VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297698 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-34711 | redhat_vex | CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) | known not affected: 1 | 2026-06-11T02:59:08+00:00 | Vulnerability · Source |
| CVE-2026-34657 | redhat_vex | CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | known not affected: 1 | 2026-06-11T02:59:08+00:00 | Vulnerability · Source |
| CVE-2026-25860 | redhat_vex | OpenClinic GA 5.351.19 Reflected XSS via DICOM Image Upload Handler | known not affected: 1 | 2026-06-11T02:59:08+00:00 | Vulnerability · Source |
| CVE-2026-8829 | microsoft_vex | HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities | fixed: 1 known affected: 1 | 2026-06-11T01:44:37+00:00 | Vulnerability · Source |
| CVE-2026-5419 | microsoft_vex | Guntls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal | fixed: 1 known affected: 1 | 2026-06-11T01:44:30+00:00 | Vulnerability · Source |
| CVE-2026-11332 | microsoft_vex | Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution | fixed: 1 known affected: 1 | 2026-06-11T01:44:24+00:00 | Vulnerability · Source |
| CVE-2026-42012 | microsoft_vex | Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans | fixed: 1 known affected: 2 | 2026-06-11T01:43:57+00:00 | Vulnerability · Source |
| CVE-2026-5260 | microsoft_vex | Gnutls: gnutls: information disclosure via heap overread in rsa key exchange | fixed: 1 known affected: 2 | 2026-06-11T01:43:51+00:00 | Vulnerability · Source |
| CVE-2026-42015 | microsoft_vex | Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling | fixed: 1 known affected: 2 | 2026-06-11T01:43:44+00:00 | Vulnerability · Source |
| CVE-2026-42013 | microsoft_vex | Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name | fixed: 1 known affected: 2 | 2026-06-11T01:43:37+00:00 | Vulnerability · Source |
| CVE-2026-39833 | microsoft_vex | Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent | fixed: 4 known affected: 8 known not affected: 1 | 2026-06-11T01:42:10+00:00 | Vulnerability · Source |
| CVE-2026-50263 | microsoft_vex | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() | fixed: 1 known affected: 1 | 2026-06-11T01:40:37+00:00 | Vulnerability · Source |
| CVE-2026-50258 | microsoft_vex | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels | fixed: 1 known affected: 1 | 2026-06-11T01:40:30+00:00 | Vulnerability · Source |
| CVE-2026-50257 | microsoft_vex | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() | fixed: 1 known affected: 1 | 2026-06-11T01:40:22+00:00 | Vulnerability · Source |
| CVE-2026-50259 | microsoft_vex | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing | fixed: 1 known affected: 1 | 2026-06-11T01:40:15+00:00 | Vulnerability · Source |
| CVE-2026-50260 | microsoft_vex | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() | fixed: 1 known affected: 1 | 2026-06-11T01:40:08+00:00 | Vulnerability · Source |
| CVE-2026-50262 | microsoft_vex | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes | fixed: 1 known affected: 1 | 2026-06-11T01:40:00+00:00 | Vulnerability · Source |
| CVE-2026-50256 | microsoft_vex | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch | fixed: 1 known affected: 1 | 2026-06-11T01:39:53+00:00 | Vulnerability · Source |
| CVE-2026-50261 | microsoft_vex | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() | fixed: 1 known affected: 1 | 2026-06-11T01:39:45+00:00 | Vulnerability · Source |
| CVE-2026-10879 | microsoft_vex | DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders | fixed: 1 known affected: 1 | 2026-06-11T01:39:38+00:00 | Vulnerability · Source |
| CVE-2026-43958 | microsoft_vex | Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service | fixed: 1 known affected: 1 known not affected: 1 | 2026-06-11T01:39:21+00:00 | Vulnerability · Source |
| CVE-2026-38361 | redhat_vex | CVE-2026-38361 | known not affected: 1 | 2026-06-10T21:04:18+00:00 | Vulnerability · Source |
| CVE-2026-38360 | redhat_vex | CVE-2026-38360 | known not affected: 1 | 2026-06-10T21:04:17+00:00 | Vulnerability · Source |
| CVE-2026-11799 | redhat_vex | UXSS in Focus for iOS / Klar Webkit navigation | known not affected: 1 | 2026-06-10T21:04:15+00:00 | Vulnerability · Source |
| CVE-2026-45485 | redhat_vex | Microsoft Office Information Disclosure Vulnerability | known not affected: 1 | 2026-06-10T21:04:15+00:00 | Vulnerability · Source |
