VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-26130 | redhat_vex | cpp-httplib: CRLF Injection | known not affected: 1 | 2026-06-26T10:56:47+00:00 | Vulnerability · Source |
| CVE-2023-25817 | redhat_vex | nextcloud-server: delete permissions are not saved when creating public share | known not affected: 1 | 2026-06-26T10:56:47+00:00 | Vulnerability · Source |
| CVE-2023-26044 | redhat_vex | react/http: potential DoS when processing large HTTP request bodies | known not affected: 1 | 2026-06-26T10:56:47+00:00 | Vulnerability · Source |
| CVE-2023-25818 | redhat_vex | nextcloud-server: missing brute force protection on password reset token | known not affected: 1 | 2026-06-26T10:56:46+00:00 | Vulnerability · Source |
| CVE-2023-26253 | redhat_vex | glusterfs: stack-based buffer overflow in notify() in fuse-bridge.c | known not affected: 58 | 2026-06-26T10:50:39+00:00 | Vulnerability · Source |
| CVE-2023-27586 | redhat_vex | python-cairosvg: SSRF & DOS vulnerability | known not affected: 1 | 2026-06-26T10:46:07+00:00 | Vulnerability · Source |
| CVE-2023-28849 | redhat_vex | glpi: Inventory endpoint can be used to drive a SQL injection attack | known not affected: 1 | 2026-06-26T10:40:57+00:00 | Vulnerability · Source |
| CVE-2023-29195 | redhat_vex | vitess: unsanitized admin input leads to DoS | known not affected: 1 | 2026-06-26T10:34:12+00:00 | Vulnerability · Source |
| CVE-2023-29194 | redhat_vex | vitess: Users that can create keyspaces can deny access to already existing keyspaces | known not affected: 1 | 2026-06-26T10:34:12+00:00 | Vulnerability · Source |
| CVE-2023-29000 | redhat_vex | nextcloud: Multiple vulnerabilities | known not affected: 1 | 2026-06-26T10:34:11+00:00 | Vulnerability · Source |
| CVE-2023-30801 | redhat_vex | qbittorrent: default credentials allowed by default | known not affected: 1 | 2026-06-26T10:29:12+00:00 | Vulnerability · Source |
| CVE-2023-40548 | redhat_vex | shim: Interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems | fixed: 69 | 2026-06-26T10:29:12+00:00 | Vulnerability · Source |
| CVE-2023-31137 | redhat_vex | maradns: integer underflow in DNS packet decompression | known not affected: 1 | 2026-06-26T10:24:18+00:00 | Vulnerability · Source |
| CVE-2023-31422 | redhat_vex | kibana: Kibana Insertion of Sensitive Information into Log File | known not affected: 5 | 2026-06-26T10:24:13+00:00 | Vulnerability · Source |
| CVE-2023-32685 | redhat_vex | kanboard: Clipboard based cross-site scripting | known not affected: 1 | 2026-06-26T10:20:44+00:00 | Vulnerability · Source |
| CVE-2023-32320 | redhat_vex | nextcloud-server: brute force protection allows to send more requests than intended | known not affected: 1 | 2026-06-26T10:20:40+00:00 | Vulnerability · Source |
| CVE-2023-32207 | redhat_vex | Mozilla: Potential permissions request bypass via clickjacking | fixed: 210 known affected: 4 | 2026-06-26T10:20:39+00:00 | Vulnerability · Source |
| CVE-2023-32002 | redhat_vex | nodejs: Permissions policies can be bypassed via Module._load | fixed: 190 known not affected: 6 | 2026-06-26T10:20:14+00:00 | Vulnerability · Source |
| CVE-2023-32726 | redhat_vex | zabbix: possible buffer overread form DNS responses | known not affected: 1 | 2026-06-26T10:16:53+00:00 | Vulnerability · Source |
| CVE-2023-34194 | redhat_vex | tinyxml: reachable assertion may lead to denial of service | known not affected: 1 | 2026-06-26T10:16:51+00:00 | Vulnerability · Source |
| CVE-2023-32727 | redhat_vex | zabbix: potential arbitrary code execution in icmpping() function | known not affected: 1 | 2026-06-26T10:16:49+00:00 | Vulnerability · Source |
| CVE-2023-34106 | redhat_vex | glpi: Unauthorized access to user data | known not affected: 1 | 2026-06-26T10:16:48+00:00 | Vulnerability · Source |
| CVE-2023-34107 | redhat_vex | glpi: unauthorized access to knowledge base items | known not affected: 1 | 2026-06-26T10:15:28+00:00 | Vulnerability · Source |
| CVE-2023-32725 | redhat_vex | zabbix: insufficient validation checks with cookies | known not affected: 1 | 2026-06-26T10:14:34+00:00 | Vulnerability · Source |
| CVE-2023-35826 | redhat_vex | kernel: cedrus: race condition leading to use-after-free in cedrus_remove() | known not affected: 198 | 2026-06-26T10:11:59+00:00 | Vulnerability · Source |
