VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294458 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-7608 | redhat_vex | nodejs-yargs-parser: prototype pollution vulnerability | fixed: 160 known not affected: 27 | 2026-06-28T07:39:54+00:00 | Vulnerability · Source |
| CVE-2021-47441 | redhat_vex | kernel: mlxsw: thermal: Fix out-of-bounds memory accesses | fixed: 351 known affected: 64 | 2026-06-28T07:39:54+00:00 | Vulnerability · Source |
| CVE-2020-7595 | redhat_vex | libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations | fixed: 225 known affected: 6 | 2026-06-28T07:39:53+00:00 | Vulnerability · Source |
| CVE-2026-45867 | redhat_vex | kernel: power: supply: act8945a: Fix use-after-free in power_supply_changed() | known not affected: 274 | 2026-06-28T07:39:51+00:00 | Vulnerability · Source |
| CVE-2026-45874 | redhat_vex | kernel: phy: freescale: imx8qm-hsio: fix NULL pointer dereference | known not affected: 274 | 2026-06-28T07:39:51+00:00 | Vulnerability · Source |
| CVE-2020-7071 | redhat_vex | php: FILTER_VALIDATE_URL accepts URLs with invalid userinfo | fixed: 514 known affected: 148 known not affected: 26 | 2026-06-28T07:39:50+00:00 | Vulnerability · Source |
| CVE-2026-45866 | redhat_vex | kernel: serial: caif: fix use-after-free in caif_serial ldisc_close() | known not affected: 274 | 2026-06-28T07:39:50+00:00 | Vulnerability · Source |
| CVE-2026-45864 | redhat_vex | kernel: fs/ntfs3: prevent infinite loops caused by the next valid being the same | known not affected: 274 | 2026-06-28T07:39:49+00:00 | Vulnerability · Source |
| CVE-2020-7068 | redhat_vex | php: Use of freed hash key in the phar_parse_zipfile function | fixed: 514 known affected: 180 | 2026-06-28T07:39:49+00:00 | Vulnerability · Source |
| CVE-2026-45854 | redhat_vex | kernel: crypto: inside-secure/eip93 - unregister only available algorithm | known not affected: 274 | 2026-06-28T07:39:49+00:00 | Vulnerability · Source |
| CVE-2020-7070 | redhat_vex | php: URL decoding of cookie names can lead to different interpretation of cookies between browser and server | fixed: 514 known affected: 180 | 2026-06-28T07:39:49+00:00 | Vulnerability · Source |
| CVE-2026-45865 | redhat_vex | kernel: mctp i2c: initialise event handler read bytes | known not affected: 274 | 2026-06-28T07:39:49+00:00 | Vulnerability · Source |
| CVE-2020-7066 | redhat_vex | php: Information disclosure in function get_headers | fixed: 605 known affected: 77 known not affected: 56 | 2026-06-28T07:39:48+00:00 | Vulnerability · Source |
| CVE-2020-7065 | redhat_vex | php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution | fixed: 605 known not affected: 133 | 2026-06-28T07:39:47+00:00 | Vulnerability · Source |
| CVE-2020-7059 | redhat_vex | php: Out of bounds read in php_strip_tags_ex | fixed: 605 known affected: 133 | 2026-06-28T07:39:45+00:00 | Vulnerability · Source |
| CVE-2020-7039 | redhat_vex | QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() | fixed: 2401 known affected: 23 known not affected: 47 | 2026-06-28T07:39:44+00:00 | Vulnerability · Source |
| CVE-2026-45858 | redhat_vex | kernel: ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 | known not affected: 1 | 2026-06-28T07:39:44+00:00 | Vulnerability · Source |
| CVE-2026-45848 | redhat_vex | kernel: apparmor: fix NULL sock in aa_sock_file_perm | known not affected: 274 | 2026-06-28T07:39:43+00:00 | Vulnerability · Source |
| CVE-2026-45844 | redhat_vex | kernel: netfilter: arp_tables: fix IEEE1394 ARP payload parsing | known affected: 274 | 2026-06-28T07:39:42+00:00 | Vulnerability · Source |
| CVE-2026-45810 | redhat_vex | nextcloud-server: Nextcloud Server: Information disclosure via missing relation check in file comments | known not affected: 1 | 2026-06-28T07:39:42+00:00 | Vulnerability · Source |
| CVE-2026-45840 | redhat_vex | kernel: openvswitch: cap upcall PID array size and pre-size vport replies | known affected: 274 | 2026-06-28T07:39:41+00:00 | Vulnerability · Source |
| CVE-2026-45835 | redhat_vex | kernel: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() | known affected: 260 known not affected: 14 | 2026-06-28T07:39:40+00:00 | Vulnerability · Source |
| CVE-2020-6831 | redhat_vex | usrsctp: Buffer overflow in AUTH chunk input validation | fixed: 152 known affected: 2 | 2026-06-28T07:39:40+00:00 | Vulnerability · Source |
| CVE-2026-45729 | redhat_vex | thorvg: ThorVG: Denial of Service via untrusted SVG data processing | known not affected: 1 | 2026-06-28T07:39:38+00:00 | Vulnerability · Source |
| CVE-2026-45702 | redhat_vex | optee-os: OP-TEE OS: Denial of Service via type confusion in FFA_MEM_SHARE request processing | known not affected: 1 | 2026-06-28T07:39:37+00:00 | Vulnerability · Source |
