VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286361 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-61094 | redhat_vex | mysql: Replication unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:20+00:00 | Vulnerability · Source |
| CVE-2026-60747 | redhat_vex | mysql: Replication unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:18+00:00 | Vulnerability · Source |
| CVE-2026-60195 | redhat_vex | mysql: JSON Duality unspecified vulnerability (CPU Jul 2026) | known not affected: 41 | 2026-07-27T04:44:18+00:00 | Vulnerability · Source |
| CVE-2025-11143 | redhat_vex | org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing | fixed: 2 known affected: 33 known not affected: 2 | 2026-07-27T04:44:16+00:00 | Vulnerability · Source |
| CVE-2026-22796 | redhat_vex | openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:44:15+00:00 | Vulnerability · Source |
| CVE-2025-15469 | redhat_vex | openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:44:14+00:00 | Vulnerability · Source |
| CVE-2025-69421 | redhat_vex | openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:44:13+00:00 | Vulnerability · Source |
| CVE-2025-22866 | redhat_vex | crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec | fixed: 247 known affected: 409 known not affected: 513 | 2026-07-27T04:34:50+00:00 | Vulnerability · Source |
| CVE-2024-47068 | redhat_vex | rollup: DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS | fixed: 9 known affected: 6 known not affected: 118 | 2026-07-27T04:34:15+00:00 | Vulnerability · Source |
| CVE-2026-33413 | redhat_vex | etcd: etcd: Authorization bypass allows information disclosure and denial of service | fixed: 16 known affected: 5 known not affected: 56 | 2026-07-27T04:34:12+00:00 | Vulnerability · Source |
| CVE-2026-8643 | redhat_vex | python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite | fixed: 124 known affected: 87 known not affected: 1410 | 2026-07-27T04:34:07+00:00 | Vulnerability · Source |
| CVE-2023-24538 | redhat_vex | golang: html/template: backticks not treated as string delimiters | fixed: 2038 known affected: 61 known not affected: 1085 | 2026-07-27T04:33:43+00:00 | Vulnerability · Source |
| CVE-2026-44421 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution via crafted RDPGFX PDUs | fixed: 130 known affected: 5 known not affected: 19 | 2026-07-27T04:33:25+00:00 | Vulnerability · Source |
| CVE-2024-52798 | redhat_vex | path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x | fixed: 33 known affected: 60 known not affected: 1161 | 2026-07-27T03:59:10+00:00 | Vulnerability · Source |
| CVE-2024-45590 | redhat_vex | body-parser: Denial of Service Vulnerability in body-parser | fixed: 234 known affected: 36 known not affected: 912 | 2026-07-27T03:59:08+00:00 | Vulnerability · Source |
| CVE-2024-56201 | redhat_vex | jinja2: Jinja has a sandbox breakout through malicious filenames | fixed: 900 known affected: 24 known not affected: 851 | 2026-07-27T03:57:48+00:00 | Vulnerability · Source |
| CVE-2025-32996 | redhat_vex | http-proxy-middleware: Always-Incorrect Control Flow Implementation in http-proxy-middleware | fixed: 2 known affected: 42 known not affected: 4 | 2026-07-27T03:57:26+00:00 | Vulnerability · Source |
| CVE-2026-2332 | redhat_vex | org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing | fixed: 16 known affected: 17 known not affected: 60 | 2026-07-27T03:56:47+00:00 | Vulnerability · Source |
| CVE-2024-55565 | redhat_vex | nanoid: nanoid mishandles non-integer values | fixed: 1010 known affected: 45 known not affected: 1011 | 2026-07-27T03:56:41+00:00 | Vulnerability · Source |
| CVE-2024-21536 | redhat_vex | http-proxy-middleware: Denial of Service | fixed: 253 known affected: 62 known not affected: 956 | 2026-07-27T03:53:58+00:00 | Vulnerability · Source |
| CVE-2026-34477 | redhat_vex | org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification | fixed: 2 known affected: 59 | 2026-07-27T03:53:07+00:00 | Vulnerability · Source |
| CVE-2026-43823 | redhat_vex | swift-crypto: swift-crypto: Denial of Service due to double-free during RSA public key initialization | fixed: 7 | 2026-07-27T03:53:05+00:00 | Vulnerability · Source |
| CVE-2026-33216 | redhat_vex | nats-server: github.com/nats-io/nats-server: NATS-Server: Information disclosure of MQTT passwords through monitoring endpoints | fixed: 12 known not affected: 52 | 2026-07-27T03:52:52+00:00 | Vulnerability · Source |
| CVE-2025-5115 | redhat_vex | jetty: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to "MadeYouReset" DoS attack through HTTP/2 control frames | fixed: 36 known affected: 8 known not affected: 16 | 2026-07-27T03:52:48+00:00 | Vulnerability · Source |
| CVE-2025-7425 | redhat_vex | libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr | fixed: 633 known affected: 4 known not affected: 12 | 2026-07-27T03:52:46+00:00 | Vulnerability · Source |
| CVE-2025-47277 | redhat_vex | vllm: vLLM Allows Remote Code Execution via PyNcclPipe Communication Service | fixed: 15 known not affected: 1 | 2026-07-27T03:51:42+00:00 | Vulnerability · Source |
