VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299360 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-15755 | suse_vex | SUSE CVE CVE-2017-15755 | No product status | 2026-05-23T01:42:30+00:00 | Vulnerability · Source |
| CVE-2017-1000113 | suse_vex | SUSE CVE CVE-2017-1000113 | No product status | 2026-05-23T01:42:24+00:00 | Vulnerability · Source |
| CVE-2019-5754 | suse_vex | SUSE CVE CVE-2019-5754 | recommended: 19 | 2026-05-23T01:41:47+00:00 | Vulnerability · Source |
| CVE-2019-5775 | suse_vex | SUSE CVE CVE-2019-5775 | recommended: 19 | 2026-05-23T01:41:46+00:00 | Vulnerability · Source |
| CVE-2020-6479 | suse_vex | SUSE CVE CVE-2020-6479 | recommended: 17 | 2026-05-23T01:41:14+00:00 | Vulnerability · Source |
| CVE-2020-6482 | suse_vex | SUSE CVE CVE-2020-6482 | recommended: 17 | 2026-05-23T01:41:13+00:00 | Vulnerability · Source |
| CVE-2020-6484 | suse_vex | SUSE CVE CVE-2020-6484 | recommended: 17 | 2026-05-23T01:41:12+00:00 | Vulnerability · Source |
| CVE-2020-6488 | suse_vex | SUSE CVE CVE-2020-6488 | recommended: 17 | 2026-05-23T01:41:11+00:00 | Vulnerability · Source |
| CVE-2020-6491 | suse_vex | SUSE CVE CVE-2020-6491 | recommended: 17 | 2026-05-23T01:41:09+00:00 | Vulnerability · Source |
| CVE-2026-44390 | microsoft_vex | Unbounded name compression in certain cases causes degradation of service | fixed: 1 known affected: 1 | 2026-05-23T01:40:45+00:00 | Vulnerability · Source |
| CVE-2025-51480 | microsoft_vex | Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions. | fixed: 1 known affected: 11 | 2026-05-23T01:40:43+00:00 | Vulnerability · Source |
| CVE-2026-42944 | microsoft_vex | Heap overflow with multiple NSID, COOKIE, PADDING EDNS options | fixed: 1 known affected: 1 | 2026-05-23T01:40:36+00:00 | Vulnerability · Source |
| CVE-2026-42923 | microsoft_vex | Degradation of service with unbounded NSEC3 hash calculations | fixed: 1 known affected: 1 | 2026-05-23T01:40:27+00:00 | Vulnerability · Source |
| CVE-2026-40622 | microsoft_vex | Another 'ghost domain names' attack variant | fixed: 1 known affected: 1 | 2026-05-23T01:40:18+00:00 | Vulnerability · Source |
| CVE-2026-42534 | microsoft_vex | Jostle logic bypass degrades resolution performance | fixed: 1 known affected: 1 | 2026-05-23T01:40:05+00:00 | Vulnerability · Source |
| CVE-2026-41292 | microsoft_vex | Long list of incoming EDNS options degrades performance | fixed: 1 known affected: 1 | 2026-05-23T01:39:54+00:00 | Vulnerability · Source |
| CVE-2022-48340 | suse_vex | SUSE CVE CVE-2022-48340 | recommended: 24 | 2026-05-23T01:39:46+00:00 | Vulnerability · Source |
| CVE-2026-33278 | microsoft_vex | Possible arbitrary code execution during DNSSEC validation | fixed: 1 known affected: 1 | 2026-05-23T01:39:45+00:00 | Vulnerability · Source |
| CVE-2026-41035 | microsoft_vex | In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable. | fixed: 1 known affected: 2 | 2026-05-23T01:39:39+00:00 | Vulnerability · Source |
| CVE-2026-44608 | microsoft_vex | Use after free and crash under special conditions in RPZ code | fixed: 1 known affected: 1 | 2026-05-23T01:39:36+00:00 | Vulnerability · Source |
| CVE-2026-42959 | microsoft_vex | Crash during DNSSEC validation of malicious content | fixed: 1 known affected: 1 | 2026-05-23T01:39:27+00:00 | Vulnerability · Source |
| CVE-2026-42960 | microsoft_vex | Possible cache poisoning via promiscuous records for the authority section | fixed: 1 known affected: 1 | 2026-05-23T01:39:17+00:00 | Vulnerability · Source |
| CVE-2026-32792 | microsoft_vex | Packet of death with DNSCrypt | fixed: 1 known affected: 1 | 2026-05-23T01:39:08+00:00 | Vulnerability · Source |
| CVE-2026-29518 | microsoft_vex | Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write | fixed: 1 known affected: 1 | 2026-05-23T01:38:58+00:00 | Vulnerability · Source |
