VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-46569 | redhat_vex | github.com/open-policy-agent/opa/server: github.com/open-policy-agent/opa/v1/server: OPA server Data API HTTP path injection of Rego | known affected: 1 | 2026-06-28T07:02:21+00:00 | Vulnerability · Source |
| CVE-2025-4656 | redhat_vex | github.com/hashicorp/vault: Vault Denial of Service | known affected: 7 | 2026-06-28T07:02:21+00:00 | Vulnerability · Source |
| CVE-2025-46565 | redhat_vex | vite: Path Traversal in Vite Dev Server Allows Access to Restricted Files | known affected: 5 | 2026-06-28T07:02:21+00:00 | Vulnerability · Source |
| CVE-2025-4638 | redhat_vex | pcl: zlib: Improper Pointer Arithmetic in pcl | known not affected: 1 | 2026-06-28T07:02:20+00:00 | Vulnerability · Source |
| CVE-2025-46392 | redhat_vex | apache-commons-configuration: Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x | known affected: 2 | 2026-06-28T07:02:20+00:00 | Vulnerability · Source |
| CVE-2025-46393 | redhat_vex | ImageMagick: Incorrect Calculation of Buffer Size in ImageMagick's Multispectral MIFF Processing | known affected: 14 | 2026-06-28T07:02:20+00:00 | Vulnerability · Source |
| CVE-2025-46299 | redhat_vex | webkitgtk: Processing maliciously crafted web content may disclose internal states of the app | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-28T07:02:20+00:00 | Vulnerability · Source |
| CVE-2025-46059 | redhat_vex | langchain-core: Langchain indirect propmpt injection | known affected: 1 known not affected: 41 | 2026-06-28T07:02:19+00:00 | Vulnerability · Source |
| CVE-2025-45765 | redhat_vex | ruby-jwt: Ruby-JWT Weak Encryption | known not affected: 4 | 2026-06-28T07:02:18+00:00 | Vulnerability · Source |
| CVE-2024-36932 | redhat_vex | kernel: thermal/debugfs: Prevent use-after-free from occurring after cdev removal | fixed: 280 known affected: 50 known not affected: 70 | 2026-06-28T07:02:18+00:00 | Vulnerability · Source |
| CVE-2025-45764 | redhat_vex | jsrsasign: jsrsasign Weak Encryption Vulnerability | known affected: 3 | 2026-06-28T07:02:18+00:00 | Vulnerability · Source |
| CVE-2025-45512 | redhat_vex | u-boot: Improper Bootloader Signature Verification in U-Boot | known not affected: 1 | 2026-06-28T07:02:16+00:00 | Vulnerability · Source |
| CVE-2010-2204 | redhat_vex | acroread: multiple code execution flaws (APSB10-15) | fixed: 12 | 2026-06-28T07:02:15+00:00 | Vulnerability · Source |
| CVE-2025-44906 | redhat_vex | jhead: Heap Use-After-Free in jhead ProcessFile Function | known not affected: 1 | 2026-06-28T07:02:15+00:00 | Vulnerability · Source |
| CVE-2025-4447 | redhat_vex | java-1.8.0-ibm: Buffer Overflow in Eclipse OpenJ9 | fixed: 22 | 2026-06-28T07:02:15+00:00 | Vulnerability · Source |
| CVE-2025-44905 | redhat_vex | hdf5: Heap Buffer Overflow in HDF5 Scale-Offset Filter | known affected: 1 | 2026-06-28T07:02:14+00:00 | Vulnerability · Source |
| CVE-2024-36901 | redhat_vex | kernel: ipv6: prevent NULL dereference in ip6_output() | fixed: 709 known affected: 64 known not affected: 8 | 2026-06-28T07:02:13+00:00 | Vulnerability · Source |
| CVE-2025-4444 | redhat_vex | tor: Tor Onion Service Descriptor resource consumption | known not affected: 1 | 2026-06-28T07:02:12+00:00 | Vulnerability · Source |
| CVE-2025-44021 | redhat_vex | openstack-ironic: unsafe image file:// paths | known affected: 14 | 2026-06-28T07:02:12+00:00 | Vulnerability · Source |
| CVE-2025-43929 | redhat_vex | kitty: Kitty Unconfirmed Local Executable Execution | known not affected: 1 | 2026-06-28T07:02:10+00:00 | Vulnerability · Source |
| CVE-2025-44005 | redhat_vex | github.com/smallstep/certificates: github.com/smallstep/certificates: Authorization bypass allows unauthorized certificate creation | known not affected: 1 | 2026-06-28T07:02:10+00:00 | Vulnerability · Source |
| CVE-2025-43864 | redhat_vex | react-router: React Router allows a DoS via cache poisoning by forcing SPA mode | known not affected: 40 | 2026-06-28T07:02:09+00:00 | Vulnerability · Source |
| CVE-2025-43857 | redhat_vex | net-imap: net-imap rubygem vulnerable to possible DoS by memory exhaustion | known affected: 97 | 2026-06-28T07:02:08+00:00 | Vulnerability · Source |
| CVE-2025-4372 | redhat_vex | chromium-browser: Use after free in WebAudio | known not affected: 1 | 2026-06-28T07:02:08+00:00 | Vulnerability · Source |
| CVE-2022-1679 | redhat_vex | kernel: use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges | fixed: 475 known affected: 42 | 2026-06-28T07:02:04+00:00 | Vulnerability · Source |
| CVE-2014-4287 | redhat_vex | mysql: unspecified vulnerability related to SERVER:CHARACTER SETS (CPU October 2014) | fixed: 278 under investigation: 9 | 2026-06-28T07:01:59+00:00 | Vulnerability · Source |
