VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-55194 | redhat_vex | OpenImageIO: OpenImageIO: Remote code execution due to heap overflow vulnerability in fmath.h | known not affected: 1 | 2026-06-26T00:37:05+00:00 | Vulnerability · Source |
| CVE-2024-55193 | redhat_vex | OpenImageIO: OpenImageIO: Denial of Service due to segmentation violation | known not affected: 1 | 2026-06-26T00:37:05+00:00 | Vulnerability · Source |
| CVE-2024-55195 | redhat_vex | OpenImageIO: OpenImageIO: Denial of Service via allocation-size-too-big bug | known not affected: 1 | 2026-06-26T00:37:05+00:00 | Vulnerability · Source |
| CVE-2024-55629 | redhat_vex | suricata: Suricata: TCP urgent data handling leads to network intrusion detection system evasion | known not affected: 1 | 2026-06-26T00:37:04+00:00 | Vulnerability · Source |
| CVE-2024-55605 | redhat_vex | suricata: Suricata: Stack overflow via large input buffer in transform functions | known not affected: 1 | 2026-06-26T00:36:19+00:00 | Vulnerability · Source |
| CVE-2024-55628 | redhat_vex | suricata: Suricata: Denial of Service via DNS resource name compression | known not affected: 1 | 2026-06-26T00:35:50+00:00 | Vulnerability · Source |
| CVE-2024-57257 | redhat_vex | u-boot: Stack Overflow in Das U-Boot's SquashFS Symlink Resolution | known not affected: 1 | 2026-06-26T00:23:07+00:00 | Vulnerability · Source |
| CVE-2024-57660 | redhat_vex | virtuoso-opensource: openlink virtuoso-opensource: Denial of Service via crafted SQL statements | known not affected: 3 | 2026-06-26T00:23:05+00:00 | Vulnerability · Source |
| CVE-2024-57658 | redhat_vex | virtuoso-opensource: virtuoso-opensource: Denial of Service via crafted SQL statements in sql_tree_hash_1 component | known not affected: 3 | 2026-06-26T00:23:04+00:00 | Vulnerability · Source |
| CVE-2024-57653 | redhat_vex | virtuoso-opensource: openlink virtuoso-opensource: Denial of Service via crafted SQL statements | known not affected: 3 | 2026-06-26T00:23:02+00:00 | Vulnerability · Source |
| CVE-2024-57655 | redhat_vex | virtuoso-opensource: Openlink Virtuoso-opensource: Denial of Service via crafted SQL statements | known not affected: 3 | 2026-06-26T00:22:59+00:00 | Vulnerability · Source |
| CVE-2024-57663 | redhat_vex | virtuoso-opensource: openlink virtuoso-opensource: Denial of Service via crafted SQL statements | known not affected: 3 | 2026-06-26T00:22:59+00:00 | Vulnerability · Source |
| CVE-2024-57657 | redhat_vex | virtuoso-opensource: virtuoso-opensource: Denial of Service in sqlg_vec_upd via crafted SQL statements | known not affected: 3 | 2026-06-26T00:22:55+00:00 | Vulnerability · Source |
| CVE-2024-57664 | redhat_vex | virtuoso-opensource: openlink virtuoso-opensource: Denial of Service via crafted SQL statements | known not affected: 3 | 2026-06-26T00:22:54+00:00 | Vulnerability · Source |
| CVE-2024-57662 | redhat_vex | virtuoso-opensource: openlink virtuoso-opensource: Denial of Service via crafted SQL statements | known not affected: 3 | 2026-06-26T00:22:51+00:00 | Vulnerability · Source |
| CVE-2026-53172 | redhat_vex | kernel: accel/ethosu: fix IFM region index out-of-bounds in command stream parser | known not affected: 274 | 2026-06-26T00:18:51+00:00 | Vulnerability · Source |
| CVE-2026-53247 | redhat_vex | kernel: net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown | known not affected: 274 | 2026-06-26T00:18:46+00:00 | Vulnerability · Source |
| CVE-2024-5798 | redhat_vex | github.com/hashicorp/vault: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault | known affected: 6 known not affected: 4 | 2026-06-26T00:18:45+00:00 | Vulnerability · Source |
| CVE-2024-7867 | redhat_vex | xpdf: integer overflow and divide-by-zero due to very large coordinates in a page box | known not affected: 1 | 2026-06-26T00:18:40+00:00 | Vulnerability · Source |
| CVE-2026-53170 | redhat_vex | kernel: accel/ethosu: reject DMA commands with uninitialized length | known not affected: 274 | 2026-06-26T00:18:40+00:00 | Vulnerability · Source |
| CVE-2024-8309 | redhat_vex | langchain: SQL Injection in langchain-ai/langchain | known affected: 2 known not affected: 7 | 2026-06-26T00:18:38+00:00 | Vulnerability · Source |
| CVE-2025-0446 | redhat_vex | chromium-browser: Inappropriate implementation in Extensions | known not affected: 1 | 2026-06-26T00:18:38+00:00 | Vulnerability · Source |
| CVE-2025-0448 | redhat_vex | chromium-browser: Inappropriate implementation in Compositing | known not affected: 1 | 2026-06-26T00:18:37+00:00 | Vulnerability · Source |
| CVE-2026-53240 | redhat_vex | kernel: xfrm: iptfs: fix use-after-free on first_skb in __input_process_payload | known not affected: 274 | 2026-06-26T00:18:30+00:00 | Vulnerability · Source |
