VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296249 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-8416 | redhat_vex | Core: Arbitrary file and directory creation | fixed: 21 known not affected: 10 | 2026-06-28T07:23:10+00:00 | Vulnerability · Source |
| CVE-2018-8292 | redhat_vex | Core: information disclosure due to authentication information exposed in a redirect | fixed: 18 known affected: 1 known not affected: 8 | 2026-06-28T07:23:08+00:00 | Vulnerability · Source |
| CVE-2026-27585 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddyhttp/fileserver: Caddy: Path security bypass due to unsanitized backslashes | known not affected: 1 | 2026-06-28T07:23:07+00:00 | Vulnerability · Source |
| CVE-2018-7995 | redhat_vex | kernel: Race condition in the store_int_with_restart() function in cpu/mcheck/mce.c | known not affected: 88 | 2026-06-28T07:23:04+00:00 | Vulnerability · Source |
| CVE-2026-27448 | redhat_vex | pyOpenSSL: TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback | fixed: 2 known affected: 39 known not affected: 5 | 2026-06-28T07:23:04+00:00 | Vulnerability · Source |
| CVE-2018-7757 | redhat_vex | kernel: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c | fixed: 248 known affected: 27 known not affected: 41 | 2026-06-28T07:23:03+00:00 | Vulnerability · Source |
| CVE-2018-7755 | redhat_vex | kernel: Information exposure in fd_locked_ioctl function in drivers/block/floppy.c | fixed: 204 known affected: 16 known not affected: 59 | 2026-06-28T07:23:02+00:00 | Vulnerability · Source |
| CVE-2026-2741 | redhat_vex | Vaadin-Flow: Vaadin: Arbitrary file write via path traversal during Node.js download | known affected: 4 | 2026-06-28T07:23:01+00:00 | Vulnerability · Source |
| CVE-2016-9565 | redhat_vex | nagios: Command injection via curl in MagpieRSS | fixed: 34 known affected: 1 known not affected: 3 | 2026-06-28T07:23:00+00:00 | Vulnerability · Source |
| CVE-2026-27204 | redhat_vex | wasmtime: Wasmtime: Denial of Service via guest-controlled resource exhaustion in WASI host interfaces | known affected: 1 | 2026-06-28T07:22:59+00:00 | Vulnerability · Source |
| CVE-2026-2734 | redhat_vex | mlflow: mlflow: Information Disclosure via improper authorization checks | known not affected: 19 | 2026-06-28T07:22:59+00:00 | Vulnerability · Source |
| CVE-2026-27133 | redhat_vex | strimzi-kafka-operator: Strimzi: Improper certificate validation allows unauthorized access via CA chain misconfiguration | known affected: 4 | 2026-06-28T07:22:58+00:00 | Vulnerability · Source |
| CVE-2026-27167 | redhat_vex | Gradio: Gradio: Information disclosure due to hardcoded secret in session cookie signing, allowing remote attackers to steal Hugging Face tokens. | known not affected: 1 | 2026-06-28T07:22:58+00:00 | Vulnerability · Source |
| CVE-2026-27138 | redhat_vex | crypto/x509: Panic in name constraint checking for malformed certificates in crypto/x509 | fixed: 4 known affected: 32 | 2026-06-28T07:22:57+00:00 | Vulnerability · Source |
| CVE-2026-27139 | redhat_vex | os: FileInfo can escape from a Root in golang os module | fixed: 8 known affected: 32 | 2026-06-28T07:22:56+00:00 | Vulnerability · Source |
| CVE-2026-27124 | redhat_vex | FastMCP: FastMCP OAuthProxy: FastMCP OAuthProxy: Unauthorized actions due to improper consent validation in GitHub OAuth | known affected: 21 | 2026-06-28T07:22:55+00:00 | Vulnerability · Source |
| CVE-2026-27122 | redhat_vex | svelte: Svelte SSR does not validate dynamic element tag names in `<svelte:element>` | known affected: 1 | 2026-06-28T07:22:55+00:00 | Vulnerability · Source |
| CVE-2026-27121 | redhat_vex | svelte: Svelte affected by cross-site scripting via spread attributes in Svelte SSR | known affected: 1 | 2026-06-28T07:22:54+00:00 | Vulnerability · Source |
| CVE-2026-27119 | redhat_vex | svelte: Svelte affected by XSS in SSR `<option>` element | known affected: 1 | 2026-06-28T07:22:54+00:00 | Vulnerability · Source |
| CVE-2018-7159 | redhat_vex | nodejs: HTTP parser allowed for spaces inside Content-Length header values | fixed: 118 known affected: 8 known not affected: 20 | 2026-06-28T07:22:53+00:00 | Vulnerability · Source |
| CVE-2026-27024 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF with TreeObject outlines | known affected: 6 | 2026-06-28T07:22:52+00:00 | Vulnerability · Source |
| CVE-2026-27025 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF with large font values | known affected: 6 | 2026-06-28T07:22:52+00:00 | Vulnerability · Source |
| CVE-2026-27015 | redhat_vex | freerdp: FreeRDP: Denial of Service via missing bounds check in smartcard redirection | known affected: 31 | 2026-06-28T07:22:52+00:00 | Vulnerability · Source |
| CVE-2026-27017 | redhat_vex | utls: uTLS: Fingerprint mismatch allows client identification during GREASE ECH | known not affected: 1 | 2026-06-28T07:22:52+00:00 | Vulnerability · Source |
