VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297692 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-52960 | microsoft_vex | ceph: put folios not suitable for writeback | known affected: 2 | 2026-06-28T01:41:47+00:00 | Vulnerability · Source |
| CVE-2024-42227 | microsoft_vex | drm/amd/display: Fix overlapping copy within dml_core_mode_programming | under investigation: 19 | 2026-06-28T01:41:44+00:00 | Vulnerability · Source |
| CVE-2026-53232 | microsoft_vex | net: phy: clean the sfp upstream if phy probing fails | known affected: 2 | 2026-06-28T01:41:39+00:00 | Vulnerability · Source |
| CVE-2026-53209 | microsoft_vex | Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend | fixed: 1 known affected: 1 | 2026-06-28T01:41:33+00:00 | Vulnerability · Source |
| CVE-2024-42064 | microsoft_vex | drm/amd/display: Skip pipe if the pipe idx not set properly | under investigation: 19 | 2026-06-28T01:41:27+00:00 | Vulnerability · Source |
| CVE-2026-53199 | microsoft_vex | hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf | fixed: 1 known affected: 1 | 2026-06-28T01:41:25+00:00 | Vulnerability · Source |
| CVE-2026-46598 | microsoft_vex | Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent | fixed: 5 known affected: 8 known not affected: 1 | 2026-06-28T01:41:12+00:00 | Vulnerability · Source |
| CVE-2024-58089 | microsoft_vex | btrfs: fix double accounting race when btrfs_run_delalloc_range() failed | known affected: 19 | 2026-06-28T01:41:08+00:00 | Vulnerability · Source |
| CVE-2026-52927 | microsoft_vex | netfilter: ebtables: fix OOB read in compat_mtw_from_user | fixed: 1 known affected: 1 | 2026-06-28T01:41:06+00:00 | Vulnerability · Source |
| CVE-2026-52942 | microsoft_vex | netfilter: nf_log: validate MAC header was set before dumping it | fixed: 1 known affected: 1 | 2026-06-28T01:40:58+00:00 | Vulnerability · Source |
| CVE-2013-1633 | microsoft_vex | easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product. | under investigation: 6 | 2026-06-28T01:40:56+00:00 | Vulnerability · Source |
| CVE-2026-9149 | microsoft_vex | Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file | fixed: 2 known affected: 2 | 2026-06-28T01:40:54+00:00 | Vulnerability · Source |
| CVE-2025-21723 | microsoft_vex | scsi: mpi3mr: Fix possible crash when setting up bsg fails | under investigation: 16 | 2026-06-28T01:40:53+00:00 | Vulnerability · Source |
| CVE-2024-58012 | microsoft_vex | ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params | under investigation: 19 | 2026-06-28T01:40:39+00:00 | Vulnerability · Source |
| CVE-2026-9150 | microsoft_vex | Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums | fixed: 2 known affected: 2 | 2026-06-28T01:40:36+00:00 | Vulnerability · Source |
| CVE-2025-9901 | microsoft_vex | Libsoup: improper handling of http vary header in libsoup caching | known affected: 12 | 2026-06-28T01:40:36+00:00 | Vulnerability · Source |
| CVE-2026-53177 | microsoft_vex | bnxt_en: Fix NULL pointer dereference | fixed: 1 known affected: 1 | 2026-06-28T01:40:25+00:00 | Vulnerability · Source |
| CVE-2024-25740 | microsoft_vex | A memory leak flaw was found in the UBI driver in drivers/mtd/ubi/attach.c in the Linux kernel through 6.7.4 for UBI_IOCATT, because kobj->name is not released. | under investigation: 19 | 2026-06-28T01:40:23+00:00 | Vulnerability · Source |
| CVE-2024-27079 | microsoft_vex | iommu/vt-d: Fix NULL domain on device release | under investigation: 16 | 2026-06-28T01:40:23+00:00 | Vulnerability · Source |
| CVE-2026-27136 | microsoft_vex | Invoking duplicate attributes can cause XSS in golang.org/x/net/html | fixed: 26 known affected: 26 known not affected: 2 | 2026-06-28T01:40:16+00:00 | Vulnerability · Source |
| CVE-2024-24864 | microsoft_vex | Race condition vulnerability in Linux kernel media/dvb-core in dvbdmx_write() | under investigation: 16 | 2026-06-28T01:40:08+00:00 | Vulnerability · Source |
| CVE-2024-41023 | microsoft_vex | sched/deadline: Fix task_struct reference leak | known affected: 20 | 2026-06-28T01:40:08+00:00 | Vulnerability · Source |
| CVE-2026-52943 | microsoft_vex | net: skbuff: fix missing zerocopy reference in pskb_carve helpers | fixed: 1 known affected: 1 | 2026-06-28T01:40:07+00:00 | Vulnerability · Source |
