VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290591 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-32803 | redhat_vex | kea: Insecure file permissions can result in confidential information leakage | fixed: 78 | 2026-08-06T13:34:31+00:00 | Vulnerability · Source |
| CVE-2025-4123 | redhat_vex | grafana: Cross-site Scripting (XSS) in Grafana via Custom Frontend Plugins and Open Redirect | fixed: 131 | 2026-08-06T13:34:13+00:00 | Vulnerability · Source |
| CVE-2025-46802 | redhat_vex | screen: TTY Hijacking while Attaching to a Multiuser Session | known affected: 3 | 2026-08-06T13:33:46+00:00 | Vulnerability · Source |
| CVE-2025-24495 | redhat_vex | microcode_ctl: From CVEorg collector | fixed: 30 known affected: 2 known not affected: 1 | 2026-08-06T13:28:43+00:00 | Vulnerability · Source |
| CVE-2025-32801 | redhat_vex | kea: Loading a malicious hook library can lead to local privilege escalation | fixed: 78 | 2026-08-06T13:24:15+00:00 | Vulnerability · Source |
| CVE-2025-23166 | redhat_vex | nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js | fixed: 217 | 2026-08-06T13:19:04+00:00 | Vulnerability · Source |
| CVE-2025-3877 | redhat_vex | thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links | fixed: 118 known affected: 5 | 2026-08-06T13:19:01+00:00 | Vulnerability · Source |
| CVE-2024-5629 | redhat_vex | python-pymongo: Out-of-bounds read in bson module | fixed: 82 known affected: 16 known not affected: 4 | 2026-08-06T13:09:53+00:00 | Vulnerability · Source |
| CVE-2025-32802 | redhat_vex | kea: Insecure handling of file paths allows multiple local attacks | fixed: 78 | 2026-08-06T13:09:50+00:00 | Vulnerability · Source |
| CVE-2025-49133 | redhat_vex | libtpms: Libtpms Out-of-Bounds Read Vulnerability | fixed: 2927 known affected: 6 | 2026-08-06T13:09:44+00:00 | Vulnerability · Source |
| CVE-2025-49091 | redhat_vex | konsole: Konsole Remote Code Execution Vulnerability | fixed: 14 | 2026-08-06T13:09:31+00:00 | Vulnerability · Source |
| CVE-2025-5473 | redhat_vex | gimp: GIMP ICO File Parsing Integer Overflow | fixed: 533 known affected: 6 | 2026-08-06T13:08:56+00:00 | Vulnerability · Source |
| CVE-2023-6816 | redhat_vex | xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer | fixed: 702 known affected: 9 | 2026-08-06T12:55:06+00:00 | Vulnerability · Source |
| CVE-2024-21886 | redhat_vex | xorg-x11-server: heap buffer overflow in DisableDevice | fixed: 702 known affected: 9 | 2026-08-06T12:55:02+00:00 | Vulnerability · Source |
| CVE-2024-0229 | redhat_vex | xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access | fixed: 702 known affected: 9 | 2026-08-06T12:54:57+00:00 | Vulnerability · Source |
| CVE-2024-21885 | redhat_vex | xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent | fixed: 702 known affected: 9 | 2026-08-06T12:54:33+00:00 | Vulnerability · Source |
| CVE-2024-31083 | redhat_vex | xorg-x11-server: Use-after-free in ProcRenderAddGlyphs | fixed: 758 known affected: 9 known not affected: 5 | 2026-08-06T12:54:16+00:00 | Vulnerability · Source |
| CVE-2023-6478 | redhat_vex | xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty | fixed: 720 known affected: 9 | 2026-08-06T12:53:25+00:00 | Vulnerability · Source |
| CVE-2025-27613 | redhat_vex | gitk: Git file creation flaw | fixed: 150 known affected: 32 | 2026-08-06T12:51:40+00:00 | Vulnerability · Source |
| CVE-2025-48367 | redhat_vex | redis: Redis Unauthenticated Denial of Service | fixed: 213 known affected: 6 known not affected: 42 | 2026-08-06T12:51:25+00:00 | Vulnerability · Source |
| CVE-2026-59930 | redhat_vex | mistune: Mistune: Same-page navigation redirection due to predictable heading IDs | known affected: 23 known not affected: 1 under investigation: 1 | 2026-08-06T12:51:14+00:00 | Vulnerability · Source |
| CVE-2025-49809 | redhat_vex | mtr: From CVEorg collector | known affected: 4 known not affected: 6 | 2026-08-06T12:44:39+00:00 | Vulnerability · Source |
| CVE-2026-58203 | redhat_vex | pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size | known affected: 45 known not affected: 7 | 2026-08-06T12:41:49+00:00 | Vulnerability · Source |
| CVE-2026-11527 | redhat_vex | Config-Inifiles: Config::IniFiles: OS command injection and file overwrite via untrusted file argument | known not affected: 1 | 2026-08-06T12:41:46+00:00 | Vulnerability · Source |
| CVE-2026-15788 | redhat_vex | github.com/moby/buildkit: BuildKit: Information Disclosure via Improper Handling of NTFS Directory Junctions | fixed: 10 | 2026-08-06T12:41:35+00:00 | Vulnerability · Source |
| CVE-2026-64573 | redhat_vex | kernel: Bluetooth: qca: fix NVM tag length underflow in TLV parser | known not affected: 274 | 2026-08-06T12:41:26+00:00 | Vulnerability · Source |
