VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294738 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-32854 | redhat_vex | LibVNCServer: LibVNCServer: Denial of Service via specially crafted HTTP requests | known affected: 8 known not affected: 3 | 2026-06-28T07:29:30+00:00 | Vulnerability · Source |
| CVE-2019-3880 | redhat_vex | samba: save registry file outside share as unprivileged user | fixed: 713 known affected: 30 known not affected: 2 | 2026-06-28T07:29:30+00:00 | Vulnerability · Source |
| CVE-2019-3900 | redhat_vex | Kernel: vhost_net: infinite loop while receiving packets leads to DoS | fixed: 922 known not affected: 13 | 2026-06-28T07:29:29+00:00 | Vulnerability · Source |
| CVE-2026-32853 | redhat_vex | LibVNCServer: LibVNCServer: Information disclosure or Denial of Service via heap out-of-bounds read in UltraZip encoding | known affected: 8 known not affected: 3 | 2026-06-28T07:29:29+00:00 | Vulnerability · Source |
| CVE-2019-3901 | redhat_vex | kernel: perf_event_open() and execve() race in setuid programs allows a data leak | fixed: 438 known affected: 26 known not affected: 71 | 2026-06-28T07:29:29+00:00 | Vulnerability · Source |
| CVE-2023-22032 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023) | fixed: 206 known not affected: 93 | 2026-06-28T07:29:28+00:00 | Vulnerability · Source |
| CVE-2019-3886 | redhat_vex | libvirt: virsh domhostname command discloses guest hostname in readonly mode | fixed: 861 known affected: 31 known not affected: 73 | 2026-06-28T07:29:28+00:00 | Vulnerability · Source |
| CVE-2026-3284 | redhat_vex | libvips: vips: libvips: Integer overflow leads to denial of service | known not affected: 1 | 2026-06-28T07:29:27+00:00 | Vulnerability · Source |
| CVE-2019-3884 | redhat_vex | atomic-openshift: cross-namespace owner references can trigger deletions of valid children | fixed: 6 known affected: 76 known not affected: 776 | 2026-06-28T07:29:27+00:00 | Vulnerability · Source |
| CVE-2026-32836 | redhat_vex | dr_libs: mackron / dr_libs Excessive Memory Allocation in PICTURE Metadata Parsing | known not affected: 1 | 2026-06-28T07:29:27+00:00 | Vulnerability · Source |
| CVE-2026-3283 | redhat_vex | libvips: vips: libvips: Information disclosure due to out-of-bounds read | known not affected: 1 | 2026-06-28T07:29:26+00:00 | Vulnerability · Source |
| CVE-2019-3878 | redhat_vex | mod_auth_mellon: authentication bypass in ECP flow | fixed: 266 known not affected: 2 | 2026-06-28T07:29:26+00:00 | Vulnerability · Source |
| CVE-2019-3872 | redhat_vex | picketlink: reflected XSS in SAMLRequest via RelayState parameter | fixed: 394 | 2026-06-28T07:29:25+00:00 | Vulnerability · Source |
| CVE-2019-3873 | redhat_vex | picketlink: URL injection via xinclude parameter | fixed: 394 | 2026-06-28T07:29:25+00:00 | Vulnerability · Source |
| CVE-2026-32814 | redhat_vex | libheif: libheif: Information Disclosure via Crafted HEIF/AVIF Files | known not affected: 1 | 2026-06-28T07:29:25+00:00 | Vulnerability · Source |
| CVE-2023-21946 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) | fixed: 206 known not affected: 123 | 2026-06-28T07:29:25+00:00 | Vulnerability · Source |
| CVE-2019-3867 | redhat_vex | quay: insufficient session expiration | known affected: 2 | 2026-06-28T07:29:25+00:00 | Vulnerability · Source |
| CVE-2019-3864 | redhat_vex | quay: CSRF token does not expire and is leaked in query string | known affected: 1 known not affected: 1 | 2026-06-28T07:29:24+00:00 | Vulnerability · Source |
| CVE-2019-3857 | redhat_vex | libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write | fixed: 885 known affected: 8 | 2026-06-28T07:29:23+00:00 | Vulnerability · Source |
| CVE-2026-3281 | redhat_vex | libvips: vips: libvips: Memory corruption vulnerability via argument index manipulation in vips_bandrank_build | known not affected: 1 | 2026-06-28T07:29:23+00:00 | Vulnerability · Source |
| CVE-2019-3855 | redhat_vex | libssh2: Integer overflow in transport read resulting in out of bounds write | fixed: 885 known affected: 8 | 2026-06-28T07:29:22+00:00 | Vulnerability · Source |
| CVE-2019-3856 | redhat_vex | libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write | fixed: 885 known affected: 8 | 2026-06-28T07:29:22+00:00 | Vulnerability · Source |
| CVE-2026-32766 | redhat_vex | astral-tokio-tar: astral-tokio-tar: Potential archive misinterpretation via malformed PAX extensions | known affected: 10 | 2026-06-28T07:29:21+00:00 | Vulnerability · Source |
| CVE-2026-32714 | redhat_vex | scitokens: SciTokens: Arbitrary SQL command execution via SQL Injection in KeyCache class | known not affected: 1 | 2026-06-28T07:29:20+00:00 | Vulnerability · Source |
