VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296181 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-13379 | redhat_vex | grafana: SSRF incorrect access control vulnerability allows unauthenticated users to make grafana send HTTP requests to any URL | fixed: 258 known affected: 4 known not affected: 17 | 2026-06-28T07:31:53+00:00 | Vulnerability · Source |
| CVE-2026-35541 | redhat_vex | roundcubemail: Roundcube Webmail: Unauthorized password change due to type confusion vulnerability | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35543 | redhat_vex | roundcubemail: Roundcube Webmail: Information disclosure and access-control bypass via animated SVG in email | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35538 | redhat_vex | Roundcube Webmail: Roundcube Webmail: IMAP injection and CSRF bypass due to unsanitized search arguments | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35537 | redhat_vex | roundcubemail: Roundcube Webmail: Arbitrary file write via unsafe deserialization in session handler | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35539 | redhat_vex | roundcubemail: Roundcube Webmail: Cross-Site Scripting via HTML attachment preview | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35544 | redhat_vex | roundcubemail: Roundcube Webmail: Security mitigation bypass via insufficient CSS sanitization | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35542 | redhat_vex | roundcubemail: Roundcube Webmail: Information disclosure or access-control bypass via crafted email background attribute | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35545 | redhat_vex | roundcubemail: Roundcube Webmail: Information disclosure and access-control bypass via SVG content in email. | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35444 | redhat_vex | SDL_image: SDL_image: Information disclosure via crafted XCF files | known not affected: 1 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2026-35515 | redhat_vex | @nestjs/core: Nest: Server-Sent Events (SSE) injection and spoofing via unsanitized newline characters | known affected: 2 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2026-3544 | redhat_vex | chromium-browser: Heap buffer overflow in WebCodecs | known not affected: 1 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2026-3545 | redhat_vex | chromium-browser: Insufficient data validation in Navigation | known not affected: 1 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2020-12829 | redhat_vex | qemu: OOB read and write due to integer overflow in sm501_2d_operation() in hw/display/sm501.c | known not affected: 70 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2020-12826 | redhat_vex | kernel: possible to send arbitrary signals to a privileged (suidroot) parent process | fixed: 354 known affected: 43 | 2026-06-28T07:31:50+00:00 | Vulnerability · Source |
| CVE-2020-12769 | redhat_vex | kernel: DoS via concurrent calls to dw_spi_irq and dw_spi_transfer_one functions in drivers/spi/spi-dw.c | known affected: 32 known not affected: 72 | 2026-06-28T07:31:48+00:00 | Vulnerability · Source |
| CVE-2026-3540 | redhat_vex | chromium-browser: Inappropriate implementation in WebAudio | known not affected: 1 | 2026-06-28T07:31:48+00:00 | Vulnerability · Source |
| CVE-2020-12771 | redhat_vex | kernel: deadlock if a coalescing operation fails in btree_gc_coalesce function in drivers/md/bcache/btree.c | known not affected: 104 | 2026-06-28T07:31:48+00:00 | Vulnerability · Source |
| CVE-2020-12768 | redhat_vex | kernel: memory leak in svm_cpu_init function in arch/x86/kvm/svm.c | known affected: 48 known not affected: 56 | 2026-06-28T07:31:48+00:00 | Vulnerability · Source |
| CVE-2026-35381 | redhat_vex | rust-coreutils: cut: local logic error and data integrity issue in output filtering | known not affected: 1 | 2026-06-28T07:31:45+00:00 | Vulnerability · Source |
| CVE-2026-35346 | redhat_vex | rust-coreutils: comm: silent data corruption via lossy UTF-8 normalization | known not affected: 1 | 2026-06-28T07:31:45+00:00 | Vulnerability · Source |
| CVE-2023-22111 | redhat_vex | mysql: Server: UDF unspecified vulnerability (CPU Oct 2023) | fixed: 206 known not affected: 93 | 2026-06-28T07:31:44+00:00 | Vulnerability · Source |
| CVE-2026-35380 | redhat_vex | rust-coreutils: cut: local logic error and data integrity issue in delimiter parsing | known not affected: 1 | 2026-06-28T07:31:44+00:00 | Vulnerability · Source |
| CVE-2020-12659 | redhat_vex | kernel: xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write which could result in crash and data coruption | fixed: 150 known not affected: 56 | 2026-06-28T07:31:44+00:00 | Vulnerability · Source |
