VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
303560 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-97962 | redhat_vex | kernel: net/mlx5e: Move representor vnic reporter to eswitch devlink port | known affected: 245 known not affected: 31 | 2026-09-30T03:59:10+00:00 | Vulnerability · Source |
| CVE-2026-67406 | redhat_vex | rabbitmq-server: rabbitmq-server: Information disclosure via unredacted credentials in Shovel crash logs | fixed: 3 known not affected: 8 | 2026-09-30T03:59:08+00:00 | Vulnerability · Source |
| CVE-2026-103049 | redhat_vex | mediawiki/cargo: mediawiki/cargo: Reflected cross-site scripting via unsanitized table headers | known not affected: 1 | 2026-09-30T03:59:05+00:00 | Vulnerability · Source |
| CVE-2026-103047 | redhat_vex | CentralAuth: MediaWiki: CentralAuth: Stored Cross-Site Scripting via internationalization messages | known not affected: 1 | 2026-09-30T03:59:05+00:00 | Vulnerability · Source |
| CVE-2026-97961 | redhat_vex | kernel: perf/core: Allow list_del during perf_event_overflow() | known affected: 197 known not affected: 79 | 2026-09-30T03:56:24+00:00 | Vulnerability · Source |
| CVE-2022-41723 | redhat_vex | golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding | fixed: 1556 known affected: 287 known not affected: 11951 | 2026-09-30T03:51:16+00:00 | Vulnerability · Source |
| CVE-2026-97960 | redhat_vex | kernel: perf/x86/intel: Prevent drain_pebs() reentry | known affected: 183 known not affected: 93 | 2026-09-30T03:38:49+00:00 | Vulnerability · Source |
| CVE-2026-97958 | redhat_vex | kernel: net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain() | known affected: 248 known not affected: 28 | 2026-09-30T03:21:30+00:00 | Vulnerability · Source |
| CVE-2026-97957 | redhat_vex | kernel: net: hinic: fix mailbox segment buffer overflow | known affected: 185 known not affected: 91 | 2026-09-30T03:13:51+00:00 | Vulnerability · Source |
| CVE-2026-71974 | redhat_vex | uboot-tools: U-Boot: Out-of-bounds write via Android boot partition read | known not affected: 1 | 2026-09-30T03:10:04+00:00 | Vulnerability · Source |
| CVE-2026-102804 | redhat_vex | stb: stb: Denial of Service via integer overflow in hexwave_init | known not affected: 1 | 2026-09-30T03:10:04+00:00 | Vulnerability · Source |
| CVE-2026-51936 | redhat_vex | sqlcipher: sqlcipher: Defensive mode bypass via crafted source database parameter | known not affected: 1 | 2026-09-30T03:10:04+00:00 | Vulnerability · Source |
| CVE-2026-97956 | redhat_vex | kernel: net: net_failover: Fix the deadlock in net_failover_slave_name_change() | known affected: 76 known not affected: 200 | 2026-09-30T03:05:54+00:00 | Vulnerability · Source |
| CVE-2026-59639 | redhat_vex | org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Cryptographic signature bypass | known affected: 36 known not affected: 6 | 2026-09-30T03:00:00+00:00 | Vulnerability · Source |
| CVE-2026-97955 | redhat_vex | kernel: net: mana: restore the XDP program pointer when pre-allocation fails | known affected: 183 known not affected: 93 | 2026-09-30T02:48:36+00:00 | Vulnerability · Source |
| CVE-2026-97954 | redhat_vex | kernel: net/rds: fix tcp stream corruption with large pages | known affected: 14 known not affected: 262 | 2026-09-30T02:40:27+00:00 | Vulnerability · Source |
| CVE-2024-45338 | redhat_vex | golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html | fixed: 2836 known affected: 127 known not affected: 16030 | 2026-09-30T02:40:20+00:00 | Vulnerability · Source |
| CVE-2026-97953 | redhat_vex | kernel: net: stmmac: fix TX descriptor availability check for TSO traffic | known not affected: 276 | 2026-09-30T02:36:12+00:00 | Vulnerability · Source |
| CVE-2026-97952 | redhat_vex | kernel: sunvdc: unmap LDC cookies when the descriptor send fails | known not affected: 276 | 2026-09-30T02:27:08+00:00 | Vulnerability · Source |
| CVE-2026-97951 | redhat_vex | kernel: scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands | known affected: 234 known not affected: 42 | 2026-09-30T02:15:16+00:00 | Vulnerability · Source |
| CVE-2025-39706 | microsoft_vex | drm/amdkfd: Destroy KFD debugfs after destroy KFD wq | fixed: 1 known affected: 7 | 2026-09-30T01:54:17+00:00 | Vulnerability · Source |
| CVE-2024-35949 | microsoft_vex | btrfs: make sure that WRITTEN is set on all metadata blocks | known affected: 4 | 2026-09-30T01:53:48+00:00 | Vulnerability · Source |
| CVE-2024-26800 | microsoft_vex | tls: fix use-after-free on failed backlog decryption | known affected: 5 | 2026-09-30T01:53:04+00:00 | Vulnerability · Source |
