VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-35365 | redhat_vex | rust-coreutils: mv: denial of service and data duplication via improper symlink expansion | known not affected: 1 | 2026-06-28T07:05:28+00:00 | Vulnerability · Source |
| CVE-2026-35345 | redhat_vex | rust-coreutils: tail: privileged information disclosure via symlink replacement race | known not affected: 1 | 2026-06-28T07:05:28+00:00 | Vulnerability · Source |
| CVE-2025-54812 | redhat_vex | log4cxx: Log4cxx HTMLLayout XSS Vulnerability | known affected: 2 | 2026-06-28T07:05:28+00:00 | Vulnerability · Source |
| CVE-2017-9226 | redhat_vex | oniguruma: Heap buffer overflow in next_state_val() during regular expression compilation | fixed: 254 known affected: 177 under investigation: 3 | 2026-06-28T07:05:28+00:00 | Vulnerability · Source |
| CVE-2017-6414 | redhat_vex | Qemu: libcacard: host memory leakage while creating new APDU | fixed: 36 known affected: 15 known not affected: 8 | 2026-06-28T07:05:28+00:00 | Vulnerability · Source |
| CVE-2025-54886 | redhat_vex | skops: Skops: Joblib Model Loading Code Execution | known not affected: 1 | 2026-06-28T07:05:28+00:00 | Vulnerability · Source |
| CVE-2025-54804 | redhat_vex | russh: Russh Integer Overflow Vulnerability | known affected: 2 | 2026-06-28T07:05:27+00:00 | Vulnerability · Source |
| CVE-2026-35343 | redhat_vex | rust-coreutils: cut: inconsistent output suppression with newline delimiters | known not affected: 1 | 2026-06-28T07:05:26+00:00 | Vulnerability · Source |
| CVE-2018-16078 | redhat_vex | chromium-browser: Credit card information leak in Autofill | fixed: 12 | 2026-06-28T07:05:26+00:00 | Vulnerability · Source |
| CVE-2025-54588 | redhat_vex | envoyproxy/envoy: Use after free in DNS cache | fixed: 8 known not affected: 49 | 2026-06-28T07:05:26+00:00 | Vulnerability · Source |
| CVE-2025-54576 | redhat_vex | github.com/oauth2-proxy/oauth2-proxy: OAuth2-Proxy authentication bypass | known not affected: 1 | 2026-06-28T07:05:26+00:00 | Vulnerability · Source |
| CVE-2018-16074 | redhat_vex | chromium-browser: Site Isolation bypass using Blob URLS | fixed: 12 | 2026-06-28T07:05:26+00:00 | Vulnerability · Source |
| CVE-2025-54764 | redhat_vex | mbedtls: Mbedtls timing attacks in RSA operations | known not affected: 1 | 2026-06-28T07:05:26+00:00 | Vulnerability · Source |
| CVE-2018-16079 | redhat_vex | chromium-browser: URL spoof in permission dialogs | fixed: 12 | 2026-06-28T07:05:26+00:00 | Vulnerability · Source |
| CVE-2025-54419 | redhat_vex | @node-saml/node-saml: Node-SAML Signature Verification Vulnerability | fixed: 1 known not affected: 3 | 2026-06-28T07:05:25+00:00 | Vulnerability · Source |
| CVE-2024-40997 | redhat_vex | kernel: cpufreq: amd-pstate: fix memory leak on CPU EPP exit | fixed: 709 known affected: 22 known not affected: 50 | 2026-06-28T07:05:24+00:00 | Vulnerability · Source |
| CVE-2026-35367 | redhat_vex | rust-coreutils: nohup: information disclosure via insecure default output permissions | known not affected: 1 | 2026-06-28T07:05:22+00:00 | Vulnerability · Source |
| CVE-2024-35176 | redhat_vex | REXML: DoS parsing an XML with many `<`s in an attribute value | fixed: 160 known affected: 238 | 2026-06-28T07:05:22+00:00 | Vulnerability · Source |
| CVE-2026-35356 | redhat_vex | rust-coreutils: install: arbitrary file overwrite with -D via path component symlink race | known not affected: 1 | 2026-06-28T07:05:21+00:00 | Vulnerability · Source |
| CVE-2026-35344 | redhat_vex | rust-coreutils: dd: silent data corruption via unconditional truncation error suppression | known not affected: 1 | 2026-06-28T07:05:21+00:00 | Vulnerability · Source |
| CVE-2026-35371 | redhat_vex | rust-coreutils: id: misleading identity reporting in pretty print mode | known not affected: 1 | 2026-06-28T07:05:21+00:00 | Vulnerability · Source |
| CVE-2026-35350 | redhat_vex | rust-coreutils: cp: unexpected privileged executable creation with -p | known not affected: 1 | 2026-06-28T07:05:21+00:00 | Vulnerability · Source |
| CVE-2020-15393 | redhat_vex | kernel: memory leak in usbtest_disconnect function in drivers/usb/misc/usbtest.c | known affected: 1 known not affected: 103 | 2026-06-28T07:05:19+00:00 | Vulnerability · Source |
| CVE-2025-54412 | redhat_vex | skops: Skops OperatorFuncNode Code Execution Vulnerability | known not affected: 1 | 2026-06-28T07:05:19+00:00 | Vulnerability · Source |
