VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294556 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-43004 | redhat_vex | kernel: spi: stm32-ospi: Fix resource leak in remove() callback | known not affected: 274 | 2026-06-28T07:34:33+00:00 | Vulnerability · Source |
| CVE-2026-42996 | redhat_vex | JS8Call: JS8Call-improved: JS8Call: Arbitrary code execution via stack-based buffer overflow from malicious radio transmission | known not affected: 1 | 2026-06-28T07:34:32+00:00 | Vulnerability · Source |
| CVE-2026-42859 | redhat_vex | neatvnc: neatvnc: Denial of Service via pre-authentication stack buffer overflow | known not affected: 1 | 2026-06-28T07:34:30+00:00 | Vulnerability · Source |
| CVE-2023-30456 | redhat_vex | kernel: KVM: nVMX: missing consistency checks for CR0 and CR4 | fixed: 666 known affected: 64 | 2026-06-28T07:34:28+00:00 | Vulnerability · Source |
| CVE-2020-25637 | redhat_vex | libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c | fixed: 2012 known affected: 93 known not affected: 41 | 2026-06-28T07:34:27+00:00 | Vulnerability · Source |
| CVE-2026-4292 | redhat_vex | Django: Django: Unauthorized instance creation via forged POST data in Admin changelist forms | known affected: 11 | 2026-06-28T07:34:26+00:00 | Vulnerability · Source |
| CVE-2026-42850 | redhat_vex | kitty: Kitty: Arbitrary code execution via command injection through unescaped error | known not affected: 1 | 2026-06-28T07:34:26+00:00 | Vulnerability · Source |
| CVE-2020-25625 | redhat_vex | QEMU: usb: hcd-ohci: infinite loop issue while processing transfer descriptors | known affected: 5 known not affected: 79 | 2026-06-28T07:34:24+00:00 | Vulnerability · Source |
| CVE-2026-42786 | redhat_vex | bandit: Bandit: Denial of Service via uncontrolled memory growth in WebSocket connections | known not affected: 1 | 2026-06-28T07:34:24+00:00 | Vulnerability · Source |
| CVE-2026-42788 | redhat_vex | bandit: Bandit: Denial of Service via oversized HTTP/2 frames | known not affected: 1 | 2026-06-28T07:34:24+00:00 | Vulnerability · Source |
| CVE-2020-25624 | redhat_vex | QEMU: usb: hcd-ohci: out-of-bound access issue while processing transfer descriptors | known affected: 5 known not affected: 79 | 2026-06-28T07:34:24+00:00 | Vulnerability · Source |
| CVE-2023-22103 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023) | fixed: 206 known not affected: 93 | 2026-06-28T07:34:21+00:00 | Vulnerability · Source |
| CVE-2026-42559 | redhat_vex | rmcp: rmcp: Unauthorized access to MCP server via DNS rebinding vulnerability | known not affected: 1 | 2026-06-28T07:34:20+00:00 | Vulnerability · Source |
| CVE-2020-25285 | redhat_vex | kernel: race condition between hugetlb sysctl handlers in mm/hugetlb.c | fixed: 150 known affected: 56 | 2026-06-28T07:34:19+00:00 | Vulnerability · Source |
| CVE-2020-25212 | redhat_vex | kernel: TOCTOU mismatch in the NFS client code | fixed: 685 known affected: 16 known not affected: 9 | 2026-06-28T07:34:18+00:00 | Vulnerability · Source |
| CVE-2026-42519 | redhat_vex | Jenkins Script Security Plugin: Jenkins Script Security Plugin: Information disclosure via missing permission check | known affected: 6 | 2026-06-28T07:34:18+00:00 | Vulnerability · Source |
| CVE-2023-22005 | redhat_vex | mysql: Server: Replication unspecified vulnerability (CPU Jul 2023) | fixed: 206 known not affected: 93 | 2026-06-28T07:34:18+00:00 | Vulnerability · Source |
| CVE-2023-21913 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) | fixed: 206 known not affected: 123 | 2026-06-28T07:34:18+00:00 | Vulnerability · Source |
| CVE-2020-25085 | redhat_vex | QEMU: sdhci: out-of-bounds access issue while doing multi block SDMA | known not affected: 94 | 2026-06-28T07:34:17+00:00 | Vulnerability · Source |
| CVE-2026-42483 | redhat_vex | hashcat: heap-based buffer overflow in Kerberos hash parsers | known not affected: 1 | 2026-06-28T07:34:17+00:00 | Vulnerability · Source |
| CVE-2026-42482 | redhat_vex | hashcat: stack-based buffer overflow in rule engine | known not affected: 1 | 2026-06-28T07:34:17+00:00 | Vulnerability · Source |
| CVE-2026-42396 | redhat_vex | pdns: PowerDNS: Denial of Service due to insufficient validation of member zone data during catalog zone transfer. | known not affected: 1 | 2026-06-28T07:34:16+00:00 | Vulnerability · Source |
| CVE-2026-42326 | redhat_vex | ImageMagick: ImageMagick: Information disclosure via malicious IPTC input file | known affected: 14 | 2026-06-28T07:34:16+00:00 | Vulnerability · Source |
| CVE-2026-42295 | redhat_vex | github.com/argoproj/argo-workflows: Argo Workflows: Information disclosure via plaintext logging of artifact repository credentials | known affected: 14 | 2026-06-28T07:34:15+00:00 | Vulnerability · Source |
| CVE-2026-42217 | redhat_vex | OpenEXR: OpenEXR: Information disclosure via malformed EXR image file processing | known affected: 18 | 2026-06-28T07:34:13+00:00 | Vulnerability · Source |