| CVE-2025-32997 | redhat_vex | http-proxy-middleware: Improper Check for Unusual or Exceptional Conditions in http-proxy-middleware | fixed: 2 known affected: 42 known not affected: 4 | 2026-07-27T03:51:40+00:00 | Vulnerability · Source |
| CVE-2024-56326 | redhat_vex | jinja2: Jinja has a sandbox breakout through indirect reference to format method | fixed: 941 known affected: 33 known not affected: 3068 | 2026-07-27T03:51:08+00:00 | Vulnerability · Source |
| CVE-2025-27516 | redhat_vex | jinja2: Jinja sandbox breakout through attr filter selecting format method | fixed: 895 known affected: 20 known not affected: 2406 | 2026-07-27T03:50:31+00:00 | Vulnerability · Source |
| CVE-2026-41506 | redhat_vex | golang: github.com/go-git/go-git: go-git: Information disclosure of HTTP authentication credentials via redirects | fixed: 114 known affected: 221 known not affected: 16 | 2026-07-27T03:27:26+00:00 | Vulnerability · Source |
| CVE-2026-22028 | redhat_vex | preact: Preact: Arbitrary script execution via JSON serialization protection bypass | fixed: 1 known affected: 7 known not affected: 700 | 2026-07-27T03:20:08+00:00 | Vulnerability · Source |
| CVE-2026-41240 | redhat_vex | DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization | fixed: 49 known affected: 19 known not affected: 386 | 2026-07-27T03:03:10+00:00 | Vulnerability · Source |
| CVE-2026-32285 | redhat_vex | github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input | fixed: 54 known affected: 7 known not affected: 510 | 2026-07-27T03:01:30+00:00 | Vulnerability · Source |
| CVE-2026-44422 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution or denial of service via heap use-after-free in RDPEAR NDR parser | fixed: 130 known affected: 5 known not affected: 19 | 2026-07-27T02:50:59+00:00 | Vulnerability · Source |
| CVE-2026-44420 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution and denial of service via heap-buffer-overflow | fixed: 130 known affected: 5 known not affected: 19 | 2026-07-27T02:50:51+00:00 | Vulnerability · Source |
| CVE-2026-40033 | redhat_vex | freerdp: FreeRDP: Remote code execution via heap-buffer-overflow in gdi_CacheToSurface | fixed: 130 known affected: 11 known not affected: 13 | 2026-07-27T02:50:49+00:00 | Vulnerability · Source |
| CVE-2026-4926 | redhat_vex | path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions | fixed: 44 known affected: 30 known not affected: 955 | 2026-07-27T02:44:24+00:00 | Vulnerability · Source |
| CVE-2025-24528 | redhat_vex | krb5: overflow when calculating ulog block size | fixed: 256 known affected: 9 known not affected: 14 | 2026-07-27T02:02:23+00:00 | Vulnerability · Source |
| CVE-2025-27144 | redhat_vex | go-jose: Go JOSE's Parsing Vulnerable to Denial of Service | fixed: 796 known affected: 29 known not affected: 5241 | 2026-07-27T02:00:40+00:00 | Vulnerability · Source |
| CVE-2026-42533 | redhat_vex | nginx: NGINX: Arbitrary code execution via crafted HTTP requests | fixed: 4 known affected: 55 known not affected: 1 | 2026-07-27T01:53:42+00:00 | Vulnerability · Source |
| CVE-2026-42507 | redhat_vex | net/textproto: golang: Golang net/textproto: Misleading error messages via input injection | fixed: 75 known affected: 376 under investigation: 17 | 2026-07-27T01:50:47+00:00 | Vulnerability · Source |
| CVE-2025-32415 | redhat_vex | libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables | fixed: 568 known affected: 5 known not affected: 18 | 2026-07-27T01:49:30+00:00 | Vulnerability · Source |
| CVE-2025-8058 | redhat_vex | glibc: Double free in glibc | fixed: 3064 known affected: 23 known not affected: 18 | 2026-07-27T01:49:19+00:00 | Vulnerability · Source |
| CVE-2025-4673 | redhat_vex | net/http: Sensitive headers not cleared on cross-origin redirect in net/http | fixed: 121 known affected: 394 known not affected: 2 | 2026-07-27T01:48:38+00:00 | Vulnerability · Source |
| CVE-2026-16461 | microsoft_vex | Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting | fixed: 1 known affected: 1 | 2026-07-27T01:44:11+00:00 | Vulnerability · Source |
| CVE-2026-8450 | microsoft_vex | HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file() | fixed: 1 known affected: 1 | 2026-07-27T01:44:00+00:00 | Vulnerability · Source |
| CVE-2026-16277 | microsoft_vex | Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist() | fixed: 1 known affected: 1 | 2026-07-27T01:43:51+00:00 | Vulnerability · Source |
| CVE-2025-7195 | redhat_vex | operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd | fixed: 587 known affected: 19 known not affected: 1820 | 2026-07-27T01:36:34+00:00 | Vulnerability · Source |
| CVE-2025-58754 | redhat_vex | axios: Axios DoS via lack of data size check | fixed: 361 known affected: 42 known not affected: 1162 | 2026-07-27T01:28:28+00:00 | Vulnerability · Source |
| CVE-2025-47273 | redhat_vex | setuptools: Path Traversal Vulnerability in setuptools PackageIndex | fixed: 1664 known affected: 71 known not affected: 159 under investigation: 2 | 2026-07-27T01:25:59+00:00 | Vulnerability · Source |