VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286392 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-56201 | redhat_vex | jinja2: Jinja has a sandbox breakout through malicious filenames | fixed: 900 known affected: 24 known not affected: 851 | 2026-07-27T03:57:48+00:00 | Vulnerability · Source |
| CVE-2025-32996 | redhat_vex | http-proxy-middleware: Always-Incorrect Control Flow Implementation in http-proxy-middleware | fixed: 2 known affected: 42 known not affected: 4 | 2026-07-27T03:57:26+00:00 | Vulnerability · Source |
| CVE-2026-2332 | redhat_vex | org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing | fixed: 16 known affected: 17 known not affected: 60 | 2026-07-27T03:56:47+00:00 | Vulnerability · Source |
| CVE-2024-55565 | redhat_vex | nanoid: nanoid mishandles non-integer values | fixed: 1010 known affected: 45 known not affected: 1011 | 2026-07-27T03:56:41+00:00 | Vulnerability · Source |
| CVE-2024-21536 | redhat_vex | http-proxy-middleware: Denial of Service | fixed: 253 known affected: 62 known not affected: 956 | 2026-07-27T03:53:58+00:00 | Vulnerability · Source |
| CVE-2026-34477 | redhat_vex | org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification | fixed: 2 known affected: 59 | 2026-07-27T03:53:07+00:00 | Vulnerability · Source |
| CVE-2026-43823 | redhat_vex | swift-crypto: swift-crypto: Denial of Service due to double-free during RSA public key initialization | fixed: 7 | 2026-07-27T03:53:05+00:00 | Vulnerability · Source |
| CVE-2026-33216 | redhat_vex | nats-server: github.com/nats-io/nats-server: NATS-Server: Information disclosure of MQTT passwords through monitoring endpoints | fixed: 12 known not affected: 52 | 2026-07-27T03:52:52+00:00 | Vulnerability · Source |
| CVE-2025-5115 | redhat_vex | jetty: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to "MadeYouReset" DoS attack through HTTP/2 control frames | fixed: 36 known affected: 8 known not affected: 16 | 2026-07-27T03:52:48+00:00 | Vulnerability · Source |
| CVE-2025-7425 | redhat_vex | libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr | fixed: 633 known affected: 4 known not affected: 12 | 2026-07-27T03:52:46+00:00 | Vulnerability · Source |
| CVE-2025-47277 | redhat_vex | vllm: vLLM Allows Remote Code Execution via PyNcclPipe Communication Service | fixed: 15 known not affected: 1 | 2026-07-27T03:51:42+00:00 | Vulnerability · Source |
| CVE-2025-32997 | redhat_vex | http-proxy-middleware: Improper Check for Unusual or Exceptional Conditions in http-proxy-middleware | fixed: 2 known affected: 42 known not affected: 4 | 2026-07-27T03:51:40+00:00 | Vulnerability · Source |
| CVE-2024-56326 | redhat_vex | jinja2: Jinja has a sandbox breakout through indirect reference to format method | fixed: 941 known affected: 33 known not affected: 3068 | 2026-07-27T03:51:08+00:00 | Vulnerability · Source |
| CVE-2025-27516 | redhat_vex | jinja2: Jinja sandbox breakout through attr filter selecting format method | fixed: 895 known affected: 20 known not affected: 2406 | 2026-07-27T03:50:31+00:00 | Vulnerability · Source |
| CVE-2026-41506 | redhat_vex | golang: github.com/go-git/go-git: go-git: Information disclosure of HTTP authentication credentials via redirects | fixed: 114 known affected: 221 known not affected: 16 | 2026-07-27T03:27:26+00:00 | Vulnerability · Source |
| CVE-2026-22028 | redhat_vex | preact: Preact: Arbitrary script execution via JSON serialization protection bypass | fixed: 1 known affected: 7 known not affected: 700 | 2026-07-27T03:20:08+00:00 | Vulnerability · Source |
| CVE-2026-41240 | redhat_vex | DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization | fixed: 49 known affected: 19 known not affected: 386 | 2026-07-27T03:03:10+00:00 | Vulnerability · Source |
| CVE-2026-32285 | redhat_vex | github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input | fixed: 54 known affected: 7 known not affected: 510 | 2026-07-27T03:01:30+00:00 | Vulnerability · Source |
| CVE-2026-44422 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution or denial of service via heap use-after-free in RDPEAR NDR parser | fixed: 130 known affected: 5 known not affected: 19 | 2026-07-27T02:50:59+00:00 | Vulnerability · Source |
| CVE-2026-44420 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution and denial of service via heap-buffer-overflow | fixed: 130 known affected: 5 known not affected: 19 | 2026-07-27T02:50:51+00:00 | Vulnerability · Source |
| CVE-2026-40033 | redhat_vex | freerdp: FreeRDP: Remote code execution via heap-buffer-overflow in gdi_CacheToSurface | fixed: 130 known affected: 11 known not affected: 13 | 2026-07-27T02:50:49+00:00 | Vulnerability · Source |
| CVE-2026-4926 | redhat_vex | path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions | fixed: 44 known affected: 30 known not affected: 955 | 2026-07-27T02:44:24+00:00 | Vulnerability · Source |
| CVE-2025-24528 | redhat_vex | krb5: overflow when calculating ulog block size | fixed: 256 known affected: 9 known not affected: 14 | 2026-07-27T02:02:23+00:00 | Vulnerability · Source |
