VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-32792 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution | fixed: 180 known affected: 9 | 2026-06-26T15:15:08+00:00 | Vulnerability · Source |
| CVE-2022-33064 | redhat_vex | libsndfile: off-by-one error in function wav_read_header in src/wav.c leads to code execution | known not affected: 8 | 2026-06-26T15:15:04+00:00 | Vulnerability · Source |
| CVE-2022-34480 | redhat_vex | firefox: Free of uninitialized pointer in lg_init | known not affected: 13 | 2026-06-26T15:10:32+00:00 | Vulnerability · Source |
| CVE-2022-34037 | redhat_vex | caddy: oob read allows for DoS | known not affected: 68 | 2026-06-26T15:10:27+00:00 | Vulnerability · Source |
| CVE-2022-35015 | redhat_vex | advancecomp: heap-buffer-overflow in le_uint32_read() in lib/endianrw.h | known not affected: 2 | 2026-06-26T15:10:24+00:00 | Vulnerability · Source |
| CVE-2022-34038 | redhat_vex | etcd: remote DoS via PageWriter.write | known affected: 17 | 2026-06-26T15:10:23+00:00 | Vulnerability · Source |
| CVE-2022-34612 | redhat_vex | rizin: integer overflow in get_long_object() further leads to heap-overflow causing a crash | known not affected: 1 | 2026-06-26T15:10:22+00:00 | Vulnerability · Source |
| CVE-2022-35020 | redhat_vex | advancecomp: heap buffer overflow via the component inflate() | known not affected: 2 | 2026-06-26T15:10:21+00:00 | Vulnerability · Source |
| CVE-2022-35016 | redhat_vex | advancecomp: heap buffer overflow in data_dup() in data.cc | known not affected: 2 | 2026-06-26T15:10:18+00:00 | Vulnerability · Source |
| CVE-2022-34175 | redhat_vex | Jenkins: Unauthorized view fragment access | known not affected: 4 | 2026-06-26T15:10:17+00:00 | Vulnerability · Source |
| CVE-2022-35017 | redhat_vex | advancecomp: heap-buffer-overflow in mng_delta_addition() in mng.c | known not affected: 2 | 2026-06-26T15:10:14+00:00 | Vulnerability · Source |
| CVE-2022-36129 | redhat_vex | vault: Vault Enterprise Does Not Verify Existing Voter Status When Joining An Integrated Storage HA Node | known not affected: 14 | 2026-06-26T15:05:32+00:00 | Vulnerability · Source |
| CVE-2022-35922 | redhat_vex | rust-webscket: untrusted websocket connections can cause an out-of-memory | known not affected: 1 | 2026-06-26T15:05:32+00:00 | Vulnerability · Source |
| CVE-2022-3551 | redhat_vex | xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c | fixed: 299 known affected: 9 | 2026-06-26T15:05:30+00:00 | Vulnerability · Source |
| CVE-2022-36032 | redhat_vex | php-react-http: ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent | known not affected: 1 | 2026-06-26T15:05:30+00:00 | Vulnerability · Source |
| CVE-2022-36040 | redhat_vex | rizin: Out-of-bounds Write in pyc/marshal.c | known not affected: 1 | 2026-06-26T15:05:27+00:00 | Vulnerability · Source |
| CVE-2022-36041 | redhat_vex | rizin: Out-of-bounds Write in Mach-O binary plugin | known not affected: 1 | 2026-06-26T15:05:26+00:00 | Vulnerability · Source |
| CVE-2022-36044 | redhat_vex | rizin: Out-of-bounds Write in Lua binary plugin | known not affected: 1 | 2026-06-26T15:05:24+00:00 | Vulnerability · Source |
| CVE-2022-36085 | redhat_vex | open-policy-agent: Compiler Bypass of WithUnsafeBuiltins using "with" keyword to mock functions | known not affected: 18 | 2026-06-26T15:05:24+00:00 | Vulnerability · Source |
| CVE-2022-36043 | redhat_vex | rizin: Double Free in bobj.c when using QNX binary plugin | known not affected: 1 | 2026-06-26T15:04:44+00:00 | Vulnerability · Source |
| CVE-2022-3550 | redhat_vex | xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c | fixed: 299 known affected: 9 | 2026-06-26T15:04:30+00:00 | Vulnerability · Source |
| CVE-2022-3646 | redhat_vex | kernel: nilfs2: memory leak in nilfs_attach_log_writer in fs/nilfs2/segment.c | known not affected: 198 | 2026-06-26T15:01:23+00:00 | Vulnerability · Source |
| CVE-2022-3620 | redhat_vex | exim: UAF in dmarc_dns_lookup | known not affected: 1 | 2026-06-26T15:01:23+00:00 | Vulnerability · Source |
| CVE-2022-3715 | redhat_vex | bash: a heap-buffer-overflow in valid_parameter_transform | fixed: 25 known affected: 3 known not affected: 6 | 2026-06-26T14:55:25+00:00 | Vulnerability · Source |
| CVE-2025-12781 | redhat_vex | cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars | known affected: 227 | 2026-06-26T14:44:20+00:00 | Vulnerability · Source |
| CVE-2022-3757 | redhat_vex | exiv2: Heap-buffer-overflow in Exiv2::MemIo::read | known affected: 12 known not affected: 11 | 2026-06-26T14:43:40+00:00 | Vulnerability · Source |
