VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-41322 | redhat_vex | glpi: privilege Escalation from technician to super-admin | known not affected: 1 | 2026-06-26T09:39:52+00:00 | Vulnerability · Source |
| CVE-2023-42461 | redhat_vex | glpi: SQL injection in ITIL actors | known not affected: 1 | 2026-06-26T09:39:51+00:00 | Vulnerability · Source |
| CVE-2023-41320 | redhat_vex | glpi: account takeover via SQL Injection in UI layout preferences | known not affected: 1 | 2026-06-26T09:39:46+00:00 | Vulnerability · Source |
| CVE-2023-41324 | redhat_vex | glpi: account takeover through API | known not affected: 1 | 2026-06-26T09:39:46+00:00 | Vulnerability · Source |
| CVE-2023-40890 | redhat_vex | zbar: stack overflow via malicious qr code | known not affected: 1 | 2026-06-26T09:39:44+00:00 | Vulnerability · Source |
| CVE-2023-42462 | redhat_vex | glpi: file deletion through document upload process | known not affected: 1 | 2026-06-26T09:39:44+00:00 | Vulnerability · Source |
| CVE-2023-40889 | redhat_vex | zbar: buffer overflow via crafted qr code | known not affected: 1 | 2026-06-26T09:39:44+00:00 | Vulnerability · Source |
| CVE-2023-43279 | redhat_vex | tcpreplay: null pointer dereference in mask_cidr6 component at cidr.c | known not affected: 1 | 2026-06-26T09:35:18+00:00 | Vulnerability · Source |
| CVE-2023-42883 | redhat_vex | webkitgtk: processing a malicious image may lead to a denial of service | fixed: 105 known affected: 9 | 2026-06-26T09:35:13+00:00 | Vulnerability · Source |
| CVE-2023-42890 | redhat_vex | webkitgtk: processing malicious web content may lead to arbitrary code execution | fixed: 105 known affected: 9 | 2026-06-26T09:35:09+00:00 | Vulnerability · Source |
| CVE-2023-43040 | redhat_vex | rgw: improperly verified POST keys | fixed: 784 known affected: 4 known not affected: 2 | 2026-06-26T09:35:04+00:00 | Vulnerability · Source |
| CVE-2023-42916 | redhat_vex | webkitgtk: Out-of-bounds read leads to sensitive data leak | fixed: 105 known affected: 9 | 2026-06-26T09:35:00+00:00 | Vulnerability · Source |
| CVE-2023-45143 | redhat_vex | node-undici: cookie leakage | fixed: 94 known affected: 34 known not affected: 3 | 2026-06-26T09:30:15+00:00 | Vulnerability · Source |
| CVE-2023-45229 | redhat_vex | edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message | fixed: 27 | 2026-06-26T09:30:12+00:00 | Vulnerability · Source |
| CVE-2023-4508 | redhat_vex | gerbv: denial of service | known not affected: 1 | 2026-06-26T09:30:12+00:00 | Vulnerability · Source |
| CVE-2026-53197 | redhat_vex | kernel: xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state() | known not affected: 274 | 2026-06-26T09:30:03+00:00 | Vulnerability · Source |
| CVE-2023-45129 | redhat_vex | synapse: malicious ACL event can cause denial of service | known not affected: 1 | 2026-06-26T09:30:03+00:00 | Vulnerability · Source |
| CVE-2023-45128 | redhat_vex | golang-github-gofiber-fiber: Cross-Site Request Forgery | known not affected: 1 | 2026-06-26T09:30:02+00:00 | Vulnerability · Source |
| CVE-2023-45141 | redhat_vex | golang-github-gofiber-fiber: Cross site request forgery (CSRF) | known not affected: 1 | 2026-06-26T09:29:57+00:00 | Vulnerability · Source |
| CVE-2023-46735 | redhat_vex | php-symfony: potential XSS in WebhookController | known not affected: 1 | 2026-06-26T09:25:22+00:00 | Vulnerability · Source |
| CVE-2023-46277 | redhat_vex | rust-pleaser: privilege escalation using ioctls TIOCSTI and TIOCLINUX | known not affected: 1 | 2026-06-26T09:25:20+00:00 | Vulnerability · Source |
| CVE-2023-46749 | redhat_vex | shiro: path traversal attack may lead to authentication bypass | fixed: 1 known affected: 1 known not affected: 6 | 2026-06-26T09:25:15+00:00 | Vulnerability · Source |
| CVE-2023-46809 | redhat_vex | nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding (Marvin) | fixed: 186 known affected: 26 | 2026-06-26T09:25:12+00:00 | Vulnerability · Source |
| CVE-2023-4680 | redhat_vex | vault: HashiCorp Vault Improper Input Validation vulnerability in github.com/hashicorp/vault | known affected: 15 | 2026-06-26T09:25:09+00:00 | Vulnerability · Source |
| CVE-2023-46750 | redhat_vex | shiro: URL redirection to untrusted site in FORM authentication feature | known affected: 3 known not affected: 5 | 2026-06-26T09:25:07+00:00 | Vulnerability · Source |
