VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-45700 | redhat_vex | zabbix: DoS vulnerability due to uncontrolled resource exhaustion | known not affected: 1 | 2026-06-26T01:47:48+00:00 | Vulnerability · Source |
| CVE-2024-45699 | redhat_vex | zabbix: Reflected XSS vulnerability in /zabbix.php?action=export.valuemaps | known not affected: 1 | 2026-06-26T01:47:38+00:00 | Vulnerability · Source |
| CVE-2024-45410 | redhat_vex | traefik: HTTP client can manipulate custom HTTP headers that are added by Traefik | fixed: 40 known not affected: 2 | 2026-06-26T01:47:03+00:00 | Vulnerability · Source |
| CVE-2026-4367 | microsoft_vex | Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing | fixed: 1 known affected: 1 | 2026-06-26T01:41:41+00:00 | Vulnerability · Source |
| CVE-2026-46320 | microsoft_vex | tap: free page on error paths in tap_get_user_xdp() | fixed: 1 known affected: 2 | 2026-06-26T01:41:26+00:00 | Vulnerability · Source |
| CVE-2026-46322 | microsoft_vex | tun: free page on build_skb failure in tun_xdp_one() | fixed: 1 known affected: 2 | 2026-06-26T01:41:18+00:00 | Vulnerability · Source |
| CVE-2026-46321 | microsoft_vex | tun: free page on short-frame rejection in tun_xdp_one() | fixed: 1 known affected: 2 | 2026-06-26T01:41:11+00:00 | Vulnerability · Source |
| CVE-2026-45930 | microsoft_vex | net: mctp: ensure our nlmsg responses are initialised | fixed: 1 known affected: 2 | 2026-06-26T01:40:44+00:00 | Vulnerability · Source |
| CVE-2026-45850 | microsoft_vex | ipvs: skip ipv6 extension headers for csum checks | fixed: 1 known affected: 2 | 2026-06-26T01:40:31+00:00 | Vulnerability · Source |
| CVE-2025-68736 | microsoft_vex | landlock: Fix handling of disconnected directories | fixed: 1 known affected: 11 | 2026-06-26T01:39:56+00:00 | Vulnerability · Source |
| CVE-2025-68296 | microsoft_vex | drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup | fixed: 1 known affected: 11 | 2026-06-26T01:39:42+00:00 | Vulnerability · Source |
| CVE-2024-47197 | redhat_vex | maven-archetype-plugin: Exposure of Sensitive Information | known affected: 17 | 2026-06-26T01:31:43+00:00 | Vulnerability · Source |
| CVE-2026-53216 | redhat_vex | kernel: net: mvpp2: limit XDP frame size to the RX buffer | known not affected: 274 | 2026-06-26T01:22:14+00:00 | Vulnerability · Source |
| CVE-2024-49395 | redhat_vex | mutt: neomutt: Bcc email header field is indirectly leaked by cryptographic info block | known affected: 7 | 2026-06-26T01:22:11+00:00 | Vulnerability · Source |
| CVE-2024-49394 | redhat_vex | mutt: neomutt: In-Reply-To email header field it not protected by cryptograpic signing | known affected: 6 | 2026-06-26T01:22:10+00:00 | Vulnerability · Source |
| CVE-2024-47827 | redhat_vex | argo-workflows: Argo Workflows Controller: Denial of Service via malicious daemon Workflows | known not affected: 7 | 2026-06-26T01:22:07+00:00 | Vulnerability · Source |
| CVE-2024-47803 | redhat_vex | jenkins: Exposure of multi-line secrets through error messages | fixed: 16 known not affected: 2 | 2026-06-26T01:22:06+00:00 | Vulnerability · Source |
| CVE-2024-49393 | redhat_vex | mutt: neomutt: To and Cc email header fields are not protected by cryptographic signing | known affected: 7 | 2026-06-26T01:22:05+00:00 | Vulnerability · Source |
| CVE-2024-47804 | redhat_vex | jenkins: Item creation restriction bypass vulnerability | fixed: 16 known not affected: 2 | 2026-06-26T01:22:01+00:00 | Vulnerability · Source |
| CVE-2026-53186 | redhat_vex | kernel: RDMA/srp: bound SRP_RSP sense copy by the received length | known not affected: 274 | 2026-06-26T01:07:15+00:00 | Vulnerability · Source |
| CVE-2023-48706 | redhat_vex | vim: use-after-free in ex_substitute in Vim | known affected: 24 | 2026-06-26T01:04:18+00:00 | Vulnerability · Source |
| CVE-2023-48237 | redhat_vex | vim: buffer overflow in shift_line | known affected: 24 | 2026-06-26T01:04:16+00:00 | Vulnerability · Source |
| CVE-2023-48236 | redhat_vex | vim: overflow in get_number | known affected: 24 | 2026-06-26T01:04:14+00:00 | Vulnerability · Source |
| CVE-2023-48235 | redhat_vex | vim: overflow in ex address parsing | known affected: 24 | 2026-06-26T01:04:12+00:00 | Vulnerability · Source |
| CVE-2023-48234 | redhat_vex | vim: overflow in nv_z_get_count | known affected: 24 | 2026-06-26T01:04:11+00:00 | Vulnerability · Source |
| CVE-2023-48232 | redhat_vex | vim: floating point exception in adjust_plines_for_skipcol() | known affected: 24 | 2026-06-26T01:04:09+00:00 | Vulnerability · Source |
