VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304370 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-12003 | redhat_vex | python: Python: Privilege escalation due to insecure VPATH handling in Windows legacy installers | fixed: 80 known affected: 1 known not affected: 131 | 2026-10-02T17:39:40+00:00 | Vulnerability · Source |
| CVE-2024-7532 | redhat_vex | chromium-browser: angle: Out of bounds memory access in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T17:39:38+00:00 | Vulnerability · Source |
| CVE-2026-92599 | redhat_vex | joi: joi: Denial of Service via `isoDate` validation regular expression | fixed: 9 known affected: 13 known not affected: 23 | 2026-10-02T17:39:18+00:00 | Vulnerability · Source |
| CVE-2026-96760 | redhat_vex | authlib: authlib: Signature verification bypass via deserialize_json | known affected: 10 known not affected: 3 | 2026-10-02T17:39:08+00:00 | Vulnerability · Source |
| CVE-2026-93599 | redhat_vex | rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List | fixed: 59 known affected: 113 known not affected: 182 | 2026-10-02T17:38:49+00:00 | Vulnerability · Source |
| CVE-2026-19953 | redhat_vex | URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization | known affected: 10 known not affected: 1 | 2026-10-02T17:37:19+00:00 | Vulnerability · Source |
| CVE-2026-1199 | redhat_vex | zabbix: Zabbix: Login lockout bypass allows increased password guessing | known not affected: 1 | 2026-10-02T17:37:18+00:00 | Vulnerability · Source |
| CVE-2022-29968 | redhat_vex | kernel: io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private | known not affected: 198 | 2026-10-02T17:37:17+00:00 | Vulnerability · Source |
| CVE-2026-33154 | redhat_vex | dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection | fixed: 54 known affected: 6 known not affected: 785 under investigation: 14 | 2026-10-02T17:37:02+00:00 | Vulnerability · Source |
| CVE-2026-12545 | redhat_vex | rubygem-hammer_cli: command injection via insecure editor invocation | fixed: 20 known affected: 1 known not affected: 305 | 2026-10-02T17:37:02+00:00 | Vulnerability · Source |
| CVE-2026-12542 | redhat_vex | foreman: command injection in foreman-tail | fixed: 103 known affected: 17 known not affected: 222 | 2026-10-02T17:36:57+00:00 | Vulnerability · Source |
| CVE-2026-79654 | redhat_vex | ketello: Katello Content View History API Cross-Organization Authorization Bypass | fixed: 10 known affected: 1 known not affected: 318 | 2026-10-02T17:36:36+00:00 | Vulnerability · Source |
| CVE-2026-78679 | redhat_vex | GitPython: GitPython: Arbitrary file read via TagReference.create() | fixed: 56 known affected: 45 known not affected: 890 | 2026-10-02T17:36:35+00:00 | Vulnerability · Source |
| CVE-2026-56097 | redhat_vex | rubygem-katello: SQL injection in Registry Proxy via labels | fixed: 10 known affected: 8 known not affected: 315 | 2026-10-02T17:36:30+00:00 | Vulnerability · Source |
| CVE-2026-56098 | redhat_vex | rubygem-katello: improper authorization logic allows resource enumeration | fixed: 10 known affected: 8 known not affected: 315 | 2026-10-02T17:36:30+00:00 | Vulnerability · Source |
| CVE-2026-42499 | redhat_vex | net/mail: golang: net/mail: Denial of Service via pathological email address parsing | fixed: 1901 known affected: 95 known not affected: 8896 | 2026-10-02T17:36:09+00:00 | Vulnerability · Source |
| CVE-2026-40994 | redhat_vex | org.springframework.ws/spring-ws-security: Spring Web Services: Weakening of WS-Security protocol checks due to disabled BSP enforcement | known affected: 1 | 2026-10-02T17:36:08+00:00 | Vulnerability · Source |
| CVE-2026-98152 | redhat_vex | kernel: nvmet-rdma: fix queue leak when connect backlog is exceeded | known not affected: 276 | 2026-10-02T17:35:40+00:00 | Vulnerability · Source |
| CVE-2026-95382 | redhat_vex | chromium-browser: Improper input validation in Auth | known not affected: 1 | 2026-10-02T17:35:35+00:00 | Vulnerability · Source |
| CVE-2026-98109 | redhat_vex | kernel: Bluetooth: hci_core: Fix race condition during device registration | known affected: 197 known not affected: 79 | 2026-10-02T17:35:35+00:00 | Vulnerability · Source |
| CVE-2026-95366 | redhat_vex | chromium-browser: Use of released resource in Core | known not affected: 1 | 2026-10-02T17:35:35+00:00 | Vulnerability · Source |
| CVE-2026-95287 | redhat_vex | chromium-browser: Missing authorization in Navigation | known not affected: 1 | 2026-10-02T17:35:35+00:00 | Vulnerability · Source |
| CVE-2026-94543 | redhat_vex | next: Next.js: Response cache poisoning via improper route binding | known affected: 20 | 2026-10-02T17:35:34+00:00 | Vulnerability · Source |