| CVE-2026-48288 | redhat_vex | Adobe Experience Manager | Improper Input Validation (CWE-20) | known not affected: 1 | 2026-06-10T21:04:14+00:00 | Vulnerability · Source |
| CVE-2026-48289 | redhat_vex | Adobe Experience Manager | Improper Input Validation (CWE-20) | known not affected: 1 | 2026-06-10T21:04:14+00:00 | Vulnerability · Source |
| CVE-2026-45642 | redhat_vex | Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability | known not affected: 1 | 2026-06-10T21:04:13+00:00 | Vulnerability · Source |
| CVE-2026-45459 | redhat_vex | Microsoft Excel Security Feature Bypass Vulnerability | known not affected: 1 | 2026-06-10T21:04:11+00:00 | Vulnerability · Source |
| CVE-2026-45466 | redhat_vex | Microsoft Word Information Disclosure Vulnerability | known not affected: 1 | 2026-06-10T21:04:11+00:00 | Vulnerability · Source |
| CVE-2026-10045 | redhat_vex | CVE-2026-10045 | known not affected: 1 | 2026-06-10T21:04:08+00:00 | Vulnerability · Source |
| CVE-2021-4479 | redhat_vex | Dräger Atlan A350 1.00 <= 1.01 DoS via Medibus Interface | known not affected: 1 | 2026-06-10T21:04:06+00:00 | Vulnerability · Source |
| CVE-2026-47933 | redhat_vex | ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79) | known not affected: 1 | 2026-06-10T21:04:06+00:00 | Vulnerability · Source |
| CVE-2026-25557 | redhat_vex | Evoluted PHP Directory Listing Script 4.0.5 Reflected XSS via dir parameter | known not affected: 1 | 2026-06-10T21:04:05+00:00 | Vulnerability · Source |
| CVE-2026-9211 | redhat_vex | Certain NETGEAR routers allow unauthenticated users to gain control of the router | known not affected: 1 | 2026-06-10T21:04:03+00:00 | Vulnerability · Source |
| CVE-2026-9210 | redhat_vex | Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router | known not affected: 1 | 2026-06-10T21:04:03+00:00 | Vulnerability · Source |
| CVE-2026-50508 | redhat_vex | Windows NTLM Spoofing Vulnerability | known not affected: 1 | 2026-06-10T21:04:01+00:00 | Vulnerability · Source |
| CVE-2026-49958 | redhat_vex | Hermes WebUI < 0.51.303 TOCTOU Race Condition via git_discard | known not affected: 1 | 2026-06-10T21:03:59+00:00 | Vulnerability · Source |
| CVE-2026-49957 | redhat_vex | Hermes WebUI < 0.51.296 Workspace Boundary Bypass via api/workspace.py | known not affected: 1 | 2026-06-10T21:03:58+00:00 | Vulnerability · Source |
| CVE-2026-49955 | redhat_vex | Hermes WebUI < 0.51.270 Resource Exhaustion via passkey/options | known not affected: 1 | 2026-06-10T21:03:57+00:00 | Vulnerability · Source |
| CVE-2026-49848 | redhat_vex | FreeSWITCH: Pre-authentication `userVariables` injection in `mod_verto` | known not affected: 1 | 2026-06-10T21:03:56+00:00 | Vulnerability · Source |
| CVE-2026-49472 | redhat_vex | FreeSWITCH includes a vulnerable function, PREFIX(prologTok)() from libexpat | known not affected: 1 | 2026-06-10T21:03:55+00:00 | Vulnerability · Source |
| CVE-2026-49843 | redhat_vex | FreeSWITCH: Pre-authentication session eviction via attacker-chosen `sessid` in `mod_verto` | known not affected: 1 | 2026-06-10T21:03:55+00:00 | Vulnerability · Source |
| CVE-2026-48566 | redhat_vex | Windows DWM Core Library Information Disclosure Vulnerability | known not affected: 1 | 2026-06-10T21:03:54+00:00 | Vulnerability · Source |
| CVE-2026-48562 | redhat_vex | Microsoft SharePoint Server Spoofing Vulnerability | known not affected: 1 | 2026-06-10T21:03:54+00:00 | Vulnerability · Source |
| CVE-2026-48304 | redhat_vex | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) | known not affected: 1 | 2026-06-10T21:03:53+00:00 | Vulnerability · Source |
| CVE-2026-48301 | redhat_vex | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) | known not affected: 1 | 2026-06-10T21:03:52+00:00 | Vulnerability · Source |
| CVE-2026-48280 | redhat_vex | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) | known not affected: 1 | 2026-06-10T21:03:51+00:00 | Vulnerability · Source |
| CVE-2026-48299 | redhat_vex | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) | known not affected: 1 | 2026-06-10T21:03:51+00:00 | Vulnerability · Source |
| CVE-2026-48300 | redhat_vex | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) | known not affected: 1 | 2026-06-10T21:03:51+00:00 | Vulnerability · Source |