| CVE-2023-48233 | redhat_vex | vim: overflow with count for :s command | known affected: 24 | 2026-06-26T01:04:08+00:00 | Vulnerability · Source |
| CVE-2023-48231 | redhat_vex | vim: use after free in win_close() | known affected: 24 | 2026-06-26T01:04:03+00:00 | Vulnerability · Source |
| CVE-2023-46246 | redhat_vex | vim: Integer Overflow in :history command | known affected: 24 | 2026-06-26T01:03:59+00:00 | Vulnerability · Source |
| CVE-2023-4736 | redhat_vex | vim: Arbitrary command execution on Windows in vim/vim | known not affected: 12 | 2026-06-26T01:03:58+00:00 | Vulnerability · Source |
| CVE-2023-2609 | redhat_vex | vim: NULL Pointer Dereference in get_register() at register.c | known affected: 24 | 2026-06-26T01:03:54+00:00 | Vulnerability · Source |
| CVE-2024-50349 | redhat_vex | git: Git does not sanitize URLs when asking for credentials interactively | fixed: 201 known affected: 34 | 2026-06-26T01:03:52+00:00 | Vulnerability · Source |
| CVE-2024-52006 | redhat_vex | git: Newline confusion in credential helpers can lead to credential exfiltration in git | fixed: 150 known affected: 34 | 2026-06-26T01:03:51+00:00 | Vulnerability · Source |
| CVE-2024-51745 | redhat_vex | wasmtime: Wasmtime doesn't fully sandbox all the Windows device filenames | known not affected: 2 | 2026-06-26T01:03:48+00:00 | Vulnerability · Source |
| CVE-2024-5138 | redhat_vex | snapd: Privilege escalation may lead to a Denial of Service | known not affected: 1 | 2026-06-26T01:03:08+00:00 | Vulnerability · Source |
| CVE-2024-52549 | redhat_vex | jenkins-plugin/script-security: Jenkins Script Security Plugin File Disclosure Vulnerability | fixed: 24 | 2026-06-26T01:03:02+00:00 | Vulnerability · Source |
| CVE-2024-5206 | redhat_vex | scikit-learn: Possible sensitive data leak | known affected: 5 known not affected: 11 | 2026-06-26T01:02:58+00:00 | Vulnerability · Source |
| CVE-2021-33643 | redhat_vex | libtar: out-of-bounds read in gnu_longlink | fixed: 16 known affected: 5 | 2026-06-26T01:02:55+00:00 | Vulnerability · Source |
| CVE-2023-6879 | redhat_vex | aom: heap-buffer-overflow on frame size change | known not affected: 22 | 2026-06-26T01:02:47+00:00 | Vulnerability · Source |
| CVE-2024-52551 | redhat_vex | jenkins-plugin/pipeline-model-definition: Jenkins Pipeline Declarative Plugin Allows Restart of Builds with Unapproved Jenkinsfile | fixed: 24 | 2026-06-26T00:58:13+00:00 | Vulnerability · Source |
| CVE-2024-51737 | redhat_vex | redisearch: RediSearch: Integer overflow leading to heap overflow and remote code execution | known not affected: 1 | 2026-06-26T00:52:48+00:00 | Vulnerability · Source |
| CVE-2024-52550 | redhat_vex | jenkins-plugin/workflow-cps: Lack of Approval Check for Rebuilt Jenkins Pipelines | fixed: 24 | 2026-06-26T00:52:46+00:00 | Vulnerability · Source |
| CVE-2024-52595 | redhat_vex | python-lxml-html-clean: HTML Cleaner allows crafted scripts in special contexts like svg or math to pass through | known not affected: 1 | 2026-06-26T00:52:23+00:00 | Vulnerability · Source |
| CVE-2024-52303 | redhat_vex | aiohttp: aiohttp memory leak when middleware is enabled when requesting a resource with a non-allowed method | known affected: 5 known not affected: 17 | 2026-06-26T00:51:56+00:00 | Vulnerability · Source |
| CVE-2024-54192 | redhat_vex | tcpreplay: Tcpreplay: Denial of Service via crafted file | known not affected: 1 | 2026-06-26T00:42:04+00:00 | Vulnerability · Source |
| CVE-2024-53984 | redhat_vex | nanopb: nanopb does not release memory on error return when using PB_DECODE_DELIMITED | known not affected: 1 | 2026-06-26T00:42:01+00:00 | Vulnerability · Source |
| CVE-2024-55626 | redhat_vex | suricata: Suricata: Buffer overflow via large BPF filter file at startup | known not affected: 1 | 2026-06-26T00:37:14+00:00 | Vulnerability · Source |
| CVE-2024-56335 | redhat_vex | vaultwarden: Privilege escalation allows organization groups to be updated/deleted if their UUID is known in vaultwarden | known not affected: 1 | 2026-06-26T00:37:12+00:00 | Vulnerability · Source |
| CVE-2024-55192 | redhat_vex | OpenImageIO: OpenImageIO: Arbitrary code execution due to heap overflow | known not affected: 1 | 2026-06-26T00:37:11+00:00 | Vulnerability · Source |
| CVE-2024-55627 | redhat_vex | suricata: Suricata: Buffer overflow via specially crafted TCP stream | known not affected: 1 | 2026-06-26T00:37:11+00:00 | Vulnerability · Source |