| CVE-2026-42281 | redhat_vex | magicmirror: MagicMirror²: Server-Side Request Forgery leading to information disclosure | known not affected: 1 | 2026-06-28T07:34:12+00:00 | Vulnerability · Source |
| CVE-2021-28951 | redhat_vex | kernel: DoS because of deadlock in fs/io_uring.c | known not affected: 197 | 2026-06-28T07:34:11+00:00 | Vulnerability · Source |
| CVE-2020-24586 | redhat_vex | kernel: Fragmentation cache not cleared on reconnection | fixed: 150 known affected: 44 known not affected: 106 | 2026-06-28T07:34:08+00:00 | Vulnerability · Source |
| CVE-2020-7754 | redhat_vex | nodejs-npm-user-validate: improper input validation when validating user emails leads to ReDoS | fixed: 242 known affected: 4 | 2026-06-28T07:34:08+00:00 | Vulnerability · Source |
| CVE-2026-42030 | redhat_vex | MapServer: OpenLayers: MapServer: Reflected Cross-Site Scripting (XSS) via unsanitized WMS parameter | known not affected: 1 | 2026-06-28T07:34:06+00:00 | Vulnerability · Source |
| CVE-2026-42146 | redhat_vex | CImg: CImg Library: Denial of Service via crafted BMP file | known not affected: 1 | 2026-06-28T07:34:06+00:00 | Vulnerability · Source |
| CVE-2020-24504 | redhat_vex | kernel: Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers | fixed: 150 known affected: 28 known not affected: 121 | 2026-06-28T07:34:05+00:00 | Vulnerability · Source |
| CVE-2020-24502 | redhat_vex | kernel: Improper input validation in some Intel(R) Ethernet E810 Adapter drivers | fixed: 150 known affected: 28 known not affected: 121 | 2026-06-28T07:34:04+00:00 | Vulnerability · Source |
| CVE-2026-42046 | redhat_vex | libcaca: libcaca: Remote Code Execution via crafted "caca" format file | known not affected: 1 | 2026-06-28T07:34:04+00:00 | Vulnerability · Source |
| CVE-2020-24503 | redhat_vex | kernel: Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers | fixed: 150 known affected: 28 known not affected: 121 | 2026-06-28T07:34:04+00:00 | Vulnerability · Source |
| CVE-2026-42027 | redhat_vex | Apache OpenNLP: Apache OpenNLP: Arbitrary Class Loading via Model Manifest | known affected: 3 known not affected: 5 | 2026-06-28T07:34:02+00:00 | Vulnerability · Source |
| CVE-2023-28755 | redhat_vex | ruby: ReDoS vulnerability in URI | fixed: 822 known affected: 95 | 2026-06-28T07:34:00+00:00 | Vulnerability · Source |
| CVE-2026-41888 | redhat_vex | github.com/distribution/distribution: Distribution: Security bypass allows unauthorized tag deletion | known affected: 6 | 2026-06-28T07:34:00+00:00 | Vulnerability · Source |
| CVE-2026-42000 | redhat_vex | pdns: PowerDNS: DNS record manipulation due to insufficient AXFR name validation | known not affected: 1 | 2026-06-28T07:33:59+00:00 | Vulnerability · Source |
| CVE-2026-42002 | redhat_vex | pdns-recursor: pdns-recursor: Denial of service via GSS-TSIG concurrency and locking defects | known not affected: 1 | 2026-06-28T07:33:59+00:00 | Vulnerability · Source |
| CVE-2026-4174 | redhat_vex | Radare2: Radare2: Local resource consumption via Mach-O File Parser | known not affected: 1 | 2026-06-28T07:33:59+00:00 | Vulnerability · Source |
| CVE-2020-22083 | redhat_vex | python-jsonpickle: deserialization of a malicious payload in the decode function can lead to RCE | known not affected: 2 | 2026-06-28T07:33:58+00:00 | Vulnerability · Source |
| CVE-2026-41681 | redhat_vex | rust-openssl: rust-openssl: Memory corruption due to buffer overflow in EVP_DigestFinal() | known not affected: 1 | 2026-06-28T07:33:58+00:00 | Vulnerability · Source |
| CVE-2026-41678 | redhat_vex | rust-openssl: rust-openssl: Arbitrary code execution via incorrect buffer validation in aes::unwrap_key() | known not affected: 1 | 2026-06-28T07:33:57+00:00 | Vulnerability · Source |
| CVE-2026-41564 | redhat_vex | perl-cryptx: CryptX: Private key recovery due to predictable pseudo-random number generation after forking | known not affected: 1 | 2026-06-28T07:33:53+00:00 | Vulnerability · Source |
| CVE-2026-41565 | redhat_vex | perl-CryptX: perl-CryptX: Stack buffer overflow allows arbitrary code execution via a crafted authentication tag. | known not affected: 1 | 2026-06-28T07:33:53+00:00 | Vulnerability · Source |
| CVE-2026-41476 | redhat_vex | deskflow: Deskflow: Information disclosure via malformed clipboard update | known not affected: 1 | 2026-06-28T07:33:52+00:00 | Vulnerability · Source |
| CVE-2026-41493 | redhat_vex | yard: YARD: Information Disclosure via Path Traversal in yard server | known affected: 3 known not affected: 7 | 2026-06-28T07:33:52+00:00 | Vulnerability · Source |
| CVE-2026-41525 | redhat_vex | dolphin: KDE Dolphin: Sandbox bypass allows potential arbitrary code execution via FileManager1 protocol | known not affected: 1 | 2026-06-28T07:33:52+00:00 | Vulnerability · Source |
| CVE-2026-41526 | redhat_vex | kcoreaddons: KDE KCoreAddons: Arbitrary code execution via improper shell argument quoting | known not affected: 1 | 2026-06-28T07:33:52+00:00 | Vulnerability · Source |