VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294552 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-6379 | redhat_vex | chromium-browser: use-after-free in speech recognizer | fixed: 14 | 2026-06-28T07:38:56+00:00 | Vulnerability · Source |
| CVE-2026-44699 | redhat_vex | libjwt: libjwt: Authentication bypass via algorithm confusion in JWT verification | known not affected: 1 | 2026-06-28T07:38:55+00:00 | Vulnerability · Source |
| CVE-2026-44742 | redhat_vex | Postorius: Postorius: Cross-Site Scripting via unescaped HTML in message subject | known not affected: 1 | 2026-06-28T07:38:55+00:00 | Vulnerability · Source |
| CVE-2026-4454 | redhat_vex | chromium-browser: Use after free in Network | known not affected: 1 | 2026-06-28T07:38:54+00:00 | Vulnerability · Source |
| CVE-2020-5313 | redhat_vex | python-pillow: out-of-bounds read in ImagingFliDecode when loading FLI images | fixed: 109 known affected: 6 | 2026-06-28T07:38:54+00:00 | Vulnerability · Source |
| CVE-2026-44664 | redhat_vex | fast-xml-builder: fast-xml-builder: Arbitrary XML/HTML injection via insufficient sanitization of XML comments | known affected: 1 known not affected: 5 | 2026-06-28T07:38:54+00:00 | Vulnerability · Source |
| CVE-2020-5236 | redhat_vex | waitress: header with invalid characters can lead to DoS | known affected: 4 known not affected: 7 | 2026-06-28T07:38:53+00:00 | Vulnerability · Source |
| CVE-2020-5310 | redhat_vex | python-pillow: Integer overflow leading to buffer overflow in ImagingLibTiffDecode | fixed: 11 known not affected: 18 | 2026-06-28T07:38:53+00:00 | Vulnerability · Source |
| CVE-2020-5312 | redhat_vex | python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c | fixed: 176 known affected: 1 | 2026-06-28T07:38:53+00:00 | Vulnerability · Source |
| CVE-2026-44638 | redhat_vex | libsixel: libsixel: Denial of Service due to NULL pointer dereference during memory allocation | known not affected: 1 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2026-44515 | redhat_vex | Nextcloud News: Nextcloud News: Blind Server-Side Request Forgery (SSRF) via crafted feed URLs | known not affected: 1 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2026-44636 | redhat_vex | libsixel: integer overflow in encoder | known not affected: 1 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2026-4461 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | known not affected: 1 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2026-44602 | redhat_vex | Tor: Tor: Denial of service via out-of-order CERT cell | known not affected: 1 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2020-5260 | redhat_vex | git: Crafted URL containing new lines can cause credential leak | fixed: 421 known not affected: 13 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2026-4464 | redhat_vex | chromium-browser: Integer overflow in ANGLE | known not affected: 1 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2026-4463 | redhat_vex | chromium-browser: Heap buffer overflow in WebRTC | known not affected: 1 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2026-44637 | redhat_vex | libsixel: libsixel: Arbitrary code execution or denial of service due to signed integer overflow | known not affected: 1 | 2026-06-28T07:38:52+00:00 | Vulnerability · Source |
| CVE-2026-44600 | redhat_vex | Tor: Tor: Denial of Service due to mishandling of conflux out-of-order queue accounting | known not affected: 1 | 2026-06-28T07:38:51+00:00 | Vulnerability · Source |
| CVE-2021-45417 | redhat_vex | aide: heap-based buffer overflow on outputs larger than B64_BUF | fixed: 74 known not affected: 20 | 2026-06-28T07:38:51+00:00 | Vulnerability · Source |
| CVE-2026-44601 | redhat_vex | Tor: Tor: Client crash due to double close of a circuit | known not affected: 1 | 2026-06-28T07:38:51+00:00 | Vulnerability · Source |
| CVE-2026-4455 | redhat_vex | chromium-browser: Heap buffer overflow in PDFium | known not affected: 1 | 2026-06-28T07:38:49+00:00 | Vulnerability · Source |
| CVE-2026-4457 | redhat_vex | chromium-browser: Type Confusion in V8 | known not affected: 1 | 2026-06-28T07:38:49+00:00 | Vulnerability · Source |
| CVE-2026-4451 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Navigation | known not affected: 1 | 2026-06-28T07:38:49+00:00 | Vulnerability · Source |
| CVE-2026-4450 | redhat_vex | chromium-browser: Out of bounds write in V8 | known not affected: 1 | 2026-06-28T07:38:48+00:00 | Vulnerability · Source |
| CVE-2020-3757 | redhat_vex | flash-plugin: Arbitrary Code Execution vulnerability (APSB20-06) | fixed: 3 | 2026-06-28T07:38:48+00:00 | Vulnerability · Source |
