VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286376 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-57809 | redhat_vex | xgrammar: XGrammar affected by Denial of Service by infinite recursion grammars | fixed: 12 known affected: 2 | 2026-07-27T04:49:21+00:00 | Vulnerability · Source |
| CVE-2024-21538 | redhat_vex | cross-spawn: regular expression denial of service | fixed: 139 known affected: 74 known not affected: 2799 | 2026-07-27T04:49:13+00:00 | Vulnerability · Source |
| CVE-2026-4046 | redhat_vex | glibc: glibc: Denial of Service via iconv() function with specific character sets | fixed: 3045 known affected: 22 known not affected: 2 under investigation: 1 | 2026-07-27T04:49:10+00:00 | Vulnerability · Source |
| CVE-2026-41636 | redhat_vex | apache.com/apache/thrift: Apache Thrift: Node.js skip() recursion | fixed: 20 known affected: 17 known not affected: 253 | 2026-07-27T04:49:07+00:00 | Vulnerability · Source |
| CVE-2024-12085 | redhat_vex | rsync: Info Leak via Uninitialized Stack Contents | fixed: 293 known not affected: 1782 | 2026-07-27T04:49:00+00:00 | Vulnerability · Source |
| CVE-2026-5795 | redhat_vex | org.eclipse.jetty.ee10/jetty-ee10: early return from the JASPIAuthenticator class without clearing ThreadLocal variables | fixed: 4 known affected: 1 known not affected: 36 | 2026-07-27T04:48:53+00:00 | Vulnerability · Source |
| CVE-2026-0861 | redhat_vex | glibc: Integer overflow in memalign leads to heap corruption | fixed: 1026 known affected: 1 known not affected: 1243 | 2026-07-27T04:48:52+00:00 | Vulnerability · Source |
| CVE-2026-33219 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Denial of Service via unbounded memory use in WebSockets | fixed: 12 known not affected: 52 | 2026-07-27T04:48:49+00:00 | Vulnerability · Source |
| CVE-2026-27889 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Denial of Service via malformed WebSockets frame | fixed: 12 known not affected: 52 | 2026-07-27T04:48:13+00:00 | Vulnerability · Source |
| CVE-2026-34040 | redhat_vex | Moby: Moby: Authorization bypass vulnerability | fixed: 16 known affected: 5 known not affected: 77 | 2026-07-27T04:48:10+00:00 | Vulnerability · Source |
| CVE-2026-22795 | redhat_vex | openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:47:56+00:00 | Vulnerability · Source |
| CVE-2026-23490 | redhat_vex | pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID | fixed: 1855 known affected: 25 known not affected: 6295 | 2026-07-27T04:47:55+00:00 | Vulnerability · Source |
| CVE-2025-66199 | redhat_vex | openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression | fixed: 107 known affected: 1 known not affected: 62 | 2026-07-27T04:47:52+00:00 | Vulnerability · Source |
| CVE-2025-69420 | redhat_vex | openssl: OpenSSL: Denial of Service via malformed TimeStamp Response | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:47:50+00:00 | Vulnerability · Source |
| CVE-2025-68160 | redhat_vex | openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:47:48+00:00 | Vulnerability · Source |
| CVE-2025-15468 | redhat_vex | openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:47:46+00:00 | Vulnerability · Source |
| CVE-2025-69418 | redhat_vex | openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:47:43+00:00 | Vulnerability · Source |
| CVE-2026-4437 | redhat_vex | glibc: glibc: Incorrect DNS response parsing via crafted DNS server response | fixed: 2028 known affected: 237 known not affected: 2 under investigation: 1 | 2026-07-27T04:47:41+00:00 | Vulnerability · Source |
| CVE-2025-15281 | redhat_vex | glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory | fixed: 2043 known affected: 22 known not affected: 1007 | 2026-07-27T04:47:04+00:00 | Vulnerability · Source |
| CVE-2026-45445 | redhat_vex | openssl: AES-OCB IV Ignored on EVP_Cipher() Path | fixed: 104 known affected: 1 known not affected: 52 | 2026-07-27T04:46:09+00:00 | Vulnerability · Source |
| CVE-2024-45296 | redhat_vex | path-to-regexp: Backtracking regular expressions cause ReDoS | fixed: 869 known affected: 39 known not affected: 2095 | 2026-07-27T04:45:29+00:00 | Vulnerability · Source |
| CVE-2025-68664 | redhat_vex | langchain-core: LangChain: Arbitrary code execution via serialization injection | fixed: 18 known not affected: 254 | 2026-07-27T04:45:23+00:00 | Vulnerability · Source |
| CVE-2024-11831 | redhat_vex | npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript | fixed: 1160 known affected: 130 known not affected: 1593 | 2026-07-27T04:44:58+00:00 | Vulnerability · Source |