| CVE-2025-11680 | redhat_vex | libwebsockets: Out-of-bounds Write in libwebsockets PNG parsing | known affected: 5 | 2026-06-26T00:18:26+00:00 | Vulnerability · Source |
| CVE-2025-11677 | redhat_vex | libwebsockets: Use After Free in libwebsockets WebSocket server | known affected: 5 | 2026-06-26T00:18:22+00:00 | Vulnerability · Source |
| CVE-2026-53215 | redhat_vex | kernel: net: mvpp2: refill RX buffers before XDP or skb use | known not affected: 274 | 2026-06-26T00:18:18+00:00 | Vulnerability · Source |
| CVE-2025-13425 | redhat_vex | github.com/google/osv-scalibr: Denial of Service in OSV-SCALIBR | known affected: 2 | 2026-06-26T00:18:16+00:00 | Vulnerability · Source |
| CVE-2025-13083 | redhat_vex | drupal: Drupal core information disclosure | known not affected: 1 | 2026-06-26T00:18:15+00:00 | Vulnerability · Source |
| CVE-2025-1373 | redhat_vex | ffmpeg: FFmpeg MOV Parser mov.c mov_read_trak null pointer dereference | known not affected: 1 | 2026-06-26T00:18:15+00:00 | Vulnerability · Source |
| CVE-2025-13462 | redhat_vex | cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues | fixed: 13 known affected: 142 | 2026-06-26T00:18:13+00:00 | Vulnerability · Source |
| CVE-2025-14840 | redhat_vex | drupal: Drupal Http Client Manager: Information disclosure due to insufficient data separation | known not affected: 1 | 2026-06-26T00:18:08+00:00 | Vulnerability · Source |
| CVE-2025-15497 | redhat_vex | openvpn: OpenVPN denial of service | known not affected: 1 | 2026-06-26T00:18:08+00:00 | Vulnerability · Source |
| CVE-2025-21607 | redhat_vex | vyper: Vyper: Unchecked success flag in precompile calls leads to incorrect execution | known not affected: 1 | 2026-06-26T00:18:07+00:00 | Vulnerability · Source |
| CVE-2026-53234 | redhat_vex | kernel: net: ibm: emac: Fix use-after-free during device removal | known not affected: 274 | 2026-06-26T00:18:01+00:00 | Vulnerability · Source |
| CVE-2025-2912 | redhat_vex | hdf5: HDF5 H5Omessage.c H5O_msg_flush heap-based overflow | known affected: 1 | 2026-06-26T00:18:00+00:00 | Vulnerability · Source |
| CVE-2026-53248 | redhat_vex | kernel: net: airoha: Fix use-after-free in metadata dst teardown | known not affected: 274 | 2026-06-26T00:17:57+00:00 | Vulnerability · Source |
| CVE-2024-5830 | redhat_vex | chromium-browser: Type Confusion in V8 | known not affected: 1 | 2026-06-26T00:12:39+00:00 | Vulnerability · Source |
| CVE-2024-6468 | redhat_vex | vault: Denial of Service When Setting a Proxy Protocol Behavior | known affected: 9 known not affected: 8 | 2026-06-26T00:05:52+00:00 | Vulnerability · Source |
| CVE-2024-7594 | redhat_vex | hashicorp/vault: Vault SSH secrets engine configuration did not restrict valid principals by default | known affected: 3 known not affected: 26 | 2026-06-26T00:03:04+00:00 | Vulnerability · Source |
| CVE-2024-7344 | redhat_vex | howyar-sysreturn: Howyar UEFI Application "Reloader": Unsigned software execution via hardcoded path | known not affected: 1 | 2026-06-26T00:00:28+00:00 | Vulnerability · Source |
| CVE-2024-8900 | redhat_vex | firefox: Clipboard write permission bypass | fixed: 101 known affected: 6 known not affected: 2 | 2026-06-25T23:58:09+00:00 | Vulnerability · Source |
| CVE-2024-8365 | redhat_vex | vault: Vault Leaks Client Token and Token Accessor in Audit Devices | known not affected: 15 | 2026-06-25T23:57:48+00:00 | Vulnerability · Source |
| CVE-2024-8185 | redhat_vex | hashicorp/vault: Vault Vulnerable to Denial of Service When Processing Raft Join Requests | known affected: 5 known not affected: 10 | 2026-06-25T23:57:46+00:00 | Vulnerability · Source |
| CVE-2024-9050 | redhat_vex | NetworkManager-libreswan: Local privilege escalation via leftupdown | fixed: 205 known affected: 2 | 2026-06-25T23:57:11+00:00 | Vulnerability · Source |
| CVE-2024-8376 | redhat_vex | mosquitto: sending specific sequences of packets may trigger memory leak | fixed: 32 known affected: 2 known not affected: 3694 | 2026-06-25T23:56:54+00:00 | Vulnerability · Source |
| CVE-2025-0518 | redhat_vex | ffmpeg: FFmpeg: Unchecked Return Value and Out-of-bounds Read vulnerability allows sensitive constant disclosure | known not affected: 1 | 2026-06-25T23:54:08+00:00 | Vulnerability · Source |
| CVE-2025-0441 | redhat_vex | chromium-browser: Inappropriate implementation in Fenced Frames | known not affected: 1 | 2026-06-25T23:54:07+00:00 | Vulnerability · Source |
| CVE-2025-0443 | redhat_vex | chromium-browser: Insufficient data validation in Extensions | known not affected: 1 | 2026-06-25T23:54:02+00:00 | Vulnerability · Source |
| CVE-2025-0442 | redhat_vex | chromium-browser: Inappropriate implementation in Payments | known not affected: 1 | 2026-06-25T23:54:01+00:00 | Vulnerability · Source |