| CVE-2026-45232 | microsoft_vex | Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy | fixed: 1 known affected: 1 | 2026-05-23T01:38:41+00:00 | Vulnerability · Source |
| CVE-2026-43617 | microsoft_vex | Rsync < 3.4.3 Authorization Bypass via Hostname Resolution | fixed: 1 known affected: 1 | 2026-05-23T01:38:32+00:00 | Vulnerability · Source |
| CVE-2026-43620 | microsoft_vex | Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files() | fixed: 1 known affected: 1 | 2026-05-23T01:38:23+00:00 | Vulnerability · Source |
| CVE-2026-43618 | microsoft_vex | Rsync < 3.4.3 Integer Overflow Information Disclosure | fixed: 1 known affected: 1 | 2026-05-23T01:38:14+00:00 | Vulnerability · Source |
| CVE-2025-8581 | suse_vex | SUSE CVE CVE-2025-8581 | recommended: 8 | 2026-05-23T01:35:10+00:00 | Vulnerability · Source |
| CVE-2025-8583 | suse_vex | SUSE CVE CVE-2025-8583 | recommended: 8 | 2026-05-23T01:35:09+00:00 | Vulnerability · Source |
| CVE-2025-32395 | suse_vex | SUSE CVE CVE-2025-32395 | known affected: 3 | 2026-05-23T01:34:34+00:00 | Vulnerability · Source |
| CVE-2025-33073 | suse_vex | SUSE CVE CVE-2025-33073 | recommended: 3 | 2026-05-23T01:34:28+00:00 | Vulnerability · Source |
| CVE-2026-7835 | suse_vex | SUSE CVE CVE-2026-7835 | known affected: 2 | 2026-05-23T01:30:18+00:00 | Vulnerability · Source |
| CVE-2026-7836 | suse_vex | SUSE CVE CVE-2026-7836 | known affected: 2 | 2026-05-23T01:30:17+00:00 | Vulnerability · Source |
| CVE-2026-8257 | suse_vex | SUSE CVE CVE-2026-8257 | No product status | 2026-05-23T01:30:15+00:00 | Vulnerability · Source |
| CVE-2026-25542 | suse_vex | SUSE CVE CVE-2026-25542 | No product status | 2026-05-23T01:29:50+00:00 | Vulnerability · Source |
| CVE-2026-31472 | suse_vex | SUSE CVE CVE-2026-31472 | known not affected: 227 | 2026-05-23T01:29:35+00:00 | Vulnerability · Source |
| CVE-2026-32146 | suse_vex | SUSE CVE CVE-2026-32146 | No product status | 2026-05-23T01:29:31+00:00 | Vulnerability · Source |
| CVE-2026-40161 | suse_vex | SUSE CVE CVE-2026-40161 | No product status | 2026-05-23T01:29:02+00:00 | Vulnerability · Source |
| CVE-2026-40923 | suse_vex | SUSE CVE CVE-2026-40923 | No product status | 2026-05-23T01:28:58+00:00 | Vulnerability · Source |
| CVE-2026-40924 | suse_vex | SUSE CVE CVE-2026-40924 | No product status | 2026-05-23T01:28:57+00:00 | Vulnerability · Source |
| CVE-2026-40938 | suse_vex | SUSE CVE CVE-2026-40938 | No product status | 2026-05-23T01:28:56+00:00 | Vulnerability · Source |
| CVE-2026-5950 | microsoft_vex | Unbounded resend loop in BIND 9 resolver | fixed: 1 known affected: 1 | 2026-05-23T01:01:51+00:00 | Vulnerability · Source |
| CVE-2026-5947 | microsoft_vex | SIG(0) validation during query flood may lead to undefined behavior | fixed: 1 known affected: 1 | 2026-05-23T01:01:45+00:00 | Vulnerability · Source |
| CVE-2026-5946 | microsoft_vex | Invalid handling of CLASS != IN | fixed: 1 known affected: 1 | 2026-05-23T01:01:39+00:00 | Vulnerability · Source |
| CVE-2026-3593 | microsoft_vex | Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation | fixed: 1 known affected: 1 | 2026-05-23T01:01:32+00:00 | Vulnerability · Source |
| CVE-2026-3039 | microsoft_vex | BIND 9 server memory exhaustion during GSS-API TKEY negotiation | fixed: 1 known affected: 1 | 2026-05-23T01:01:20+00:00 | Vulnerability · Source |
| CVE-2026-4843 | redhat_vex | GSheet For Woo Importer <= 2.3.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Reset | known not affected: 1 | 2026-05-22T20:12:35+00:00 | Vulnerability · Source |
| CVE-2022-27224 | redhat_vex | CVE-2022-27224 | known not affected: 1 | 2026-05-22T20:12:35+00:00 | Vulnerability · Source |
| CVE-2015-8325 | redhat_vex | openssh: privilege escalation via user's PAM environment and UseLogin=yes | fixed: 680 known affected: 1 | 2026-05-22T16:05:58+00:00 | Vulnerability · Source |