| CVE-2023-46724 | redhat_vex | squid: Denial of Service in SSL Certificate validation | fixed: 224 known affected: 4 | 2026-06-26T09:24:00+00:00 | Vulnerability · Source |
| CVE-2023-4576 | redhat_vex | Mozilla: Integer Overflow in RecordedSourceSurfaceCreation | known not affected: 17 | 2026-06-26T09:23:43+00:00 | Vulnerability · Source |
| CVE-2023-48022 | redhat_vex | ray: Ray Job Submission Arbitrary Code Execution | fixed: 8 known not affected: 46 | 2026-06-26T09:19:34+00:00 | Vulnerability · Source |
| CVE-2023-4727 | redhat_vex | ca: token authentication bypass vulnerability | fixed: 437 known affected: 13 | 2026-06-26T09:19:26+00:00 | Vulnerability · Source |
| CVE-2026-53243 | redhat_vex | kernel: rseq: Fix using an uninitialized stack variable in rseq_exit_user_update() | known not affected: 274 | 2026-06-26T09:14:59+00:00 | Vulnerability · Source |
| CVE-2023-49438 | redhat_vex | flask-security: open-redirect by abusing the ?next parameter on the /login and /register routes | known not affected: 1 | 2026-06-26T09:14:53+00:00 | Vulnerability · Source |
| CVE-2023-49791 | redhat_vex | nextcloud-server: multiple vulnerabilities | known not affected: 1 | 2026-06-26T09:14:53+00:00 | Vulnerability · Source |
| CVE-2023-49528 | redhat_vex | FFmpeg: Heap Buffer Overflow vulnerability | known not affected: 1 | 2026-06-26T09:14:53+00:00 | Vulnerability · Source |
| CVE-2023-49286 | redhat_vex | squid: Incorrect Check of Function Return Value In Helper Process management | fixed: 224 known affected: 4 | 2026-06-26T09:14:45+00:00 | Vulnerability · Source |
| CVE-2026-53158 | redhat_vex | kernel: misc: fastrpc: Fix NULL pointer dereference in rpmsg callback | known not affected: 274 | 2026-06-26T09:11:27+00:00 | Vulnerability · Source |
| CVE-2023-50268 | redhat_vex | jq: stack-based buffer overflow in builds using decNumber | known not affected: 7 | 2026-06-26T09:09:11+00:00 | Vulnerability · Source |
| CVE-2023-50431 | redhat_vex | kernel: information leak in sec_attest_info | known not affected: 198 | 2026-06-26T09:09:06+00:00 | Vulnerability · Source |
| CVE-2023-51446 | redhat_vex | glpi: LDAP Injection during authentication | known not affected: 1 | 2026-06-26T09:09:05+00:00 | Vulnerability · Source |
| CVE-2023-50728 | redhat_vex | octopost/webhooks: uncaught exception | fixed: 3 | 2026-06-26T09:09:01+00:00 | Vulnerability · Source |
| CVE-2023-51449 | redhat_vex | gradio: directory traversal vulnerability in '/file' route | known not affected: 1 | 2026-06-26T09:09:01+00:00 | Vulnerability · Source |
| CVE-2023-50711 | redhat_vex | vmm-sys-util: out of bounds memory accesses | known not affected: 1 | 2026-06-26T09:08:58+00:00 | Vulnerability · Source |
| CVE-2023-50246 | redhat_vex | jq: heap buffer overflow in function decToString() in decNumber.c | known not affected: 7 | 2026-06-26T09:08:58+00:00 | Vulnerability · Source |
| CVE-2023-50386 | redhat_vex | solr: backup/restore APIs allow for deployment of executables in malicious ConfigSets | known not affected: 5 | 2026-06-26T09:08:56+00:00 | Vulnerability · Source |
| CVE-2023-52353 | redhat_vex | mbedtls: the maximum negotiable TLS version is mishandled. | known not affected: 1 | 2026-06-26T08:59:19+00:00 | Vulnerability · Source |
| CVE-2023-51766 | redhat_vex | exim: SMTP smuggling vulnerability | known not affected: 1 | 2026-06-26T08:59:19+00:00 | Vulnerability · Source |
| CVE-2023-52161 | redhat_vex | iwd: potential authorization bypass | known not affected: 1 | 2026-06-26T08:59:18+00:00 | Vulnerability · Source |
| CVE-2023-51774 | redhat_vex | json-jwt: bypass of identity checks via a sign/encryption confusion attack | known not affected: 1 | 2026-06-26T08:59:17+00:00 | Vulnerability · Source |
| CVE-2023-52339 | redhat_vex | libebml: integer overflow in MemIOCallback::read | known not affected: 1 | 2026-06-26T08:59:16+00:00 | Vulnerability · Source |
| CVE-2023-51764 | redhat_vex | postfix: SMTP smuggling vulnerability | fixed: 73 known affected: 15 | 2026-06-26T08:59:14+00:00 | Vulnerability · Source |
| CVE-2023-51698 | redhat_vex | atril: vulnerable to Command Injection Vulnerability | known not affected: 1 | 2026-06-26T08:59:13+00:00 | Vulnerability · Source |