VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296191 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-34591 | redhat_vex | github.com/python-poetry/poetry: Poetry: Arbitrary file write via crafted package installation | known not affected: 5 | 2026-06-28T07:31:15+00:00 | Vulnerability · Source |
| CVE-2026-34544 | redhat_vex | OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing | known affected: 11 known not affected: 7 | 2026-06-28T07:31:14+00:00 | Vulnerability · Source |
| CVE-2026-34531 | redhat_vex | flask-httpauth: token verification callback invoked when missing or empty token was given by client | known not affected: 1 | 2026-06-28T07:31:14+00:00 | Vulnerability · Source |
| CVE-2026-34520 | redhat_vex | aiohttp: AIOHTTP: Header injection vulnerability due to improper character handling | known affected: 88 | 2026-06-28T07:31:14+00:00 | Vulnerability · Source |
| CVE-2026-34517 | redhat_vex | aiohttp: AIOHTTP: Denial of Service via large multipart form fields | known affected: 88 | 2026-06-28T07:31:13+00:00 | Vulnerability · Source |
| CVE-2026-34519 | redhat_vex | aiohttp: aiohttp: Header injection vulnerability via reason parameter | known affected: 88 | 2026-06-28T07:31:13+00:00 | Vulnerability · Source |
| CVE-2026-34516 | redhat_vex | aiohttp: AIOHTTP: Denial of Service via excessive multipart headers | known affected: 88 | 2026-06-28T07:31:11+00:00 | Vulnerability · Source |
| CVE-2020-10773 | redhat_vex | kernel: kernel stack information leak on s390/s390x | fixed: 120 known affected: 33 known not affected: 39 | 2026-06-28T07:31:11+00:00 | Vulnerability · Source |
| CVE-2026-34514 | redhat_vex | aiohttp: AIOHTTP: Header Injection via content_type parameter manipulation | known affected: 88 | 2026-06-28T07:31:11+00:00 | Vulnerability · Source |
| CVE-2020-10942 | redhat_vex | kernel: vhost-net: stack overflow in get_raw_socket while checking sk_family field | fixed: 354 known affected: 30 known not affected: 13 | 2026-06-28T07:31:11+00:00 | Vulnerability · Source |
| CVE-2020-10781 | redhat_vex | kernel: zram sysfs resource consumption | known affected: 104 | 2026-06-28T07:31:10+00:00 | Vulnerability · Source |
| CVE-2020-13249 | redhat_vex | mariadb-connector-c: Improper validation of content in a OK packet received from server | fixed: 1157 known not affected: 10 | 2026-06-28T07:31:09+00:00 | Vulnerability · Source |
| CVE-2020-10774 | redhat_vex | kernel: possibility of memory disclosure when reading the file /proc/sys/kernel/rh_features | fixed: 150 known not affected: 56 | 2026-06-28T07:31:07+00:00 | Vulnerability · Source |
| CVE-2020-10770 | redhat_vex | keycloak: Default Client configuration is vulnerable to SSRF using "request_uri" parameter | fixed: 10 known not affected: 5 | 2026-06-28T07:31:06+00:00 | Vulnerability · Source |
| CVE-2020-10766 | redhat_vex | kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off the SSBD protection. | fixed: 353 known not affected: 60 | 2026-06-28T07:31:03+00:00 | Vulnerability · Source |
| CVE-2020-10761 | redhat_vex | QEMU: nbd: reachable assertion failure in nbd_negotiate_send_rep_verr via remote client | fixed: 918 known affected: 33 known not affected: 60 | 2026-06-28T07:31:03+00:00 | Vulnerability · Source |
| CVE-2026-34278 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | fixed: 156 known affected: 32 known not affected: 9 | 2026-06-28T07:31:01+00:00 | Vulnerability · Source |
| CVE-2026-34272 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | known not affected: 64 | 2026-06-28T07:31:01+00:00 | Vulnerability · Source |
| CVE-2020-10757 | redhat_vex | kernel: kernel: DAX hugepages not considered during mremap | fixed: 766 known affected: 16 known not affected: 31 | 2026-06-28T07:31:01+00:00 | Vulnerability · Source |
| CVE-2020-10755 | redhat_vex | openstack-cinder: Improper handling of ScaleIO backend credentials | fixed: 12 known affected: 6 | 2026-06-28T07:31:01+00:00 | Vulnerability · Source |
| CVE-2020-10751 | redhat_vex | kernel: SELinux netlink permission check bypass | fixed: 354 known affected: 43 | 2026-06-28T07:31:00+00:00 | Vulnerability · Source |
| CVE-2026-34232 | redhat_vex | Firebird: Firebird: Denial of Service via crafted op_response packet | known not affected: 1 | 2026-06-28T07:30:59+00:00 | Vulnerability · Source |
| CVE-2026-34214 | redhat_vex | trino: iceberg: Trino Iceberg Connector: Information disclosure via accessible credentials | known not affected: 1 | 2026-06-28T07:30:59+00:00 | Vulnerability · Source |
| CVE-2020-10748 | redhat_vex | keycloak: top-level navigations to data URLs resulting in XSS are possible (incomplete fix of CVE-2020-1697) | fixed: 1 known affected: 1 known not affected: 5 | 2026-06-28T07:30:59+00:00 | Vulnerability · Source |
| CVE-2020-10735 | redhat_vex | python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS | fixed: 685 known affected: 41 known not affected: 93 | 2026-06-28T07:30:58+00:00 | Vulnerability · Source |
