VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-51765 | redhat_vex | sendmail: SMTP smuggling vulnerability | known affected: 21 | 2026-06-26T08:59:13+00:00 | Vulnerability · Source |
| CVE-2023-52138 | redhat_vex | engrampa: remote command execution via path traversal vulnerability | known not affected: 1 | 2026-06-26T08:59:12+00:00 | Vulnerability · Source |
| CVE-2026-53237 | redhat_vex | kernel: gpio: mvebu: fix NULL pointer dereference in suspend/resume | known not affected: 274 | 2026-06-26T08:40:30+00:00 | Vulnerability · Source |
| CVE-2026-53213 | redhat_vex | kernel: drm/vc4: fix krealloc() memory leak | known not affected: 274 | 2026-06-26T08:40:20+00:00 | Vulnerability · Source |
| CVE-2023-52896 | redhat_vex | kernel: btrfs: fix race between quota rescan and disable leading to NULL pointer deref | known affected: 42 known not affected: 156 | 2026-06-26T08:29:47+00:00 | Vulnerability · Source |
| CVE-2026-53132 | redhat_vex | kernel: vsock/virtio: fix potential unbounded skb queue | known not affected: 1 | 2026-06-26T08:20:35+00:00 | Vulnerability · Source |
| CVE-2026-53152 | redhat_vex | kernel: mmc: dw_mmc-rockchip: Add missing private data for very old controllers | known not affected: 274 | 2026-06-26T08:16:49+00:00 | Vulnerability · Source |
| CVE-2026-53174 | redhat_vex | kernel: ovl: keep err zero after successful ovl_cache_get() | known not affected: 274 | 2026-06-26T07:44:10+00:00 | Vulnerability · Source |
| CVE-2026-53165 | redhat_vex | kernel: iomap: avoid potential null folio->mapping deref during error reporting | known not affected: 274 | 2026-06-26T07:44:09+00:00 | Vulnerability · Source |
| CVE-2026-53217 | redhat_vex | kernel: net: mvpp2: sync RX data at the hardware packet offset | known not affected: 274 | 2026-06-26T07:44:05+00:00 | Vulnerability · Source |
| CVE-2026-53160 | redhat_vex | kernel: misc: fastrpc: fix use-after-free race in fastrpc_map_create | known not affected: 274 | 2026-06-26T07:44:02+00:00 | Vulnerability · Source |
| CVE-2026-54236 | redhat_vex | vllm: vLLM: Information Disclosure via Incomplete Error Message Sanitization | known affected: 13 known not affected: 13 | 2026-06-26T07:34:12+00:00 | Vulnerability · Source |
| CVE-2026-53273 | redhat_vex | kernel: tee: optee: prevent use-after-free when the client exits before the supplicant | known not affected: 274 | 2026-06-26T07:27:53+00:00 | Vulnerability · Source |
| CVE-2026-40084 | redhat_vex | cacti: Cacti: Arbitrary file read via Path Traversal vulnerability in Report format_file parameter | known not affected: 1 | 2026-06-26T07:23:46+00:00 | Vulnerability · Source |
| CVE-2026-53169 | redhat_vex | kernel: accel/ethosu: reject NPU_OP_RESIZE commands from userspace | known not affected: 274 | 2026-06-26T07:23:44+00:00 | Vulnerability · Source |
| CVE-2026-46611 | redhat_vex | glances: Glances: Information disclosure via DNS rebinding attack | known not affected: 1 | 2026-06-26T07:19:00+00:00 | Vulnerability · Source |
| CVE-2026-40941 | redhat_vex | cacti: Cacti: Package Import Signature Validation Bypass Allows Self-Signed Packages | known not affected: 1 | 2026-06-26T07:18:56+00:00 | Vulnerability · Source |
| CVE-2026-40082 | redhat_vex | Cacti: Cacti: Session Fixation vulnerability due to missing session regeneration after login | known not affected: 1 | 2026-06-26T07:09:29+00:00 | Vulnerability · Source |
| CVE-2026-40083 | redhat_vex | cacti: Cacti: SQL Injection via unsanitized deserialization in SNMP agent management | known not affected: 1 | 2026-06-26T07:09:11+00:00 | Vulnerability · Source |
| CVE-2023-6484 | redhat_vex | keycloak: Log Injection during WebAuthn authentication or registration | fixed: 41 | 2026-06-26T07:01:32+00:00 | Vulnerability · Source |
| CVE-2023-6337 | redhat_vex | hashicorp-vault: denial of service through memory exhaustion | known not affected: 8 | 2026-06-26T06:54:14+00:00 | Vulnerability · Source |
| CVE-2023-5482 | redhat_vex | chromium-browser: Insufficient data validation in USB | known not affected: 1 | 2026-06-26T06:50:39+00:00 | Vulnerability · Source |
| CVE-2023-5679 | redhat_vex | bind9: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution | fixed: 580 known not affected: 47 | 2026-06-26T06:50:35+00:00 | Vulnerability · Source |
| CVE-2023-7158 | redhat_vex | MicroPython: heap-based buffer overflow | known not affected: 1 | 2026-06-26T06:47:26+00:00 | Vulnerability · Source |
| CVE-2024-0224 | redhat_vex | chromium: heap corruption via a crafted HTML page in webaudio | known not affected: 1 | 2026-06-26T06:37:42+00:00 | Vulnerability · Source |
| CVE-2024-0225 | redhat_vex | chromium: heap corruption via a crafted HTML page in webgpu | known not affected: 1 | 2026-06-26T06:37:40+00:00 | Vulnerability · Source |
