GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

VEX records

Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.

Reset

294731 VEX records

API response
Vulnerability Source Title Product status Imported Links
CVE-2026-33993 redhat_vex Locutus: Locutus: Prototype Pollution and Denial of Service vulnerability in unserialize() function known affected: 6 2026-06-28T07:30:49+00:00 Vulnerability · Source
CVE-2024-41065 redhat_vex kernel: powerpc/pseries: Whitelist dtl slub object for copying to userspace fixed: 679 known affected: 80 known not affected: 8 2026-06-28T07:30:48+00:00 Vulnerability · Source
CVE-2020-10379 redhat_vex python-pillow: two buffer overflows in libImaging/TiffDecode.c due to small buffers allocated in ImagingLibTiffDecode() fixed: 11 known not affected: 18 2026-06-28T07:30:46+00:00 Vulnerability · Source
CVE-2026-33977 redhat_vex FreeRDP: FreeRDP: Denial of Service via malformed IMA ADPCM audio data known affected: 31 2026-06-28T07:30:46+00:00 Vulnerability · Source
CVE-2020-10378 redhat_vex python-pillow: an out-of-bounds read in libImaging/PcxDecode.c can occur when reading PCX files fixed: 11 known affected: 18 2026-06-28T07:30:46+00:00 Vulnerability · Source
CVE-2026-33996 redhat_vex LibJWT: LibJWT: Denial of Service via crafted JSON Web Key (JWK) files known not affected: 1 2026-06-28T07:30:46+00:00 Vulnerability · Source
CVE-2023-23920 redhat_vex Node.js: insecure loading of ICU data through ICU_DATA environment variable fixed: 288 known affected: 1 known not affected: 16 2026-06-28T07:30:45+00:00 Vulnerability · Source
CVE-2020-10136 redhat_vex kernel: IP-in-IP protocol routes arbitrary traffic by default known not affected: 93 2026-06-28T07:30:45+00:00 Vulnerability · Source
CVE-2026-33994 redhat_vex locutus: Locutus: Prototype pollution vulnerability in parse_str function known not affected: 6 2026-06-28T07:30:44+00:00 Vulnerability · Source
CVE-2026-33952 redhat_vex FreeRDP: FreeRDP: Denial of Service via unvalidated authentication length field known affected: 31 2026-06-28T07:30:42+00:00 Vulnerability · Source
CVE-2026-33945 redhat_vex incus: Incus: Privilege escalation and denial of service via path traversal in systemd credential configuration known not affected: 1 2026-06-28T07:30:41+00:00 Vulnerability · Source
CVE-2020-0465 redhat_vex kernel: out of bounds write in hid-multitouch.c may lead to escalation of privilege fixed: 185 known affected: 16 known not affected: 169 2026-06-28T07:30:39+00:00 Vulnerability · Source
CVE-2020-0431 redhat_vex kernel: possible out of bounds write in kbd_keycode of keyboard.c fixed: 150 known affected: 44 known not affected: 106 2026-06-28T07:30:38+00:00 Vulnerability · Source
CVE-2020-0427 redhat_vex kernel: out-of-bounds reads in pinctrl subsystem. fixed: 335 known not affected: 31 2026-06-28T07:30:37+00:00 Vulnerability · Source
CVE-2019-9948 redhat_vex python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms fixed: 874 known affected: 16 known not affected: 42 2026-06-28T07:30:36+00:00 Vulnerability · Source
CVE-2026-33898 redhat_vex incus: Incus: Privilege escalation and unauthorized access due to improper authentication token validation in web UI known not affected: 1 2026-06-28T07:30:34+00:00 Vulnerability · Source
CVE-2026-33897 redhat_vex incus: pongo2: Incus: Arbitrary file read/write as root via pongo2 template chroot bypass known not affected: 1 2026-06-28T07:30:34+00:00 Vulnerability · Source
CVE-2026-33812 redhat_vex golang.org/x/image: golang: golang.org/x/image: Denial of Service due to excessive memory allocation when parsing malicious font files known affected: 45 2026-06-28T07:30:30+00:00 Vulnerability · Source
CVE-2026-33809 redhat_vex golang: golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via maliciously crafted TIFF file fixed: 8 known affected: 35 2026-06-28T07:30:30+00:00 Vulnerability · Source
CVE-2024-50201 redhat_vex kernel: drm/radeon: Fix encoder->possible_clones fixed: 305 known affected: 112 2026-06-28T07:30:29+00:00 Vulnerability · Source
CVE-2019-9755 redhat_vex ntfs-3g: heap-based buffer overflow leads to local root privilege escalation fixed: 1600 known affected: 3 2026-06-28T07:30:27+00:00 Vulnerability · Source
CVE-2019-9741 redhat_vex golang: CRLF injection in net/http fixed: 93 known affected: 26 2026-06-28T07:30:27+00:00 Vulnerability · Source
CVE-2026-33711 redhat_vex incus: Incus: Local privilege escalation or denial of service via predictable temporary file paths known not affected: 1 2026-06-28T07:30:25+00:00 Vulnerability · Source
CVE-2026-33721 redhat_vex MapServer: MapServer: Denial of Service via crafted Styled Layer Descriptor known not affected: 1 2026-06-28T07:30:25+00:00 Vulnerability · Source
