VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294676 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-39304 | redhat_vex | Apache ActiveMQ Client: Apache ActiveMQ Broker: Apache ActiveMQ: Apache ActiveMQ: Denial of Service due to TLSv1.3 KeyUpdate memory exhaustion | known affected: 3 known not affected: 18 | 2026-06-28T07:32:17+00:00 | Vulnerability · Source |
| CVE-2026-3917 | redhat_vex | chromium-browser: Use after free in Agents | known not affected: 1 | 2026-06-28T07:32:16+00:00 | Vulnerability · Source |
| CVE-2026-3916 | redhat_vex | chromium-browser: Out of bounds read in Web Speech | known not affected: 1 | 2026-06-28T07:32:16+00:00 | Vulnerability · Source |
| CVE-2020-14314 | redhat_vex | kernel: buffer uses out of index in ext3/4 filesystem | fixed: 335 known affected: 32 | 2026-06-28T07:32:16+00:00 | Vulnerability · Source |
| CVE-2026-3918 | redhat_vex | chromium-browser: Use after free in WebMCP | known not affected: 1 | 2026-06-28T07:32:16+00:00 | Vulnerability · Source |
| CVE-2026-3915 | redhat_vex | chromium-browser: Heap buffer overflow in WebML | known not affected: 1 | 2026-06-28T07:32:16+00:00 | Vulnerability · Source |
| CVE-2026-38978 | redhat_vex | transmission: Transmission: Clickjacking weakness in WebUI and RPC response paths | known not affected: 1 | 2026-06-28T07:32:14+00:00 | Vulnerability · Source |
| CVE-2026-3902 | redhat_vex | Django: Django: Header spoofing via ambiguous header mapping | known affected: 11 | 2026-06-28T07:32:14+00:00 | Vulnerability · Source |
| CVE-2020-14301 | redhat_vex | libvirt: leak of sensitive cookie information via dumpxml | fixed: 1756 known affected: 62 known not affected: 40 | 2026-06-28T07:32:09+00:00 | Vulnerability · Source |
| CVE-2020-8277 | redhat_vex | c-ares: ares_parse_{a,aaaa}_reply() insufficient naddrttls validation DoS | fixed: 156 known not affected: 28 | 2026-06-28T07:32:07+00:00 | Vulnerability · Source |
| CVE-2020-13974 | redhat_vex | kernel: integer overflow in k_ascii() in drivers/tty/vt/keyboard.c | fixed: 150 known affected: 29 known not affected: 120 | 2026-06-28T07:32:05+00:00 | Vulnerability · Source |
| CVE-2020-13954 | redhat_vex | cxf: XSS via the styleSheetPath | fixed: 2 known affected: 15 | 2026-06-28T07:32:04+00:00 | Vulnerability · Source |
| CVE-2026-37540 | redhat_vex | OpenAMP: OpenAMP: Integer overflow in ELF loader can lead to arbitrary code execution or privilege escalation | known not affected: 1 | 2026-06-28T07:32:03+00:00 | Vulnerability · Source |
| CVE-2026-35512 | redhat_vex | xrdp: xrdp: Remote Code Execution via heap-based buffer overflow | known not affected: 1 | 2026-06-28T07:32:00+00:00 | Vulnerability · Source |
| CVE-2026-3650 | redhat_vex | gdcm: GDCM: Denial of Service via malformed DICOM files | known not affected: 1 | 2026-06-28T07:31:59+00:00 | Vulnerability · Source |
| CVE-2020-13844 | redhat_vex | kernel: ARM straight-line speculation vulnerability | known affected: 139 known not affected: 60 | 2026-06-28T07:31:59+00:00 | Vulnerability · Source |
| CVE-2020-13631 | redhat_vex | sqlite: Virtual table can be renamed into the name of one of its shadow tables | fixed: 204 known affected: 13 known not affected: 13 | 2026-06-28T07:31:59+00:00 | Vulnerability · Source |
| CVE-2020-13754 | redhat_vex | QEMU: msix: OOB access during mmio operations may lead to DoS | fixed: 1756 known affected: 37 known not affected: 40 | 2026-06-28T07:31:58+00:00 | Vulnerability · Source |
| CVE-2026-3635 | redhat_vex | fastify: request.protocol and request.host spoofable via X-Forwarded-Proto/Host from untrusted connections when trustProxy uses restrictive trust function | known affected: 9 | 2026-06-28T07:31:58+00:00 | Vulnerability · Source |
| CVE-2020-13659 | redhat_vex | QEMU: exec: address_space_map returns NULL without setting length to zero may lead to DoS | known affected: 53 known not affected: 40 | 2026-06-28T07:31:56+00:00 | Vulnerability · Source |
| CVE-2020-13632 | redhat_vex | sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query | fixed: 204 known affected: 7 known not affected: 19 | 2026-06-28T07:31:55+00:00 | Vulnerability · Source |
| CVE-2026-35587 | redhat_vex | glances: Glances: Server-Side Request Forgery allows unauthorized access and credential leakage via public_api parameter | known not affected: 1 | 2026-06-28T07:31:54+00:00 | Vulnerability · Source |
| CVE-2020-13434 | redhat_vex | sqlite: integer overflow in sqlite3_str_vappendf function in printf.c | fixed: 204 known affected: 7 known not affected: 19 | 2026-06-28T07:31:54+00:00 | Vulnerability · Source |
| CVE-2026-3590 | redhat_vex | mattermost: race condition in guest magic link authentication allows token reuse | known not affected: 1 | 2026-06-28T07:31:54+00:00 | Vulnerability · Source |
