VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
303573 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-102588 | redhat_vex | moodle: CSRF in XML grade import | known not affected: 1 | 2026-09-30T08:13:09+00:00 | Vulnerability · Source |
| CVE-2026-102585 | redhat_vex | moodle: Group validation missing when enrolling user to course | known not affected: 1 | 2026-09-30T08:13:05+00:00 | Vulnerability · Source |
| CVE-2026-102584 | redhat_vex | moodle: Missing capability check allows unauthorised grade penalty recalculation | known not affected: 1 | 2026-09-30T08:13:04+00:00 | Vulnerability · Source |
| CVE-2026-102579 | redhat_vex | moodle: User profile information disclosure via grade web service | known not affected: 1 | 2026-09-30T08:13:03+00:00 | Vulnerability · Source |
| CVE-2026-102581 | redhat_vex | moodle: XSS in forum post templates due to insufficient escaping | known not affected: 1 | 2026-09-30T08:13:03+00:00 | Vulnerability · Source |
| CVE-2026-97493 | redhat_vex | kernel: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS | known affected: 248 known not affected: 28 | 2026-09-30T08:12:48+00:00 | Vulnerability · Source |
| CVE-2026-93159 | redhat_vex | kernel: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure | known not affected: 276 | 2026-09-30T08:12:45+00:00 | Vulnerability · Source |
| CVE-2026-93056 | redhat_vex | kernel: usb: gadget: f_uac1_legacy: remove broken string configfs attributes | known not affected: 276 | 2026-09-30T08:12:39+00:00 | Vulnerability · Source |
| CVE-2026-102578 | redhat_vex | moodle: SQL injection in question bank web service | known not affected: 1 | 2026-09-30T07:55:14+00:00 | Vulnerability · Source |
| CVE-2026-97983 | redhat_vex | kernel: vduse: return compat ioctl results directly | known not affected: 276 | 2026-09-30T07:26:45+00:00 | Vulnerability · Source |
| CVE-2026-97981 | redhat_vex | kernel: net: ethernet: cortina: Count dropped frames as NAPI work | known not affected: 276 | 2026-09-30T07:26:45+00:00 | Vulnerability · Source |
| CVE-2026-97982 | redhat_vex | kernel: net: ethernet: cortina: Fix budget accounting | known not affected: 276 | 2026-09-30T07:26:45+00:00 | Vulnerability · Source |
| CVE-2026-102577 | redhat_vex | moodle: SSRF risk in URL downloader via IPv4-mapped IPv6 address bypass | known not affected: 1 | 2026-09-30T07:23:17+00:00 | Vulnerability · Source |
| CVE-2026-69504 | microsoft_vex | Windows NTFS Information Disclosure Vulnerability | fixed: 30 known affected: 30 | 2026-09-30T07:00:00+00:00 | Vulnerability · Source |
| CVE-2026-69586 | microsoft_vex | Microsoft Windows PDF Remote Code Execution Vulnerability | fixed: 26 known affected: 26 | 2026-09-30T07:00:00+00:00 | Vulnerability · Source |
| CVE-2026-69328 | microsoft_vex | Windows Storage Elevation of Privilege Vulnerability | fixed: 26 known affected: 26 | 2026-09-30T07:00:00+00:00 | Vulnerability · Source |
| CVE-2026-69288 | microsoft_vex | Windows GDI+ Information Disclosure Vulnerability | fixed: 30 known affected: 30 | 2026-09-30T07:00:00+00:00 | Vulnerability · Source |
| CVE-2026-69712 | microsoft_vex | Windows Key Distribution Center Remote Code Execution Vulnerability | fixed: 12 known affected: 12 | 2026-09-30T07:00:00+00:00 | Vulnerability · Source |
| CVE-2026-81665 | redhat_vex | corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly | fixed: 899 known affected: 1 known not affected: 1 | 2026-09-30T06:56:55+00:00 | Vulnerability · Source |
| CVE-2026-97980 | redhat_vex | kernel: s390/debug: Fix NULL pointer dereference in debug_set_level() | known affected: 14 known not affected: 262 | 2026-09-30T06:56:55+00:00 | Vulnerability · Source |
| CVE-2026-82277 | redhat_vex | argo-rollouts: argo-rollouts: Argo Rollouts Dashboard Unauthenticated Mutating Operations | known affected: 4 | 2026-09-30T06:56:55+00:00 | Vulnerability · Source |
| CVE-2026-97979 | redhat_vex | kernel: ice: add missing xa_destroy for sched_node_ids | known affected: 183 known not affected: 93 | 2026-09-30T06:43:26+00:00 | Vulnerability · Source |
| CVE-2026-90959 | redhat_vex | pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and Pulp Container registry signing key theft | known affected: 7 known not affected: 15 | 2026-09-30T06:41:30+00:00 | Vulnerability · Source |
| CVE-2026-78677 | redhat_vex | GitPython: GitPython: Arbitrary Code Execution via Path Traversal | known affected: 65 known not affected: 4 | 2026-09-30T06:41:25+00:00 | Vulnerability · Source |
| CVE-2026-47884 | redhat_vex | org.springframework/spring-webmvc: Spring Framework: Remote Code Execution via improper path limitation in XsltView | known affected: 6 known not affected: 12 | 2026-09-30T06:41:25+00:00 | Vulnerability · Source |
