VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298675 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-10014 | suse_vex | SUSE CVE CVE-2026-10014 | recommended: 4 | 2026-06-03T02:29:44+00:00 | Vulnerability · Source |
| CVE-2026-10015 | suse_vex | SUSE CVE CVE-2026-10015 | recommended: 4 | 2026-06-03T02:29:43+00:00 | Vulnerability · Source |
| CVE-2026-10017 | suse_vex | SUSE CVE CVE-2026-10017 | recommended: 4 | 2026-06-03T02:29:42+00:00 | Vulnerability · Source |
| CVE-2026-10019 | suse_vex | SUSE CVE CVE-2026-10019 | recommended: 4 | 2026-06-03T02:29:40+00:00 | Vulnerability · Source |
| CVE-2026-10020 | suse_vex | SUSE CVE CVE-2026-10020 | recommended: 4 | 2026-06-03T02:29:39+00:00 | Vulnerability · Source |
| CVE-2026-10021 | suse_vex | SUSE CVE CVE-2026-10021 | recommended: 4 | 2026-06-03T02:29:38+00:00 | Vulnerability · Source |
| CVE-2026-22029 | suse_vex | SUSE CVE CVE-2026-22029 | known affected: 8 known not affected: 13 recommended: 1 | 2026-06-03T02:29:34+00:00 | Vulnerability · Source |
| CVE-2026-23032 | suse_vex | SUSE CVE CVE-2026-23032 | known affected: 37 known not affected: 137 | 2026-06-03T02:29:27+00:00 | Vulnerability · Source |
| CVE-2026-23238 | suse_vex | SUSE CVE CVE-2026-23238 | known affected: 33 known not affected: 92 | 2026-06-03T02:29:08+00:00 | Vulnerability · Source |
| CVE-2026-24182 | suse_vex | SUSE CVE CVE-2026-24182 | known affected: 141 recommended: 8 | 2026-06-03T02:27:04+00:00 | Vulnerability · Source |
| CVE-2026-24187 | suse_vex | SUSE CVE CVE-2026-24187 | known affected: 141 recommended: 8 | 2026-06-03T02:27:03+00:00 | Vulnerability · Source |
| CVE-2026-24192 | suse_vex | SUSE CVE CVE-2026-24192 | known affected: 141 recommended: 8 | 2026-06-03T02:27:02+00:00 | Vulnerability · Source |
| CVE-2026-24194 | suse_vex | SUSE CVE CVE-2026-24194 | known affected: 141 recommended: 8 | 2026-06-03T02:27:01+00:00 | Vulnerability · Source |
| CVE-2026-24195 | suse_vex | SUSE CVE CVE-2026-24195 | known affected: 141 recommended: 8 | 2026-06-03T02:27:00+00:00 | Vulnerability · Source |
| CVE-2026-24196 | suse_vex | SUSE CVE CVE-2026-24196 | known affected: 141 recommended: 8 | 2026-06-03T02:26:59+00:00 | Vulnerability · Source |
| CVE-2026-24197 | suse_vex | SUSE CVE CVE-2026-24197 | known affected: 141 recommended: 8 | 2026-06-03T02:26:58+00:00 | Vulnerability · Source |
| CVE-2026-24198 | suse_vex | SUSE CVE CVE-2026-24198 | known affected: 141 recommended: 8 | 2026-06-03T02:26:56+00:00 | Vulnerability · Source |
| CVE-2026-24199 | suse_vex | SUSE CVE CVE-2026-24199 | known affected: 141 recommended: 8 | 2026-06-03T02:26:55+00:00 | Vulnerability · Source |
| CVE-2026-29013 | suse_vex | SUSE CVE CVE-2026-29013 | recommended: 3 | 2026-06-03T02:26:36+00:00 | Vulnerability · Source |
| CVE-2026-33236 | suse_vex | SUSE CVE CVE-2026-33236 | recommended: 1 | 2026-06-03T02:25:08+00:00 | Vulnerability · Source |
| CVE-2026-38978 | suse_vex | SUSE CVE CVE-2026-38978 | No product status | 2026-06-03T02:24:42+00:00 | Vulnerability · Source |
| CVE-2026-41115 | suse_vex | SUSE CVE CVE-2026-41115 | No product status | 2026-06-03T02:24:26+00:00 | Vulnerability · Source |
| CVE-2026-45104 | suse_vex | SUSE CVE CVE-2026-45104 | recommended: 7 | 2026-06-03T02:23:06+00:00 | Vulnerability · Source |
| CVE-2026-45157 | suse_vex | SUSE CVE CVE-2026-45157 | No product status | 2026-06-03T02:23:04+00:00 | Vulnerability · Source |
| CVE-2026-44777 | microsoft_vex | jq: stack overflow in module loading on mutual `include` | fixed: 2 known affected: 2 | 2026-06-03T01:50:33+00:00 | Vulnerability · Source |
| CVE-2026-42151 | microsoft_vex | Prometheus Azure AD remote write OAuth client secret exposed via config API | fixed: 1 known affected: 2 under investigation: 1 | 2026-06-03T01:50:26+00:00 | Vulnerability · Source |
| CVE-2026-8177 | microsoft_vex | XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences | fixed: 2 known affected: 2 | 2026-06-03T01:50:18+00:00 | Vulnerability · Source |
| CVE-2026-41256 | microsoft_vex | jq: Embedded NUL truncates top-level jq programs loaded with -f | fixed: 2 known affected: 2 | 2026-06-03T01:50:09+00:00 | Vulnerability · Source |
