VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298679 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-34909 | redhat_vex | CVE-2026-34909 | known not affected: 1 | 2026-05-23T02:12:36+00:00 | Vulnerability · Source |
| CVE-2026-41091 | redhat_vex | Microsoft Defender Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-23T02:12:36+00:00 | Vulnerability · Source |
| CVE-2026-33117 | redhat_vex | Azure SDK for Java Security Feature Bypass Vulnerability | known not affected: 1 | 2026-05-23T02:12:36+00:00 | Vulnerability · Source |
| CVE-2025-67493 | redhat_vex | Homarr: missing input sanitization and possible privilege escalation through ldap search query injection | known not affected: 1 | 2026-05-23T02:12:36+00:00 | Vulnerability · Source |
| CVE-2026-43619 | microsoft_vex | Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls | fixed: 1 known affected: 1 | 2026-05-23T01:44:58+00:00 | Vulnerability · Source |
| CVE-2026-7246 | microsoft_vex | Pallets Click contains a command injection via Unsanitized Filename "click.edit()" | fixed: 1 known affected: 1 known not affected: 1 | 2026-05-23T01:44:47+00:00 | Vulnerability · Source |
| CVE-2026-44673 | microsoft_vex | libyang: lyb_read_string() integer overflow → heap buffer overflow | fixed: 1 known affected: 1 | 2026-05-23T01:44:35+00:00 | Vulnerability · Source |
| CVE-2013-2566 | suse_vex | SUSE CVE CVE-2013-2566 | recommended: 14 | 2026-05-23T01:43:43+00:00 | Vulnerability · Source |
| CVE-2015-2667 | suse_vex | SUSE CVE CVE-2015-2667 | No product status | 2026-05-23T01:43:23+00:00 | Vulnerability · Source |
| CVE-2016-6127 | suse_vex | SUSE CVE CVE-2016-6127 | No product status | 2026-05-23T01:43:04+00:00 | Vulnerability · Source |
| CVE-2017-5075 | suse_vex | SUSE CVE CVE-2017-5075 | recommended: 16 | 2026-05-23T01:42:49+00:00 | Vulnerability · Source |
| CVE-2017-5077 | suse_vex | SUSE CVE CVE-2017-5077 | recommended: 16 | 2026-05-23T01:42:48+00:00 | Vulnerability · Source |
| CVE-2017-5082 | suse_vex | SUSE CVE CVE-2017-5082 | recommended: 16 | 2026-05-23T01:42:47+00:00 | Vulnerability · Source |
| CVE-2017-11225 | suse_vex | SUSE CVE CVE-2017-11225 | recommended: 10 | 2026-05-23T01:42:36+00:00 | Vulnerability · Source |
| CVE-2017-15755 | suse_vex | SUSE CVE CVE-2017-15755 | No product status | 2026-05-23T01:42:30+00:00 | Vulnerability · Source |
| CVE-2017-1000113 | suse_vex | SUSE CVE CVE-2017-1000113 | No product status | 2026-05-23T01:42:24+00:00 | Vulnerability · Source |
| CVE-2019-5754 | suse_vex | SUSE CVE CVE-2019-5754 | recommended: 19 | 2026-05-23T01:41:47+00:00 | Vulnerability · Source |
| CVE-2019-5775 | suse_vex | SUSE CVE CVE-2019-5775 | recommended: 19 | 2026-05-23T01:41:46+00:00 | Vulnerability · Source |
| CVE-2020-6479 | suse_vex | SUSE CVE CVE-2020-6479 | recommended: 17 | 2026-05-23T01:41:14+00:00 | Vulnerability · Source |
| CVE-2020-6482 | suse_vex | SUSE CVE CVE-2020-6482 | recommended: 17 | 2026-05-23T01:41:13+00:00 | Vulnerability · Source |
| CVE-2020-6484 | suse_vex | SUSE CVE CVE-2020-6484 | recommended: 17 | 2026-05-23T01:41:12+00:00 | Vulnerability · Source |
| CVE-2020-6488 | suse_vex | SUSE CVE CVE-2020-6488 | recommended: 17 | 2026-05-23T01:41:11+00:00 | Vulnerability · Source |
| CVE-2020-6491 | suse_vex | SUSE CVE CVE-2020-6491 | recommended: 17 | 2026-05-23T01:41:09+00:00 | Vulnerability · Source |
| CVE-2026-44390 | microsoft_vex | Unbounded name compression in certain cases causes degradation of service | fixed: 1 known affected: 1 | 2026-05-23T01:40:45+00:00 | Vulnerability · Source |
| CVE-2025-51480 | microsoft_vex | Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions. | fixed: 1 known affected: 11 | 2026-05-23T01:40:43+00:00 | Vulnerability · Source |
| CVE-2026-42944 | microsoft_vex | Heap overflow with multiple NSID, COOKIE, PADDING EDNS options | fixed: 1 known affected: 1 | 2026-05-23T01:40:36+00:00 | Vulnerability · Source |
