VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296254 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-28799 | redhat_vex | PJSIP: PJSIP: Denial of Service via heap use-after-free in event subscription | known not affected: 1 | 2026-06-28T07:23:56+00:00 | Vulnerability · Source |
| CVE-2019-10639 | redhat_vex | Kernel: net: using kernel space address bits to derive IP ID may potentially break KASLR | fixed: 477 known affected: 28 known not affected: 15 | 2026-06-28T07:23:55+00:00 | Vulnerability · Source |
| CVE-2019-10746 | redhat_vex | nodejs-mixin-deep: prototype pollution in function mixin-deep | fixed: 86 known affected: 7 known not affected: 6 | 2026-06-28T07:23:55+00:00 | Vulnerability · Source |
| CVE-2026-28741 | redhat_vex | mattermost: CSRF protection bypass allows updating a user's authentication method | known not affected: 1 | 2026-06-28T07:23:53+00:00 | Vulnerability · Source |
| CVE-2019-10638 | redhat_vex | Kernel: net: weak IP ID generation leads to remote device tracking | fixed: 361 known affected: 28 known not affected: 15 | 2026-06-28T07:23:53+00:00 | Vulnerability · Source |
| CVE-2026-28407 | redhat_vex | malcontent: malcontent: Malicious content may remain unexamined due to improper handling of failed archive extraction. | known not affected: 1 | 2026-06-28T07:23:50+00:00 | Vulnerability · Source |
| CVE-2019-2025 | redhat_vex | kernel: Use-after-free due to race condition in android/binder.c | known not affected: 104 | 2026-06-28T07:23:50+00:00 | Vulnerability · Source |
| CVE-2019-10202 | redhat_vex | codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities | fixed: 20 known affected: 12 known not affected: 477 | 2026-06-28T07:23:49+00:00 | Vulnerability · Source |
| CVE-2019-10193 | redhat_vex | redis: Stack buffer overflow in HyperLogLog triggered by malicious client | fixed: 56 known not affected: 20 | 2026-06-28T07:23:48+00:00 | Vulnerability · Source |
| CVE-2019-10198 | redhat_vex | foreman: authorization bypasses in foreman-tasks leading to information disclosure | fixed: 1215 | 2026-06-28T07:23:47+00:00 | Vulnerability · Source |
| CVE-2026-28416 | redhat_vex | Gradio: Gradio: Server-Side Request Forgery allows access to internal services via malicious Space loading | known not affected: 1 | 2026-06-28T07:23:47+00:00 | Vulnerability · Source |
| CVE-2019-10161 | redhat_vex | libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API | fixed: 1717 known not affected: 2 | 2026-06-28T07:23:45+00:00 | Vulnerability · Source |
| CVE-2026-28348 | redhat_vex | lxml_html_clean: lxml_html_clean: Cross-Site Scripting (XSS) via CSS filter bypass | known not affected: 1 | 2026-06-28T07:23:42+00:00 | Vulnerability · Source |
| CVE-2019-10160 | redhat_vex | python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc | fixed: 264 known affected: 8 known not affected: 74 | 2026-06-28T07:23:42+00:00 | Vulnerability · Source |
| CVE-2026-28343 | redhat_vex | ckeditor: CKEditor: Unauthorized JavaScript code execution via specially crafted markup in General HTML Support | known not affected: 1 | 2026-06-28T07:23:41+00:00 | Vulnerability · Source |
| CVE-2026-28351 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF with RunLengthDecode filter | known affected: 4 known not affected: 5 | 2026-06-28T07:23:41+00:00 | Vulnerability · Source |
| CVE-2019-10140 | redhat_vex | kernel: overlayfs: NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c | fixed: 204 known affected: 16 known not affected: 75 | 2026-06-28T07:23:40+00:00 | Vulnerability · Source |
| CVE-2019-10139 | redhat_vex | cockpit-ovirt: admin and appliance passwords saved in plain text variable file during HE deployment | fixed: 15 | 2026-06-28T07:23:40+00:00 | Vulnerability · Source |
| CVE-2019-10130 | redhat_vex | postgresql: Selectivity estimators bypass row security policies | fixed: 997 known affected: 12 known not affected: 53 | 2026-06-28T07:23:40+00:00 | Vulnerability · Source |
| CVE-2026-28224 | redhat_vex | Firebird: Firebird: Denial of Service due to null pointer dereference from unauthenticated packet | known not affected: 1 | 2026-06-28T07:23:40+00:00 | Vulnerability · Source |
| CVE-2026-2801 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component | known not affected: 23 | 2026-06-28T07:23:38+00:00 | Vulnerability · Source |
| CVE-2026-2805 | redhat_vex | firefox: thunderbird: Invalid pointer in the DOM: Core & HTML component | known not affected: 18 | 2026-06-28T07:23:38+00:00 | Vulnerability · Source |
| CVE-2026-2802 | redhat_vex | firefox: thunderbird: Race condition in the JavaScript: GC component | known not affected: 23 | 2026-06-28T07:23:38+00:00 | Vulnerability · Source |
| CVE-2026-2803 | redhat_vex | firefox: thunderbird: Information disclosure, mitigation bypass in the Settings UI component | known not affected: 23 | 2026-06-28T07:23:38+00:00 | Vulnerability · Source |
| CVE-2026-2804 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component | known not affected: 18 | 2026-06-28T07:23:38+00:00 | Vulnerability · Source |