| CVE-2026-44899 | microsoft_vex | Mistune Image Directive CSS Injection Vulnerability | fixed: 1 known affected: 1 | 2026-06-03T01:50:08+00:00 | Vulnerability · Source |
| CVE-2026-40612 | microsoft_vex | jq: Stack overflow via unbounded recursion in jv_contains | fixed: 2 known affected: 2 | 2026-06-03T01:50:03+00:00 | Vulnerability · Source |
| CVE-2026-44896 | microsoft_vex | Mistune: XSS via unescaped figclass/figwidth in Figure directive | fixed: 1 known affected: 1 | 2026-06-03T01:50:01+00:00 | Vulnerability · Source |
| CVE-2026-43895 | microsoft_vex | jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts | fixed: 2 known affected: 2 | 2026-06-03T01:49:56+00:00 | Vulnerability · Source |
| CVE-2026-43896 | microsoft_vex | jq: Stack Overflow in Recursive Object Merge | fixed: 2 known affected: 2 | 2026-06-03T01:49:50+00:00 | Vulnerability · Source |
| CVE-2026-40226 | microsoft_vex | In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file. | fixed: 2 known affected: 4 | 2026-06-03T01:49:41+00:00 | Vulnerability · Source |
| CVE-2026-41257 | microsoft_vex | jq: Signed-int overflow in `stack_reallocate` (jq VM stack) | fixed: 2 known affected: 2 | 2026-06-03T01:49:36+00:00 | Vulnerability · Source |
| CVE-2026-8466 | microsoft_vex | Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy | fixed: 2 known affected: 2 | 2026-06-03T01:49:24+00:00 | Vulnerability · Source |
| CVE-2026-39834 | microsoft_vex | Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh | fixed: 13 known affected: 13 known not affected: 1 | 2026-06-03T01:49:14+00:00 | Vulnerability · Source |
| CVE-2026-39829 | microsoft_vex | Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh | fixed: 12 known affected: 12 known not affected: 2 | 2026-06-03T01:48:34+00:00 | Vulnerability · Source |
| CVE-2026-46597 | microsoft_vex | Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh | fixed: 12 known affected: 12 known not affected: 2 | 2026-06-03T01:48:22+00:00 | Vulnerability · Source |
| CVE-2026-39830 | microsoft_vex | Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh | fixed: 13 known affected: 13 known not affected: 1 | 2026-06-03T01:48:10+00:00 | Vulnerability · Source |
| CVE-2026-33814 | microsoft_vex | Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net | fixed: 23 known affected: 25 known not affected: 29 | 2026-06-03T01:47:40+00:00 | Vulnerability · Source |
| CVE-2026-39882 | microsoft_vex | OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies | fixed: 11 known affected: 19 | 2026-06-03T01:47:39+00:00 | Vulnerability · Source |
| CVE-2026-0968 | microsoft_vex | Libssh: libssh: denial of service due to malformed sftp message | fixed: 2 known affected: 4 | 2026-06-03T01:47:31+00:00 | Vulnerability · Source |
| CVE-2026-33846 | microsoft_vex | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly | fixed: 2 known affected: 2 | 2026-06-03T01:46:23+00:00 | Vulnerability · Source |
| CVE-2026-3713 | microsoft_vex | pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow | known affected: 6 known not affected: 2 | 2026-06-03T01:46:04+00:00 | Vulnerability · Source |
| CVE-2026-3832 | microsoft_vex | Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response | fixed: 2 known affected: 2 under investigation: 1 | 2026-06-03T01:45:43+00:00 | Vulnerability · Source |
| CVE-2026-37457 | microsoft_vex | An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted FlowSpec component. | fixed: 2 known affected: 3 under investigation: 1 | 2026-06-03T01:45:17+00:00 | Vulnerability · Source |
| CVE-2026-6843 | microsoft_vex | Nano: nano: format string vulnerability leads to denial of service | fixed: 2 known affected: 3 | 2026-06-03T01:45:04+00:00 | Vulnerability · Source |
| CVE-2026-6842 | microsoft_vex | Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions | fixed: 2 known affected: 3 | 2026-06-03T01:44:56+00:00 | Vulnerability · Source |
| CVE-2026-40356 | microsoft_vex | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message. | fixed: 2 known affected: 3 | 2026-06-03T01:43:26+00:00 | Vulnerability · Source |