VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304374 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-49919 | redhat_vex | freetype: Integer overflow in FreeType tt_face_colr_blend_layer() leads to heap buffer overflow during COLR font rendering | known affected: 279 known not affected: 1 | 2026-10-02T17:40:20+00:00 | Vulnerability · Source |
| CVE-2026-32791 | redhat_vex | Intel Performance Counter Monitor: Intel Performance Counter Monitor: Escalation of Privilege via Untrusted Search Path | known affected: 3 | 2026-10-02T17:40:18+00:00 | Vulnerability · Source |
| CVE-2026-23937 | redhat_vex | zabbix: Data integrity loss via PSK key extraction | known not affected: 1 | 2026-10-02T17:40:16+00:00 | Vulnerability · Source |
| CVE-2026-23922 | redhat_vex | zabbix: Zabbix: OAuth client secret leak via malicious token endpoint | known not affected: 1 | 2026-10-02T17:40:15+00:00 | Vulnerability · Source |
| CVE-2026-23931 | redhat_vex | zabbix: Zabbix: Information disclosure of user macro values | known not affected: 1 | 2026-10-02T17:40:15+00:00 | Vulnerability · Source |
| CVE-2026-23930 | redhat_vex | zabbix: Zabbix: Denial of Service via Frontend popup.testtriggerexpr action | known not affected: 1 | 2026-10-02T17:40:15+00:00 | Vulnerability · Source |
| CVE-2026-73501 | redhat_vex | github.com/getkin/kin-openapi: kin-openapi: kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default | fixed: 12 known affected: 89 known not affected: 38 | 2026-10-02T17:40:02+00:00 | Vulnerability · Source |
| CVE-2026-104851 | redhat_vex | fsspec: fsspec: Arbitrary code execution via crafted reference documents | known affected: 90 | 2026-10-02T17:39:57+00:00 | Vulnerability · Source |
| CVE-2026-59645 | redhat_vex | org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcutil-fips: Bouncy Castle for Java: Denial of Service via OER parser unbounded recursion | known affected: 9 known not affected: 8 | 2026-10-02T17:39:54+00:00 | Vulnerability · Source |
| CVE-2026-59642 | redhat_vex | org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Data integrity bypass due to improper cryptographic binding in CMS AuthenticatedData | known affected: 35 known not affected: 7 | 2026-10-02T17:39:50+00:00 | Vulnerability · Source |
| CVE-2026-59639 | redhat_vex | org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Cryptographic signature bypass | known affected: 35 known not affected: 7 | 2026-10-02T17:39:47+00:00 | Vulnerability · Source |
| CVE-2026-58063 | redhat_vex | org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Denial of Service via unbounded KDF cost in BCFKS keystore load | known affected: 9 known not affected: 8 | 2026-10-02T17:39:44+00:00 | Vulnerability · Source |
| CVE-2026-12003 | redhat_vex | python: Python: Privilege escalation due to insecure VPATH handling in Windows legacy installers | fixed: 80 known affected: 1 known not affected: 131 | 2026-10-02T17:39:40+00:00 | Vulnerability · Source |
| CVE-2024-7532 | redhat_vex | chromium-browser: angle: Out of bounds memory access in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T17:39:38+00:00 | Vulnerability · Source |
| CVE-2026-92599 | redhat_vex | joi: joi: Denial of Service via `isoDate` validation regular expression | fixed: 9 known affected: 13 known not affected: 23 | 2026-10-02T17:39:18+00:00 | Vulnerability · Source |
| CVE-2026-96760 | redhat_vex | authlib: authlib: Signature verification bypass via deserialize_json | known affected: 10 known not affected: 3 | 2026-10-02T17:39:08+00:00 | Vulnerability · Source |
| CVE-2026-93599 | redhat_vex | rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List | fixed: 59 known affected: 113 known not affected: 182 | 2026-10-02T17:38:49+00:00 | Vulnerability · Source |
| CVE-2026-19953 | redhat_vex | URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization | known affected: 10 known not affected: 1 | 2026-10-02T17:37:19+00:00 | Vulnerability · Source |
| CVE-2026-1199 | redhat_vex | zabbix: Zabbix: Login lockout bypass allows increased password guessing | known not affected: 1 | 2026-10-02T17:37:18+00:00 | Vulnerability · Source |
| CVE-2022-29968 | redhat_vex | kernel: io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private | known not affected: 198 | 2026-10-02T17:37:17+00:00 | Vulnerability · Source |
| CVE-2026-33154 | redhat_vex | dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection | fixed: 54 known affected: 6 known not affected: 785 under investigation: 14 | 2026-10-02T17:37:02+00:00 | Vulnerability · Source |
| CVE-2026-12545 | redhat_vex | rubygem-hammer_cli: command injection via insecure editor invocation | fixed: 20 known affected: 1 known not affected: 305 | 2026-10-02T17:37:02+00:00 | Vulnerability · Source |
| CVE-2026-12542 | redhat_vex | foreman: command injection in foreman-tail | fixed: 103 known affected: 17 known not affected: 222 | 2026-10-02T17:36:57+00:00 | Vulnerability · Source |
