VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291277 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64582 | redhat_vex | kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap | known affected: 184 known not affected: 90 | 2026-08-08T15:31:05+00:00 | Vulnerability · Source |
| CVE-2026-64549 | redhat_vex | kernel: Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() | known affected: 246 known not affected: 28 | 2026-08-08T13:04:01+00:00 | Vulnerability · Source |
| CVE-2026-64500 | redhat_vex | kernel: iio: adc: lpc32xx: Initialize completion before requesting IRQ | known not affected: 274 | 2026-08-08T13:03:59+00:00 | Vulnerability · Source |
| CVE-2026-64446 | redhat_vex | kernel: staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() | known not affected: 274 | 2026-08-08T13:03:56+00:00 | Vulnerability · Source |
| CVE-2026-64371 | redhat_vex | kernel: proc: protect ptrace_may_access() with exec_update_lock (part 1) | known affected: 274 | 2026-08-08T13:03:49+00:00 | Vulnerability · Source |
| CVE-2026-31767 | redhat_vex | kernel: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode | known affected: 198 known not affected: 76 | 2026-08-08T13:00:58+00:00 | Vulnerability · Source |
| CVE-2026-23468 | redhat_vex | kernel: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion | known affected: 274 | 2026-08-08T11:19:07+00:00 | Vulnerability · Source |
| CVE-2026-46237 | redhat_vex | kernel: drm/amdgpu/vcn3: Avoid overflow on msg bound check | known affected: 14 known not affected: 260 | 2026-08-08T11:02:38+00:00 | Vulnerability · Source |
| CVE-2026-63878 | redhat_vex | kernel: drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO | known affected: 198 known not affected: 76 | 2026-08-08T09:23:47+00:00 | Vulnerability · Source |
| CVE-2026-27820 | redhat_vex | zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader | fixed: 12 known affected: 220 | 2026-08-08T09:13:51+00:00 | Vulnerability · Source |
| CVE-2014-3608 | redhat_vex | openstack-nova: incomplete fix for CVE-2014-2573, Nova VMware driver still leaks rescued images | fixed: 30 known affected: 1 | 2026-08-08T08:44:27+00:00 | Vulnerability · Source |
| CVE-2014-2573 | redhat_vex | openstack-nova: Nova VMware driver leaks rescued images | known affected: 2 known not affected: 1 | 2026-08-08T08:44:23+00:00 | Vulnerability · Source |
| CVE-2014-0204 | redhat_vex | openstack-keystone: user and group id mismatch | known not affected: 2 | 2026-08-08T08:44:21+00:00 | Vulnerability · Source |
| CVE-2013-4469 | redhat_vex | Nova: Incomplete fix for CVE-2013-2096 | known affected: 1 known not affected: 1 | 2026-08-08T08:44:14+00:00 | Vulnerability · Source |
| CVE-2013-1865 | redhat_vex | keystone: online validation of Keystone PKI tokens bypasses revocation check | fixed: 4 | 2026-08-08T08:44:11+00:00 | Vulnerability · Source |
| CVE-2013-1793 | redhat_vex | openstack-utils: openstack-db insecure password creation for services | known affected: 1 known not affected: 2 | 2026-08-08T08:44:07+00:00 | Vulnerability · Source |
| CVE-2021-3522 | redhat_vex | gstreamer-plugins-base: out-of-bounds read when handling certain ID3v2 tags | known affected: 8 | 2026-08-08T08:39:32+00:00 | Vulnerability · Source |
| CVE-2013-0326 | redhat_vex | nova: _base images permissions should not be world readable | known affected: 2 | 2026-08-08T08:39:28+00:00 | Vulnerability · Source |
| CVE-2013-0282 | redhat_vex | Keystone: EC2-style authentication accepts disabled user/tenants | fixed: 4 | 2026-08-08T08:39:24+00:00 | Vulnerability · Source |
| CVE-2013-0247 | redhat_vex | Keystone: denial of service through invalid token requests | fixed: 4 | 2026-08-08T08:39:24+00:00 | Vulnerability · Source |
| CVE-2012-5563 | redhat_vex | OpenStack: Keystone extension of token validity through token chaining | fixed: 4 | 2026-08-08T08:39:21+00:00 | Vulnerability · Source |
| CVE-2013-0212 | redhat_vex | openstack-glance: Backend password leak in Glance error message | fixed: 4 | 2026-08-08T08:39:18+00:00 | Vulnerability · Source |
| CVE-2013-0208 | redhat_vex | openstack-nova: Boot from volume allows access to random volumes | fixed: 13 | 2026-08-08T08:39:15+00:00 | Vulnerability · Source |
| CVE-2012-4406 | redhat_vex | Openstack-Swift: insecure use of python pickle() | fixed: 87 | 2026-08-08T08:39:12+00:00 | Vulnerability · Source |
| CVE-2012-3542 | redhat_vex | Keystone: Lack of authorization for adding users to tenants | fixed: 5 | 2026-08-08T08:39:11+00:00 | Vulnerability · Source |
| CVE-2021-3498 | redhat_vex | gstreamer-plugins-good: Heap corruption in matroska demuxing | known affected: 11 known not affected: 3 | 2026-08-08T08:34:15+00:00 | Vulnerability · Source |