| CVE-2025-21635 | microsoft_vex | rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy | under investigation: 19 | 2026-06-28T01:39:56+00:00 | Vulnerability · Source |
| CVE-2024-23848 | microsoft_vex | In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c. | under investigation: 19 | 2026-06-28T01:39:56+00:00 | Vulnerability · Source |
| CVE-2018-0488 | suse_vex | SUSE CVE CVE-2018-0488 | recommended: 20 | 2026-06-28T01:17:12+00:00 | Vulnerability · Source |
| CVE-2018-19608 | suse_vex | SUSE CVE CVE-2018-19608 | recommended: 18 | 2026-06-28T01:16:56+00:00 | Vulnerability · Source |
| CVE-2021-33640 | suse_vex | SUSE CVE CVE-2021-33640 | recommended: 3 | 2026-06-28T01:16:07+00:00 | Vulnerability · Source |
| CVE-2026-50019 | suse_vex | SUSE CVE CVE-2026-50019 | recommended: 3 | 2026-06-28T01:11:29+00:00 | Vulnerability · Source |
| CVE-2026-50023 | suse_vex | SUSE CVE CVE-2026-50023 | recommended: 3 | 2026-06-28T01:11:28+00:00 | Vulnerability · Source |
| CVE-2026-50574 | suse_vex | SUSE CVE CVE-2026-50574 | recommended: 3 | 2026-06-28T01:11:26+00:00 | Vulnerability · Source |
| CVE-2001-1593 | redhat_vex | a2ps: insecure temporary file use | known not affected: 7 | 2026-06-27T20:10:09+00:00 | Vulnerability · Source |
| CVE-2003-0367 | redhat_vex | gzip: symlink attack on temporary files leads to arbitrary file overwrite | known not affected: 6 | 2026-06-27T19:43:59+00:00 | Vulnerability · Source |
| CVE-2006-4192 | redhat_vex | libmodplug: Integer overflow when reading samples of AMF files | fixed: 46 | 2026-06-27T18:48:55+00:00 | Vulnerability · Source |
| CVE-2006-5753 | redhat_vex | kernel listxattr syscall can corrupt user space programs | fixed: 93 | 2026-06-27T18:43:56+00:00 | Vulnerability · Source |
| CVE-2006-6565 | redhat_vex | filezilla: allows remote attackers to cause a denial of service via wildcard argument | known not affected: 1 | 2026-06-27T18:38:59+00:00 | Vulnerability · Source |
| CVE-2007-4772 | redhat_vex | postgresql DoS via infinite loop in regex NFA optimization code | fixed: 535 known affected: 1 known not affected: 27 | 2026-06-27T18:18:57+00:00 | Vulnerability · Source |
| CVE-2007-6067 | redhat_vex | postgresql: tempory DoS caused by slow regex NFA cleanup | fixed: 348 known affected: 1 known not affected: 27 | 2026-06-27T18:13:56+00:00 | Vulnerability · Source |
| CVE-2007-5966 | redhat_vex | kernel: non-root can trigger cpu_idle soft lockup | fixed: 232 known not affected: 6 | 2026-06-27T18:13:50+00:00 | Vulnerability · Source |
| CVE-2008-1673 | redhat_vex | kernel: possible buffer overflow in ASN.1 parsing routines | known not affected: 1 | 2026-06-27T17:59:05+00:00 | Vulnerability · Source |
| CVE-2008-1423 | redhat_vex | vorbis: integer oveflow caused by huge codebooks | fixed: 142 | 2026-06-27T17:59:01+00:00 | Vulnerability · Source |
| CVE-2008-2364 | redhat_vex | httpd: mod_proxy_http DoS via excessive interim responses from the origin server | fixed: 306 known affected: 1 | 2026-06-27T17:54:20+00:00 | Vulnerability · Source |
| CVE-2008-2939 | redhat_vex | httpd: mod_proxy_ftp globbing XSS | fixed: 306 known affected: 1 | 2026-06-27T17:50:13+00:00 | Vulnerability · Source |
| CVE-2008-3880 | redhat_vex | zoneminder: command injection, SQL injection and multiple XSS issues (CVE-2008-3882, CVE-2008-3880, CVE-2008-3881) | known not affected: 1 | 2026-06-27T17:45:23+00:00 | Vulnerability · Source |
| CVE-2008-3527 | redhat_vex | kernel: missing boundary checks in syscall/syscall32_nopage() | fixed: 88 | 2026-06-27T17:44:37+00:00 | Vulnerability · Source |
| CVE-2008-5050 | redhat_vex | clamav: get_unicode_name() off-by-one buffer overflow (< 0.94.1) | known not affected: 1 | 2026-06-27T17:35:33+00:00 | Vulnerability · Source |
| CVE-2008-5182 | redhat_vex | kernel: fix inotify watch removal/umount races | fixed: 177 | 2026-06-27T17:34:44+00:00 | Vulnerability · Source |
| CVE-2009-0029 | redhat_vex | Linux Kernel insecure 64 bit system call argument passing | known not affected: 1 | 2026-06-27T17:24:11+00:00 | Vulnerability · Source |
| CVE-2009-0065 | redhat_vex | kernel: sctp: memory overflow when FWD-TSN chunk is received with bad stream ID | fixed: 286 | 2026-06-27T17:23:03+00:00 | Vulnerability · Source |
| CVE-2009-0692 | redhat_vex | dhclient: stack overflow leads to arbitrary code execution as root | fixed: 158 | 2026-06-27T17:18:58+00:00 | Vulnerability · Source |