| CVE-2026-79654 | redhat_vex | ketello: Katello Content View History API Cross-Organization Authorization Bypass | fixed: 10 known affected: 1 known not affected: 318 | 2026-10-02T17:36:36+00:00 | Vulnerability · Source |
| CVE-2026-78679 | redhat_vex | GitPython: GitPython: Arbitrary file read via TagReference.create() | fixed: 56 known affected: 45 known not affected: 890 | 2026-10-02T17:36:35+00:00 | Vulnerability · Source |
| CVE-2026-56097 | redhat_vex | rubygem-katello: SQL injection in Registry Proxy via labels | fixed: 10 known affected: 8 known not affected: 315 | 2026-10-02T17:36:30+00:00 | Vulnerability · Source |
| CVE-2026-56098 | redhat_vex | rubygem-katello: improper authorization logic allows resource enumeration | fixed: 10 known affected: 8 known not affected: 315 | 2026-10-02T17:36:30+00:00 | Vulnerability · Source |
| CVE-2026-42499 | redhat_vex | net/mail: golang: net/mail: Denial of Service via pathological email address parsing | fixed: 1901 known affected: 95 known not affected: 8896 | 2026-10-02T17:36:09+00:00 | Vulnerability · Source |
| CVE-2026-40994 | redhat_vex | org.springframework.ws/spring-ws-security: Spring Web Services: Weakening of WS-Security protocol checks due to disabled BSP enforcement | known affected: 1 | 2026-10-02T17:36:08+00:00 | Vulnerability · Source |
| CVE-2026-98152 | redhat_vex | kernel: nvmet-rdma: fix queue leak when connect backlog is exceeded | known not affected: 276 | 2026-10-02T17:35:40+00:00 | Vulnerability · Source |
| CVE-2026-95382 | redhat_vex | chromium-browser: Improper input validation in Auth | known not affected: 1 | 2026-10-02T17:35:35+00:00 | Vulnerability · Source |
| CVE-2026-98109 | redhat_vex | kernel: Bluetooth: hci_core: Fix race condition during device registration | known affected: 197 known not affected: 79 | 2026-10-02T17:35:35+00:00 | Vulnerability · Source |
| CVE-2026-95366 | redhat_vex | chromium-browser: Use of released resource in Core | known not affected: 1 | 2026-10-02T17:35:35+00:00 | Vulnerability · Source |
| CVE-2026-95287 | redhat_vex | chromium-browser: Missing authorization in Navigation | known not affected: 1 | 2026-10-02T17:35:35+00:00 | Vulnerability · Source |
| CVE-2026-94543 | redhat_vex | next: Next.js: Response cache poisoning via improper route binding | known affected: 20 | 2026-10-02T17:35:34+00:00 | Vulnerability · Source |
| CVE-2026-94486 | redhat_vex | next: Next.js: Information disclosure via unrestricted cross-site requests | known affected: 20 | 2026-10-02T17:35:30+00:00 | Vulnerability · Source |
| CVE-2026-94485 | redhat_vex | next: Next.js: Information disclosure via unrestricted cross-site requests on development server | known affected: 20 | 2026-10-02T17:35:29+00:00 | Vulnerability · Source |
| CVE-2026-94484 | redhat_vex | next: Next.js: Denial of Service via response cache poisoning | known affected: 20 | 2026-10-02T17:35:28+00:00 | Vulnerability · Source |
| CVE-2026-32282 | redhat_vex | golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root | fixed: 1756 known affected: 174 known not affected: 2277 | 2026-10-02T17:32:13+00:00 | Vulnerability · Source |
| CVE-2013-0431 | suse_vex | SUSE CVE CVE-2013-0431 | known affected: 1 recommended: 94 | 2026-10-02T17:14:09+00:00 | Vulnerability · Source |
| CVE-2016-1019 | suse_vex | SUSE CVE CVE-2016-1019 | recommended: 16 | 2026-10-02T17:13:41+00:00 | Vulnerability · Source |
| CVE-2017-5754 | suse_vex | SUSE CVE CVE-2017-5754 | known affected: 358 known not affected: 220 recommended: 1999 | 2026-10-02T17:13:20+00:00 | Vulnerability · Source |
| CVE-2018-6913 | suse_vex | SUSE CVE CVE-2018-6913 | known affected: 348 recommended: 418 | 2026-10-02T17:12:59+00:00 | Vulnerability · Source |
| CVE-2018-10360 | suse_vex | SUSE CVE CVE-2018-10360 | known affected: 1677 known not affected: 1430 recommended: 1382 | 2026-10-02T17:12:54+00:00 | Vulnerability · Source |
| CVE-2018-17466 | suse_vex | SUSE CVE CVE-2018-17466 | known affected: 24 known not affected: 164 recommended: 1234 | 2026-10-02T17:12:46+00:00 | Vulnerability · Source |
| CVE-2018-18508 | suse_vex | SUSE CVE CVE-2018-18508 | known affected: 370 known not affected: 489 recommended: 1059 | 2026-10-02T17:12:43+00:00 | Vulnerability · Source |
| CVE-2018-20836 | suse_vex | SUSE CVE CVE-2018-20836 | known not affected: 202 recommended: 970 | 2026-10-02T17:12:39+00:00 | Vulnerability · Source |
| CVE-2018-1000122 | suse_vex | SUSE CVE CVE-2018-1000122 | known affected: 336 known not affected: 73 recommended: 434 | 2026-10-02T17:12:37+00:00 | Vulnerability · Source |
| CVE-2019-14806 | suse_vex | SUSE CVE CVE-2019-14806 | known not affected: 38 recommended: 114 | 2026-10-02T17:12:23+00:00 | Vulnerability · Source |
| CVE-2019-14821 | suse_vex | SUSE CVE CVE-2019-14821 | known affected: 139 known not affected: 55 recommended: 977 | 2026-10-02T17:12:21+00:00 | Vulnerability · Source |