VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294684 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-12363 | redhat_vex | kernel: Improper input validation in some Intel(R) Graphics Drivers | fixed: 357 known affected: 33 known not affected: 140 | 2026-06-28T07:31:32+00:00 | Vulnerability · Source |
| CVE-2026-34987 | redhat_vex | wasmtime: bytecodealliance/wasmtime: Wasmtime: Arbitrary code execution via incorrect memory offset handling in Winch compiler | known not affected: 2 | 2026-06-28T07:31:32+00:00 | Vulnerability · Source |
| CVE-2026-34984 | redhat_vex | External Secrets Operator: github.com/external-secrets/external-secrets: External Secrets Operator: Information disclosure via DNS exfiltration in v2 template engine | known affected: 4 | 2026-06-28T07:31:30+00:00 | Vulnerability · Source |
| CVE-2026-34983 | redhat_vex | wasmtime: Wasmtime: Use-after-free due to unsound linker cloning | known affected: 2 | 2026-06-28T07:31:30+00:00 | Vulnerability · Source |
| CVE-2020-11668 | redhat_vex | kernel: mishandles invalid descriptors in drivers/media/usb/gspca/xirlink_cit.c | fixed: 335 known affected: 42 known not affected: 1 | 2026-06-28T07:31:29+00:00 | Vulnerability · Source |
| CVE-2020-11935 | redhat_vex | kernel: panic hit by kube-proxy iptables-save/restore | known not affected: 93 | 2026-06-28T07:31:28+00:00 | Vulnerability · Source |
| CVE-2024-50228 | redhat_vex | kernel: mm: shmem: fix data-race in shmem_getattr() | fixed: 305 known affected: 112 | 2026-06-28T07:31:28+00:00 | Vulnerability · Source |
| CVE-2026-34946 | redhat_vex | wasmtime: Wasmtime: Denial of Service via WebAssembly compilation error | known affected: 1 known not affected: 1 | 2026-06-28T07:31:27+00:00 | Vulnerability · Source |
| CVE-2020-11869 | redhat_vex | qemu: integer overflow in ati_2d_blt() in hw/display/ati-2d.c could lead to DoS | known affected: 2 known not affected: 92 | 2026-06-28T07:31:26+00:00 | Vulnerability · Source |
| CVE-2026-34971 | redhat_vex | wasmtime: cranelift: Wasmtime: Sandbox escape due to miscompiled heap access on aarch64 | known affected: 1 known not affected: 1 | 2026-06-28T07:31:26+00:00 | Vulnerability · Source |
| CVE-2020-11669 | redhat_vex | kernel: powerpc: guest can cause DoS on POWER9 KVM hosts | fixed: 23 known not affected: 105 | 2026-06-28T07:31:24+00:00 | Vulnerability · Source |
| CVE-2026-34839 | redhat_vex | Glances: Glances: Information disclosure via permissive Cross-Origin Resource Sharing (CORS) policy in REST API | known not affected: 1 | 2026-06-28T07:31:24+00:00 | Vulnerability · Source |
| CVE-2026-34941 | redhat_vex | wasmtime: Wasmtime: Denial of Service and potential information disclosure via incorrect UTF-16 string validation | known affected: 1 known not affected: 1 | 2026-06-28T07:31:24+00:00 | Vulnerability · Source |
| CVE-2026-34942 | redhat_vex | wasmtime: Wasmtime: Denial of Service via improper string alignment verification | known affected: 2 | 2026-06-28T07:31:24+00:00 | Vulnerability · Source |
| CVE-2020-11612 | redhat_vex | netty: compression/decompression codecs don't enforce limits on buffer allocation sizes | fixed: 413 known affected: 9 known not affected: 1542 | 2026-06-28T07:31:23+00:00 | Vulnerability · Source |
| CVE-2020-11538 | redhat_vex | python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2 | fixed: 64 known not affected: 13 | 2026-06-28T07:31:21+00:00 | Vulnerability · Source |
| CVE-2020-11565 | redhat_vex | kernel: out-of-bounds write in mpol_parse_str function in mm/mempolicy.c | fixed: 379 known affected: 26 known not affected: 2 | 2026-06-28T07:31:21+00:00 | Vulnerability · Source |
| CVE-2020-11494 | redhat_vex | kernel: transmission of uninitialized data allows attackers to read sensitive information | known affected: 49 known not affected: 55 | 2026-06-28T07:31:20+00:00 | Vulnerability · Source |
| CVE-2020-1147 | redhat_vex | dotnet: XML source markup processing remote code execution | fixed: 121 | 2026-06-28T07:31:20+00:00 | Vulnerability · Source |
| CVE-2020-11102 | redhat_vex | QEMU: tulip: OOB access in tulip_copy_tx_buffers | known not affected: 64 | 2026-06-28T07:31:19+00:00 | Vulnerability · Source |
| CVE-2020-11100 | redhat_vex | haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes | fixed: 52 known not affected: 4 | 2026-06-28T07:31:18+00:00 | Vulnerability · Source |
| CVE-2020-11078 | redhat_vex | python-httplib2: CRLF injection via an attacker controlled unescaped part of uri for httplib2.Http.request function | fixed: 279 known affected: 9 | 2026-06-28T07:31:17+00:00 | Vulnerability · Source |
| CVE-2020-10994 | redhat_vex | python-pillow: multiple out-of-bounds reads via a crafted JP2 file | fixed: 11 known affected: 5 known not affected: 13 | 2026-06-28T07:31:16+00:00 | Vulnerability · Source |
| CVE-2026-34591 | redhat_vex | github.com/python-poetry/poetry: Poetry: Arbitrary file write via crafted package installation | known not affected: 5 | 2026-06-28T07:31:15+00:00 | Vulnerability · Source |