| CVE-2022-3755 | redhat_vex | exiv2: Null-dereference READ in Exiv2::QuickTimeVideo::userDataDecoder | known affected: 12 known not affected: 11 | 2026-06-26T14:43:36+00:00 | Vulnerability · Source |
| CVE-2022-3756 | redhat_vex | exiv2: integer overflow in quicktimevideo.cpp | known affected: 12 known not affected: 11 | 2026-06-26T14:43:35+00:00 | Vulnerability · Source |
| CVE-2022-38784 | redhat_vex | poppler: integer overflow in JBIG2 decoder using malformed files | fixed: 211 known affected: 81 | 2026-06-26T14:43:32+00:00 | Vulnerability · Source |
| CVE-2022-3910 | redhat_vex | kernel: Improper update of reference count in io_uring leads to use-after-free | known not affected: 198 | 2026-06-26T14:43:30+00:00 | Vulnerability · Source |
| CVE-2022-38745 | redhat_vex | libreoffice: Empty entry in Java class path | fixed: 712 known affected: 670 | 2026-06-26T14:43:28+00:00 | Vulnerability · Source |
| CVE-2025-68768 | microsoft_vex | inet: frags: flush pending skbs in fqdir_pre_exit() | fixed: 1 known affected: 10 | 2026-06-26T14:38:29+00:00 | Vulnerability · Source |
| CVE-2022-39318 | redhat_vex | freerdp: division by zero in urbdrc channel | fixed: 130 known affected: 12 | 2026-06-26T14:30:23+00:00 | Vulnerability · Source |
| CVE-2022-39346 | redhat_vex | nextcloud: Missing length validation of user displayname allows to generate an SQL error | known not affected: 1 | 2026-06-26T14:30:22+00:00 | Vulnerability · Source |
| CVE-2026-53025 | redhat_vex | kernel: greybus: raw: fix use-after-free on cdev close | known not affected: 274 | 2026-06-26T14:30:20+00:00 | Vulnerability · Source |
| CVE-2022-39379 | redhat_vex | fluentd: remote code execution via crafted JSON payloads | known affected: 7 known not affected: 1 | 2026-06-26T14:30:16+00:00 | Vulnerability · Source |
| CVE-2022-39377 | redhat_vex | sysstat: arithmetic overflow in allocate_structures() on 32 bit systems | fixed: 26 known affected: 1 | 2026-06-26T14:30:09+00:00 | Vulnerability · Source |
| CVE-2022-3920 | redhat_vex | consul: Consul Cluster Peering Leaks Imported Nodes/Services Information | known not affected: 8 | 2026-06-26T14:30:06+00:00 | Vulnerability · Source |
| CVE-2022-39368 | redhat_vex | scandium: Failing DTLS handshakes may cause throttling to block processing of records | fixed: 2 known affected: 1 known not affected: 1 | 2026-06-26T14:30:04+00:00 | Vulnerability · Source |
| CVE-2022-39304 | redhat_vex | ghinstallation: Leak of bearer JWT from http.RoundTripper response | known affected: 2 known not affected: 5 | 2026-06-26T14:29:59+00:00 | Vulnerability · Source |
| CVE-2022-39286 | redhat_vex | jupyter-core: arbitrary code execution | known not affected: 1 | 2026-06-26T14:29:50+00:00 | Vulnerability · Source |
| CVE-2022-39250 | redhat_vex | Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a device verification attack | fixed: 67 known affected: 2 | 2026-06-26T14:29:43+00:00 | Vulnerability · Source |
| CVE-2022-39251 | redhat_vex | Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack | fixed: 67 known affected: 2 | 2026-06-26T14:29:35+00:00 | Vulnerability · Source |
| CVE-2022-39249 | redhat_vex | Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack by malicious server administrators | fixed: 67 known affected: 2 | 2026-06-26T14:28:57+00:00 | Vulnerability · Source |
| CVE-2022-4087 | redhat_vex | ipxe: Padding oracle attack vulnerability | known affected: 3 known not affected: 9 | 2026-06-26T14:25:15+00:00 | Vulnerability · Source |
| CVE-2022-4141 | redhat_vex | vim: invalid memory access in substitute with function | known affected: 6 known not affected: 18 | 2026-06-26T14:25:12+00:00 | Vulnerability · Source |
| CVE-2022-41317 | redhat_vex | squid: exposure of sensitive information in cache manager | known affected: 7 known not affected: 8 | 2026-06-26T14:25:00+00:00 | Vulnerability · Source |
| CVE-2022-41404 | redhat_vex | org.ini4j: unspecified DoS | known affected: 2 known not affected: 3 | 2026-06-26T14:24:58+00:00 | Vulnerability · Source |
| CVE-2022-41322 | redhat_vex | kitty: notification identifiers are not sanitized correctly leading to code execution | known not affected: 1 | 2026-06-26T14:24:53+00:00 | Vulnerability · Source |
| CVE-2022-40186 | redhat_vex | vault: Vault Entity Alias Metadata May Leak Between Aliases With The Same Name Assigned To The Same Entity | fixed: 6 known affected: 2 known not affected: 113 | 2026-06-26T14:24:49+00:00 | Vulnerability · Source |