| CVE-2026-67296 | redhat_vex | FreeRDP: FreeRDP: Denial of Service due to RDPEI message processing | known affected: 26 known not affected: 5 | 2026-08-06T12:41:21+00:00 | Vulnerability · Source |
| CVE-2026-67304 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via null pointer dereference in smartcard cleanup | known affected: 7 known not affected: 24 | 2026-08-06T12:41:19+00:00 | Vulnerability · Source |
| CVE-2026-67303 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via unsupported serial device control request | known affected: 31 | 2026-08-06T12:41:16+00:00 | Vulnerability · Source |
| CVE-2023-6377 | redhat_vex | xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions | fixed: 720 known affected: 9 | 2026-08-06T12:40:43+00:00 | Vulnerability · Source |
| CVE-2024-31080 | redhat_vex | xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents | fixed: 758 known affected: 9 known not affected: 5 | 2026-08-06T12:40:11+00:00 | Vulnerability · Source |
| CVE-2025-26240 | redhat_vex | python-pdfkit: python-pdfkit: Arbitrary Code Execution and Information Disclosure | known not affected: 1 | 2026-08-06T12:39:28+00:00 | Vulnerability · Source |
| CVE-2024-9632 | redhat_vex | xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability | fixed: 663 known affected: 19 | 2026-08-06T12:39:12+00:00 | Vulnerability · Source |
| CVE-2026-64569 | redhat_vex | kernel: mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n | known affected: 232 known not affected: 42 | 2026-08-06T12:35:45+00:00 | Vulnerability · Source |
| CVE-2026-53689 | redhat_vex | libnfs: libnfs: Information disclosure and data corruption via crafted NFS server connection | known not affected: 1 | 2026-08-06T12:28:46+00:00 | Vulnerability · Source |
| CVE-2025-57803 | redhat_vex | imagemagick: ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow | fixed: 51 known affected: 7 | 2026-08-06T12:10:05+00:00 | Vulnerability · Source |
| CVE-2026-67305 | redhat_vex | FreeRDP: FreeRDP Windows Client: Remote Code Execution via Heap Buffer Overflow in Clipboard Processing | known not affected: 31 | 2026-08-06T12:08:20+00:00 | Vulnerability · Source |
| CVE-2026-68579 | redhat_vex | FreeRDP: FreeRDP: Arbitrary Code Execution via Heap Overflow in Clipboard Processing | known not affected: 31 | 2026-08-06T12:06:45+00:00 | Vulnerability · Source |
| CVE-2023-3384 | redhat_vex | quay: stored cross site scripting | fixed: 10 | 2026-08-06T11:23:56+00:00 | Vulnerability · Source |
| CVE-2025-8177 | redhat_vex | libtiff: LibTIFF Buffer Overflow | fixed: 4 known not affected: 61 | 2026-08-06T11:23:50+00:00 | Vulnerability · Source |
| CVE-2025-57848 | redhat_vex | container-native-virtualization: privilege escalation via excessive /etc/passwd permissions | fixed: 556 known affected: 4 | 2026-08-06T11:14:03+00:00 | Vulnerability · Source |
| CVE-2025-61730 | redhat_vex | crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls | fixed: 8 known affected: 208 | 2026-08-06T11:11:37+00:00 | Vulnerability · Source |
| CVE-2026-64194 | redhat_vex | Net::DNS: Net::DNS: Denial of Service via crafted DNS compression pointers | known affected: 5 known not affected: 2 | 2026-08-06T11:10:01+00:00 | Vulnerability · Source |
| CVE-2024-42368 | redhat_vex | bearertokenauthextension: Observable Timing Discrepancy in github.com/open-telemetry/opentelemetry-collector-contrib/extension/bearertokenauthextension | fixed: 76 known affected: 2 | 2026-08-06T10:54:29+00:00 | Vulnerability · Source |
| CVE-2025-12744 | redhat_vex | abrt: Command-injection in ABRT leading to local privilege escalation | fixed: 772 known affected: 14 known not affected: 22 | 2026-08-06T10:53:55+00:00 | Vulnerability · Source |
| CVE-2026-64572 | redhat_vex | kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path | known affected: 232 known not affected: 42 | 2026-08-06T10:49:09+00:00 | Vulnerability · Source |
| CVE-2021-25220 | redhat_vex | bind: DNS forwarders - cache poisoning vulnerability | fixed: 1067 known not affected: 16 | 2026-08-06T10:39:07+00:00 | Vulnerability · Source |
| CVE-2026-59927 | redhat_vex | mistune: Mistune: Denial of Service via unbounded recursion in Markdown include directive | known affected: 25 | 2026-08-06T10:23:47+00:00 | Vulnerability · Source |
| CVE-2026-71190 | redhat_vex | openstack-swift: openstack-swift: Unauthenticated denial of service via catastrophic backtracking in Accept header parser | known affected: 33 | 2026-08-06T10:15:07+00:00 | Vulnerability · Source |
| CVE-2024-9143 | redhat_vex | openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access | known affected: 41 known not affected: 26 | 2026-08-06T10:06:51+00:00 | Vulnerability · Source |