| CVE-2021-3185 | redhat_vex | gstreamer: buffer overflow in gst_h264_slice_parse_dec_ref_pic_marking | known affected: 13 | 2026-08-08T08:34:11+00:00 | Vulnerability · Source |
| CVE-2019-9928 | redhat_vex | GStreamer: heap-based buffer overflow in the RTSP connection parser via crafted server response leading to remote code execution | known affected: 17 | 2026-08-08T08:34:10+00:00 | Vulnerability · Source |
| CVE-2015-3988 | redhat_vex | python-django-horizon: persistent XSS in Horizon metadata dashboard | fixed: 5 known not affected: 7 | 2026-08-08T08:34:07+00:00 | Vulnerability · Source |
| CVE-2014-8124 | redhat_vex | python-django-horizon: denial of service via login page requests | fixed: 14 known affected: 2 known not affected: 2 | 2026-08-08T08:34:03+00:00 | Vulnerability · Source |
| CVE-2014-7960 | redhat_vex | openstack-swift: Swift metadata constraints are not correctly enforced | fixed: 227 known affected: 1 | 2026-08-08T08:34:00+00:00 | Vulnerability · Source |
| CVE-2013-7048 | redhat_vex | Nova: insecure directory permissions in snapshots | fixed: 29 | 2026-08-08T08:33:58+00:00 | Vulnerability · Source |
| CVE-2026-6067 | redhat_vex | nasm: Netwide Assembler (NASM): Arbitrary code execution via malicious assembly file processing | known affected: 3 known not affected: 6 | 2026-08-08T07:54:48+00:00 | Vulnerability · Source |
| CVE-2026-56850 | redhat_vex | nodejs: Node.js: mTLS client identities can be reused due to HTTPS Agent connection flaw | fixed: 12 known affected: 56 | 2026-08-08T07:14:04+00:00 | Vulnerability · Source |
| CVE-2026-44092 | redhat_vex | ModbusServer: ModbusServer: Integrity and availability loss via malicious MQTT input injection | known not affected: 1 | 2026-08-08T07:08:53+00:00 | Vulnerability · Source |
| CVE-2026-54620 | redhat_vex | sqlite3-ruby: sqlite3: sqlite3-ruby: Use-After-Free vulnerability in SQLite aggregate function callbacks | known not affected: 2 | 2026-08-08T07:04:01+00:00 | Vulnerability · Source |
| CVE-2026-18363 | redhat_vex | osTicket: osTicket: Account compromise via password reset token bypass | known not affected: 1 | 2026-08-08T06:53:47+00:00 | Vulnerability · Source |
| CVE-2026-66713 | redhat_vex | org.apache.axis2/axis2-java-core: tomcat: Apache Axis2/Java: Remote code execution via deserialization of untrusted data in Tribes clustering | known not affected: 75 | 2026-08-08T06:39:02+00:00 | Vulnerability · Source |
| CVE-2026-11577 | redhat_vex | keycloak: keycloak: privilege escalation via partialImport FGAP permission bypass | known affected: 2 known not affected: 3 | 2026-08-08T06:33:53+00:00 | Vulnerability · Source |
| CVE-2026-64426 | redhat_vex | kernel: io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE | known affected: 184 known not affected: 90 | 2026-08-08T06:13:49+00:00 | Vulnerability · Source |
| CVE-2026-64470 | redhat_vex | kernel: Bluetooth: btusb: fix use-after-free on marvell probe failure | known affected: 246 known not affected: 28 | 2026-08-08T06:13:49+00:00 | Vulnerability · Source |
| CVE-2026-64347 | redhat_vex | kernel: usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler | known affected: 76 known not affected: 198 | 2026-08-08T06:13:49+00:00 | Vulnerability · Source |
| CVE-2026-64307 | redhat_vex | kernel: crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG) | known affected: 184 known not affected: 90 | 2026-08-08T06:09:40+00:00 | Vulnerability · Source |
| CVE-2026-64498 | redhat_vex | kernel: iio: buffer: hw-consumer: free scan_mask on buffer release | known not affected: 274 | 2026-08-08T06:07:41+00:00 | Vulnerability · Source |
| CVE-2026-64301 | redhat_vex | kernel: regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() | known affected: 184 known not affected: 90 | 2026-08-08T05:04:13+00:00 | Vulnerability · Source |
| CVE-2026-36478 | redhat_vex | Technitium DNS Server: Technitium DNS Server: Denial of Service vulnerability via specific components | known not affected: 1 | 2026-08-08T05:04:12+00:00 | Vulnerability · Source |
| CVE-2026-40990 | redhat_vex | spring-cloud-function: Spring Cloud Function: Denial of Service via excessive function registration | known not affected: 1 | 2026-08-08T04:53:56+00:00 | Vulnerability · Source |
| CVE-2026-64273 | redhat_vex | kernel: Input: iforce - bound the device-reported force-feedback effect index | known not affected: 274 | 2026-08-08T04:38:49+00:00 | Vulnerability · Source |
| CVE-2026-33817 | redhat_vex | go.etcd.io/bbolt: go.etcd.io/bbolt: Denial of Service via index out-of-range error | known affected: 214 | 2026-08-08T03:53:49+00:00 | Vulnerability · Source |
| CVE-2026-48045 | redhat_vex | zeroconf: Zeroconf: Unauthenticated network attacker can cause Denial of Service | known affected: 5 | 2026-08-08T03:13:47+00:00 | Vulnerability · Source |