass via connection reuse | known affected: 110 known not affected: 6 | 2026-06-28T07:44:56+00:00 | Vulnerability · Source |
| CVE-2021-27516 | redhat_vex | nodejs-urijs: mishandling certain uses of backslash may lead to confidentiality compromise | fixed: 1 known not affected: 11 | 2026-06-28T07:44:55+00:00 | Vulnerability · Source |
| CVE-2023-52585 | redhat_vex | kernel: drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() | fixed: 280 known affected: 16 known not affected: 104 | 2026-06-28T07:44:52+00:00 | Vulnerability · Source |
| CVE-2023-52560 | redhat_vex | kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() | fixed: 430 known affected: 22 known not affected: 58 | 2026-06-28T07:44:50+00:00 | Vulnerability · Source |
| CVE-2026-54056 | redhat_vex | kitty: Kitty: Arbitrary file overwrite via malicious drag-and-drop | known not affected: 1 | 2026-06-28T07:44:50+00:00 | Vulnerability · Source |
| CVE-2023-52580 | redhat_vex | kernel: net/core: kernel crash in ETH_P_1588 flow dissector | fixed: 429 known affected: 64 | 2026-06-28T07:44:50+00:00 | Vulnerability · Source |
| CVE-2021-27291 | redhat_vex | python-pygments: ReDoS in multiple lexers | fixed: 488 known affected: 11 | 2026-06-28T07:44:50+00:00 | Vulnerability · Source |
| CVE-2026-53473 | redhat_vex | migration-planner-ui-app: Stored XSS via javascript: URL in Agent Credential Link | known not affected: 1 | 2026-06-28T07:44:48+00:00 | Vulnerability · Source |
| CVE-2026-53702 | redhat_vex | gstreamer1-plugins-bad-free: GStreamer: Stack buffer overflow in H.265 buffering period SEI parser | known affected: 15 | 2026-06-28T07:44:48+00:00 | Vulnerability · Source |
| CVE-2021-26401 | redhat_vex | hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715 | fixed: 391 known not affected: 111 | 2026-06-28T07:44:44+00:00 | Vulnerability · Source |
| CVE-2026-53471 | redhat_vex | migration-planner: Agent API Ignores JWT source_id Claim | known not affected: 1 | 2026-06-28T07:44:44+00:00 | Vulnerability · Source |
| CVE-2021-47582 | redhat_vex | kernel: USB: core: Make do_proc_control() and do_proc_bulk() killable | fixed: 150 known affected: 150 | 2026-06-28T07:44:44+00:00 | Vulnerability · Source |
| CVE-2023-52520 | redhat_vex | kernel: platform/x86: think-lmi: Fix reference leak | fixed: 709 known affected: 22 known not affected: 50 | 2026-06-28T07:44:44+00:00 | Vulnerability · Source |
| CVE-2026-53476 | redhat_vex | assisted-migration-agent: VDDK Tarball Chained-Symlink Arbitrary File Write | known not affected: 1 | 2026-06-28T07:44:44+00:00 | Vulnerability · Source |
| CVE-2026-53469 | redhat_vex | migration-planner: Unprotected DELETE Endpoint Wipes All Tenant Data | known not affected: 1 | 2026-06-28T07:44:44+00:00 | Vulnerability · Source |
| CVE-2026-53438 | redhat_vex | jenkins: Jenkins: Unauthorized cancellation of queue items due to missing permission check | known affected: 1 | 2026-06-28T07:44:42+00:00 | Vulnerability · Source |
| CVE-2026-53436 | redhat_vex | jenkins: Jenkins: Phishing attacks via improper redirect URL validation | known affected: 1 | 2026-06-28T07:44:41+00:00 | Vulnerability · Source |
| CVE-2026-53261 | redhat_vex | kernel: devlink: Release nested relation on devlink free | known affected: 184 known not affected: 90 | 2026-06-28T07:44:36+00:00 | Vulnerability · Source |
| CVE-2026-53171 | redhat_vex | kernel: accel/ethosu: fix arithmetic issues in dma_length() | known not affected: 274 | 2026-06-28T07:44:35+00:00 | Vulnerability · Source |
| CVE-2021-47579 | redhat_vex | kernel: ovl: fix warning in ovl_create_real() | fixed: 429 known affected: 50 known not affected: 14 | 2026-06-28T07:44:34+00:00 | Vulnerability · Source |
| CVE-2026-5315 | redhat_vex | Nothings stb: Nothings stb: Denial of Service via out-of-bounds read in TTF file handling | known not affected: 1 | 2026-06-28T07:44:34+00:00 | Vulnerability · Source |
| CVE-2026-5317 | redhat_vex | nothings stb: Nothings stb: Remote out-of-bounds write vulnerability | known not affected: 1 | 2026-06-28T07:44:34+00:00 | Vulnerability · Source |
| CVE-2023-52471 | redhat_vex | kernel: null pointer dereference issues in ice_ptp.c | fixed: 150 known affected: 42 known not affected: 108 | 2026-06-28T07:44:33+00:00 | Vulnerability · Source |
| CVE-2023-52492 | redhat_vex | kernel: dmaengine: fix NULL pointer in channel unregistration function | fixed: 709 known affected: 64 known not affected: 8 | 2026-06-28T07:44:33+00:00 | Vulnerability · Source |
| CVE-2023-52476 | redhat_vex | kernel: perf/x86/lbr: Filter vsyscall addresses | fixed: 429 known affected: 22 known not affected: 42 | 2026-06-28T07:44:33+00:00 | Vulnerability · Source |
| CVE-2023-52470 | redhat_vex | kernel: null-ptr-deref in alloc_workqueue | fixed: 429 known affected: 22 under investigation: 42 | 2026-06-28T07:44:32+00:00 | Vulnerability · Source |