| CVE-2022-1050 | redhat_vex | QEMU: pvrdma: use-after-free issue in pvrdma_exec_cmd() | known not affected: 99 | 2026-06-28T07:01:52+00:00 | Vulnerability · Source |
| CVE-2022-0854 | redhat_vex | kernel: swiotlb information leak with DMA_FROM_DEVICE | fixed: 475 known affected: 42 | 2026-06-28T07:01:48+00:00 | Vulnerability · Source |
| CVE-2025-43023 | redhat_vex | hplip: HP Linux Imaging and Printing Software - Use of DSA Key | known affected: 29 | 2026-06-28T07:01:46+00:00 | Vulnerability · Source |
| CVE-2025-4287 | redhat_vex | PyTorch: PyTorch nccl.py torch.cuda.nccl.reduce denial of service | known not affected: 1 | 2026-06-28T07:01:46+00:00 | Vulnerability · Source |
| CVE-2021-20095 | redhat_vex | python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code | fixed: 711 known affected: 12 known not affected: 3 | 2026-06-28T07:01:43+00:00 | Vulnerability · Source |
| CVE-2022-0669 | redhat_vex | dpdk: sending vhost-user-inflight type messages could lead to DoS | fixed: 15 known affected: 56 known not affected: 160 | 2026-06-28T07:01:42+00:00 | Vulnerability · Source |
| CVE-2025-41232 | redhat_vex | Spring-Security: Spring Security authorization bypass for method security annotations on private methods | known not affected: 14 | 2026-06-28T07:01:42+00:00 | Vulnerability · Source |
| CVE-2025-41080 | redhat_vex | seafile: Seafile: Stored Cross-Site Scripting (XSS) vulnerability allows arbitrary code execution | known not affected: 1 | 2026-06-28T07:01:41+00:00 | Vulnerability · Source |
| CVE-2025-40927 | redhat_vex | perl-cgi-simple: CGI::Simple response splitting flaw | known not affected: 1 | 2026-06-28T07:01:40+00:00 | Vulnerability · Source |
| CVE-2014-8142 | redhat_vex | php: use after free vulnerability in unserialize() | fixed: 586 known affected: 54 known not affected: 60 | 2026-06-28T07:01:39+00:00 | Vulnerability · Source |
| CVE-2020-8131 | redhat_vex | yarn: Arbitrary filesystem write via tar expansion | fixed: 11 | 2026-06-28T07:01:39+00:00 | Vulnerability · Source |
| CVE-2022-30783 | redhat_vex | ntfs-3g: invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic | known affected: 2 known not affected: 12 | 2026-06-28T07:01:39+00:00 | Vulnerability · Source |
| CVE-2025-40920 | redhat_vex | catalyst-authentication-credential-http: Catalyst::Authentication::Credential::HTTP insecure nonce generation | known not affected: 1 | 2026-06-28T07:01:38+00:00 | Vulnerability · Source |
| CVE-2025-4092 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox 138 and Thunderbird 138 | known affected: 6 known not affected: 19 | 2026-06-28T07:01:38+00:00 | Vulnerability · Source |
| CVE-2025-40914 | redhat_vex | cryptx: Perl CryptX code execution via integer overflow | known not affected: 1 | 2026-06-28T07:01:38+00:00 | Vulnerability · Source |
| CVE-2020-6565 | redhat_vex | chromium-browser: Incorrect security UI in Omnibox | fixed: 14 | 2026-06-28T07:01:37+00:00 | Vulnerability · Source |
| CVE-2017-18079 | redhat_vex | kernel: Null pointer dereference in drivers/input/serio/i8042.c leading to denial-of-service | known affected: 55 known not affected: 33 | 2026-06-28T07:01:35+00:00 | Vulnerability · Source |
| CVE-2025-40912 | redhat_vex | cryptx: CryptX for Perl denial of service vector | known not affected: 1 | 2026-06-28T07:01:35+00:00 | Vulnerability · Source |
| CVE-2025-4089 | redhat_vex | firefox: thunderbird: Potential local code execution in "copy as cURL" command | known affected: 6 known not affected: 19 | 2026-06-28T07:01:35+00:00 | Vulnerability · Source |
| CVE-2017-18077 | redhat_vex | nodejs-brace-expansion: Regular expression denial of service | fixed: 62 known affected: 7 | 2026-06-28T07:01:35+00:00 | Vulnerability · Source |
| CVE-2025-4088 | redhat_vex | firefox: thunderbird: Cross-site request forgery via storage access API redirects | known affected: 6 known not affected: 19 | 2026-06-28T07:01:33+00:00 | Vulnerability · Source |
| CVE-2025-4083 | redhat_vex | firefox: thunderbird: Process isolation bypass using "javascript:" URI links in cross-origin frames | fixed: 296 known affected: 10 | 2026-06-28T07:01:32+00:00 | Vulnerability · Source |
| CVE-2025-4084 | redhat_vex | firefox: thunderbird: Potential local code execution in "copy as cURL" command | known affected: 6 known not affected: 19 | 2026-06-28T07:01:32+00:00 | Vulnerability · Source |
| CVE-2025-4087 | redhat_vex | firefox: thunderbird: Unsafe attribute access during XPath parsing | fixed: 296 known affected: 10 | 2026-06-28T07:01:32+00:00 | Vulnerability · Source |