| CVE-2026-2800 | redhat_vex | firefox: thunderbird: Spoofing issue in the WebAuthn component in Firefox for Android | known not affected: 23 | 2026-06-28T07:23:37+00:00 | Vulnerability · Source |
| CVE-2019-10082 | redhat_vex | httpd: read-after-free in h2 connection shutdown | fixed: 175 known affected: 15 known not affected: 16 | 2026-06-28T07:23:37+00:00 | Vulnerability · Source |
| CVE-2026-27979 | redhat_vex | next.js: Next.js: Unbounded postponed resume buffering can lead to DoS | known affected: 6 known not affected: 12 | 2026-06-28T07:23:36+00:00 | Vulnerability · Source |
| CVE-2026-27978 | redhat_vex | next.js: Next.js: null origin can bypass Server Actions CSRF checks | known affected: 18 | 2026-06-28T07:23:36+00:00 | Vulnerability · Source |
| CVE-2026-27902 | redhat_vex | svelte: Svelte: Cross-Site Scripting via unsanitized error output | known affected: 2 | 2026-06-28T07:23:34+00:00 | Vulnerability · Source |
| CVE-2026-2791 | redhat_vex | firefox: thunderbird: Mitigation bypass in the Networking: Cache component | fixed: 320 known affected: 8 | 2026-06-28T07:23:34+00:00 | Vulnerability · Source |
| CVE-2026-27901 | redhat_vex | svelte: Svelte: Cross-Site Scripting and HTML injection via improper escaping of bind:innerText and bind:textContent | known affected: 1 | 2026-06-28T07:23:33+00:00 | Vulnerability · Source |
| CVE-2019-0981 | redhat_vex | dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service | fixed: 109 | 2026-06-28T07:23:32+00:00 | Vulnerability · Source |
| CVE-2026-2787 | redhat_vex | firefox: thunderbird: Use-after-free in the DOM: Window and Location component | fixed: 320 known affected: 6 | 2026-06-28T07:23:31+00:00 | Vulnerability · Source |
| CVE-2019-0980 | redhat_vex | dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service | fixed: 109 | 2026-06-28T07:23:31+00:00 | Vulnerability · Source |
| CVE-2019-0545 | redhat_vex | Core: NCL - SocketsHttpHandler mishandling 1xx response as a final response leads to info disclosure | fixed: 63 known not affected: 9 | 2026-06-28T07:23:30+00:00 | Vulnerability · Source |
| CVE-2019-0548 | redhat_vex | Core: AspNetCoreModule WebSocket DOS | fixed: 63 known not affected: 9 | 2026-06-28T07:23:30+00:00 | Vulnerability · Source |
| CVE-2026-27853 | redhat_vex | dnsdist: dnsdist: Denial of Service via crafted DNS responses | known not affected: 1 | 2026-06-28T07:23:30+00:00 | Vulnerability · Source |
| CVE-2026-27824 | redhat_vex | calibre: Calibre: Brute-force protection bypass via X-Forwarded-For header manipulation | known not affected: 1 | 2026-06-28T07:23:29+00:00 | Vulnerability · Source |
| CVE-2026-27810 | redhat_vex | calibre: Calibre: HTTP Response Header Injection via unsanitized query parameter | known not affected: 1 | 2026-06-28T07:23:29+00:00 | Vulnerability · Source |
| CVE-2026-2781 | redhat_vex | firefox: thunderbird: Integer overflow in the Libraries component in NSS | fixed: 320 known affected: 6 | 2026-06-28T07:23:28+00:00 | Vulnerability · Source |
| CVE-2026-27803 | redhat_vex | vaultwarden: Vaultwarden: Unauthorized collection management operations due to improper access control | known not affected: 1 | 2026-06-28T07:23:28+00:00 | Vulnerability · Source |
| CVE-2026-27802 | redhat_vex | vaultwarden: Vaultwarden: Privilege Escalation via Unauthorized Bulk Permission Update | known not affected: 1 | 2026-06-28T07:23:27+00:00 | Vulnerability · Source |
| CVE-2026-27795 | redhat_vex | langchain-core: @langchain/community: Server-Side Request Forgery (SSRF) bypass via redirect manipulation | known affected: 39 | 2026-06-28T07:23:27+00:00 | Vulnerability · Source |
| CVE-2018-9518 | redhat_vex | kernel: NFC: llcp: Out of bounds write in nfc_llcp_sdp_tlv struct in nfc/llcp_commands.c | known not affected: 104 | 2026-06-28T07:23:27+00:00 | Vulnerability · Source |
| CVE-2026-27801 | redhat_vex | vaultwarden: Vaultwarden: Two-factor authentication bypass allows unauthorized access and data deletion. | known not affected: 1 | 2026-06-28T07:23:27+00:00 | Vulnerability · Source |
| CVE-2018-9517 | redhat_vex | kernel: l2tp: Race condition between pppol2tp_session_create() and l2tp_eth_create() | fixed: 204 known affected: 12 known not affected: 79 | 2026-06-28T07:23:26+00:00 | Vulnerability · Source |
| CVE-2018-9516 | redhat_vex | kernel: HID: debug: Buffer overflow in hid_debug_events_read() in drivers/hid/hid-debug.c | fixed: 204 known affected: 43 known not affected: 48 | 2026-06-28T07:23:25+00:00 | Vulnerability · Source |
| CVE-2026-27794 | redhat_vex | langgraph-checkpoint: LangGraph Checkpoint: Remote Code Execution via insecure deserialization in caching layer | known affected: 2 | 2026-06-28T07:23:24+00:00 | Vulnerability · Source |
| CVE-2026-27769 | redhat_vex | mattermost: connected workspaces: malicious remote server can manipulate arbitrary user's status | known not affected: 1 | 2026-06-28T07:23:24+00:00 | Vulnerability · Source |