| CVE-2020-13379 | redhat_vex | grafana: SSRF incorrect access control vulnerability allows unauthenticated users to make grafana send HTTP requests to any URL | fixed: 258 known affected: 4 known not affected: 17 | 2026-06-28T07:31:53+00:00 | Vulnerability · Source |
| CVE-2026-35541 | redhat_vex | roundcubemail: Roundcube Webmail: Unauthorized password change due to type confusion vulnerability | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35543 | redhat_vex | roundcubemail: Roundcube Webmail: Information disclosure and access-control bypass via animated SVG in email | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35538 | redhat_vex | Roundcube Webmail: Roundcube Webmail: IMAP injection and CSRF bypass due to unsanitized search arguments | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35537 | redhat_vex | roundcubemail: Roundcube Webmail: Arbitrary file write via unsafe deserialization in session handler | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35539 | redhat_vex | roundcubemail: Roundcube Webmail: Cross-Site Scripting via HTML attachment preview | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35544 | redhat_vex | roundcubemail: Roundcube Webmail: Security mitigation bypass via insufficient CSS sanitization | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35542 | redhat_vex | roundcubemail: Roundcube Webmail: Information disclosure or access-control bypass via crafted email background attribute | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35545 | redhat_vex | roundcubemail: Roundcube Webmail: Information disclosure and access-control bypass via SVG content in email. | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35444 | redhat_vex | SDL_image: SDL_image: Information disclosure via crafted XCF files | known not affected: 1 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2026-35515 | redhat_vex | @nestjs/core: Nest: Server-Sent Events (SSE) injection and spoofing via unsanitized newline characters | known affected: 2 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2026-3544 | redhat_vex | chromium-browser: Heap buffer overflow in WebCodecs | known not affected: 1 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2026-3545 | redhat_vex | chromium-browser: Insufficient data validation in Navigation | known not affected: 1 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2020-12829 | redhat_vex | qemu: OOB read and write due to integer overflow in sm501_2d_operation() in hw/display/sm501.c | known not affected: 70 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2020-12826 | redhat_vex | kernel: possible to send arbitrary signals to a privileged (suidroot) parent process | fixed: 354 known affected: 43 | 2026-06-28T07:31:50+00:00 | Vulnerability · Source |
| CVE-2020-12769 | redhat_vex | kernel: DoS via concurrent calls to dw_spi_irq and dw_spi_transfer_one functions in drivers/spi/spi-dw.c | known affected: 32 known not affected: 72 | 2026-06-28T07:31:48+00:00 | Vulnerability · Source |
| CVE-2026-3540 | redhat_vex | chromium-browser: Inappropriate implementation in WebAudio | known not affected: 1 | 2026-06-28T07:31:48+00:00 | Vulnerability · Source |
| CVE-2020-12771 | redhat_vex | kernel: deadlock if a coalescing operation fails in btree_gc_coalesce function in drivers/md/bcache/btree.c | known not affected: 104 | 2026-06-28T07:31:48+00:00 | Vulnerability · Source |
| CVE-2020-12768 | redhat_vex | kernel: memory leak in svm_cpu_init function in arch/x86/kvm/svm.c | known affected: 48 known not affected: 56 | 2026-06-28T07:31:48+00:00 | Vulnerability · Source |
| CVE-2026-35381 | redhat_vex | rust-coreutils: cut: local logic error and data integrity issue in output filtering | known not affected: 1 | 2026-06-28T07:31:45+00:00 | Vulnerability · Source |
| CVE-2026-35346 | redhat_vex | rust-coreutils: comm: silent data corruption via lossy UTF-8 normalization | known not affected: 1 | 2026-06-28T07:31:45+00:00 | Vulnerability · Source |
| CVE-2023-22111 | redhat_vex | mysql: Server: UDF unspecified vulnerability (CPU Oct 2023) | fixed: 206 known not affected: 93 | 2026-06-28T07:31:44+00:00 | Vulnerability · Source |
| CVE-2026-35380 | redhat_vex | rust-coreutils: cut: local logic error and data integrity issue in delimiter parsing | known not affected: 1 | 2026-06-28T07:31:44+00:00 | Vulnerability · Source |
| CVE-2020-12659 | redhat_vex | kernel: xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write which could result in crash and data coruption | fixed: 150 known not affected: 56 | 2026-06-28T07:31:44+00:00 | Vulnerability · Source |
| CVE-2020-12657 | redhat_vex | kernel: use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body | fixed: 364 known not affected: 56 | 2026-06-28T07:31:44+00:00 | Vulnerability · Source |
| CVE-2020-12655 | redhat_vex | kernel: sync of excessive duration via an XFS v5 image with crafted metadata | fixed: 176 known affected: 55 | 2026-06-28T07:31:43+00:00 | Vulnerability · Source |