VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296181 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-3531 | redhat_vex | drupal: OpenID Connect / OAuth client: Drupal OpenID Connect / OAuth client: Authentication Bypass via an alternate path or channel | known not affected: 1 | 2026-06-28T07:31:38+00:00 | Vulnerability · Source |
| CVE-2026-35239 | redhat_vex | mysql: DML unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:31:38+00:00 | Vulnerability · Source |
| CVE-2026-3527 | redhat_vex | AJAX Dashboard: Drupal: Drupal AJAX Dashboard: Unauthorized access via missing authentication | known not affected: 1 | 2026-06-28T07:31:38+00:00 | Vulnerability · Source |
| CVE-2026-3530 | redhat_vex | OpenID Connect / OAuth client: Drupal: Drupal OpenID Connect / OAuth client: Information disclosure via Server-Side Request Forgery | known not affected: 1 | 2026-06-28T07:31:38+00:00 | Vulnerability · Source |
| CVE-2026-35339 | redhat_vex | rust-coreutils: chmod: false success exit code in recursive mode | known not affected: 1 | 2026-06-28T07:31:38+00:00 | Vulnerability · Source |
| CVE-2026-3532 | redhat_vex | OpenID Connect / OAuth client: Drupal: Drupal OpenID Connect / OAuth client: Privilege Escalation via improper case sensitivity handling | known not affected: 1 | 2026-06-28T07:31:38+00:00 | Vulnerability · Source |
| CVE-2026-3528 | redhat_vex | Calculation Fields: Drupal: Calculation Fields: Cross-site Scripting (XSS) via improper input handling | known not affected: 1 | 2026-06-28T07:31:38+00:00 | Vulnerability · Source |
| CVE-2023-21940 | redhat_vex | mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023) | fixed: 206 known not affected: 123 | 2026-06-28T07:31:38+00:00 | Vulnerability · Source |
| CVE-2026-35240 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:31:38+00:00 | Vulnerability · Source |
| CVE-2026-35237 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:31:37+00:00 | Vulnerability · Source |
| CVE-2026-35236 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:31:37+00:00 | Vulnerability · Source |
| CVE-2026-35238 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T07:31:37+00:00 | Vulnerability · Source |
| CVE-2026-35234 | redhat_vex | mysql: Partition unspecified vulnerability (CPU Apr 2026) | known not affected: 64 | 2026-06-28T07:31:36+00:00 | Vulnerability · Source |
| CVE-2026-35235 | redhat_vex | mysql: GIS unspecified vulnerability (CPU Apr 2026) | known not affected: 64 | 2026-06-28T07:31:36+00:00 | Vulnerability · Source |
| CVE-2026-35215 | redhat_vex | Firebird: Firebird: Denial of Service via crafted slice packet causing division by zero | known not affected: 1 | 2026-06-28T07:31:36+00:00 | Vulnerability · Source |
| CVE-2026-35186 | redhat_vex | Wasmtime: github.com/bytecodealliance/wasmtime: Wasmtime: Denial of Service and potential information disclosure via Winch compiler type confusion | known affected: 2 | 2026-06-28T07:31:36+00:00 | Vulnerability · Source |
| CVE-2026-35166 | redhat_vex | hugo: github.com/gohugoio/hugo: Hugo: Information disclosure and content manipulation via improper markdown link escaping | fixed: 3 known affected: 7 | 2026-06-28T07:31:34+00:00 | Vulnerability · Source |
| CVE-2020-12363 | redhat_vex | kernel: Improper input validation in some Intel(R) Graphics Drivers | fixed: 357 known affected: 33 known not affected: 140 | 2026-06-28T07:31:32+00:00 | Vulnerability · Source |
| CVE-2026-34987 | redhat_vex | wasmtime: bytecodealliance/wasmtime: Wasmtime: Arbitrary code execution via incorrect memory offset handling in Winch compiler | known not affected: 2 | 2026-06-28T07:31:32+00:00 | Vulnerability · Source |
| CVE-2026-34984 | redhat_vex | External Secrets Operator: github.com/external-secrets/external-secrets: External Secrets Operator: Information disclosure via DNS exfiltration in v2 template engine | known affected: 4 | 2026-06-28T07:31:30+00:00 | Vulnerability · Source |
| CVE-2026-34983 | redhat_vex | wasmtime: Wasmtime: Use-after-free due to unsound linker cloning | known affected: 2 | 2026-06-28T07:31:30+00:00 | Vulnerability · Source |
| CVE-2020-11668 | redhat_vex | kernel: mishandles invalid descriptors in drivers/media/usb/gspca/xirlink_cit.c | fixed: 335 known affected: 42 known not affected: 1 | 2026-06-28T07:31:29+00:00 | Vulnerability · Source |
| CVE-2020-11935 | redhat_vex | kernel: panic hit by kube-proxy iptables-save/restore | known not affected: 93 | 2026-06-28T07:31:28+00:00 | Vulnerability · Source |
| CVE-2024-50228 | redhat_vex | kernel: mm: shmem: fix data-race in shmem_getattr() | fixed: 305 known affected: 112 | 2026-06-28T07:31:28+00:00 | Vulnerability · Source |
| CVE-2026-34946 | redhat_vex | wasmtime: Wasmtime: Denial of Service via WebAssembly compilation error | known affected: 1 known not affected: 1 | 2026-06-28T07:31:27+00:00 | Vulnerability · Source |
