VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-0838 | redhat_vex | abseil-cpp: Heap Buffer overflow in Abseil | known affected: 1 | 2026-06-25T23:53:59+00:00 | Vulnerability · Source |
| CVE-2025-10990 | redhat_vex | rexml: REXML: Denial of Service via inefficient regex parsing | fixed: 16 known not affected: 126 | 2026-06-25T23:53:53+00:00 | Vulnerability · Source |
| CVE-2025-10954 | redhat_vex | github.com/nyaruka/phonenumbers: Phonenumbers improper input validation | known not affected: 1 | 2026-06-25T23:53:52+00:00 | Vulnerability · Source |
| CVE-2025-12058 | redhat_vex | keras: Keras Model.load_model Arbitrary Local File Loading and SSRF | known affected: 11 | 2026-06-25T23:53:52+00:00 | Vulnerability · Source |
| CVE-2025-11683 | redhat_vex | yaml-syck: YAML::Syck potential Information Disclosure | known affected: 5 | 2026-06-25T23:53:44+00:00 | Vulnerability · Source |
| CVE-2025-12194 | redhat_vex | bcprov-lts8on: bc-fips: Uncontrolled Resource Consumption vulnerability in Bouncy Castle | known affected: 5 | 2026-06-25T23:53:40+00:00 | Vulnerability · Source |
| CVE-2025-13437 | redhat_vex | zx: Arbitrary node_modules Directory Deletion in Google zx | known affected: 1 | 2026-06-25T23:53:38+00:00 | Vulnerability · Source |
| CVE-2025-13080 | redhat_vex | drupal: Drupal core denial of Service | known not affected: 1 | 2026-06-25T23:53:37+00:00 | Vulnerability · Source |
| CVE-2025-13082 | redhat_vex | drupal: Drupal core defacement | known not affected: 1 | 2026-06-25T23:53:36+00:00 | Vulnerability · Source |
| CVE-2025-13992 | redhat_vex | chromium-browser: Side-channel information leakage in Navigation and Loading | known not affected: 1 | 2026-06-25T23:53:34+00:00 | Vulnerability · Source |
| CVE-2025-14372 | redhat_vex | Google Chrome: Google Chrome: Sandbox escape via use-after-free in Password Manager | known not affected: 1 | 2026-06-25T23:53:33+00:00 | Vulnerability · Source |
| CVE-2025-21492 | redhat_vex | mysql: MySQL Server: Denial of Service via network access | known affected: 23 known not affected: 18 | 2026-06-25T23:53:32+00:00 | Vulnerability · Source |
| CVE-2025-1860 | redhat_vex | Data-Entropy: Data::Entropy for Perl uses insecure rand() function for cryptographic functions | known not affected: 1 | 2026-06-25T23:53:28+00:00 | Vulnerability · Source |
| CVE-2025-20033 | redhat_vex | mattermost: DoS via custom post type for sysconsole plugin readers | known not affected: 11 | 2026-06-25T23:53:27+00:00 | Vulnerability · Source |
| CVE-2025-0434 | redhat_vex | chromium-browser: Out of bounds memory access in V8 | known not affected: 1 | 2026-06-25T23:52:02+00:00 | Vulnerability · Source |
| CVE-2025-0291 | redhat_vex | chromium-browser: Google Chrome V8 Type Confusion: Arbitrary Code Execution via Crafted HTML Page | known not affected: 1 | 2026-06-25T23:51:22+00:00 | Vulnerability · Source |
| CVE-2025-0995 | redhat_vex | chromium-browser: Use-After-Free in V8 JavaScript Engine | known not affected: 1 | 2026-06-25T23:49:26+00:00 | Vulnerability · Source |
| CVE-2025-22234 | redhat_vex | org.springframework.security/spring-security-core: Spring Security - BCrypt Password Encoder maximum password length breaks timing attack mitigation | known affected: 13 | 2026-06-25T23:43:03+00:00 | Vulnerability · Source |
| CVE-2025-22232 | redhat_vex | spring-cloud-config-server: Spring Cloud Config Server May Not Use Vault Token Sent By Clients | known affected: 11 | 2026-06-25T23:43:02+00:00 | Vulnerability · Source |
| CVE-2025-22240 | redhat_vex | salt: Path traversal in saltstack | known not affected: 1 | 2026-06-25T23:42:57+00:00 | Vulnerability · Source |
| CVE-2025-22238 | redhat_vex | salt: Directory traversal in salt project | known not affected: 1 | 2026-06-25T23:42:57+00:00 | Vulnerability · Source |
| CVE-2025-22242 | redhat_vex | salt: Denial of service in saltstack | known not affected: 1 | 2026-06-25T23:42:57+00:00 | Vulnerability · Source |
| CVE-2025-27796 | redhat_vex | GraphicsMagick: Palette Buffer Allocation in GraphicsMagick WPG | known not affected: 1 | 2026-06-25T23:42:56+00:00 | Vulnerability · Source |
| CVE-2025-24513 | redhat_vex | ingress-nginx: ingress-nginx controller - auth secret file path traversal vulnerability | known not affected: 1 | 2026-06-25T23:42:54+00:00 | Vulnerability · Source |