| CVE-2020-12657 | redhat_vex | kernel: use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body | fixed: 364 known not affected: 56 | 2026-06-28T07:31:44+00:00 | Vulnerability · Source |
| CVE-2020-12655 | redhat_vex | kernel: sync of excessive duration via an XFS v5 image with crafted metadata | fixed: 176 known affected: 55 | 2026-06-28T07:31:43+00:00 | Vulnerability · Source |
| CVE-2026-35379 | redhat_vex | rust-coreutils: uutils coreutils tr utility: Data modification due to incorrect character class definitions | known not affected: 1 | 2026-06-28T07:31:43+00:00 | Vulnerability · Source |
| CVE-2020-12653 | redhat_vex | kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in drivers/net/wireless/marvell/mwifiex/scan.c | fixed: 999 known affected: 16 known not affected: 23 | 2026-06-28T07:31:43+00:00 | Vulnerability · Source |
| CVE-2026-35369 | redhat_vex | rust-coreutils: kill: system-wide process termination and denial of service via argument misinterpretation | known not affected: 1 | 2026-06-28T07:31:42+00:00 | Vulnerability · Source |
| CVE-2026-35361 | redhat_vex | rust-coreutils: mknod: security label inconsistency and broken cleanup on SELinux systems | known not affected: 1 | 2026-06-28T07:31:42+00:00 | Vulnerability · Source |
| CVE-2020-12464 | redhat_vex | kernel: use-after-free in usb_sg_cancel function in drivers/usb/core/message.c | fixed: 150 known affected: 56 | 2026-06-28T07:31:42+00:00 | Vulnerability · Source |
| CVE-2026-35376 | redhat_vex | rust-coreutils: chcon: security bypass and mandatory access control (MAC) inconsistency via TOCTOU race condition | known not affected: 1 | 2026-06-28T07:31:42+00:00 | Vulnerability · Source |
| CVE-2026-35341 | redhat_vex | rust-coreutils: uutils coreutils mkfifo: Information disclosure via unauthorized file permission modification | known not affected: 1 | 2026-06-28T07:31:42+00:00 | Vulnerability · Source |
| CVE-2026-35364 | redhat_vex | rust-coreutils: uutils coreutils mv utility: Arbitrary File Overwrite via TOCTOU Race Condition | known not affected: 1 | 2026-06-28T07:31:42+00:00 | Vulnerability · Source |
| CVE-2026-35358 | redhat_vex | rust-coreutils: cp: semantic loss and potential denial of service with -R via device node stream reading | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35353 | redhat_vex | rust-coreutils: mkdir: permission exposure race condition with -m | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35348 | redhat_vex | rust-coreutils: sort: local denial of service via forced UTF-8 parsing | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35354 | redhat_vex | rust-coreutils: uutils coreutils mv utility: Privilege escalation via TOCTOU vulnerability during cross-device moves | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35363 | redhat_vex | rust-coreutils: rm: safeguard bypass via improper path normalization | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35351 | redhat_vex | rust-coreutils: mv: silent ownership loss in cross-device operations | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35360 | redhat_vex | rust-coreutils: touch: arbitrary file truncation via TOCTOU race condition | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35373 | redhat_vex | rust-coreutils: ln: local denial of service via improper handling of non-UTF-8 filenames | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35357 | redhat_vex | rust-coreutils: cp: information disclosure via permission handling race | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35366 | redhat_vex | rust-coreutils: uutils coreutils printenv: Security Inspection Bypass via invalid UTF-8 environment variables | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35362 | redhat_vex | rust-coreutils: safe_traversal: missing TOCTOU protection on non-Linux Unix platforms | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35338 | redhat_vex | rust-coreutils: chmod: path traversal bypass of --preserve-root | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35372 | redhat_vex | rust-coreutils: ln: security bypass via improper handling of the --no-dereference flag | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35340 | redhat_vex | rust-coreutils: chown: chgrp: false success exit code in recursive mode | known not affected: 1 | 2026-06-28T07:31:40+00:00 | Vulnerability · Source |
| CVE-2020-6439 | redhat_vex | chromium-browser: Insufficient policy enforcement in navigations | fixed: 14 | 2026-06-28T07:31:40+00:00 | Vulnerability · Source |
| CVE-2026-3525 | redhat_vex | Drupal: File Access Fix (deprecated): Drupal File Access Fix: Unauthorized access via incorrect authorization | known not affected: 1 | 2026-06-28T07:31:38+00:00 | Vulnerability · Source |