VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294692 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-10761 | redhat_vex | QEMU: nbd: reachable assertion failure in nbd_negotiate_send_rep_verr via remote client | fixed: 918 known affected: 33 known not affected: 60 | 2026-06-28T07:31:03+00:00 | Vulnerability · Source |
| CVE-2026-34278 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | fixed: 156 known affected: 32 known not affected: 9 | 2026-06-28T07:31:01+00:00 | Vulnerability · Source |
| CVE-2026-34272 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | known not affected: 64 | 2026-06-28T07:31:01+00:00 | Vulnerability · Source |
| CVE-2020-10757 | redhat_vex | kernel: kernel: DAX hugepages not considered during mremap | fixed: 766 known affected: 16 known not affected: 31 | 2026-06-28T07:31:01+00:00 | Vulnerability · Source |
| CVE-2020-10755 | redhat_vex | openstack-cinder: Improper handling of ScaleIO backend credentials | fixed: 12 known affected: 6 | 2026-06-28T07:31:01+00:00 | Vulnerability · Source |
| CVE-2020-10751 | redhat_vex | kernel: SELinux netlink permission check bypass | fixed: 354 known affected: 43 | 2026-06-28T07:31:00+00:00 | Vulnerability · Source |
| CVE-2026-34232 | redhat_vex | Firebird: Firebird: Denial of Service via crafted op_response packet | known not affected: 1 | 2026-06-28T07:30:59+00:00 | Vulnerability · Source |
| CVE-2026-34214 | redhat_vex | trino: iceberg: Trino Iceberg Connector: Information disclosure via accessible credentials | known not affected: 1 | 2026-06-28T07:30:59+00:00 | Vulnerability · Source |
| CVE-2020-10748 | redhat_vex | keycloak: top-level navigations to data URLs resulting in XSS are possible (incomplete fix of CVE-2020-1697) | fixed: 1 known affected: 1 known not affected: 5 | 2026-06-28T07:30:59+00:00 | Vulnerability · Source |
| CVE-2020-10735 | redhat_vex | python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS | fixed: 685 known affected: 41 known not affected: 93 | 2026-06-28T07:30:58+00:00 | Vulnerability · Source |
| CVE-2026-34091 | redhat_vex | mediawiki: user localization leaked by AbuseFilter + EventStream | known not affected: 1 | 2026-06-28T07:30:56+00:00 | Vulnerability · Source |
| CVE-2020-10724 | redhat_vex | dpdk: librte_vhost Missing inputs validation in Vhost-crypto | fixed: 85 known affected: 10 known not affected: 134 | 2026-06-28T07:30:56+00:00 | Vulnerability · Source |
| CVE-2026-34088 | redhat_vex | mediawiki: RecentChanges entries expose suppressed content via generated log page html | known not affected: 1 | 2026-06-28T07:30:56+00:00 | Vulnerability · Source |
| CVE-2026-34080 | redhat_vex | xdg-dbus-proxy: xdg-dbus-proxy: Information disclosure due to policy parser vulnerability | known affected: 2 | 2026-06-28T07:30:55+00:00 | Vulnerability · Source |
| CVE-2020-10722 | redhat_vex | dpdk: librte_vhost Integer overflow in vhost_user_set_log_base() | fixed: 176 known affected: 38 known not affected: 94 | 2026-06-28T07:30:55+00:00 | Vulnerability · Source |
| CVE-2020-10717 | redhat_vex | QEMU: virtiofsd: guest may open maximum file descriptor to cause DoS | fixed: 918 known affected: 33 known not affected: 31 | 2026-06-28T07:30:54+00:00 | Vulnerability · Source |
| CVE-2026-34042 | redhat_vex | act: act: Arbitrary Code Execution via unauthorized cache manipulation | known not affected: 1 | 2026-06-28T07:30:51+00:00 | Vulnerability · Source |
| CVE-2020-10705 | redhat_vex | undertow: Memory exhaustion issue in HttpReadListener via "Expect: 100-continue" header | fixed: 1415 known affected: 1 known not affected: 3 | 2026-06-28T07:30:51+00:00 | Vulnerability · Source |
| CVE-2026-34041 | redhat_vex | act: github.com/nektos/act: act: Privilege escalation and arbitrary code execution via environment variable injection | known not affected: 1 | 2026-06-28T07:30:51+00:00 | Vulnerability · Source |
| CVE-2020-10690 | redhat_vex | kernel: use-after-free in cdev_put() when a PTP device is removed while it's chardev is open | fixed: 354 known affected: 42 known not affected: 1 | 2026-06-28T07:30:49+00:00 | Vulnerability · Source |
| CVE-2026-33993 | redhat_vex | Locutus: Locutus: Prototype Pollution and Denial of Service vulnerability in unserialize() function | known affected: 6 | 2026-06-28T07:30:49+00:00 | Vulnerability · Source |
| CVE-2024-41065 | redhat_vex | kernel: powerpc/pseries: Whitelist dtl slub object for copying to userspace | fixed: 679 known affected: 80 known not affected: 8 | 2026-06-28T07:30:48+00:00 | Vulnerability · Source |
| CVE-2020-10379 | redhat_vex | python-pillow: two buffer overflows in libImaging/TiffDecode.c due to small buffers allocated in ImagingLibTiffDecode() | fixed: 11 known not affected: 18 | 2026-06-28T07:30:46+00:00 | Vulnerability · Source |
| CVE-2026-33977 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via malformed IMA ADPCM audio data | known affected: 31 | 2026-06-28T07:30:46+00:00 | Vulnerability · Source |