| CVE-2026-40938 | redhat_vex | github.com/tektoncd/pipeline: Tekton Pipelines: Arbitrary code execution and secret exfiltration via malicious git commands | fixed: 65 known affected: 27 known not affected: 205 | 2026-07-27T04:44:53+00:00 | Vulnerability · Source |
| CVE-2026-10732 | redhat_vex | decompress: Decompress: Arbitrary file write leading to remote code execution via crafted ZIP archive (Zip Slip) | known affected: 5 known not affected: 17 | 2026-07-27T04:44:50+00:00 | Vulnerability · Source |
| CVE-2026-40192 | redhat_vex | Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing | fixed: 150 known affected: 25 known not affected: 1573 | 2026-07-27T04:44:39+00:00 | Vulnerability · Source |
| CVE-2026-41674 | redhat_vex | xmldom: xmldom: Arbitrary XML markup injection | fixed: 4 known affected: 3 known not affected: 1317 | 2026-07-27T04:44:28+00:00 | Vulnerability · Source |
| CVE-2026-9798 | redhat_vex | keycloak: Keycloak: Brute-force protection bypass in CIBA flow | known affected: 1 | 2026-07-27T04:44:27+00:00 | Vulnerability · Source |
| CVE-2024-24784 | redhat_vex | golang: net/mail: comments in display names are incorrectly handled | fixed: 1678 known affected: 56 known not affected: 714 | 2026-07-27T04:44:27+00:00 | Vulnerability · Source |
| CVE-2026-60190 | redhat_vex | mysql: Replication unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:23+00:00 | Vulnerability · Source |
| CVE-2026-60315 | redhat_vex | mysql: X Plugin unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:23+00:00 | Vulnerability · Source |
| CVE-2026-61096 | redhat_vex | mysql: Pluggable Auth unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:22+00:00 | Vulnerability · Source |
| CVE-2026-61081 | redhat_vex | mysql: Performance Schema unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:22+00:00 | Vulnerability · Source |
| CVE-2026-47012 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:21+00:00 | Vulnerability · Source |
| CVE-2026-60177 | redhat_vex | mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:20+00:00 | Vulnerability · Source |
| CVE-2026-61094 | redhat_vex | mysql: Replication unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:20+00:00 | Vulnerability · Source |
| CVE-2026-60747 | redhat_vex | mysql: Replication unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:18+00:00 | Vulnerability · Source |
| CVE-2026-60195 | redhat_vex | mysql: JSON Duality unspecified vulnerability (CPU Jul 2026) | known not affected: 41 | 2026-07-27T04:44:18+00:00 | Vulnerability · Source |
| CVE-2025-11143 | redhat_vex | org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing | fixed: 2 known affected: 33 known not affected: 2 | 2026-07-27T04:44:16+00:00 | Vulnerability · Source |
| CVE-2026-22796 | redhat_vex | openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:44:15+00:00 | Vulnerability · Source |
| CVE-2025-15469 | redhat_vex | openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:44:14+00:00 | Vulnerability · Source |
| CVE-2025-69421 | redhat_vex | openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:44:13+00:00 | Vulnerability · Source |
| CVE-2024-47068 | redhat_vex | rollup: DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS | fixed: 9 known affected: 6 known not affected: 118 | 2026-07-27T04:34:15+00:00 | Vulnerability · Source |
| CVE-2026-33413 | redhat_vex | etcd: etcd: Authorization bypass allows information disclosure and denial of service | fixed: 16 known affected: 5 known not affected: 56 | 2026-07-27T04:34:12+00:00 | Vulnerability · Source |
| CVE-2026-8643 | redhat_vex | python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite | fixed: 124 known affected: 87 known not affected: 1410 | 2026-07-27T04:34:07+00:00 | Vulnerability · Source |
| CVE-2023-24538 | redhat_vex | golang: html/template: backticks not treated as string delimiters | fixed: 2038 known affected: 61 known not affected: 1085 | 2026-07-27T04:33:43+00:00 | Vulnerability · Source |
| CVE-2026-44421 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution via crafted RDPGFX PDUs | fixed: 130 known affected: 5 known not affected: 19 | 2026-07-27T04:33:25+00:00 | Vulnerability · Source |
| CVE-2024-52798 | redhat_vex | path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x | fixed: 33 known affected: 60 known not affected: 1161 | 2026-07-27T03:59:10+00:00 | Vulnerability · Source |
| CVE-2024-45590 | redhat_vex | body-parser: Denial of Service Vulnerability in body-parser | fixed: 234 known affected: 36 known not affected: 912 | 2026-07-27T03:59:08+00:00 | Vulnerability · Source |
| CVE-2024-56201 | redhat_vex | jinja2: Jinja has a sandbox breakout through malicious filenames | fixed: 900 known affected: 24 known not affected: 851 | 2026-07-27T03:57:48+00:00 | Vulnerability · Source |