| CVE-2026-4448 | redhat_vex | chromium-browser: Heap buffer overflow in ANGLE | known not affected: 1 | 2026-06-28T07:38:48+00:00 | Vulnerability · Source |
| CVE-2026-4449 | redhat_vex | chromium-browser: Use after free in Blink | known not affected: 1 | 2026-06-28T07:38:48+00:00 | Vulnerability · Source |
| CVE-2026-4444 | redhat_vex | chromium-browser: Stack buffer overflow in WebRTC | known not affected: 1 | 2026-06-28T07:38:47+00:00 | Vulnerability · Source |
| CVE-2026-4447 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | known not affected: 1 | 2026-06-28T07:38:47+00:00 | Vulnerability · Source |
| CVE-2026-4445 | redhat_vex | WebRTC: Google Chrome: Chromium: WebRTC in Google Chrome: Heap corruption via crafted HTML page | known not affected: 1 | 2026-06-28T07:38:47+00:00 | Vulnerability · Source |
| CVE-2026-4442 | redhat_vex | chromium-browser: Heap buffer overflow in CSS | known not affected: 1 | 2026-06-28T07:38:46+00:00 | Vulnerability · Source |
| CVE-2026-4441 | redhat_vex | chromium-browser: Use after free in Base | known not affected: 1 | 2026-06-28T07:38:46+00:00 | Vulnerability · Source |
| CVE-2026-4443 | redhat_vex | chromium-browser: Heap buffer overflow in WebAudio | known not affected: 1 | 2026-06-28T07:38:46+00:00 | Vulnerability · Source |
| CVE-2026-4440 | redhat_vex | chromium-browser: Out of bounds read and write in WebGL | known not affected: 1 | 2026-06-28T07:38:43+00:00 | Vulnerability · Source |
| CVE-2020-36558 | redhat_vex | kernel: race condition in VT_RESIZEX ioctl when vc_cons[i].d is already NULL leading to NULL pointer dereference | fixed: 464 known affected: 108 known not affected: 14 | 2026-06-28T07:38:42+00:00 | Vulnerability · Source |
| CVE-2026-44378 | redhat_vex | botan: Botan: Denial of Service via malformed BER data parsing | known not affected: 1 | 2026-06-28T07:38:41+00:00 | Vulnerability · Source |
| CVE-2026-44374 | redhat_vex | Backstage: @backstage/plugin-catalog-backend-module-unprocessed: @backstage/plugin-catalog-unprocessed-entities-common: @backstage/plugin-catalog-unprocessed-entities: Backstage: Information disclosure due to missing authorization checks | known not affected: 1 | 2026-06-28T07:38:40+00:00 | Vulnerability · Source |
| CVE-2026-44310 | redhat_vex | github.com/sigstore/gitsign: Gitsign: Security bypass in commit verification | known affected: 1 | 2026-06-28T07:38:38+00:00 | Vulnerability · Source |
| CVE-2020-36322 | redhat_vex | kernel: fuse: fuse_do_getattr() calls make_bad_inode() in inappropriate situations | fixed: 459 known affected: 46 known not affected: 116 | 2026-06-28T07:38:37+00:00 | Vulnerability · Source |
| CVE-2026-44296 | redhat_vex | deskflow: TLS multiplexer DoS on failed SSL_accept | known not affected: 1 | 2026-06-28T07:38:37+00:00 | Vulnerability · Source |
| CVE-2020-36313 | redhat_vex | kernel: KVM subsystem allows out-of-range access to memslots after a deletion | known not affected: 198 | 2026-06-28T07:38:36+00:00 | Vulnerability · Source |
| CVE-2020-36312 | redhat_vex | kernel: memory leak upon a kmalloc failure in kvm_io_bus_unregister_dev function in virt/kvm/kvm_main.c | fixed: 150 known affected: 1 known not affected: 148 | 2026-06-28T07:38:36+00:00 | Vulnerability · Source |
| CVE-2023-40217 | redhat_vex | python: TLS handshake bypass | fixed: 3265 known not affected: 66 | 2026-06-28T07:38:36+00:00 | Vulnerability · Source |
| CVE-2026-4428 | redhat_vex | AWS-LC: AWS-LC: Security bypass allows revoked certificates to be accepted due to CRL validation error | known affected: 16 | 2026-06-28T07:38:36+00:00 | Vulnerability · Source |
| CVE-2026-44076 | redhat_vex | netatalk: Netatalk: Arbitrary Code Execution via shell injection in volume path | known not affected: 1 | 2026-06-28T07:38:30+00:00 | Vulnerability · Source |
| CVE-2026-44075 | redhat_vex | netatalk: Netatalk: Minor service disruption via crafted DSI session options | known not affected: 1 | 2026-06-28T07:38:30+00:00 | Vulnerability · Source |
| CVE-2026-44074 | redhat_vex | netatalk: Netatalk: Service disruption due to incorrect error handling | known not affected: 1 | 2026-06-28T07:38:30+00:00 | Vulnerability · Source |
| CVE-2024-35794 | redhat_vex | kernel: dm-raid: really frozen sync_thread during suspend | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T07:38:30+00:00 | Vulnerability · Source |
| CVE-2026-44068 | redhat_vex | netatalk: Netatalk: Arbitrary file access via path traversal | known not affected: 1 | 2026-06-28T07:38:29+00:00 | Vulnerability · Source |