| CVE-2026-4539 | redhat_vex | pygments: Pygments: Denial of Service via inefficient regular expression processing in AdlLexer | known affected: 89 known not affected: 31 | 2026-06-28T07:39:37+00:00 | Vulnerability · Source |
| CVE-2026-45614 | redhat_vex | optee_os: OP-TEE: Private key reconstruction due to unverified public keys in ECDH | known not affected: 1 | 2026-06-28T07:39:36+00:00 | Vulnerability · Source |
| CVE-2026-45690 | redhat_vex | nextcloud-server: Nextcloud Server: Authentication bypass allows unauthorized access by circumventing two-factor authentication. | known not affected: 1 | 2026-06-28T07:39:36+00:00 | Vulnerability · Source |
| CVE-2026-45691 | redhat_vex | nextcloud-server: Nextcloud Server: Two-factor authentication bypass via session cookie reuse | known not affected: 1 | 2026-06-28T07:39:36+00:00 | Vulnerability · Source |
| CVE-2021-47284 | redhat_vex | kernel: isdn: mISDN: netjet: Fix crash in nj_probe | fixed: 150 known affected: 42 known not affected: 108 | 2026-06-28T07:39:35+00:00 | Vulnerability · Source |
| CVE-2026-4538 | redhat_vex | pytorch: PyTorch: Deserialization vulnerability in pt2 Loading Handler allows local impact | known not affected: 18 | 2026-06-28T07:39:33+00:00 | Vulnerability · Source |
| CVE-2023-4135 | redhat_vex | QEMU: NVMe: out-of-bounds read information disclosure vulnerability | known not affected: 77 | 2026-06-28T07:39:32+00:00 | Vulnerability · Source |
| CVE-2026-45281 | redhat_vex | nextcloud-server: Nextcloud Server: Authenticated users can gain full calendar access due to improper authorization. | known not affected: 1 | 2026-06-28T07:39:32+00:00 | Vulnerability · Source |
| CVE-2021-47236 | redhat_vex | kernel: net: cdc_eem: fix tx fixup skb leak | fixed: 150 known affected: 42 known not affected: 116 | 2026-06-28T07:39:32+00:00 | Vulnerability · Source |
| CVE-2024-50102 | redhat_vex | kernel: x86: fix user address masking non-canonical speculation issue | fixed: 583 known affected: 64 known not affected: 49 | 2026-06-28T07:39:32+00:00 | Vulnerability · Source |
| CVE-2026-45285 | redhat_vex | nextcloud: Nextcloud: Unauthorized data access and modification via unlisted public links | known not affected: 1 | 2026-06-28T07:39:32+00:00 | Vulnerability · Source |
| CVE-2026-45279 | redhat_vex | nextcloud-server: Nextcloud Server: Path traversal vulnerability allows unauthorized file copying | known not affected: 1 | 2026-06-28T07:39:32+00:00 | Vulnerability · Source |
| CVE-2020-6561 | redhat_vex | chromium-browser: Inappropriate implementation in Content Security Policy | fixed: 14 | 2026-06-28T07:39:31+00:00 | Vulnerability · Source |
| CVE-2020-6576 | redhat_vex | chromium-browser: Use after free in offscreen canvas | fixed: 14 | 2026-06-28T07:39:31+00:00 | Vulnerability · Source |
| CVE-2020-6575 | redhat_vex | chromium-browser: Race in Mojo | fixed: 14 | 2026-06-28T07:39:31+00:00 | Vulnerability · Source |
| CVE-2026-45191 | redhat_vex | perl-Net-CIDR-Lite: Net::CIDR::Lite: IP ACL bypass due to improper CIDR mask validation | known affected: 1 | 2026-06-28T07:39:31+00:00 | Vulnerability · Source |
| CVE-2026-45185 | redhat_vex | exim: Exim: Arbitrary code execution via use-after-free in BDAT body parsing. | known not affected: 1 | 2026-06-28T07:39:31+00:00 | Vulnerability · Source |
| CVE-2020-6571 | redhat_vex | chromium-browser: Incorrect security UI in Omnibox | fixed: 14 | 2026-06-28T07:39:30+00:00 | Vulnerability · Source |
| CVE-2020-6573 | redhat_vex | chromium-browser: Use after free in video | fixed: 14 | 2026-06-28T07:39:30+00:00 | Vulnerability · Source |
| CVE-2020-6574 | redhat_vex | chromium-browser: Insufficient policy enforcement in installer | fixed: 14 | 2026-06-28T07:39:30+00:00 | Vulnerability · Source |
| CVE-2026-45157 | redhat_vex | nextcloud-server: Nextcloud Server: Information disclosure via file share token | known not affected: 1 | 2026-06-28T07:39:29+00:00 | Vulnerability · Source |
| CVE-2026-45184 | redhat_vex | Kdenlive: Kdenlive: Arbitrary code execution via malicious project file | known not affected: 1 | 2026-06-28T07:39:29+00:00 | Vulnerability · Source |
| CVE-2021-47185 | redhat_vex | kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc | fixed: 709 known affected: 50 known not affected: 22 | 2026-06-28T07:39:29+00:00 | Vulnerability · Source |
| CVE-2020-6570 | redhat_vex | chromium-browser: Side-channel information leakage in WebRTC | fixed: 14 | 2026-06-28T07:39:29+00:00 | Vulnerability · Source |
| CVE-2020-6567 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in command line handling | fixed: 14 | 2026-06-28T07:39:29+00:00 | Vulnerability · Source |