| CVE-2025-38248 | microsoft_vex | bridge: mcast: Fix use-after-free during router port configuration | fixed: 1 known affected: 13 | 2026-09-30T01:52:32+00:00 | Vulnerability · Source |
| CVE-2025-21831 | microsoft_vex | PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 | known affected: 5 | 2026-09-30T01:50:36+00:00 | Vulnerability · Source |
| CVE-2024-58053 | microsoft_vex | rxrpc: Fix handling of received connection abort | known affected: 5 | 2026-09-30T01:50:19+00:00 | Vulnerability · Source |
| CVE-2024-57924 | microsoft_vex | fs: relax assertions on failure to encode file handles | known affected: 4 | 2026-09-30T01:49:59+00:00 | Vulnerability · Source |
| CVE-2024-26869 | microsoft_vex | f2fs: fix to truncate meta inode pages forcely | known affected: 5 | 2026-09-30T01:48:53+00:00 | Vulnerability · Source |
| CVE-2024-26853 | microsoft_vex | igc: avoid returning frame twice in XDP_REDIRECT | known affected: 5 | 2026-09-30T01:48:32+00:00 | Vulnerability · Source |
| CVE-2024-26830 | microsoft_vex | i40e: Do not allow untrusted VF to remove administratively set MAC | known affected: 5 | 2026-09-30T01:48:13+00:00 | Vulnerability · Source |
| CVE-2025-2309 | microsoft_vex | HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow | known affected: 10 | 2026-09-30T01:47:42+00:00 | Vulnerability · Source |
| CVE-2025-2308 | microsoft_vex | HDF5 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflow | known affected: 9 | 2026-09-30T01:47:23+00:00 | Vulnerability · Source |
| CVE-2024-26759 | microsoft_vex | mm/swap: fix race when skipping swapcache | known affected: 5 | 2026-09-30T01:46:51+00:00 | Vulnerability · Source |
| CVE-2024-26706 | microsoft_vex | parisc: Fix random data corruption from exception handler | known affected: 5 | 2026-09-30T01:46:34+00:00 | Vulnerability · Source |
| CVE-2024-26865 | microsoft_vex | rds: tcp: Fix use-after-free of net in reqsk_timer_handler(). | known affected: 4 | 2026-09-30T01:46:16+00:00 | Vulnerability · Source |
| CVE-2024-26792 | microsoft_vex | btrfs: fix double free of anonymous device after snapshot creation failure | known affected: 4 | 2026-09-30T01:45:57+00:00 | Vulnerability · Source |
| CVE-2026-53006 | redhat_vex | kernel: ipv6: fix possible UAF in icmpv6_rcv() | fixed: 1980 known affected: 22 known not affected: 42 | 2026-09-30T01:41:16+00:00 | Vulnerability · Source |
| CVE-2026-96749 | redhat_vex | pymongo: pymongo: Out-of-bounds write via integer overflow during BSON encoding | known affected: 23 | 2026-09-30T01:14:06+00:00 | Vulnerability · Source |
| CVE-2026-98164 | microsoft_vex | KVM: x86/mmu: Check write tracking in all address spaces | under investigation: 1 | 2026-09-30T01:04:57+00:00 | Vulnerability · Source |
| CVE-2026-55556 | microsoft_vex | Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling | known affected: 1 | 2026-09-30T01:04:41+00:00 | Vulnerability · Source |
| CVE-2026-102268 | microsoft_vex | PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard | known affected: 1 | 2026-09-30T01:04:19+00:00 | Vulnerability · Source |
| CVE-2026-102270 | microsoft_vex | PyJWT: ReDoS vulnerability when calling the `is_pem_format` function. | known affected: 1 | 2026-09-30T01:03:57+00:00 | Vulnerability · Source |
| CVE-2026-102269 | microsoft_vex | PyJWT: Non-canonical signature segments enable raw-token revocation bypass | known affected: 1 | 2026-09-30T01:03:36+00:00 | Vulnerability · Source |
| CVE-2026-101917 | microsoft_vex | PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524) | known affected: 1 | 2026-09-30T01:03:14+00:00 | Vulnerability · Source |
| CVE-2026-102267 | microsoft_vex | PyJWT: PyJWKClient follows redirects when fetching JWKS | known affected: 1 | 2026-09-30T01:02:51+00:00 | Vulnerability · Source |
| CVE-2026-97399 | microsoft_vex | One-byte overread in strncasecmp on Power8 | known affected: 1 | 2026-09-30T01:02:26+00:00 | Vulnerability · Source |
| CVE-2014-7185 | suse_vex | SUSE CVE CVE-2014-7185 | known affected: 96 known not affected: 141 recommended: 622 | 2026-09-30T00:06:21+00:00 | Vulnerability · Source |
| CVE-2016-5421 | suse_vex | SUSE CVE CVE-2016-5421 | known not affected: 45 recommended: 93 | 2026-09-30T00:06:00+00:00 | Vulnerability · Source |
| CVE-2016-5636 | suse_vex | SUSE CVE CVE-2016-5636 | known affected: 436 known not affected: 211 recommended: 1476 | 2026-09-30T00:05:57+00:00 | Vulnerability · Source |
| CVE-2016-8618 | suse_vex | SUSE CVE CVE-2016-8618 | known affected: 340 known not affected: 21 recommended: 451 | 2026-09-30T00:05:51+00:00 | Vulnerability · Source |