| CVE-2026-26986 | redhat_vex | freerdp: FreeRDP: Denial of Service via double free vulnerability during disconnect | fixed: 781 known affected: 5 | 2026-06-28T07:22:51+00:00 | Vulnerability · Source |
| CVE-2026-26998 | redhat_vex | github.com/traefik/traefik: Traefik: Denial of Service due to unbounded ForwardAuth middleware response processing | known affected: 1 | 2026-06-28T07:22:51+00:00 | Vulnerability · Source |
| CVE-2016-8633 | redhat_vex | kernel: Buffer overflow in firewire driver via crafted incoming packets | fixed: 313 known affected: 14 known not affected: 1 | 2026-06-28T07:22:50+00:00 | Vulnerability · Source |
| CVE-2026-26981 | redhat_vex | openexr: OpenEXR: Denial of Service via heap-buffer-overflow when parsing a malformed EXR file | known not affected: 18 | 2026-06-28T07:22:48+00:00 | Vulnerability · Source |
| CVE-2026-26967 | redhat_vex | pjsip: PJSIP: Arbitrary code execution via H.264 unpacketizer heap-based buffer overflow | known not affected: 1 | 2026-06-28T07:22:47+00:00 | Vulnerability · Source |
| CVE-2018-6555 | redhat_vex | kernel: irda: use-after-free vulnerability in the hashbin list | known not affected: 88 | 2026-06-28T07:22:47+00:00 | Vulnerability · Source |
| CVE-2026-26963 | redhat_vex | cilium: Cilium: Information disclosure via incorrect traffic permitting with specific network configurations | known not affected: 131 | 2026-06-28T07:22:46+00:00 | Vulnerability · Source |
| CVE-2026-26958 | redhat_vex | filippo.io/edwards25519: filippo.io/edwards25519: Cryptographic integrity bypass due to incorrect MultiScalarMult results | known affected: 62 | 2026-06-28T07:22:45+00:00 | Vulnerability · Source |
| CVE-2026-2650 | redhat_vex | chromium-browser: Heap buffer overflow in Media | known not affected: 1 | 2026-06-28T07:22:45+00:00 | Vulnerability · Source |
| CVE-2026-2649 | redhat_vex | chromium-browser: Integer overflow in V8 | known not affected: 1 | 2026-06-28T07:22:44+00:00 | Vulnerability · Source |
| CVE-2026-2681 | redhat_vex | github.com/supranational/blst: blst cryptographic library: Denial of Service via out-of-bounds stack write in key generation | known not affected: 1 | 2026-06-28T07:22:44+00:00 | Vulnerability · Source |
| CVE-2026-26824 | redhat_vex | libxls: libxls: Information disclosure via crafted XLS file processing | known not affected: 1 | 2026-06-28T07:22:44+00:00 | Vulnerability · Source |
| CVE-2026-26065 | redhat_vex | calibre: Calibre: Arbitrary file write and code execution via path traversal in PDB readers | known not affected: 1 | 2026-06-28T07:22:43+00:00 | Vulnerability · Source |
| CVE-2026-26331 | redhat_vex | yt-dlp: yt-dlp: Arbitrary command injection via maliciously crafted URL when --netrc-cmd is used | known not affected: 1 | 2026-06-28T07:22:43+00:00 | Vulnerability · Source |
| CVE-2026-2644 | redhat_vex | minisat: minisat: Denial of Service due to out-of-bounds read | known not affected: 1 | 2026-06-28T07:22:43+00:00 | Vulnerability · Source |
| CVE-2026-26230 | redhat_vex | github.com/mattermost/mattermost-server: Team Admin Privilege Escalation to Demote Members to Guest | known not affected: 1 | 2026-06-28T07:22:42+00:00 | Vulnerability · Source |
| CVE-2018-6125 | redhat_vex | chromium-browser: Overly permissive policy in WebUSB | fixed: 12 | 2026-06-28T07:22:42+00:00 | Vulnerability · Source |
| CVE-2026-26209 | redhat_vex | cbor2: cbor2: Denial of Service due to uncontrolled recursion via crafted CBOR payloads | fixed: 9 known affected: 14 | 2026-06-28T07:22:41+00:00 | Vulnerability · Source |
| CVE-2026-26203 | redhat_vex | pjsip: PJSIP: Denial of Service via malformed H.264 bitstream processing | known not affected: 1 | 2026-06-28T07:22:41+00:00 | Vulnerability · Source |
| CVE-2018-6098 | redhat_vex | chromium-browser: URL spoof in Omnibox | fixed: 12 | 2026-06-28T07:22:40+00:00 | Vulnerability · Source |
| CVE-2026-26047 | redhat_vex | moodle: Moodle: Uncontrolled Resource Consumption in TeX Formula Editor Leading to Denial of Service | known not affected: 1 | 2026-06-28T07:22:39+00:00 | Vulnerability · Source |
| CVE-2026-26079 | redhat_vex | roundcubemail: Roundcube Webmail: Cascading Style Sheets (CSS) injection via mishandled comments | known not affected: 1 | 2026-06-28T07:22:39+00:00 | Vulnerability · Source |
| CVE-2026-26076 | redhat_vex | ntpd-rs: ntpd-rs: Denial of Service via malformed NTS packets requesting excessive cookies | known not affected: 1 | 2026-06-28T07:22:39+00:00 | Vulnerability · Source |
| CVE-2026-26064 | redhat_vex | calibre: Calibre: Remote Code Execution via Path Traversal | known not affected: 1 | 2026-06-28T07:22:39+00:00 | Vulnerability · Source |
| CVE-2026-26014 | redhat_vex | github.com/pion/dtls: Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key | known affected: 2 | 2026-06-28T07:22:38+00:00 | Vulnerability · Source |
| CVE-2026-26013 | redhat_vex | langchain: SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages | known affected: 6 | 2026-06-28T07:22:37+00:00 | Vulnerability · Source |