| CVE-2025-24530 | redhat_vex | phpMyAdmin: XSS Vulnerability in phpMyAdmin Check Tables Feature | known not affected: 1 | 2026-06-25T23:42:52+00:00 | Vulnerability · Source |
| CVE-2025-32441 | redhat_vex | rack: Rack Session Reuse Vulnerability | known affected: 20 | 2026-06-25T23:42:48+00:00 | Vulnerability · Source |
| CVE-2025-25012 | redhat_vex | kibana: Kibana Open Redirect | known affected: 1 | 2026-06-25T23:42:48+00:00 | Vulnerability · Source |
| CVE-2025-24529 | redhat_vex | phpMyAdmin: XSS in phpMyAdmin Insert Tab | known not affected: 1 | 2026-06-25T23:42:47+00:00 | Vulnerability · Source |
| CVE-2025-24358 | redhat_vex | gorilla/csrf: gorilla/csrf CSRF vulnerability due to broken Referer validation | known not affected: 1 | 2026-06-25T23:42:47+00:00 | Vulnerability · Source |
| CVE-2026-45358 | redhat_vex | Magick.NET-Q16-AnyCPU: Magick.NET-Q16-HDRI-AnyCPU: Magick.NET-Q16-HDRI-OpenMP-arm64: Magick.NET-Q16-HDRI-OpenMP-x64: Magick.NET-Q16-HDRI-arm64: Magick.NET-Q16-HDRI-x64: Magick.NET-Q16-HDRI-x86: Magick.NET-Q16-OpenMP-arm64: Magick.NET-Q16-OpenMP-x64: Magick.NET-Q16-arm64: Magick.NET-Q16-x64: Magick.NET-Q16-x86: Magick.NET-Q8-AnyCPU: Magick.NET-Q8-OpenMP-arm64: Magick.NET-Q8-OpenMP-x64: Magick.NET-Q8-arm64: Magick.NET-Q8-x64: Magick.NET-Q8-x86: ImageMagick: Information disclosure due to an out-of-bounds read in the meta encoder | known affected: 14 | 2026-06-25T23:42:45+00:00 | Vulnerability · Source |
| CVE-2025-29769 | redhat_vex | libvips: libvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF output | known not affected: 1 | 2026-06-25T23:42:43+00:00 | Vulnerability · Source |
| CVE-2025-12106 | redhat_vex | openvpn: OpenVPN heap buffer overflow | known not affected: 1 | 2026-06-25T23:36:20+00:00 | Vulnerability · Source |
| CVE-2025-13654 | redhat_vex | duc: duc: Stack Buffer Overflow in buffer_get function | known not affected: 1 | 2026-06-25T23:32:10+00:00 | Vulnerability · Source |
| CVE-2025-1744 | redhat_vex | radare2: Out-of-bounds Write in radare2 | known not affected: 1 | 2026-06-25T23:21:49+00:00 | Vulnerability · Source |
| CVE-2025-22239 | redhat_vex | salt: Event injection in saltstack | known not affected: 1 | 2026-06-25T22:56:57+00:00 | Vulnerability · Source |
| CVE-2025-22236 | redhat_vex | salt: Authorization bypass in salt project | known not affected: 1 | 2026-06-25T22:56:52+00:00 | Vulnerability · Source |
| CVE-2025-23013 | redhat_vex | pam-u2f: pam-u2f: Local privilege escalation and authentication bypass | known not affected: 1 | 2026-06-25T22:56:52+00:00 | Vulnerability · Source |
| CVE-2025-24030 | redhat_vex | github.com/envoyproxy/gateway: Envoy Admin Interface Exposed through prometheus metrics endpoint | known affected: 2 | 2026-06-25T22:56:49+00:00 | Vulnerability · Source |
| CVE-2025-24359 | redhat_vex | python-asteval: ASTEVAL Vulnerable to Maliciously Crafted Format Strings Leading to Sandbox Escape | known not affected: 1 | 2026-06-25T22:56:46+00:00 | Vulnerability · Source |
| CVE-2026-12087 | microsoft_vex | Socket versions before 2.041 for Perl have an out-of-bounds heap read | fixed: 1 known affected: 1 | 2026-06-25T14:38:30+00:00 | Vulnerability · Source |
| CVE-2011-0627 | suse_vex | SUSE CVE CVE-2011-0627 | known affected: 1 recommended: 16 | 2026-06-25T03:23:44+00:00 | Vulnerability · Source |
| CVE-2012-3412 | suse_vex | SUSE CVE CVE-2012-3412 | known not affected: 242 recommended: 332 | 2026-06-25T03:23:37+00:00 | Vulnerability · Source |
| CVE-2021-33645 | suse_vex | SUSE CVE CVE-2021-33645 | recommended: 4 | 2026-06-25T03:20:03+00:00 | Vulnerability · Source |
| CVE-2023-30421 | suse_vex | SUSE CVE CVE-2023-30421 | No product status | 2026-06-25T03:16:02+00:00 | Vulnerability · Source |
| CVE-2025-11275 | suse_vex | SUSE CVE CVE-2025-11275 | known affected: 5 | 2026-06-25T02:55:47+00:00 | Vulnerability · Source |
| CVE-2025-27558 | suse_vex | SUSE CVE CVE-2025-27558 | No product status | 2026-06-25T02:53:33+00:00 | Vulnerability · Source |
| CVE-2025-58063 | suse_vex | SUSE CVE CVE-2025-58063 | recommended: 11 | 2026-06-25T02:38:14+00:00 | Vulnerability · Source |
| CVE-2025-62513 | suse_vex | SUSE CVE CVE-2025-62513 | recommended: 9 | 2026-06-25T02:37:24+00:00 | Vulnerability · Source |
| CVE-2025-62705 | suse_vex | SUSE CVE CVE-2025-62705 | recommended: 9 | 2026-06-25T02:37:22+00:00 | Vulnerability · Source |
| CVE-2025-64761 | suse_vex | SUSE CVE CVE-2025-64761 | recommended: 8 | 2026-06-25T02:36:58+00:00 | Vulnerability · Source |