CVE-2019-9640 redhat_vex php: Invalid read in exif_process_SOFn() fixed: 1247 known affected: 88 2026-06-28T07:30:24+00:00 Vulnerability · Source
CVE-2019-9639 redhat_vex php: Uninitialized read in exif_process_IFD_in_MAKERNOTE fixed: 1247 known affected: 32 known not affected: 56 2026-06-28T07:30:23+00:00 Vulnerability · Source
CVE-2019-9638 redhat_vex php: Uninitialized read in exif_process_IFD_in_MAKERNOTE fixed: 1247 known affected: 58 known not affected: 30 2026-06-28T07:30:22+00:00 Vulnerability · Source
CVE-2019-9636 redhat_vex python: Information Disclosure due to urlsplit improper NFKC normalization fixed: 899 known affected: 1 known not affected: 42 2026-06-28T07:30:22+00:00 Vulnerability · Source
CVE-2026-33601 redhat_vex pdns-recursor: insufficient validation of ZONEMD record known not affected: 1 2026-06-28T07:30:22+00:00 Vulnerability · Source
CVE-2026-33691 redhat_vex coreruleset: OWASP Core Rule Set: File upload bypass via whitespace padding in filenames known not affected: 1 2026-06-28T07:30:21+00:00 Vulnerability · Source
CVE-2026-33689 redhat_vex xrdp: xrdp: Denial of Service and Information Disclosure via Out-of-Bounds Read known not affected: 1 2026-06-28T07:30:20+00:00 Vulnerability · Source
CVE-2019-9511 redhat_vex HTTP/2: large amount of data requests leads to denial of service fixed: 1600 known affected: 8 known not affected: 98 2026-06-28T07:30:19+00:00 Vulnerability · Source
CVE-2019-9506 redhat_vex hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB) fixed: 900 known affected: 15 2026-06-28T07:30:18+00:00 Vulnerability · Source
CVE-2019-9503 redhat_vex kernel: brcmfmac frame validation bypass fixed: 489 known affected: 42 known not affected: 1 2026-06-28T07:30:18+00:00 Vulnerability · Source
CVE-2023-22054 redhat_vex mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2023) fixed: 206 known not affected: 93 2026-06-28T07:30:17+00:00 Vulnerability · Source
CVE-2026-33600 redhat_vex pdns-recursor: NULL pointer dereference in RPZ transfer known not affected: 1 2026-06-28T07:30:17+00:00 Vulnerability · Source
CVE-2026-33658 redhat_vex rails: activestorage: Active Storage: Denial of Service via HTTP Range header processing known not affected: 2 2026-06-28T07:30:17+00:00 Vulnerability · Source
CVE-2026-33597 redhat_vex dnsdist: insufficient input validation of internal webserver known not affected: 1 2026-06-28T07:30:17+00:00 Vulnerability · Source
CVE-2026-33642 redhat_vex kitty: Kitty: Arbitrary Code Execution via Integer Wrapping in Escape Sequence Handling known not affected: 1 2026-06-28T07:30:17+00:00 Vulnerability · Source
CVE-2026-33594 redhat_vex dnsdist: outgoing DoH excessive memory allocation known not affected: 1 2026-06-28T07:30:17+00:00 Vulnerability · Source
CVE-2026-33602 redhat_vex dnsdist: off-by-one access when processing crafted UDP responses known not affected: 1 2026-06-28T07:30:17+00:00 Vulnerability · Source
CVE-2026-33609 redhat_vex PowerDNS: PowerDNS: Information disclosure via incomplete LDAP query escaping known not affected: 1 2026-06-28T07:30:17+00:00 Vulnerability · Source
CVE-2026-33595 redhat_vex dnsdist: DoQ/DoH3 excessive memory allocation known not affected: 1 2026-06-28T07:30:17+00:00 Vulnerability · Source
CVE-2019-9451 redhat_vex kernel: out of bounds write due to missing bounds check in touchscreen driver leads to local privilege escalation known not affected: 104 2026-06-28T07:30:16+00:00 Vulnerability · Source
CVE-2019-9450 redhat_vex kernel: memory corruption due to race condition in FingerTipS touchscreen driver leads to local privilege escalation known not affected: 104 2026-06-28T07:30:16+00:00 Vulnerability · Source
CVE-2019-9447 redhat_vex kernel: use after free due to improper locking in FingerTipS touchscreen driver leads to local privilege escalation known not affected: 104 2026-06-28T07:30:15+00:00 Vulnerability · Source
CVE-2019-9449 redhat_vex kernel: out of bounds read due to missing bounds check in FingerTipS touchscreen driver leads to local information disclosure known not affected: 104 2026-06-28T07:30:15+00:00 Vulnerability · Source
CVE-2019-9446 redhat_vex kernel: out of bounds write due to improper input validation in FingerTipS touchscreen driver leads to local privilege escalation known not affected: 104 2026-06-28T07:30:14+00:00 Vulnerability · Source
CVE-2019-9444 redhat_vex kernel: kernel pointer leak in sync debug fs driver leads to local information disclosure known not affected: 104 2026-06-28T07:30:14+00:00 Vulnerability · Source
CVE-2019-9445 redhat_vex kernel: out of bounds read due to missing bounds check in F2FS driver leads to local information disclosure known not affected: 104 2026-06-28T07:30:14+00:00 Vulnerability · Source