| CVE-2026-42923 | microsoft_vex | Degradation of service with unbounded NSEC3 hash calculations | fixed: 1 known affected: 1 | 2026-05-23T01:40:27+00:00 | Vulnerability · Source |
| CVE-2026-40622 | microsoft_vex | Another 'ghost domain names' attack variant | fixed: 1 known affected: 1 | 2026-05-23T01:40:18+00:00 | Vulnerability · Source |
| CVE-2026-42534 | microsoft_vex | Jostle logic bypass degrades resolution performance | fixed: 1 known affected: 1 | 2026-05-23T01:40:05+00:00 | Vulnerability · Source |
| CVE-2026-41292 | microsoft_vex | Long list of incoming EDNS options degrades performance | fixed: 1 known affected: 1 | 2026-05-23T01:39:54+00:00 | Vulnerability · Source |
| CVE-2022-48340 | suse_vex | SUSE CVE CVE-2022-48340 | recommended: 24 | 2026-05-23T01:39:46+00:00 | Vulnerability · Source |
| CVE-2026-33278 | microsoft_vex | Possible arbitrary code execution during DNSSEC validation | fixed: 1 known affected: 1 | 2026-05-23T01:39:45+00:00 | Vulnerability · Source |
| CVE-2026-41035 | microsoft_vex | In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable. | fixed: 1 known affected: 2 | 2026-05-23T01:39:39+00:00 | Vulnerability · Source |
| CVE-2026-44608 | microsoft_vex | Use after free and crash under special conditions in RPZ code | fixed: 1 known affected: 1 | 2026-05-23T01:39:36+00:00 | Vulnerability · Source |
| CVE-2026-42959 | microsoft_vex | Crash during DNSSEC validation of malicious content | fixed: 1 known affected: 1 | 2026-05-23T01:39:27+00:00 | Vulnerability · Source |
| CVE-2026-42960 | microsoft_vex | Possible cache poisoning via promiscuous records for the authority section | fixed: 1 known affected: 1 | 2026-05-23T01:39:17+00:00 | Vulnerability · Source |
| CVE-2026-32792 | microsoft_vex | Packet of death with DNSCrypt | fixed: 1 known affected: 1 | 2026-05-23T01:39:08+00:00 | Vulnerability · Source |
| CVE-2026-29518 | microsoft_vex | Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write | fixed: 1 known affected: 1 | 2026-05-23T01:38:58+00:00 | Vulnerability · Source |
| CVE-2026-45232 | microsoft_vex | Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy | fixed: 1 known affected: 1 | 2026-05-23T01:38:41+00:00 | Vulnerability · Source |
| CVE-2026-43617 | microsoft_vex | Rsync < 3.4.3 Authorization Bypass via Hostname Resolution | fixed: 1 known affected: 1 | 2026-05-23T01:38:32+00:00 | Vulnerability · Source |
| CVE-2026-43620 | microsoft_vex | Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files() | fixed: 1 known affected: 1 | 2026-05-23T01:38:23+00:00 | Vulnerability · Source |
| CVE-2026-43618 | microsoft_vex | Rsync < 3.4.3 Integer Overflow Information Disclosure | fixed: 1 known affected: 1 | 2026-05-23T01:38:14+00:00 | Vulnerability · Source |
| CVE-2025-8581 | suse_vex | SUSE CVE CVE-2025-8581 | recommended: 8 | 2026-05-23T01:35:10+00:00 | Vulnerability · Source |
| CVE-2025-8583 | suse_vex | SUSE CVE CVE-2025-8583 | recommended: 8 | 2026-05-23T01:35:09+00:00 | Vulnerability · Source |
| CVE-2025-32395 | suse_vex | SUSE CVE CVE-2025-32395 | known affected: 3 | 2026-05-23T01:34:34+00:00 | Vulnerability · Source |
| CVE-2025-33073 | suse_vex | SUSE CVE CVE-2025-33073 | recommended: 3 | 2026-05-23T01:34:28+00:00 | Vulnerability · Source |
| CVE-2026-7835 | suse_vex | SUSE CVE CVE-2026-7835 | known affected: 2 | 2026-05-23T01:30:18+00:00 | Vulnerability · Source |
| CVE-2026-7836 | suse_vex | SUSE CVE CVE-2026-7836 | known affected: 2 | 2026-05-23T01:30:17+00:00 | Vulnerability · Source |
| CVE-2026-8257 | suse_vex | SUSE CVE CVE-2026-8257 | No product status | 2026-05-23T01:30:15+00:00 | Vulnerability · Source |
| CVE-2026-25542 | suse_vex | SUSE CVE CVE-2026-25542 | No product status | 2026-05-23T01:29:50+00:00 | Vulnerability · Source |