| CVE-2026-34544 | redhat_vex | OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing | known affected: 11 known not affected: 7 | 2026-06-28T07:31:14+00:00 | Vulnerability · Source |
| CVE-2026-34531 | redhat_vex | flask-httpauth: token verification callback invoked when missing or empty token was given by client | known not affected: 1 | 2026-06-28T07:31:14+00:00 | Vulnerability · Source |
| CVE-2026-34520 | redhat_vex | aiohttp: AIOHTTP: Header injection vulnerability due to improper character handling | known affected: 88 | 2026-06-28T07:31:14+00:00 | Vulnerability · Source |
| CVE-2026-34517 | redhat_vex | aiohttp: AIOHTTP: Denial of Service via large multipart form fields | known affected: 88 | 2026-06-28T07:31:13+00:00 | Vulnerability · Source |
| CVE-2026-34519 | redhat_vex | aiohttp: aiohttp: Header injection vulnerability via reason parameter | known affected: 88 | 2026-06-28T07:31:13+00:00 | Vulnerability · Source |
| CVE-2026-34516 | redhat_vex | aiohttp: AIOHTTP: Denial of Service via excessive multipart headers | known affected: 88 | 2026-06-28T07:31:11+00:00 | Vulnerability · Source |
| CVE-2020-10773 | redhat_vex | kernel: kernel stack information leak on s390/s390x | fixed: 120 known affected: 33 known not affected: 39 | 2026-06-28T07:31:11+00:00 | Vulnerability · Source |
| CVE-2026-34514 | redhat_vex | aiohttp: AIOHTTP: Header Injection via content_type parameter manipulation | known affected: 88 | 2026-06-28T07:31:11+00:00 | Vulnerability · Source |
| CVE-2020-10942 | redhat_vex | kernel: vhost-net: stack overflow in get_raw_socket while checking sk_family field | fixed: 354 known affected: 30 known not affected: 13 | 2026-06-28T07:31:11+00:00 | Vulnerability · Source |
| CVE-2020-10781 | redhat_vex | kernel: zram sysfs resource consumption | known affected: 104 | 2026-06-28T07:31:10+00:00 | Vulnerability · Source |
| CVE-2020-13249 | redhat_vex | mariadb-connector-c: Improper validation of content in a OK packet received from server | fixed: 1157 known not affected: 10 | 2026-06-28T07:31:09+00:00 | Vulnerability · Source |
| CVE-2020-10774 | redhat_vex | kernel: possibility of memory disclosure when reading the file /proc/sys/kernel/rh_features | fixed: 150 known not affected: 56 | 2026-06-28T07:31:07+00:00 | Vulnerability · Source |
| CVE-2020-10770 | redhat_vex | keycloak: Default Client configuration is vulnerable to SSRF using "request_uri" parameter | fixed: 10 known not affected: 5 | 2026-06-28T07:31:06+00:00 | Vulnerability · Source |
| CVE-2020-10766 | redhat_vex | kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off the SSBD protection. | fixed: 353 known not affected: 60 | 2026-06-28T07:31:03+00:00 | Vulnerability · Source |
| CVE-2020-10761 | redhat_vex | QEMU: nbd: reachable assertion failure in nbd_negotiate_send_rep_verr via remote client | fixed: 918 known affected: 33 known not affected: 60 | 2026-06-28T07:31:03+00:00 | Vulnerability · Source |
| CVE-2026-34278 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | fixed: 156 known affected: 32 known not affected: 9 | 2026-06-28T07:31:01+00:00 | Vulnerability · Source |
| CVE-2026-34272 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | known not affected: 64 | 2026-06-28T07:31:01+00:00 | Vulnerability · Source |
| CVE-2020-10757 | redhat_vex | kernel: kernel: DAX hugepages not considered during mremap | fixed: 766 known affected: 16 known not affected: 31 | 2026-06-28T07:31:01+00:00 | Vulnerability · Source |
| CVE-2020-10755 | redhat_vex | openstack-cinder: Improper handling of ScaleIO backend credentials | fixed: 12 known affected: 6 | 2026-06-28T07:31:01+00:00 | Vulnerability · Source |
| CVE-2020-10751 | redhat_vex | kernel: SELinux netlink permission check bypass | fixed: 354 known affected: 43 | 2026-06-28T07:31:00+00:00 | Vulnerability · Source |
| CVE-2026-34232 | redhat_vex | Firebird: Firebird: Denial of Service via crafted op_response packet | known not affected: 1 | 2026-06-28T07:30:59+00:00 | Vulnerability · Source |
| CVE-2026-34214 | redhat_vex | trino: iceberg: Trino Iceberg Connector: Information disclosure via accessible credentials | known not affected: 1 | 2026-06-28T07:30:59+00:00 | Vulnerability · Source |
| CVE-2020-10748 | redhat_vex | keycloak: top-level navigations to data URLs resulting in XSS are possible (incomplete fix of CVE-2020-1697) | fixed: 1 known affected: 1 known not affected: 5 | 2026-06-28T07:30:59+00:00 | Vulnerability · Source |
| CVE-2020-10735 | redhat_vex | python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS | fixed: 685 known affected: 41 known not affected: 93 | 2026-06-28T07:30:58+00:00 | Vulnerability · Source |
| CVE-2026-34091 | redhat_vex | mediawiki: user localization leaked by AbuseFilter + EventStream | known not affected: 1 | 2026-06-28T07:30:56+00:00 | Vulnerability · Source |
| CVE-2020-10724 | redhat_vex | dpdk: librte_vhost Missing inputs validation in Vhost-crypto | fixed: 85 known affected: 10 known not affected: 134 | 2026-06-28T07:30:56+00:00 | Vulnerability · Source |