| CVE-2023-35827 | redhat_vex | kernel: ravb: race condition leading to use-after-free in ravb_remove() | known not affected: 198 | 2026-06-26T10:10:35+00:00 | Vulnerability · Source |
| CVE-2023-35852 | redhat_vex | suricata: directory traversal | known not affected: 1 | 2026-06-26T10:10:34+00:00 | Vulnerability · Source |
| CVE-2023-35946 | redhat_vex | gradle: Dependency cache path traversal | known affected: 6 known not affected: 2 | 2026-06-26T10:06:52+00:00 | Vulnerability · Source |
| CVE-2023-3726 | redhat_vex | ocsinventory-agent: stored XSS | known not affected: 1 | 2026-06-26T10:05:29+00:00 | Vulnerability · Source |
| CVE-2026-53271 | redhat_vex | kernel: ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers | known not affected: 274 | 2026-06-26T09:59:38+00:00 | Vulnerability · Source |
| CVE-2023-3745 | redhat_vex | ImageMagick: heap-buffer-overflow in PushCharPixel() in quantum-private.h | known affected: 14 | 2026-06-26T09:59:35+00:00 | Vulnerability · Source |
| CVE-2023-38427 | redhat_vex | kernel: ksmbd: integer underflow and out-of-bounds read in deassemble_neg_contexts | known not affected: 198 | 2026-06-26T09:59:21+00:00 | Vulnerability · Source |
| CVE-2023-38496 | redhat_vex | apptainer: Ineffective privileges drop when requesting container network | known not affected: 1 | 2026-06-26T09:56:22+00:00 | Vulnerability · Source |
| CVE-2023-38522 | redhat_vex | trafficserver.apache.org: trafficserver: apache: Incomplete field name check allows request smuggling | known not affected: 1 | 2026-06-26T09:56:22+00:00 | Vulnerability · Source |
| CVE-2023-38697 | redhat_vex | protocol-http1: rubygem Strict validation of content length and chunk length | known affected: 2 | 2026-06-26T09:54:41+00:00 | Vulnerability · Source |
| CVE-2026-53139 | redhat_vex | kernel: drm/v3d: Skip CSD when it has zeroed workgroups | known not affected: 274 | 2026-06-26T09:48:57+00:00 | Vulnerability · Source |
| CVE-2023-39328 | redhat_vex | openjpeg: denail of service via crafted image file | known affected: 37 | 2026-06-26T09:48:55+00:00 | Vulnerability · Source |
| CVE-2023-39913 | redhat_vex | UIMA: deserialization of untrusted data, improper input validation vulnerability | known affected: 1 known not affected: 2 | 2026-06-26T09:48:53+00:00 | Vulnerability · Source |
| CVE-2023-39975 | redhat_vex | krb5: double-free in KDC TGS processing | fixed: 115 known not affected: 24 | 2026-06-26T09:48:51+00:00 | Vulnerability · Source |
| CVE-2023-39357 | redhat_vex | cacti: SQL Injection when saving data with sql_save() | known not affected: 1 | 2026-06-26T09:48:50+00:00 | Vulnerability · Source |
| CVE-2023-40181 | redhat_vex | freerdp: integer-Underflow leading to Out-Of-Bound Read in zgfx_decompress_segment | fixed: 65 known affected: 18 | 2026-06-26T09:44:27+00:00 | Vulnerability · Source |
| CVE-2023-40546 | redhat_vex | shim: Out-of-bounds read printing error messages | fixed: 69 | 2026-06-26T09:44:21+00:00 | Vulnerability · Source |
| CVE-2023-40186 | redhat_vex | freerdp: Integer overflow leading to out-of-bound write vulnerability in gdi_CreateSurface | fixed: 65 known affected: 18 | 2026-06-26T09:44:18+00:00 | Vulnerability · Source |
| CVE-2023-40551 | redhat_vex | shim: out of bounds read when parsing MZ binaries | fixed: 69 | 2026-06-26T09:44:14+00:00 | Vulnerability · Source |
| CVE-2023-40549 | redhat_vex | shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file | fixed: 69 | 2026-06-26T09:44:08+00:00 | Vulnerability · Source |
| CVE-2023-40170 | redhat_vex | python-jupyter-server: improper cross-site credential checks on `/files/` URLs could allow exposure of certain file contents | known not affected: 1 | 2026-06-26T09:44:08+00:00 | Vulnerability · Source |
| CVE-2023-4047 | redhat_vex | Mozilla: Potential permissions request bypass via clickjacking | fixed: 226 known affected: 4 | 2026-06-26T09:44:04+00:00 | Vulnerability · Source |
| CVE-2023-40547 | redhat_vex | shim: RCE in http boot support may lead to Secure Boot bypass | fixed: 69 | 2026-06-26T09:43:28+00:00 | Vulnerability · Source |
| CVE-2023-41323 | redhat_vex | glpi: users login enumeration by unauthenticated user | known not affected: 1 | 2026-06-26T09:39:52+00:00 | Vulnerability · Source |
| CVE-2023-41321 | redhat_vex | glpi: sensitive fields enumeration through API | known not affected: 1 | 2026-06-26T09:39:52+00:00 | Vulnerability · Source |