| CVE-2026-34091 | redhat_vex | mediawiki: user localization leaked by AbuseFilter + EventStream | known not affected: 1 | 2026-06-28T07:30:56+00:00 | Vulnerability · Source |
| CVE-2020-10724 | redhat_vex | dpdk: librte_vhost Missing inputs validation in Vhost-crypto | fixed: 85 known affected: 10 known not affected: 134 | 2026-06-28T07:30:56+00:00 | Vulnerability · Source |
| CVE-2026-34088 | redhat_vex | mediawiki: RecentChanges entries expose suppressed content via generated log page html | known not affected: 1 | 2026-06-28T07:30:56+00:00 | Vulnerability · Source |
| CVE-2026-34080 | redhat_vex | xdg-dbus-proxy: xdg-dbus-proxy: Information disclosure due to policy parser vulnerability | known affected: 2 | 2026-06-28T07:30:55+00:00 | Vulnerability · Source |
| CVE-2020-10722 | redhat_vex | dpdk: librte_vhost Integer overflow in vhost_user_set_log_base() | fixed: 176 known affected: 38 known not affected: 94 | 2026-06-28T07:30:55+00:00 | Vulnerability · Source |
| CVE-2020-10717 | redhat_vex | QEMU: virtiofsd: guest may open maximum file descriptor to cause DoS | fixed: 918 known affected: 33 known not affected: 31 | 2026-06-28T07:30:54+00:00 | Vulnerability · Source |
| CVE-2026-34042 | redhat_vex | act: act: Arbitrary Code Execution via unauthorized cache manipulation | known not affected: 1 | 2026-06-28T07:30:51+00:00 | Vulnerability · Source |
| CVE-2020-10705 | redhat_vex | undertow: Memory exhaustion issue in HttpReadListener via "Expect: 100-continue" header | fixed: 1415 known affected: 1 known not affected: 3 | 2026-06-28T07:30:51+00:00 | Vulnerability · Source |
| CVE-2026-34041 | redhat_vex | act: github.com/nektos/act: act: Privilege escalation and arbitrary code execution via environment variable injection | known not affected: 1 | 2026-06-28T07:30:51+00:00 | Vulnerability · Source |
| CVE-2020-10690 | redhat_vex | kernel: use-after-free in cdev_put() when a PTP device is removed while it's chardev is open | fixed: 354 known affected: 42 known not affected: 1 | 2026-06-28T07:30:49+00:00 | Vulnerability · Source |
| CVE-2026-33993 | redhat_vex | Locutus: Locutus: Prototype Pollution and Denial of Service vulnerability in unserialize() function | known affected: 6 | 2026-06-28T07:30:49+00:00 | Vulnerability · Source |
| CVE-2024-41065 | redhat_vex | kernel: powerpc/pseries: Whitelist dtl slub object for copying to userspace | fixed: 679 known affected: 80 known not affected: 8 | 2026-06-28T07:30:48+00:00 | Vulnerability · Source |
| CVE-2020-10379 | redhat_vex | python-pillow: two buffer overflows in libImaging/TiffDecode.c due to small buffers allocated in ImagingLibTiffDecode() | fixed: 11 known not affected: 18 | 2026-06-28T07:30:46+00:00 | Vulnerability · Source |
| CVE-2026-33977 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via malformed IMA ADPCM audio data | known affected: 31 | 2026-06-28T07:30:46+00:00 | Vulnerability · Source |
| CVE-2020-10378 | redhat_vex | python-pillow: an out-of-bounds read in libImaging/PcxDecode.c can occur when reading PCX files | fixed: 11 known affected: 18 | 2026-06-28T07:30:46+00:00 | Vulnerability · Source |
| CVE-2026-33996 | redhat_vex | LibJWT: LibJWT: Denial of Service via crafted JSON Web Key (JWK) files | known not affected: 1 | 2026-06-28T07:30:46+00:00 | Vulnerability · Source |
| CVE-2023-23920 | redhat_vex | Node.js: insecure loading of ICU data through ICU_DATA environment variable | fixed: 288 known affected: 1 known not affected: 16 | 2026-06-28T07:30:45+00:00 | Vulnerability · Source |
| CVE-2020-10136 | redhat_vex | kernel: IP-in-IP protocol routes arbitrary traffic by default | known not affected: 93 | 2026-06-28T07:30:45+00:00 | Vulnerability · Source |
| CVE-2026-33994 | redhat_vex | locutus: Locutus: Prototype pollution vulnerability in parse_str function | known not affected: 6 | 2026-06-28T07:30:44+00:00 | Vulnerability · Source |
| CVE-2026-33952 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via unvalidated authentication length field | known affected: 31 | 2026-06-28T07:30:42+00:00 | Vulnerability · Source |
| CVE-2026-33945 | redhat_vex | incus: Incus: Privilege escalation and denial of service via path traversal in systemd credential configuration | known not affected: 1 | 2026-06-28T07:30:41+00:00 | Vulnerability · Source |
| CVE-2020-0465 | redhat_vex | kernel: out of bounds write in hid-multitouch.c may lead to escalation of privilege | fixed: 185 known affected: 16 known not affected: 169 | 2026-06-28T07:30:39+00:00 | Vulnerability · Source |
| CVE-2020-0431 | redhat_vex | kernel: possible out of bounds write in kbd_keycode of keyboard.c | fixed: 150 known affected: 44 known not affected: 106 | 2026-06-28T07:30:38+00:00 | Vulnerability · Source |
| CVE-2020-0427 | redhat_vex | kernel: out-of-bounds reads in pinctrl subsystem. | fixed: 335 known not affected: 31 | 2026-06-28T07:30:37+00:00 | Vulnerability · Source |
| CVE-2019-9948 | redhat_vex | python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms | fixed: 874 known affected: 16 known not affected: 42 | 2026-06-28T07:30:36+00:00 | Vulnerability · Source |