| CVE-2024-0223 | redhat_vex | chromium: heap corruption via a crafted HTML page in angle | known not affected: 1 | 2026-06-26T06:32:08+00:00 | Vulnerability · Source |
| CVE-2024-10462 | redhat_vex | firefox: thunderbird: Origin of permission prompt could be spoofed by long URL | fixed: 253 known affected: 8 | 2026-06-26T06:31:55+00:00 | Vulnerability · Source |
| CVE-2024-10026 | redhat_vex | github.com/google/gvisor: Improved Seeding and Hashing In gVisor | known not affected: 1 | 2026-06-26T06:31:54+00:00 | Vulnerability · Source |
| CVE-2024-0222 | redhat_vex | chromium: Use after free in ANGLE, compromised the renderer process to potentially exploit heap corruption via a crafted HTML page | known not affected: 1 | 2026-06-26T06:31:54+00:00 | Vulnerability · Source |
| CVE-2024-10458 | redhat_vex | firefox: thunderbird: Permission leak via embed or object elements | fixed: 253 known affected: 8 | 2026-06-26T04:43:32+00:00 | Vulnerability · Source |
| CVE-2024-11217 | redhat_vex | oauth-server-container: oauth-server-container logs client secret in debug level | known affected: 1 | 2026-06-26T04:32:26+00:00 | Vulnerability · Source |
| CVE-2024-11403 | redhat_vex | libjxl: Out of Bounds Memory Read/Write in libjxl | known affected: 11 | 2026-06-26T04:32:23+00:00 | Vulnerability · Source |
| CVE-2024-13454 | redhat_vex | easy-rsa: Easy-RSA: Weak encryption algorithm allows local attacker to bruteforce CA key | known not affected: 1 | 2026-06-26T04:27:25+00:00 | Vulnerability · Source |
| CVE-2024-12401 | redhat_vex | cert-manager: potential DoS when parsing specially crafted PEM inputs | known affected: 20 | 2026-06-26T04:27:25+00:00 | Vulnerability · Source |
| CVE-2024-13903 | redhat_vex | quickjs-ng: quickjs-ng QuickJS qjs quickjs.c JS_GetRuntime stack-based overflow | known not affected: 1 | 2026-06-26T04:27:24+00:00 | Vulnerability · Source |
| CVE-2024-1545 | redhat_vex | WolfSSL: Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL | known not affected: 1 | 2026-06-26T04:27:19+00:00 | Vulnerability · Source |
| CVE-2024-21096 | redhat_vex | mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024) | fixed: 616 known affected: 57 known not affected: 54 | 2026-06-26T04:23:10+00:00 | Vulnerability · Source |
| CVE-2024-2048 | redhat_vex | hashicorp/vault: Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates | known affected: 3 known not affected: 23 | 2026-06-26T04:21:45+00:00 | Vulnerability · Source |
| CVE-2024-21652 | redhat_vex | argo-cd: Bypassing Brute Force Protection via Application Crash and In-Memory Data Loss | fixed: 115 known affected: 1 | 2026-06-26T04:12:32+00:00 | Vulnerability · Source |
| CVE-2024-22336 | redhat_vex | IBM QRadar Suite: IBM Cloud Pak for Security: Sensitive Information Disclosure in IBM QRadar Suite and IBM Cloud Pak for Security | known affected: 1 | 2026-06-26T04:12:31+00:00 | Vulnerability · Source |
| CVE-2024-21662 | redhat_vex | argo-cd: Bypassing Rate Limit and Brute Force Protection Using Cache Overflow | fixed: 115 known affected: 1 | 2026-06-26T04:12:31+00:00 | Vulnerability · Source |
| CVE-2024-22403 | redhat_vex | nectcloud: OAuth codes did not expire | known not affected: 1 | 2026-06-26T04:12:31+00:00 | Vulnerability · Source |
| CVE-2024-22402 | redhat_vex | nextcloud: users were able to load the first page of apps they were actually not allowed to access | known not affected: 1 | 2026-06-26T04:12:31+00:00 | Vulnerability · Source |
| CVE-2024-22404 | redhat_vex | nextcloud: users can download "view-only" files by zipping the complete folder | known not affected: 1 | 2026-06-26T04:12:30+00:00 | Vulnerability · Source |
| CVE-2024-2199 | redhat_vex | 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c | fixed: 249 known affected: 4 | 2026-06-26T04:12:20+00:00 | Vulnerability · Source |
| CVE-2024-22401 | redhat_vex | nextcloud: users could change the allowed list of apps, allowing them to use apps that were not intended to be used | known not affected: 1 | 2026-06-26T04:12:20+00:00 | Vulnerability · Source |
| CVE-2024-22368 | redhat_vex | perl-Spreadsheet-ParseXLSX: out-of-memory condition during parsing of a crafted XLSX document | known not affected: 1 | 2026-06-26T04:12:20+00:00 | Vulnerability · Source |
| CVE-2024-22400 | redhat_vex | nextcloud: users can be given a link to the Nextcloud server and end up on a uncontrolled thirdparty server | known not affected: 1 | 2026-06-26T04:12:19+00:00 | Vulnerability · Source |
| CVE-2024-22362 | redhat_vex | drupal7: improper handling of structural elements leading to denail of service | known not affected: 1 | 2026-06-26T04:12:18+00:00 | Vulnerability · Source |