| CVE-2026-97977 | redhat_vex | kernel: Bluetooth: btusb: Fix UAF of btusb_data by rx_work | known affected: 247 known not affected: 29 | 2026-09-30T06:26:16+00:00 | Vulnerability · Source |
| CVE-2026-97978 | redhat_vex | kernel: eth: ice: don't dereference pointers from TP_printk() | known affected: 234 known not affected: 42 | 2026-09-30T06:26:16+00:00 | Vulnerability · Source |
| CVE-2026-97976 | redhat_vex | kernel: Bluetooth: btintel_pcie: validate packet_len before skb_put_data | known affected: 183 known not affected: 93 | 2026-09-30T06:12:45+00:00 | Vulnerability · Source |
| CVE-2026-84783 | redhat_vex | openssl: openssl: Denial of Service via race condition in certificate extension caching | fixed: 22 known affected: 86 known not affected: 1 | 2026-09-30T06:12:44+00:00 | Vulnerability · Source |
| CVE-2026-77301 | redhat_vex | adm-zip: adm-zip: Denial of Service via uncontrolled memory allocation | known affected: 26 | 2026-09-30T06:12:40+00:00 | Vulnerability · Source |
| CVE-2026-75805 | redhat_vex | openssl: openssl: Denial of Service via crafted CMP certificate revocation response | known affected: 88 known not affected: 1 | 2026-09-30T06:12:35+00:00 | Vulnerability · Source |
| CVE-2026-75931 | redhat_vex | fast-uri: fast-uri: Host confusion via skipped IDN canonicalization | fixed: 83 known affected: 72 known not affected: 1578 | 2026-09-30T06:12:33+00:00 | Vulnerability · Source |
| CVE-2026-35191 | redhat_vex | openssl: openssl: Traffic amplification Denial of Service via QUIC packet over-accounting | known affected: 87 known not affected: 1 | 2026-09-30T06:12:28+00:00 | Vulnerability · Source |
| CVE-2026-72897 | redhat_vex | openssl: openssl: Denial of Service via out-of-bounds write during TLS context switch | known affected: 87 known not affected: 1 | 2026-09-30T06:12:28+00:00 | Vulnerability · Source |
| CVE-2026-75899 | redhat_vex | fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding | fixed: 84 known affected: 54 known not affected: 1594 | 2026-09-30T06:12:28+00:00 | Vulnerability · Source |
| CVE-2026-97975 | redhat_vex | kernel: Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del() | known affected: 197 known not affected: 79 | 2026-09-30T05:58:34+00:00 | Vulnerability · Source |
| CVE-2026-91769 | redhat_vex | php: php: Server impersonation via Common Name fallback in TLS verification | fixed: 57 known affected: 304 | 2026-09-30T05:53:52+00:00 | Vulnerability · Source |
| CVE-2026-97974 | redhat_vex | kernel: ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings() | known affected: 90 known not affected: 186 | 2026-09-30T05:51:29+00:00 | Vulnerability · Source |
| CVE-2026-102331 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via buffer overflow in ANGLE | known not affected: 1 | 2026-09-30T05:51:29+00:00 | Vulnerability · Source |
| CVE-2026-97973 | redhat_vex | kernel: net: macb: destroy the phylink instance on the probe error path | known not affected: 276 | 2026-09-30T05:41:33+00:00 | Vulnerability · Source |
| CVE-2026-97972 | redhat_vex | kernel: net: macb: put the "mdio" child node reference on success | known not affected: 276 | 2026-09-30T05:34:54+00:00 | Vulnerability · Source |
| CVE-2026-97971 | redhat_vex | kernel: nstree: check listing permission before taking a namespace reference | known not affected: 276 | 2026-09-30T05:23:21+00:00 | Vulnerability · Source |
| CVE-2026-102252 | redhat_vex | github.com/google/osv-scalibr: osv-scalibr: Arbitrary file write via path traversal in VMDK extractor | known not affected: 1 | 2026-09-30T05:20:22+00:00 | Vulnerability · Source |
| CVE-2026-97970 | redhat_vex | kernel: watchdog: msc313e: Avoid division by zero | known not affected: 276 | 2026-09-30T05:20:22+00:00 | Vulnerability · Source |
| CVE-2026-97969 | redhat_vex | kernel: watchdog: msc313e: Fix clock leak and spurious timer in settimeout() | known not affected: 276 | 2026-09-30T05:11:25+00:00 | Vulnerability · Source |
| CVE-2026-97968 | redhat_vex | kernel: hwmon: (corsair-cpro) Create debugfs entries after hwmon registration | known not affected: 276 | 2026-09-30T05:11:23+00:00 | Vulnerability · Source |
| CVE-2026-39825 | redhat_vex | net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls | fixed: 890 known affected: 332 known not affected: 321 | 2026-09-30T05:05:45+00:00 | Vulnerability · Source |
| CVE-2026-97967 | redhat_vex | kernel: hwmon: (corsair-cpro) Remove debugfs entries when probe fails | known not affected: 276 | 2026-09-30T05:01:12+00:00 | Vulnerability · Source |
| CVE-2026-103111 | redhat_vex | pcre2: pcre2: Out-of-bounds write via crafted regular expression | known affected: 117 | 2026-09-30T05:01:12+00:00 | Vulnerability · Source |
| CVE-2026-97965 | redhat_vex | kernel: vxlan: initialize _md in vxlan_xmit_one() | known affected: 185 known not affected: 91 | 2026-09-30T04:36:50+00:00 | Vulnerability · Source |