| CVE-2026-94486 | redhat_vex | next: Next.js: Information disclosure via unrestricted cross-site requests | known affected: 20 | 2026-10-02T17:35:30+00:00 | Vulnerability · Source |
| CVE-2026-94485 | redhat_vex | next: Next.js: Information disclosure via unrestricted cross-site requests on development server | known affected: 20 | 2026-10-02T17:35:29+00:00 | Vulnerability · Source |
| CVE-2026-94484 | redhat_vex | next: Next.js: Denial of Service via response cache poisoning | known affected: 20 | 2026-10-02T17:35:28+00:00 | Vulnerability · Source |
| CVE-2026-84445 | redhat_vex | google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests | fixed: 178 known affected: 831 known not affected: 2043 | 2026-10-02T17:34:34+00:00 | Vulnerability · Source |
| CVE-2026-32282 | redhat_vex | golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root | fixed: 1756 known affected: 174 known not affected: 2277 | 2026-10-02T17:32:13+00:00 | Vulnerability · Source |
| CVE-2013-0431 | suse_vex | SUSE CVE CVE-2013-0431 | known affected: 1 recommended: 94 | 2026-10-02T17:14:09+00:00 | Vulnerability · Source |
| CVE-2016-1019 | suse_vex | SUSE CVE CVE-2016-1019 | recommended: 16 | 2026-10-02T17:13:41+00:00 | Vulnerability · Source |
| CVE-2017-5754 | suse_vex | SUSE CVE CVE-2017-5754 | known affected: 358 known not affected: 220 recommended: 1999 | 2026-10-02T17:13:20+00:00 | Vulnerability · Source |
| CVE-2018-6913 | suse_vex | SUSE CVE CVE-2018-6913 | known affected: 348 recommended: 418 | 2026-10-02T17:12:59+00:00 | Vulnerability · Source |
| CVE-2018-10360 | suse_vex | SUSE CVE CVE-2018-10360 | known affected: 1677 known not affected: 1430 recommended: 1382 | 2026-10-02T17:12:54+00:00 | Vulnerability · Source |
| CVE-2018-17466 | suse_vex | SUSE CVE CVE-2018-17466 | known affected: 24 known not affected: 164 recommended: 1234 | 2026-10-02T17:12:46+00:00 | Vulnerability · Source |
| CVE-2018-18508 | suse_vex | SUSE CVE CVE-2018-18508 | known affected: 370 known not affected: 489 recommended: 1059 | 2026-10-02T17:12:43+00:00 | Vulnerability · Source |
| CVE-2018-20836 | suse_vex | SUSE CVE CVE-2018-20836 | known not affected: 202 recommended: 970 | 2026-10-02T17:12:39+00:00 | Vulnerability · Source |
| CVE-2018-1000122 | suse_vex | SUSE CVE CVE-2018-1000122 | known affected: 336 known not affected: 73 recommended: 434 | 2026-10-02T17:12:37+00:00 | Vulnerability · Source |
| CVE-2019-14806 | suse_vex | SUSE CVE CVE-2019-14806 | known not affected: 38 recommended: 114 | 2026-10-02T17:12:23+00:00 | Vulnerability · Source |
| CVE-2019-14821 | suse_vex | SUSE CVE CVE-2019-14821 | known affected: 139 known not affected: 55 recommended: 977 | 2026-10-02T17:12:21+00:00 | Vulnerability · Source |
| CVE-2019-14901 | suse_vex | SUSE CVE CVE-2019-14901 | known affected: 503 known not affected: 101 recommended: 1423 | 2026-10-02T17:12:19+00:00 | Vulnerability · Source |
| CVE-2026-26996 | redhat_vex | minimatch: minimatch: Denial of Service via specially crafted glob patterns | fixed: 796 known affected: 36 known not affected: 9247 | 2026-10-02T17:12:17+00:00 | Vulnerability · Source |
| CVE-2019-16163 | suse_vex | SUSE CVE CVE-2019-16163 | known affected: 288 known not affected: 11 recommended: 293 | 2026-10-02T17:12:16+00:00 | Vulnerability · Source |
| CVE-2019-19036 | suse_vex | SUSE CVE CVE-2019-19036 | known affected: 81 known not affected: 101 recommended: 501 | 2026-10-02T17:12:11+00:00 | Vulnerability · Source |
| CVE-2019-19046 | suse_vex | SUSE CVE CVE-2019-19046 | known affected: 380 known not affected: 316 recommended: 1148 | 2026-10-02T17:12:09+00:00 | Vulnerability · Source |
| CVE-2019-19056 | suse_vex | SUSE CVE CVE-2019-19056 | known affected: 445 known not affected: 216 recommended: 1325 | 2026-10-02T17:12:06+00:00 | Vulnerability · Source |
| CVE-2019-19068 | suse_vex | SUSE CVE CVE-2019-19068 | known affected: 448 known not affected: 204 recommended: 1325 | 2026-10-02T17:12:04+00:00 | Vulnerability · Source |
| CVE-2019-19081 | suse_vex | SUSE CVE CVE-2019-19081 | known affected: 350 known not affected: 320 recommended: 1115 | 2026-10-02T17:12:01+00:00 | Vulnerability · Source |
| CVE-2019-19203 | suse_vex | SUSE CVE CVE-2019-19203 | known affected: 245 known not affected: 4 recommended: 303 | 2026-10-02T17:11:59+00:00 | Vulnerability · Source |
| CVE-2019-19532 | suse_vex | SUSE CVE CVE-2019-19532 | known affected: 461 known not affected: 81 recommended: 1510 | 2026-10-02T17:11:57+00:00 | Vulnerability · Source |
| CVE-2019-19770 | suse_vex | SUSE CVE CVE-2019-19770 | known affected: 439 known not affected: 61 recommended: 1264 | 2026-10-02T17:11:54+00:00 | Vulnerability · Source |