| CVE-2020-10378 | redhat_vex | python-pillow: an out-of-bounds read in libImaging/PcxDecode.c can occur when reading PCX files | fixed: 11 known affected: 18 | 2026-06-28T07:30:46+00:00 | Vulnerability · Source |
| CVE-2026-33996 | redhat_vex | LibJWT: LibJWT: Denial of Service via crafted JSON Web Key (JWK) files | known not affected: 1 | 2026-06-28T07:30:46+00:00 | Vulnerability · Source |
| CVE-2023-23920 | redhat_vex | Node.js: insecure loading of ICU data through ICU_DATA environment variable | fixed: 288 known affected: 1 known not affected: 16 | 2026-06-28T07:30:45+00:00 | Vulnerability · Source |
| CVE-2020-10136 | redhat_vex | kernel: IP-in-IP protocol routes arbitrary traffic by default | known not affected: 93 | 2026-06-28T07:30:45+00:00 | Vulnerability · Source |
| CVE-2026-33994 | redhat_vex | locutus: Locutus: Prototype pollution vulnerability in parse_str function | known not affected: 6 | 2026-06-28T07:30:44+00:00 | Vulnerability · Source |
| CVE-2026-33952 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via unvalidated authentication length field | known affected: 31 | 2026-06-28T07:30:42+00:00 | Vulnerability · Source |
| CVE-2026-33945 | redhat_vex | incus: Incus: Privilege escalation and denial of service via path traversal in systemd credential configuration | known not affected: 1 | 2026-06-28T07:30:41+00:00 | Vulnerability · Source |
| CVE-2020-0465 | redhat_vex | kernel: out of bounds write in hid-multitouch.c may lead to escalation of privilege | fixed: 185 known affected: 16 known not affected: 169 | 2026-06-28T07:30:39+00:00 | Vulnerability · Source |
| CVE-2020-0431 | redhat_vex | kernel: possible out of bounds write in kbd_keycode of keyboard.c | fixed: 150 known affected: 44 known not affected: 106 | 2026-06-28T07:30:38+00:00 | Vulnerability · Source |
| CVE-2020-0427 | redhat_vex | kernel: out-of-bounds reads in pinctrl subsystem. | fixed: 335 known not affected: 31 | 2026-06-28T07:30:37+00:00 | Vulnerability · Source |
| CVE-2019-9948 | redhat_vex | python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms | fixed: 874 known affected: 16 known not affected: 42 | 2026-06-28T07:30:36+00:00 | Vulnerability · Source |
| CVE-2026-33898 | redhat_vex | incus: Incus: Privilege escalation and unauthorized access due to improper authentication token validation in web UI | known not affected: 1 | 2026-06-28T07:30:34+00:00 | Vulnerability · Source |
| CVE-2026-33897 | redhat_vex | incus: pongo2: Incus: Arbitrary file read/write as root via pongo2 template chroot bypass | known not affected: 1 | 2026-06-28T07:30:34+00:00 | Vulnerability · Source |
| CVE-2026-33812 | redhat_vex | golang.org/x/image: golang: golang.org/x/image: Denial of Service due to excessive memory allocation when parsing malicious font files | known affected: 45 | 2026-06-28T07:30:30+00:00 | Vulnerability · Source |
| CVE-2026-33809 | redhat_vex | golang: golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via maliciously crafted TIFF file | fixed: 8 known affected: 35 | 2026-06-28T07:30:30+00:00 | Vulnerability · Source |
| CVE-2024-50201 | redhat_vex | kernel: drm/radeon: Fix encoder->possible_clones | fixed: 305 known affected: 112 | 2026-06-28T07:30:29+00:00 | Vulnerability · Source |
| CVE-2019-9755 | redhat_vex | ntfs-3g: heap-based buffer overflow leads to local root privilege escalation | fixed: 1600 known affected: 3 | 2026-06-28T07:30:27+00:00 | Vulnerability · Source |
| CVE-2019-9741 | redhat_vex | golang: CRLF injection in net/http | fixed: 93 known affected: 26 | 2026-06-28T07:30:27+00:00 | Vulnerability · Source |
| CVE-2026-33711 | redhat_vex | incus: Incus: Local privilege escalation or denial of service via predictable temporary file paths | known not affected: 1 | 2026-06-28T07:30:25+00:00 | Vulnerability · Source |
| CVE-2026-33721 | redhat_vex | MapServer: MapServer: Denial of Service via crafted Styled Layer Descriptor | known not affected: 1 | 2026-06-28T07:30:25+00:00 | Vulnerability · Source |
| CVE-2019-9640 | redhat_vex | php: Invalid read in exif_process_SOFn() | fixed: 1247 known affected: 88 | 2026-06-28T07:30:24+00:00 | Vulnerability · Source |
| CVE-2019-9639 | redhat_vex | php: Uninitialized read in exif_process_IFD_in_MAKERNOTE | fixed: 1247 known affected: 32 known not affected: 56 | 2026-06-28T07:30:23+00:00 | Vulnerability · Source |
| CVE-2019-9638 | redhat_vex | php: Uninitialized read in exif_process_IFD_in_MAKERNOTE | fixed: 1247 known affected: 58 known not affected: 30 | 2026-06-28T07:30:22+00:00 | Vulnerability · Source |
| CVE-2019-9636 | redhat_vex | python: Information Disclosure due to urlsplit improper NFKC normalization | fixed: 899 known affected: 1 known not affected: 42 | 2026-06-28T07:30:22+00:00 | Vulnerability · Source |
| CVE-2026-33601 | redhat_vex | pdns-recursor: insufficient validation of ZONEMD record | known not affected: 1 | 2026-06-28T07:30:22+00:00 | Vulnerability · Source |
| CVE-2026-33691 | redhat_vex | coreruleset: OWASP Core Rule Set: File upload bypass via whitespace padding in filenames | known not affected: 1 | 2026-06-28T07:30:21+00:00 | Vulnerability · Source |