| CVE-2026-32739 | redhat_vex | libheif: libheif: Denial of Service via crafted HEIF sequence file | known not affected: 1 | 2026-06-28T07:29:20+00:00 | Vulnerability · Source |
| CVE-2026-32588 | redhat_vex | Apache Cassandra: Apache Cassandra: Denial of Service via repeated password changes | known affected: 5 | 2026-06-28T07:29:19+00:00 | Vulnerability · Source |
| CVE-2026-32635 | redhat_vex | @angular/core: @angular/compiler: Angular has XSS in i18n attribute bindings | known affected: 25 known not affected: 3 | 2026-06-28T07:29:19+00:00 | Vulnerability · Source |
| CVE-2026-32634 | redhat_vex | glances: Central Browser autodiscovery leaks reusable credentials to Zeroconf-spoofed servers | known not affected: 1 | 2026-06-28T07:29:19+00:00 | Vulnerability · Source |
| CVE-2026-32609 | redhat_vex | nicolargo.github.io/glances: Glances has Incomplete Secrets Redaction: /api/v4/args Endpoint Leaks Password Hash and SNMP Credentials | known not affected: 1 | 2026-06-28T07:29:18+00:00 | Vulnerability · Source |
| CVE-2026-32633 | redhat_vex | glances: browser API exposes reusable downstream credentials via '/api/4/serverslist' | known not affected: 1 | 2026-06-28T07:29:18+00:00 | Vulnerability · Source |
| CVE-2026-32610 | redhat_vex | glances: default CORS configuration allows Cross-Origin credential theft | known not affected: 1 | 2026-06-28T07:29:18+00:00 | Vulnerability · Source |
| CVE-2026-32623 | redhat_vex | xrdp: xrdp NeutrinoRDP: Remote Code Execution or Denial of Service via heap-based buffer overflow in fragmented RDP data handling | known not affected: 1 | 2026-06-28T07:29:18+00:00 | Vulnerability · Source |
| CVE-2019-3819 | redhat_vex | kernel: infinite loop in drivers/hid/hid-debug.c:hid_debug_events_read() | known not affected: 104 | 2026-06-28T07:29:17+00:00 | Vulnerability · Source |
| CVE-2026-32595 | redhat_vex | traefik: Traefik: Username enumeration via timing attack in BasicAuth middleware | known affected: 1 | 2026-06-28T07:29:17+00:00 | Vulnerability · Source |
| CVE-2019-3003 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Oct 2019) | fixed: 291 known not affected: 109 | 2026-06-28T07:29:16+00:00 | Vulnerability · Source |
| CVE-2019-3813 | redhat_vex | spice: Off-by-one error in array access in spice/server/memslot.c | fixed: 44 known not affected: 3 | 2026-06-28T07:29:16+00:00 | Vulnerability · Source |
| CVE-2019-3804 | redhat_vex | cockpit: Crash when parsing invalid base64 headers | fixed: 98 known not affected: 20 | 2026-06-28T07:29:15+00:00 | Vulnerability · Source |
| CVE-2019-3009 | redhat_vex | mysql: Server: Connection unspecified vulnerability (CPU Oct 2019) | fixed: 337 known not affected: 109 | 2026-06-28T07:29:15+00:00 | Vulnerability · Source |
| CVE-2019-2998 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) | fixed: 337 known not affected: 109 | 2026-06-28T07:29:15+00:00 | Vulnerability · Source |
| CVE-2026-3230 | redhat_vex | wolfssl: wolfSSL: Confidentiality compromise via missing cryptographic step in TLS 1.3 HelloRetryRequest handshake | known not affected: 1 | 2026-06-28T07:29:12+00:00 | Vulnerability · Source |
| CVE-2019-3011 | redhat_vex | mysql: Server: C API unspecified vulnerability (CPU Oct 2019) | fixed: 337 known not affected: 109 | 2026-06-28T07:29:12+00:00 | Vulnerability · Source |
| CVE-2019-3004 | redhat_vex | mysql: Server: Parser unspecified vulnerability (CPU Oct 2019) | fixed: 337 known not affected: 109 | 2026-06-28T07:29:11+00:00 | Vulnerability · Source |
| CVE-2019-2997 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Oct 2019) | fixed: 337 known not affected: 109 | 2026-06-28T07:29:11+00:00 | Vulnerability · Source |
| CVE-2019-2982 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) | fixed: 337 known not affected: 109 | 2026-06-28T07:29:11+00:00 | Vulnerability · Source |
| CVE-2019-2999 | redhat_vex | OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765) | fixed: 901 | 2026-06-28T07:29:11+00:00 | Vulnerability · Source |
| CVE-2019-2996 | redhat_vex | JDK: unspecified vulnerability fixed in 8u221 (Deployment) | fixed: 114 | 2026-06-28T07:29:10+00:00 | Vulnerability · Source |
| CVE-2019-2993 | redhat_vex | mysql: Server: C API unspecified vulnerability (CPU Oct 2019) | fixed: 337 known affected: 8 known not affected: 101 | 2026-06-28T07:29:08+00:00 | Vulnerability · Source |
| CVE-2019-2983 | redhat_vex | OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915) | fixed: 901 | 2026-06-28T07:29:07+00:00 | Vulnerability · Source |
| CVE-2019-2992 | redhat_vex | OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597) | fixed: 901 | 2026-06-28T07:29:07+00:00 | Vulnerability · Source |
| CVE-2019-2988 | redhat_vex | OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292) | fixed: 901 | 2026-06-28T07:29:07+00:00 | Vulnerability · Source |