| CVE-2025-54388 | redhat_vex | github.com/moby/moby: Moby's Firewalld reload makes container ports accessible | known affected: 15 | 2026-06-28T07:05:19+00:00 | Vulnerability · Source |
| CVE-2025-54368 | redhat_vex | uv: uv ZIP Archive Validation Vulnerability | known not affected: 1 | 2026-06-28T07:05:18+00:00 | Vulnerability · Source |
| CVE-2021-20270 | redhat_vex | python-pygments: Infinite loop in SML lexer may lead to DoS | fixed: 488 known affected: 12 known not affected: 3 | 2026-06-28T07:05:18+00:00 | Vulnerability · Source |
| CVE-2025-54386 | redhat_vex | traefik: Traefik's Client Plugin is Vulnerable to Path Traversal, Arbitrary File Overwrites and Remote Code Execution | fixed: 4 known not affected: 57 | 2026-06-28T07:05:18+00:00 | Vulnerability · Source |
| CVE-2025-54352 | redhat_vex | wordpress: WordPress Pingback Title Disclosure Vulnerability | known not affected: 1 | 2026-06-28T07:05:18+00:00 | Vulnerability · Source |
| CVE-2025-54310 | redhat_vex | qbittorrent: qBittorrent local file access | known not affected: 1 | 2026-06-28T07:05:17+00:00 | Vulnerability · Source |
| CVE-2025-5416 | redhat_vex | keycloak-core: Keycloak Environment Information | known affected: 1 | 2026-06-28T07:05:17+00:00 | Vulnerability · Source |
| CVE-2025-53864 | redhat_vex | com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT | fixed: 1 known affected: 14 | 2026-06-28T07:05:17+00:00 | Vulnerability · Source |
| CVE-2025-5417 | redhat_vex | rhdh: Red Hat Developer Hub user permissions | fixed: 1 known not affected: 2 | 2026-06-28T07:05:17+00:00 | Vulnerability · Source |
| CVE-2025-54121 | redhat_vex | starlette: Starlette denial-of-service | known affected: 95 | 2026-06-28T07:05:16+00:00 | Vulnerability · Source |
| CVE-2025-54072 | redhat_vex | yt-dlp: yt-dlp allows `--exec` command injection when using placeholder on Windows | known not affected: 1 | 2026-06-28T07:05:14+00:00 | Vulnerability · Source |
| CVE-2025-53862 | redhat_vex | aap: aap-gateway: automation-hub: Sensitive Information Disclosure | known not affected: 3 | 2026-06-28T07:05:12+00:00 | Vulnerability · Source |
| CVE-2025-53816 | redhat_vex | 7zip: 7-Zip heap buffer overflow | known not affected: 1 | 2026-06-28T07:05:11+00:00 | Vulnerability · Source |
| CVE-2021-2024 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:05:11+00:00 | Vulnerability · Source |
| CVE-2025-53689 | redhat_vex | jackrabbit-spi-commons: jackrabbit-core: Apache Jackrabbit XXE vulnerability | known affected: 2 known not affected: 2 | 2026-06-28T07:05:10+00:00 | Vulnerability · Source |
| CVE-2025-53644 | redhat_vex | opencv: OpenCV use after free | known not affected: 15 | 2026-06-28T07:05:10+00:00 | Vulnerability · Source |
| CVE-2025-53629 | redhat_vex | cpp-httplib: cpp-httplib Unbounded Memory Allocation | known not affected: 1 | 2026-06-28T07:05:09+00:00 | Vulnerability · Source |
| CVE-2025-53628 | redhat_vex | cpp-httplib: cpp-httplib does not limit the length of a line | known not affected: 1 | 2026-06-28T07:05:09+00:00 | Vulnerability · Source |
| CVE-2025-53391 | redhat_vex | zulucrypt: ZuluCrypt PolicyKit Privilege Escalation | known not affected: 1 | 2026-06-28T07:05:09+00:00 | Vulnerability · Source |
| CVE-2025-53630 | redhat_vex | llama.cpp: Integer Overflow in llama.cpp | known not affected: 1 | 2026-06-28T07:05:09+00:00 | Vulnerability · Source |
| CVE-2025-53367 | redhat_vex | djvulibre: DjVuLibre out of bounds write | known not affected: 1 | 2026-06-28T07:05:09+00:00 | Vulnerability · Source |
| CVE-2025-53365 | redhat_vex | mcp: MCP Server Crash via ClosedResourceError | known affected: 1 | 2026-06-28T07:05:08+00:00 | Vulnerability · Source |
| CVE-2025-53366 | redhat_vex | mcp: MCP SDK Denial of Service Vulnerability | known affected: 1 | 2026-06-28T07:05:08+00:00 | Vulnerability · Source |
| CVE-2013-2446 | redhat_vex | OpenJDK: output stream access restrictions (CORBA, 8000642) | fixed: 555 | 2026-06-28T07:05:06+00:00 | Vulnerability · Source |
| CVE-2018-14734 | redhat_vex | kernel: use-after-free in ucma_leave_multicast in drivers/infiniband/core/ucma.c | fixed: 230 known affected: 27 known not affected: 32 | 2026-06-28T07:05:06+00:00 | Vulnerability · Source |
| CVE-2022-22827 | redhat_vex | expat: Integer overflow in storeAtts in xmlparse.c | fixed: 209 known affected: 21 known not affected: 31 | 2026-06-28T07:05:06+00:00 | Vulnerability · Source |