| CVE-2025-27144 | redhat_vex | go-jose: Go JOSE's Parsing Vulnerable to Denial of Service | fixed: 796 known affected: 29 known not affected: 5241 | 2026-07-27T02:00:40+00:00 | Vulnerability · Source |
| CVE-2026-42533 | redhat_vex | nginx: NGINX: Arbitrary code execution via crafted HTTP requests | fixed: 4 known affected: 55 known not affected: 1 | 2026-07-27T01:53:42+00:00 | Vulnerability · Source |
| CVE-2025-32415 | redhat_vex | libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables | fixed: 568 known affected: 5 known not affected: 18 | 2026-07-27T01:49:30+00:00 | Vulnerability · Source |
| CVE-2025-8058 | redhat_vex | glibc: Double free in glibc | fixed: 3064 known affected: 23 known not affected: 18 | 2026-07-27T01:49:19+00:00 | Vulnerability · Source |
| CVE-2025-4673 | redhat_vex | net/http: Sensitive headers not cleared on cross-origin redirect in net/http | fixed: 121 known affected: 394 known not affected: 2 | 2026-07-27T01:48:38+00:00 | Vulnerability · Source |
| CVE-2026-16461 | microsoft_vex | Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting | fixed: 1 known affected: 1 | 2026-07-27T01:44:11+00:00 | Vulnerability · Source |
| CVE-2026-8450 | microsoft_vex | HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file() | fixed: 1 known affected: 1 | 2026-07-27T01:44:00+00:00 | Vulnerability · Source |
| CVE-2026-16277 | microsoft_vex | Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist() | fixed: 1 known affected: 1 | 2026-07-27T01:43:51+00:00 | Vulnerability · Source |
| CVE-2025-7195 | redhat_vex | operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd | fixed: 587 known affected: 19 known not affected: 1820 | 2026-07-27T01:36:34+00:00 | Vulnerability · Source |
| CVE-2025-58754 | redhat_vex | axios: Axios DoS via lack of data size check | fixed: 361 known affected: 42 known not affected: 1162 | 2026-07-27T01:28:28+00:00 | Vulnerability · Source |
| CVE-2025-47273 | redhat_vex | setuptools: Path Traversal Vulnerability in setuptools PackageIndex | fixed: 1664 known affected: 71 known not affected: 159 under investigation: 2 | 2026-07-27T01:25:59+00:00 | Vulnerability · Source |
| CVE-2025-22871 | redhat_vex | net/http: Request smuggling due to acceptance of invalid chunked data in net/http | fixed: 6754 known affected: 62 known not affected: 4564 | 2026-07-27T01:12:24+00:00 | Vulnerability · Source |
| CVE-2025-55199 | redhat_vex | helm.sh/helm/v3: Helm Chart JSON Schema Denial of Service | fixed: 8 known affected: 97 known not affected: 1318 | 2026-07-27T00:51:20+00:00 | Vulnerability · Source |
| CVE-2025-55198 | redhat_vex | helm.sh/helm/v3: Helm YAML Parsing Panic Vulnerability | fixed: 8 known affected: 97 known not affected: 1318 | 2026-07-27T00:51:07+00:00 | Vulnerability · Source |
| CVE-2025-58068 | redhat_vex | python-eventlet: Eventlet HTTP request smuggling | fixed: 38 known affected: 5 known not affected: 5642 | 2026-07-27T00:05:05+00:00 | Vulnerability · Source |
| CVE-2025-5914 | redhat_vex | libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c | fixed: 679 known affected: 3 known not affected: 14 | 2026-07-26T23:51:18+00:00 | Vulnerability · Source |
| CVE-2025-6020 | redhat_vex | linux-pam: Linux-pam directory Traversal | fixed: 492 known not affected: 31 | 2026-07-26T23:49:42+00:00 | Vulnerability · Source |
| CVE-2025-24928 | redhat_vex | libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 | fixed: 617 known affected: 5 known not affected: 3715 | 2026-07-26T23:49:36+00:00 | Vulnerability · Source |
| CVE-2025-22874 | redhat_vex | crypto/x509: Usage of ExtKeyUsageAny disables policy validation in crypto/x509 | fixed: 880 known affected: 57 known not affected: 219 | 2026-07-26T23:49:32+00:00 | Vulnerability · Source |
| CVE-2006-0903 | suse_vex | SUSE CVE CVE-2006-0903 | known not affected: 44 recommended: 186 | 2026-07-26T23:49:00+00:00 | Vulnerability · Source |
| CVE-2006-3403 | suse_vex | SUSE CVE CVE-2006-3403 | recommended: 297 | 2026-07-26T23:48:58+00:00 | Vulnerability · Source |
| CVE-2006-5295 | suse_vex | SUSE CVE CVE-2006-5295 | recommended: 18 | 2026-07-26T23:48:57+00:00 | Vulnerability · Source |
| CVE-2006-10003 | suse_vex | SUSE CVE CVE-2006-10003 | known affected: 404 recommended: 32 | 2026-07-26T23:48:55+00:00 | Vulnerability · Source |
| CVE-2025-29786 | redhat_vex | github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input | fixed: 71 known affected: 13 known not affected: 49 | 2026-07-26T23:48:53+00:00 | Vulnerability · Source |
| CVE-2008-1382 | suse_vex | SUSE CVE CVE-2008-1382 | known not affected: 42 | 2026-07-26T23:48:53+00:00 | Vulnerability · Source |
| CVE-2009-0368 | suse_vex | SUSE CVE CVE-2009-0368 | known not affected: 5 recommended: 71 | 2026-07-26T23:48:50+00:00 | Vulnerability · Source |
| CVE-2009-0800 | suse_vex | SUSE CVE CVE-2009-0800 | recommended: 375 | 2026-07-26T23:48:49+00:00 | Vulnerability · Source |