| CVE-2020-11869 | redhat_vex | qemu: integer overflow in ati_2d_blt() in hw/display/ati-2d.c could lead to DoS | known affected: 2 known not affected: 92 | 2026-06-28T07:31:26+00:00 | Vulnerability · Source |
| CVE-2026-34971 | redhat_vex | wasmtime: cranelift: Wasmtime: Sandbox escape due to miscompiled heap access on aarch64 | known affected: 1 known not affected: 1 | 2026-06-28T07:31:26+00:00 | Vulnerability · Source |
| CVE-2020-11669 | redhat_vex | kernel: powerpc: guest can cause DoS on POWER9 KVM hosts | fixed: 23 known not affected: 105 | 2026-06-28T07:31:24+00:00 | Vulnerability · Source |
| CVE-2026-34839 | redhat_vex | Glances: Glances: Information disclosure via permissive Cross-Origin Resource Sharing (CORS) policy in REST API | known not affected: 1 | 2026-06-28T07:31:24+00:00 | Vulnerability · Source |
| CVE-2026-34941 | redhat_vex | wasmtime: Wasmtime: Denial of Service and potential information disclosure via incorrect UTF-16 string validation | known affected: 1 known not affected: 1 | 2026-06-28T07:31:24+00:00 | Vulnerability · Source |
| CVE-2026-34942 | redhat_vex | wasmtime: Wasmtime: Denial of Service via improper string alignment verification | known affected: 2 | 2026-06-28T07:31:24+00:00 | Vulnerability · Source |
| CVE-2020-11612 | redhat_vex | netty: compression/decompression codecs don't enforce limits on buffer allocation sizes | fixed: 413 known affected: 9 known not affected: 1542 | 2026-06-28T07:31:23+00:00 | Vulnerability · Source |
| CVE-2020-11538 | redhat_vex | python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2 | fixed: 64 known not affected: 13 | 2026-06-28T07:31:21+00:00 | Vulnerability · Source |
| CVE-2020-11565 | redhat_vex | kernel: out-of-bounds write in mpol_parse_str function in mm/mempolicy.c | fixed: 379 known affected: 26 known not affected: 2 | 2026-06-28T07:31:21+00:00 | Vulnerability · Source |
| CVE-2020-11494 | redhat_vex | kernel: transmission of uninitialized data allows attackers to read sensitive information | known affected: 49 known not affected: 55 | 2026-06-28T07:31:20+00:00 | Vulnerability · Source |
| CVE-2020-1147 | redhat_vex | dotnet: XML source markup processing remote code execution | fixed: 121 | 2026-06-28T07:31:20+00:00 | Vulnerability · Source |
| CVE-2020-11102 | redhat_vex | QEMU: tulip: OOB access in tulip_copy_tx_buffers | known not affected: 64 | 2026-06-28T07:31:19+00:00 | Vulnerability · Source |
| CVE-2020-11100 | redhat_vex | haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes | fixed: 52 known not affected: 4 | 2026-06-28T07:31:18+00:00 | Vulnerability · Source |
| CVE-2020-11078 | redhat_vex | python-httplib2: CRLF injection via an attacker controlled unescaped part of uri for httplib2.Http.request function | fixed: 279 known affected: 9 | 2026-06-28T07:31:17+00:00 | Vulnerability · Source |
| CVE-2020-10994 | redhat_vex | python-pillow: multiple out-of-bounds reads via a crafted JP2 file | fixed: 11 known affected: 5 known not affected: 13 | 2026-06-28T07:31:16+00:00 | Vulnerability · Source |
| CVE-2026-34591 | redhat_vex | github.com/python-poetry/poetry: Poetry: Arbitrary file write via crafted package installation | known not affected: 5 | 2026-06-28T07:31:15+00:00 | Vulnerability · Source |
| CVE-2026-34544 | redhat_vex | OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing | known affected: 11 known not affected: 7 | 2026-06-28T07:31:14+00:00 | Vulnerability · Source |
| CVE-2026-34531 | redhat_vex | flask-httpauth: token verification callback invoked when missing or empty token was given by client | known not affected: 1 | 2026-06-28T07:31:14+00:00 | Vulnerability · Source |
| CVE-2026-34520 | redhat_vex | aiohttp: AIOHTTP: Header injection vulnerability due to improper character handling | known affected: 88 | 2026-06-28T07:31:14+00:00 | Vulnerability · Source |
| CVE-2026-34517 | redhat_vex | aiohttp: AIOHTTP: Denial of Service via large multipart form fields | known affected: 88 | 2026-06-28T07:31:13+00:00 | Vulnerability · Source |
| CVE-2026-34519 | redhat_vex | aiohttp: aiohttp: Header injection vulnerability via reason parameter | known affected: 88 | 2026-06-28T07:31:13+00:00 | Vulnerability · Source |
| CVE-2026-34516 | redhat_vex | aiohttp: AIOHTTP: Denial of Service via excessive multipart headers | known affected: 88 | 2026-06-28T07:31:11+00:00 | Vulnerability · Source |
| CVE-2020-10773 | redhat_vex | kernel: kernel stack information leak on s390/s390x | fixed: 120 known affected: 33 known not affected: 39 | 2026-06-28T07:31:11+00:00 | Vulnerability · Source |
| CVE-2026-34514 | redhat_vex | aiohttp: AIOHTTP: Header Injection via content_type parameter manipulation | known affected: 88 | 2026-06-28T07:31:11+00:00 | Vulnerability · Source |
| CVE-2020-10942 | redhat_vex | kernel: vhost-net: stack overflow in get_raw_socket while checking sk_family field | fixed: 354 known affected: 30 known not affected: 13 | 2026-06-28T07:31:11+00:00 | Vulnerability · Source |